fix session duration variable (#49)

Author: milldr

src/policy-BillingAdministratorAccess.tf

@@ -3,7 +3,7 @@ locals {
     name             = "BillingAdministratorAccess",
     description      = "Grants permissions for billing and cost management. This includes viewing account usage and viewing and modifying budgets and payment methods.",
     relay_state      = "https://console.aws.amazon.com/billing/",
-    session_duration = "",
+    session_duration = var.session_duration,
     tags             = {},
     inline_policy    = ""
     policy_attachments = [

src/policy-BillingReadOnlyAccess.tf

@@ -3,7 +3,7 @@ locals {
     name             = "BillingReadOnlyAccess",
     description      = "Allow users to view bills in the billing console",
     relay_state      = "",
-    session_duration = "",
+    session_duration = var.session_duration,
     tags             = {},
     inline_policy    = ""
     policy_attachments = [

src/policy-DNSAdministratorAccess.tf

@@ -30,7 +30,7 @@ locals {
     name                                = "DNSRecordAdministratorAccess",
     description                         = "Allow DNS Record Administrator access to the account, but not zone administration",
     relay_state                         = "https://console.aws.amazon.com/route53/",
-    session_duration                    = "",
+    session_duration                    = var.session_duration,
     tags                                = {},
     inline_policy                       = data.aws_iam_policy_document.dns_administrator_access.json,
     policy_attachments                  = ["arn:${local.aws_partition}:iam::aws:policy/AWSSupportAccess"]

src/policy-Identity-role-TeamAccess.tf

@@ -53,7 +53,7 @@ locals {
     name                                = module.role_map.team_permission_set_name_map[role],
     description                         = format("Allow user to assume the %s Team role in the Identity account, which allows access to other accounts", replace(title(role), "-", ""))
     relay_state                         = "",
-    session_duration                    = "",
+    session_duration                    = var.session_duration,
     tags                                = {},
     inline_policy                       = data.aws_iam_policy_document.assume_aws_team[role].json
     policy_attachments                  = ["arn:${local.aws_partition}:iam::aws:policy/job-function/ViewOnlyAccess"]

src/policy-ReadOnlyAccess.tf

@@ -3,7 +3,7 @@ locals {
     name             = "ReadOnlyAccess",
     description      = "Allow Read Only access to the account",
     relay_state      = "",
-    session_duration = "",
+    session_duration = var.session_duration,
     tags             = {},
     inline_policy    = data.aws_iam_policy_document.eks_read_only.json,
     policy_attachments = [