AWS MCP Audit

output "role_arn" { value = aws_iam_role.contractor_audit.arn } output "contractor_instructions" { value = <<EOT Give the contractor: - role_arn: ${aws_iam_role.contractor_audit.arn} - external_id: (the value you set for external_id) They will assume role via STS with ExternalId. No access keys required. EOT }