From 491213fb8a307cb3730760731b1f56cc4f0a87ec Mon Sep 17 00:00:00 2001
From: Matt Dean <matt.dean3@nhs.net>
Date: Wed, 3 Sep 2025 14:05:12 +0100
Subject: [PATCH] [NRL-1158] Assume role for AWSCC provider in account-wide
 infra for test and prod

---
 terraform/account-wide-infrastructure/prod/main.tf | 8 ++++++++
 terraform/account-wide-infrastructure/test/main.tf | 8 ++++++++
 2 files changed, 16 insertions(+)

diff --git a/terraform/account-wide-infrastructure/prod/main.tf b/terraform/account-wide-infrastructure/prod/main.tf
index f5d3b64a7..0ea8ce3da 100644
--- a/terraform/account-wide-infrastructure/prod/main.tf
+++ b/terraform/account-wide-infrastructure/prod/main.tf
@@ -13,6 +13,14 @@ provider "aws" {
 
 }
 
+provider "awscc" {
+  region = local.region
+
+  assume_role = {
+    role_arn = "arn:aws:iam::${var.assume_account}:role/${var.assume_role}"
+  }
+}
+
 terraform {
   backend "s3" {
     encrypt              = false
diff --git a/terraform/account-wide-infrastructure/test/main.tf b/terraform/account-wide-infrastructure/test/main.tf
index 4bb9ece10..e9fdee88a 100644
--- a/terraform/account-wide-infrastructure/test/main.tf
+++ b/terraform/account-wide-infrastructure/test/main.tf
@@ -13,6 +13,14 @@ provider "aws" {
 
 }
 
+provider "awscc" {
+  region = local.region
+
+  assume_role = {
+    role_arn = "arn:aws:iam::${var.assume_account}:role/${var.assume_role}"
+  }
+}
+
 terraform {
   backend "s3" {
     encrypt              = false