Terraform configuration for an Evident.io IAM Role

evident_io_terraform.tf

variable "evident_account" {
    type = "string"
}

variable "evident_id" {
    type = "string"
}

data "aws_iam_policy_document" "evident" {
    statement {
        sid = "AllowEvidentExternalAccess"
        effect = "Allow"
        actions = ["sts:AssumeRole"]
        principals {
            type = "AWS"
            identifiers = ["arn:aws:iam::${var.evident_account}:root"]
        }
        condition {
            test = "StringEquals"
            variable = "sts:ExternalId"
            values = ["${var.evident_id}"]
        }
    }
}
resource "aws_iam_role" "evident" {
    name = "Evident-Service-Role"
    assume_role_policy = "${data.aws_iam_policy_document.evident.json}"
}

resource "aws_iam_role_policy_attachment" "evident_security" {
    role = "${aws_iam_role.evident.name}"
    policy_arn = "arn:aws:iam::aws:policy/SecurityAudit"
}

The original that I forked had a typo, I've fixed that in this version of the gist.