fix(org): switch module source

Signed-off-by: kolvin <15124052+Kolvin@users.noreply.github.com>
kolvin · May 19, 2023 · 745d67b · 745d67b
1 parent 04ea33c
commit 745d67b
Showing 1 changed file with 36 additions and 11 deletions.
diff --git a/organization/kloud/global/terragrunt.hcl b/organization/kloud/global/terragrunt.hcl
@@ -3,11 +3,10 @@ include "root" {
 }
 
 terraform {
-  source = "git::https://github.com/kolvin/terraform-aws-organizations//?ref=v1.2.0"
+  source = "git::https://github.com/kloud-cnf/terraform-aws-organization//?ref=v0.1.0"
 }
 
 inputs = {
-
   organization = {
     enabled_policy_types = ["SERVICE_CONTROL_POLICY"]
     feature_set          = "ALL"
@@ -16,24 +15,50 @@ inputs = {
     ]
   }
 
-  accounts = [
+  organization_units = [
     {
-      account_name               = "playground"
-      email                      = "aws-playground@kolv.in"
-      iam_user_access_to_billing = "DENY"
-      org_unit                   = "Lab"
+      path = "root/workloads"
+      child_defaults = {
+        iam_user_access_to_billing = "ALLOW"
+      }
     },
+    {
+      path = "root/workloads/SDLC"
+      child_defaults = {
+        iam_user_access_to_billing = "ALLOW"
+      }
+    },
+    {
+      path                   = "root/labs"
+      service_control_policy = "labs"
+      child_defaults = {
+        iam_user_access_to_billing = "DENY"
+      }
+    }
+  ]
+
+  accounts = [
     {
       account_name               = "dev"
       email                      = "aws-dev@kolv.in"
       iam_user_access_to_billing = "DENY"
-      org_unit                   = "workloads"
+      org_unit_path              = "root/workloads/SDLC"
     },
     {
-      account_name               = "prod"
-      email                      = "aws-prod@kolv.in"
+      account_name                 = "prod"
+      email                        = "aws-prod@kolv.in"
+      iam_user_access_to_billing   = "DENY"
+      org_unit_path                = "root/workloads"
+      delegated_service_principals = ["abc", "xyz"]
+    }
+  ]
+
+  lab_accounts = [
+    {
+      account_name               = "playground"
+      email                      = "aws-playground@kolv.in"
       iam_user_access_to_billing = "DENY"
-      org_unit                   = "workloads"
+      org_unit_path              = "root/labs"
     }
   ]
 }