Add support for configuring CLI/API session durations on aws_iam_role

[devonbleak]

AWS has recently added a setting for specifying the maximum session duration of API/CLI credentials for a role:

• https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session
• https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateRole.html
• https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html

Terraform Version

All versions.

Affected Resource(s)

Please list the resources as a list, for example:

• aws_iam_role

Terraform Configuration Files

Recommend adding max_session_duration property to aws_iam_role

resource "aws_iam_role" "role" {
  name = "role"
  max_session_duration = 43200
  assume_role_policy = <<EOF
    ...
EOF
}

Expected Behavior

Role ends up with its max session duration as specified in code

Actual Behavior

Property is not supported.

[bflad]

This has been released in version 1.14.0 of the AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!