diff --git a/terraform-state/policy.tf b/terraform-state/policy.tf
index 610ade5..a66a1fd 100644
--- a/terraform-state/policy.tf
+++ b/terraform-state/policy.tf
@@ -26,6 +26,7 @@ resource "aws_iam_policy" "tfstate_write" {
 }
 
 resource "aws_iam_policy" "allow_assume_role" {
+  count       = !var.application_mode ? 1 : 0
   name        = format("%v%v-%v", lookup(local._prefixes, "policy", ""), var.name, "allow-assume")
   path        = "/"
   description = "Assume role for Terraform activity"