and it's a policy, not a policy doc...

timburke-hackit · timburke-hackit · commit ce10e1f2de99 · 2024-11-13T22:08:03.000Z
diff --git a/terraform/modules/department/50-aws-iam-policies.tf b/terraform/modules/department/50-aws-iam-policies.tf
@@ -955,7 +955,7 @@ data "aws_iam_policy_document" "ecs_department_policy" {
   ]
 }
 
-resource "aws_iam_policy_document" "department_ecs_policy" {
+resource "aws_iam_policy" "department_ecs_policy" {
   name   = lower("${var.identifier_prefix}${local.department_identifier}-ecs-base-policy")
   policy = data.aws_iam_policy_document.department_ecs.json
   tags   = var.tags
diff --git a/terraform/modules/department/50-aws-iam-roles.tf b/terraform/modules/department/50-aws-iam-roles.tf
@@ -149,5 +149,5 @@ resource "aws_iam_role" "department_ecs_role" {
 
 resource "aws_iam_role_policy_attachment" "department_ecs_policy" {
   role       = aws_iam_role.department_ecs_role.name
-  policy_arn = aws_iam_policy_document.department_ecs_policy.arn
+  policy_arn = aws_iam_policy.department_ecs_policy.arn
 }

Original file line number	Diff line number	Diff line change
`@@ -955,7 +955,7 @@ data "aws_iam_policy_document" "ecs_department_policy" {`
`955`	`955`	`]`
`956`	`956`	`}`
`957`	`957`
`958`		`-resource "aws_iam_policy_document" "department_ecs_policy" {`
	`958`	`+resource "aws_iam_policy" "department_ecs_policy" {`
`959`	`959`	`name = lower("${var.identifier_prefix}${local.department_identifier}-ecs-base-policy")`
`960`	`960`	`policy = data.aws_iam_policy_document.department_ecs.json`
`961`	`961`	`tags = var.tags`
Original file line number	Diff line number	Diff line change
`@@ -149,5 +149,5 @@ resource "aws_iam_role" "department_ecs_role" {`
`149`	`149`
`150`	`150`	`resource "aws_iam_role_policy_attachment" "department_ecs_policy" {`
`151`	`151`	`role = aws_iam_role.department_ecs_role.name`
`152`		`- policy_arn = aws_iam_policy_document.department_ecs_policy.arn`
	`152`	`+ policy_arn = aws_iam_policy.department_ecs_policy.arn`
`153`	`153`	`}`