IT-4497: try using CopyValue with source account (#1442)

brucehoff · web-flow · commit 053343985fb6 · 2025-07-09T16:45:04.000-07:00
IT-4497: try using CopyValue with source account
diff --git a/org-formation/700-aws-sso/_tasks.yaml b/org-formation/700-aws-sso/_tasks.yaml
@@ -448,7 +448,7 @@ SsoDeveloper:
                 }
             ]
           }
-        - AllowedRole: !CopyValue 'us-east-1-synapsellmprod-bedrock-full-access-ServiceRoleArn'
+        - AllowedRole: !CopyValue ['us-east-1-synapsellmprod-bedrock-full-access-ServiceRoleArn', !Ref SynapseLlmProdAccount]
 
 SsoFinanceAuditor:
   Type: update-stacks

Original file line number	Diff line number	Diff line change
`@@ -448,7 +448,7 @@ SsoDeveloper:`
`448`	`448`	`}`
`449`	`449`	`]`
`450`	`450`	`}`
`451`		`- - AllowedRole: !CopyValue 'us-east-1-synapsellmprod-bedrock-full-access-ServiceRoleArn'`
	`451`	`+ - AllowedRole: !CopyValue ['us-east-1-synapsellmprod-bedrock-full-access-ServiceRoleArn', !Ref SynapseLlmProdAccount]`
`452`	`452`
`453`	`453`	`SsoFinanceAuditor:`
`454`	`454`	`Type: update-stacks`