Merge pull request #20 from SPHTech-Platform/fix/error-invalid-interpolation-value

hazmei · web-flow · commit 84b3cd1839c1 · 2023-11-29T15:34:54.000+08:00
Fix #19 interpolation error
diff --git a/data.tf b/data.tf
@@ -69,6 +69,8 @@ data "aws_iam_policy_document" "update_lambda_edge" {
 
 data "aws_iam_policy_document" "sign_code" {
   #checkov:skip=CKV_AWS_356:Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions
+  count = var.create_github_actions_signed_code_role ? 1 : 0
+
   statement {
     sid = "UploadToS3"
 
diff --git a/github_action.tf b/github_action.tf
@@ -53,5 +53,5 @@ resource "aws_iam_role_policy" "sign_code" {
 
   name_prefix = "SignCode"
   role        = module.lambda_gha[0].role.name
-  policy      = data.aws_iam_policy_document.sign_code.json
+  policy      = data.aws_iam_policy_document.sign_code[0].json
 }

Original file line number	Diff line number	Diff line change
`@@ -53,5 +53,5 @@ resource "aws_iam_role_policy" "sign_code" {`
`53`	`53`
`54`	`54`	`name_prefix = "SignCode"`
`55`	`55`	`role = module.lambda_gha[0].role.name`
`56`		`- policy = data.aws_iam_policy_document.sign_code.json`
	`56`	`+ policy = data.aws_iam_policy_document.sign_code[0].json`
`57`	`57`	`}`