skip dynamodb perms if step functions are disabled

kldavis4 · kldavis4 · commit b50b3f20ece0 · 2021-07-26T13:32:11.000-04:00
diff --git a/aws/terraform/modules/metaflow/iam.tf b/aws/terraform/modules/metaflow/iam.tf
@@ -245,6 +245,7 @@ resource "aws_iam_role_policy" "grant_iam_pass_role" {
 }
 
 resource "aws_iam_role_policy" "grant_dynamodb" {
+  count  = var.enable_step_functions ? 1 : 0
   name   = "dynamodb"
   role   = aws_iam_role.batch_s3_task_role.name
   policy = data.aws_iam_policy_document.dynamodb.json

Original file line number	Diff line number	Diff line change
`@@ -245,6 +245,7 @@ resource "aws_iam_role_policy" "grant_iam_pass_role" {`
`245`	`245`	`}`
`246`	`246`
`247`	`247`	`resource "aws_iam_role_policy" "grant_dynamodb" {`
	`248`	`+ count = var.enable_step_functions ? 1 : 0`
`248`	`249`	`name = "dynamodb"`
`249`	`250`	`role = aws_iam_role.batch_s3_task_role.name`
`250`	`251`	`policy = data.aws_iam_policy_document.dynamodb.json`