diff --git a/main.tf b/main.tf index 8a1b47a..9fd4320 100644 --- a/main.tf +++ b/main.tf @@ -220,8 +220,8 @@ resource "ldap_object" "role" { "groupOfNames", ] attributes = [ - { description = format("%s account=%s type=%s", aws_iam_role.role.name, local.account_id, local.account_environment) }, - { cn = aws_iam_role.role.name }, + { description = format("%s account=%s type=%s", var.create ? aws_iam_role.role[0].name : "", local.account_id, local.account_environment) }, + { cn = var.create ? aws_iam_role.role[0].name : "" }, { bocApplicationData = format("gov.census.tco:CPASS_FullPath=Cloud/%s/%s", local.account_environment, local.account_id) }, { bocApplicationData = "gov.census.tco:CPASS_APP=CloudServices" }, { bocApplicationData = local.bocappdata_fullauth },