data "aws_iam_policy_document" "allow_assume_role_in_another_account" {
  statement {
    sid    = "AllowAssumeRole"
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    resources = sort(var.resources_list)
  }
}