add Principal Access Boundary Admin to pab service account (GoogleClo…

…udPlatform#12072)
akshat-jindal-nit · Nov 18, 2024 · 1c47279 · 1c47279
1 parent 3cd18c1
commit 1c47279
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.ci/infra/terraform/main.tf b/.ci/infra/terraform/main.tf
@@ -159,6 +159,12 @@ resource "google_organization_iam_member" "sa_securitycenter_bigquery_exports_ed
   member = google_service_account.sa.member
 }
 
+resource "google_organization_iam_member" "sa_principal_access_boundary_admin" {
+  org_id = data.google_organization.org.org_id
+  role   = "roles/iam.principalAccessBoundaryAdmin"
+  member = google_service_account.sa.member
+}
+
 resource "google_billing_account_iam_member" "sa_master_billing_admin" {
   billing_account_id = data.google_billing_account.master_acct.id
   role               = "roles/billing.admin"