Skip to content
Jump to bottom

fix: use static ARNs in attached_policies to resolve for_each unknown value error #3

Merged
merged 3 commits into from
Jul 23, 2026
+3 −3
Merged

fix: use static ARNs in attached_policies to resolve for_each unknown value error #3

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
84151b8
fix(roles): use HTTPS source URLs for aws-iam-role modules
Jul 9, 2026
d1c161a
fix: use static ARNs in attached_policies to avoid for_each unknown v…
Jul 23, 2026
3a1030f
fix: convert module sources from git::https:// to git@ format per Cen…
Jul 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
6 changes: 3 additions & 3 deletions roles.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ module "patch_role" {
role_name = local.patch_role_name
role_description = format("Assumed by %v to execute patching operations on EC2 instances in target accounts", local.patch_execution_role_name)
assume_policy_document = data.aws_iam_policy_document.patch_role_assume.json
attached_policies = [aws_iam_policy.patch_role.arn]
attached_policies = [format("arn:%v:iam::%v:policy/%v", local.partition, local.account_id, local.patch_policy_name)]

tags = local.tags_iam
}
Expand All @@ -17,7 +17,7 @@ module "patch_execution_role" {
role_name = local.patch_execution_role_name
role_description = format("Assumed by Lambda functions to invoke patch operations, access SQS/RDS, and assume %v in target accounts", local.patch_role_name)
assume_policy_document = data.aws_iam_policy_document.patch_execution_role_assume.json
attached_policies = [aws_iam_policy.patch_execution_role.arn]
attached_policies = [format("arn:%v:iam::%v:policy/%v", local.partition, local.account_id, local.patch_execution_policy_name)]

tags = local.tags_iam
}
Expand All @@ -31,7 +31,7 @@ module "patch_execproxy_role" {
role_name = local.patch_execproxy_role_name
role_description = format("Applied to the EC2 host running p4proxy; allows RDS IAM auth and assumption of %v", local.patch_execution_role_name)
assume_policy_document = data.aws_iam_policy_document.patch_execproxy_role_assume.json
attached_policies = [aws_iam_policy.patch_execproxy_role.arn]
attached_policies = [format("arn:%v:iam::%v:policy/%v", local.partition, local.account_id, local.patch_execproxy_policy_name)]
enable_instance_profile = true

tags = local.tags_iam
Expand Down