Skip to content

Commit c4cad5e

Browse files
committed
fix(lambda-function): update locals to respect create_role
1 parent b209d57 commit c4cad5e

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

lambda-function/iam.tf

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@ resource "aws_iam_role" "lambda" {
1919
}
2020

2121
resource "aws_iam_role_policy_attachment" "multiple" {
22-
for_each = local.policy_arns
23-
22+
for_each = var.create_role ? local.policy_arns : {}
23+
2424
role = local.role_name
2525
policy_arn = each.value
2626
}
2727

2828
resource "aws_iam_role_policy" "this" {
29-
for_each = var.inline_policies
29+
for_each = var.create_role ? var.inline_policies : {}
3030

3131
role = local.role_name
3232
name = each.key

lambda-function/locals.tf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
locals {
2-
role_arn = var.role_arn == null ? aws_iam_role.lambda[0].arn : var.role_arn
3-
role_name = var.role_arn == null ? aws_iam_role.lambda[0].name : basename(var.role_arn)
2+
role_arn = var.create_role ? aws_iam_role.lambda[0].arn : var.role_arn
3+
role_name = var.create_role ? aws_iam_role.lambda[0].name : basename(var.role_arn)
44
policy_arns = setunion(
55
var.policy_arns,
66
var.logs.enabled ? [

0 commit comments

Comments
 (0)