From b5ecc526f84e4632a39cc455176e48e7738010c3 Mon Sep 17 00:00:00 2001 From: badra001 Date: Wed, 27 Aug 2025 12:06:33 -0400 Subject: [PATCH] remove assume role policy for application_mode --- terraform-state/policy.tf | 1 + 1 file changed, 1 insertion(+) diff --git a/terraform-state/policy.tf b/terraform-state/policy.tf index 610ade5..a66a1fd 100644 --- a/terraform-state/policy.tf +++ b/terraform-state/policy.tf @@ -26,6 +26,7 @@ resource "aws_iam_policy" "tfstate_write" { } resource "aws_iam_policy" "allow_assume_role" { + count = !var.application_mode ? 1 : 0 name = format("%v%v-%v", lookup(local._prefixes, "policy", ""), var.name, "allow-assume") path = "/" description = "Assume role for Terraform activity"