From ea38f871b29749f51e9eb08e2b71d884a2e6e704 Mon Sep 17 00:00:00 2001
From: kendavis2 <kenneth.davis2@turner.com>
Date: Fri, 18 Sep 2020 11:30:56 -0400
Subject: [PATCH] allow PAT to be saved

---
 infrastructure/modules/portal/kms.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/infrastructure/modules/portal/kms.tf b/infrastructure/modules/portal/kms.tf
index 8e29f1f..7f21bc9 100644
--- a/infrastructure/modules/portal/kms.tf
+++ b/infrastructure/modules/portal/kms.tf
@@ -2,6 +2,7 @@ locals {
     # list of saml users for policies
     configUserIds = flatten([
         data.aws_caller_identity.current.account_id,
+        "${aws_iam_role.app_role.unique_id}:*", 
         formatlist(
         "%s:%s",
         data.aws_iam_role.saml_role_config.unique_id,