diff --git a/modules/iam-group-with-assumable-roles-policy/README.md b/modules/iam-group-with-assumable-roles-policy/README.md
index c1e1bd7a..b0671fdc 100644
--- a/modules/iam-group-with-assumable-roles-policy/README.md
+++ b/modules/iam-group-with-assumable-roles-policy/README.md
@@ -37,6 +37,7 @@ No modules.
| [assumable\_roles](#input\_assumable\_roles) | List of IAM roles ARNs which can be assumed by the group | `list(string)` | `[]` | no |
| [group\_users](#input\_group\_users) | List of IAM users to have in an IAM group which can assume the role | `list(string)` | `[]` | no |
| [name](#input\_name) | Name of IAM policy and IAM group | `string` | n/a | yes |
+| [path](#input\_path) | Path of IAM policy and IAM group | `string` | `"/"` | no |
| [tags](#input\_tags) | A map of tags to add to all resources. | `map(string)` | `{}` | no |
## Outputs
diff --git a/modules/iam-group-with-assumable-roles-policy/main.tf b/modules/iam-group-with-assumable-roles-policy/main.tf
index f17e738c..7e550072 100644
--- a/modules/iam-group-with-assumable-roles-policy/main.tf
+++ b/modules/iam-group-with-assumable-roles-policy/main.tf
@@ -8,6 +8,7 @@ data "aws_iam_policy_document" "assume_role" {
resource "aws_iam_policy" "this" {
name = var.name
+ path = var.path
description = "Allows to assume role in another AWS account"
policy = data.aws_iam_policy_document.assume_role.json
@@ -16,6 +17,7 @@ resource "aws_iam_policy" "this" {
resource "aws_iam_group" "this" {
name = var.name
+ path = var.path
}
resource "aws_iam_group_policy_attachment" "this" {
diff --git a/modules/iam-group-with-assumable-roles-policy/variables.tf b/modules/iam-group-with-assumable-roles-policy/variables.tf
index 3cc3a6d9..b1b2b411 100644
--- a/modules/iam-group-with-assumable-roles-policy/variables.tf
+++ b/modules/iam-group-with-assumable-roles-policy/variables.tf
@@ -3,6 +3,12 @@ variable "name" {
type = string
}
+variable "path" {
+ description = "Path of IAM policy and IAM group"
+ type = string
+ default = "/"
+}
+
variable "assumable_roles" {
description = "List of IAM roles ARNs which can be assumed by the group"
type = list(string)