remove assume role policy for application_mode

terraform-modules · Aug 27, 2025 · b5ecc52 · b5ecc52
1 parent 1c6f390
commit b5ecc52
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform-state/policy.tf b/terraform-state/policy.tf
@@ -26,6 +26,7 @@ resource "aws_iam_policy" "tfstate_write" {
 }
 
 resource "aws_iam_policy" "allow_assume_role" {
+  count       = !var.application_mode ? 1 : 0
   name        = format("%v%v-%v", lookup(local._prefixes, "policy", ""), var.name, "allow-assume")
   path        = "/"
   description = "Assume role for Terraform activity"