[PRM-581] Add conditional count for IAM policy resource (#476)

chrisbloe · web-flow · commit bf885c56b044 · 2025-10-28T08:53:09.000Z
diff --git a/infrastructure/policies.tf b/infrastructure/policies.tf
@@ -42,7 +42,8 @@ resource "aws_iam_policy" "read_only_role_extra_permissions" {
 }
 
 resource "aws_iam_policy" "administrator_permission_restrictions" {
-  name = "AdministratorRestriction"
+  count = local.is_sandbox ? 0 : 1
+  name  = "AdministratorRestriction"
   policy = jsonencode({
     Version = "2012-10-17",
     Statement = [

Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,8 @@ resource "aws_iam_policy" "read_only_role_extra_permissions" {`
`42`	`42`	`}`
`43`	`43`
`44`	`44`	`resource "aws_iam_policy" "administrator_permission_restrictions" {`
`45`		`- name = "AdministratorRestriction"`
	`45`	`+ count = local.is_sandbox ? 0 : 1`
	`46`	`+ name = "AdministratorRestriction"`
`46`	`47`	`policy = jsonencode({`
`47`	`48`	`Version = "2012-10-17",`
`48`	`49`	`Statement = [`