Disable provider role assumption if enabled is false (#56)

* Check if enabled * Update requester.tf
cloudposse · Nov 22, 2021 · 0cad62a · 0cad62a
1 parent 93d3a0b
commit 0cad62a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/accepter.tf b/accepter.tf
@@ -6,7 +6,7 @@ provider "aws" {
  skip_metadata_api_check = var.skip_metadata_api_check
 
  dynamic "assume_role" {
- for_each = var.accepter_aws_assume_role_arn != "" ? ["true"] : []
+ for_each = local.enabled && var.accepter_aws_assume_role_arn != "" ? ["true"] : []
  content {
  role_arn = var.accepter_aws_assume_role_arn
  }

diff --git a/requester.tf b/requester.tf
@@ -64,7 +64,7 @@ provider "aws" {
  skip_metadata_api_check = var.skip_metadata_api_check
 
  dynamic "assume_role" {
- for_each = var.requester_aws_assume_role_arn != "" ? ["true"] : []
+ for_each = local.enabled && var.requester_aws_assume_role_arn != "" ? ["true"] : []
  content {
  role_arn = var.requester_aws_assume_role_arn
  }