gistfile1.txt

data "aws_iam_policy_document" "this" {
  statement {
    actions = [
      "sts:AssumeRole"
    ]
    resources = [
      "arn:aws:iam::${data.terraform_remote_state.accounts.outputs.account_ids["terraform-state"]}:role/terraform-state-*",
      "arn:aws:iam::*:role/terraform-runner",
    ]
  }
}

resource "aws_iam_role_policy" "this" {
  name   = "terraform-assume-roles"
  policy = data.aws_iam_policy_document.this.json
  role   = module.atlantis.task_role_name
}