Skip to content

Commit 5df11d8

Browse files
committed
[NDR-190] add missing counter for iam roles
1 parent 14fa58d commit 5df11d8

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

infrastructure/iam.tf

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,7 @@ resource "aws_iam_role_policy_attachment" "manifest_presign_url" {
119119

120120
resource "aws_iam_policy" "s3_document_data_policy_for_get_doc_ref_lambda" {
121121
name = "${terraform.workspace}_get_document_only_policy_for_get_doc_lambda"
122+
count = local.is_production ? 0 : 1
122123

123124
policy = jsonencode({
124125
"Version" : "2012-10-17",
@@ -135,7 +136,7 @@ resource "aws_iam_policy" "s3_document_data_policy_for_get_doc_ref_lambda" {
135136
}
136137

137138
data "aws_iam_policy_document" "assume_role_policy_for_get_doc_ref_lambda" {
138-
count = 1
139+
count = local.is_production ? 0 : 1
139140
statement {
140141
actions = ["sts:AssumeRole"]
141142

@@ -147,14 +148,14 @@ data "aws_iam_policy_document" "assume_role_policy_for_get_doc_ref_lambda" {
147148
}
148149

149150
resource "aws_iam_role" "get_fhir_doc_presign_url_role" {
150-
count = 1
151+
count = local.is_production ? 0 : 1
151152
name = "${terraform.workspace}_get_fhir_doc_presign_url_role"
152153
assume_role_policy = data.aws_iam_policy_document.assume_role_policy_for_get_doc_ref_lambda[0].json
153154
}
154155

155156

156157
resource "aws_iam_role_policy_attachment" "get_doc_presign_url" {
157-
count = 1
158+
count = local.is_production ? 0 : 1
158159
role = aws_iam_role.get_fhir_doc_presign_url_role[0].name
159160
policy_arn = aws_iam_policy.s3_document_data_policy_for_get_doc_ref_lambda.arn
160161
}

0 commit comments

Comments
 (0)