diff --git a/environments/belgium/gateway.tf b/environments/belgium/gateway.tf index e7b17e7..aa1c1f0 100644 --- a/environments/belgium/gateway.tf +++ b/environments/belgium/gateway.tf @@ -16,3 +16,13 @@ module "gateway" { gcp_shared_infra_project_id = var.shared_infra_gcp_project_id } + +// TODO: Remove once the security audit is over +resource "google_project_iam_member" "temporary_auditors" { + // repeat for each auditor_uris + for_each = toset(var.temporary_auditor_iam_uris) + + project = var.gcp_project_id + role = "roles/viewer" + member = each.value +} diff --git a/environments/belgium/variables.tf b/environments/belgium/variables.tf index 08a79e4..1032474 100644 --- a/environments/belgium/variables.tf +++ b/environments/belgium/variables.tf @@ -7,3 +7,8 @@ variable "gcp_project_id" {} variable "shared_infra_gcp_project_id" {} variable "mongodbatlas_project_id" {} + +// TODO: Remove once the security audit is over +variable "temporary_auditor_iam_uris" { + type = list(string) +}