@@ -128,15 +128,15 @@ data "aws_iam_policy_document" "assume_role_policy" {
128128resource "aws_iam_role" "s3_access_for_sftp_users" {
129129 for_each = var. enabled ? local. user_names_map : {}
130130
131- name = format ( " %s-sftp-users " , module. labels . id )
131+ name = " ${ module . labels . id } - ${ each . value . user_name } "
132132 assume_role_policy = join (" " , data. aws_iam_policy_document . assume_role_policy [* ]. json )
133133 managed_policy_arns = [aws_iam_policy . s3_access_for_sftp_users [each . value . user_name ]. arn ]
134134}
135135
136136resource "aws_iam_policy" "s3_access_for_sftp_users" {
137137 for_each = var. enabled ? local. user_names_map : {}
138138
139- name = format ( " %s-sftp-users " , module. labels . id )
139+ name = " ${ module . labels . id } - ${ each . value . user_name } "
140140 policy = data. aws_iam_policy_document . s3_access_for_sftp_users [each . value . user_name ]. json
141141
142142 tags = module. labels . tags
@@ -149,7 +149,7 @@ resource "aws_iam_policy" "s3_access_for_sftp_users" {
149149resource "aws_iam_policy" "logging" {
150150 count = var. enabled ? 1 : 0
151151
152- name = format ( " %s-logging " , module. labels . id )
152+ name = " ${ module . labels . id } -logging "
153153 policy = join (" " , data. aws_iam_policy_document . logging [* ]. json )
154154
155155 tags = module. labels . tags
@@ -158,7 +158,7 @@ resource "aws_iam_policy" "logging" {
158158resource "aws_iam_role" "logging" {
159159 count = var. enabled ? 1 : 0
160160
161- name = format ( " %s-logging " , module. labels . id )
161+ name = " ${ module . labels . id } -logging "
162162 assume_role_policy = join (" " , data. aws_iam_policy_document . assume_role_policy [* ]. json )
163163 managed_policy_arns = [join (" " , aws_iam_policy. logging [* ]. arn )]
164164
@@ -171,7 +171,7 @@ resource "aws_iam_role" "logging" {
171171# #----------------------------------------------------------------------------------
172172
173173resource "aws_transfer_server" "transfer_server" {
174- count = var. enable_sftp ? 1 : 0
174+ count = var. enabled ? 1 : 0
175175 identity_provider_type = var. identity_provider_type
176176 protocols = [" SFTP" ]
177177 domain = var. domain
@@ -240,10 +240,10 @@ resource "aws_transfer_user" "transfer_server_user" {
240240# #----------------------------------------------------------------------------------
241241
242242resource "aws_transfer_ssh_key" "transfer_server_ssh_key" {
243- for_each = var. enabled ? var. sftp_users : {}
243+ for_each = var. enabled ? { for user in var . sftp_users : user . user_name => user } : {}
244244 server_id = join (" " , aws_transfer_server. transfer_server [* ]. id )
245- user_name = var . sftp_users [each . key ]. user_name
246- body = var . sftp_users [ each . key ] . public_key
245+ user_name = aws_transfer_user . transfer_server_user [each . value . user_name ]. user_name
246+ body = each. value . public_key
247247}
248248
249249
@@ -262,6 +262,12 @@ resource "aws_eip" "sftp" {
262262# Module : Custom Domain
263263# Description : Provides a Custom Domain
264264# #----------------------------------------------------------------------------------
265+ resource "aws_transfer_tag" "custom_hostname" {
266+ count = var. enabled && length (var. domain_name ) > 0 ? 1 : 0
267+ resource_arn = aws_transfer_server. transfer_server [0 ]. arn
268+ key = " aws:transfer:customHostname"
269+ value = var. domain_name
270+ }
265271
266272resource "aws_route53_record" "custom_domain" {
267273 count = var. enabled && length (var. domain_name ) > 0 && length (var. zone_id ) > 0 ? 1 : 0
0 commit comments