Adding GC Signin test groups (#372)

Author: sylviamclaughlin

terragrunt/org_account/iam_identity_center/gc_signin_assignments.tf

@@ -46,6 +46,21 @@ locals {
       permission_set = data.aws_ssoadmin_permission_set.aws_read_only_access,
     }
   ]
+  # GCSignin-Test
+  gc_signin_test_permission_sets = [
+    {
+      group          = aws_identitystore_group.gc_signin_test_admin,
+      permission_set = data.aws_ssoadmin_permission_set.aws_administrator_access,
+    },
+    {
+      group          = aws_identitystore_group.gc_signin_test_read_only_billing,
+      permission_set = aws_ssoadmin_permission_set.read_only_billing,
+    },
+    {
+      group          = aws_identitystore_group.gc_signin_test_read_only,
+      permission_set = data.aws_ssoadmin_permission_set.aws_read_only_access,
+    }
+  ]
 }
 
 resource "aws_ssoadmin_account_assignment" "gc_signin_production" {
@@ -86,3 +101,16 @@ resource "aws_ssoadmin_account_assignment" "gc_signin_dev" {
   target_id   = local.gc_signin_dev_account_id
   target_type = "AWS_ACCOUNT"
 }
+
+resource "aws_ssoadmin_account_assignment" "gc_signin_test" {
+  for_each = { for perm in local.gc_signin_test_permission_sets : "${perm.group.display_name}-${perm.permission_set.name}" => perm }
+
+  instance_arn       = local.sso_instance_arn
+  permission_set_arn = each.value.permission_set.arn
+
+  principal_id   = each.value.group.group_id
+  principal_type = "GROUP"
+
+  target_id   = local.gc_signin_test_account_id
+  target_type = "AWS_ACCOUNT"
+}

terragrunt/org_account/iam_identity_center/gc_signin_groups.tf

@@ -54,4 +54,23 @@ resource "aws_identitystore_group" "gc_signin_dev_read_only_billing" {
   display_name      = "GCSignIn-Dev-Billing-ReadOnly"
   description       = "Grants members read-only Billing and Cost Explorer access to the GC Signin Dev account."
   identity_store_id = local.sso_identity_store_id
+}
+
+# 
+# Test 
+#
+resource "aws_identitystore_group" "gc_signin_test_admin" {
+  display_name      = "GCSignIn-Test-Admin"
+  description       = "Grants members administrator access to the GC Signin Test account."
+  identity_store_id = local.sso_identity_store_id
+}
+resource "aws_identitystore_group" "gc_signin_test_read_only" {
+  display_name      = "GCSignIn-Test-ReadOnly"
+  description       = "Grants members read-only access to the GC Signin Test account."
+  identity_store_id = local.sso_identity_store_id
+}
+resource "aws_identitystore_group" "gc_signin_test_read_only_billing" {
+  display_name      = "GCSignIn-Test-Billing-ReadOnly"
+  description       = "Grants members read-only Billing and Cost Explorer access to the GC Signin Test account."
+  identity_store_id = local.sso_identity_store_id
 }

terragrunt/org_account/iam_identity_center/locals.tf

@@ -18,6 +18,7 @@ locals {
   gc_signin_dev_account_id        = "329599618423"
   gc_signin_production_account_id = "699475931199"
   gc_signin_staging_account_id    = "565393049229"
+  gc_signin_test_account_id       = "768102297819"
 
   digital_transformation_office_production_account_id = "730335533085"
   digital_transformation_office_staging_account_id    = "992382783569"