fix: Policy generation when ebs_csi_kms_cmk_ids is set (#203)

schantaraud · antonbabenko · web-flow · commit e2b405400f92 · 2022-03-23T21:49:32.000+01:00
Co-authored-by: Anton Babenko &lt;anton@antonbabenko.com&gt;
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -256,7 +256,7 @@ data "aws_iam_policy_document" "ebs_csi" {
         "kms:RevokeGrant",
       ]
 
-      resources = statement.value
+      resources = var.ebs_csi_kms_cmk_ids
 
       condition {
         test     = "Bool"
@@ -277,7 +277,7 @@ data "aws_iam_policy_document" "ebs_csi" {
         "kms:DescribeKey",
       ]
 
-      resources = statement.value
+      resources = var.ebs_csi_kms_cmk_ids
     }
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ data "aws_iam_policy_document" "ebs_csi" {`
`256`	`256`	`"kms:RevokeGrant",`
`257`	`257`	`]`
`258`	`258`
`259`		`- resources = statement.value`
	`259`	`+ resources = var.ebs_csi_kms_cmk_ids`
`260`	`260`
`261`	`261`	`condition {`
`262`	`262`	`test = "Bool"`
`@@ -277,7 +277,7 @@ data "aws_iam_policy_document" "ebs_csi" {`
`277`	`277`	`"kms:DescribeKey",`
`278`	`278`	`]`
`279`	`279`
`280`		`- resources = statement.value`
	`280`	`+ resources = var.ebs_csi_kms_cmk_ids`
`281`	`281`	`}`
`282`	`282`	`}`
`283`	`283`	`}`