fix(aws/ecs): ensure we don't pass a NULL object to the policy builder (#365)

swiknaba · web-flow · commit 0c6ebe0bf65e · 2024-08-27T22:02:07.000+02:00
diff --git a/aws/ecs/execution-role.tf b/aws/ecs/execution-role.tf
@@ -149,10 +149,10 @@ resource "aws_iam_role_policy" "ecs-task-execution-policy" {
 }
 
 locals {
-  kms_and_secret_arns = flatten([
+  kms_and_secret_arns = compact(flatten([
     var.secrets_arns,
     var.kms_key_arns,
-  ])
+  ]))
 }
 
 # Making secret/kms ARNs optional was added later.

Original file line number	Diff line number	Diff line change
`@@ -149,10 +149,10 @@ resource "aws_iam_role_policy" "ecs-task-execution-policy" {`
`149`	`149`	`}`
`150`	`150`
`151`	`151`	`locals {`
`152`		`- kms_and_secret_arns = flatten([`
	`152`	`+ kms_and_secret_arns = compact(flatten([`
`153`	`153`	`var.secrets_arns,`
`154`	`154`	`var.kms_key_arns,`
`155`		`- ])`
	`155`	`+ ]))`
`156`	`156`	`}`
`157`	`157`
`158`	`158`	`# Making secret/kms ARNs optional was added later.`