Add the Terraform state read-write role as an output

README.md

@@ -589,6 +589,7 @@ the COOL environment.
 | private\_subnet\_nat\_gateway | The NAT gateway for the private subnets. |
 | private\_subnets | The private subnets. |
 | read\_terraform\_state\_module | The IAM policies and role that allow read-only access to the cool-assessment-terraform workspace-specific state in the Terraform state bucket. |
+| read\_write\_terraform\_state\_module | The IAM policies and role that allow read-write access to the cool-assessment-terraform workspace-specific state in the Terraform state bucket. |
 | remote\_desktop\_url | The URL of the remote desktop gateway (Guacamole) for this assessment. |
 | s3\_endpoint\_client\_security\_group | A security group for any instances that wish to communicate with the S3 VPC endpoint. |
 | samba\_client\_security\_group | The security group that should be applied to all instance types that wish to mount the Samba file share being served by the Samba file share server instances. |

outputs.tf

@@ -198,6 +198,11 @@ output "read_terraform_state_module" {
   value       = module.read_terraform_state
 }
 
+output "read_write_terraform_state_module" {
+  description = "The IAM policies and role that allow read-write access to the cool-assessment-terraform workspace-specific state in the Terraform state bucket."
+  value       = module.read_write_terraform_state
+}
+
 output "remote_desktop_url" {
   description = "The URL of the remote desktop gateway (Guacamole) for this assessment."
   value       = "https://${aws_route53_record.guacamole_A.name}"