chore: remove iam role attributes from CloudTrail if Config org enabled (#1456)

PengyuanZhao · web-flow · commit cbbcb1fad48c · 2023-11-17T15:44:04.000-08:00
diff --git a/lwgenerate/aws/aws.go b/lwgenerate/aws/aws.go
@@ -929,7 +929,7 @@ func createCloudtrail(args *GenerateAwsTfConfigurationArgs) (*hclwrite.Block, er
 			attributes["sqs_encryption_enabled "] = false
 		}
 	}
-	if args.ExistingIamRole.IsEmpty() && args.Config {
+	if args.ExistingIamRole.IsEmpty() && args.Config && !args.AwsOrganization {
 		attributes["use_existing_iam_role"] = true
 		attributes["iam_role_name"] = lwgenerate.CreateSimpleTraversal(
 			[]string{"module", "aws_config", "iam_role_name"})

Original file line number	Diff line number	Diff line change
`@@ -929,7 +929,7 @@ func createCloudtrail(args GenerateAwsTfConfigurationArgs) (hclwrite.Block, er`
`929`	`929`	`attributes["sqs_encryption_enabled "] = false`
`930`	`930`	`}`
`931`	`931`	`}`
`932`		`- if args.ExistingIamRole.IsEmpty() && args.Config {`
	`932`	`+ if args.ExistingIamRole.IsEmpty() && args.Config && !args.AwsOrganization {`
`933`	`933`	`attributes["use_existing_iam_role"] = true`
`934`	`934`	`attributes["iam_role_name"] = lwgenerate.CreateSimpleTraversal(`
`935`	`935`	`[]string{"module", "aws_config", "iam_role_name"})`