From 1c6f390204a5033880ec3637c2ba5a427ddb051e Mon Sep 17 00:00:00 2001
From: badra001 <donald.e.badrak.ii@census.gov>
Date: Wed, 27 Aug 2025 11:57:06 -0400
Subject: [PATCH] replace aws_iam_role.role with [0]

---
 terraform-state/outputs.tf | 2 +-
 terraform-state/policy.tf  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/terraform-state/outputs.tf b/terraform-state/outputs.tf
index b761540..9a53b3a 100644
--- a/terraform-state/outputs.tf
+++ b/terraform-state/outputs.tf
@@ -30,5 +30,5 @@ output "tfstate_region" {
 
 output "role_arn" {
   description = "Role ARN for Terraform"
-  value       = aws_iam_role.role.arn
+  value       = !var.application_mode ? aws_iam_role.role[0].arn : null
 }
diff --git a/terraform-state/policy.tf b/terraform-state/policy.tf
index b59575a..610ade5 100644
--- a/terraform-state/policy.tf
+++ b/terraform-state/policy.tf
@@ -194,6 +194,6 @@ data "aws_iam_policy_document" "allow_assume_role" {
     sid       = "AllowSTSAssumeTerraformRole"
     effect    = "Allow"
     actions   = ["sts:AssumeRole"]
-    resources = [aws_iam_role.role.arn]
+    resources = !var.application_mode ? [aws_iam_role.role[0].arn] : []
   }
 }