data "external" "awscli" {
  program = [format("%s/assumeRole.sh", path.module)]
  query = {
    assume_role_arn   = "arn:aws:iam::${var.account_id}:role/${var.role_name}"
    role_session_name = var.role_session_name
  }
}

output temp_credential {
  value = data.external.awscli.result
  sensitive = true
}