fix

terraform-modules · May 24, 2021 · f61fe09 · f61fe09
1 parent 06c9bbf
commit f61fe09
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/config/config_rules.tf b/config/config_rules.tf
@@ -8,10 +8,11 @@ locals {
     "ENCRYPTED_VOLUMES",
     "RDS_STORAGE_ENCRYPTED",
   ]
+  crule_list = var.enable_config_rules_standard ? local.crules : []
 }
 
 resource "aws_config_config_rule" "config_rules" {
-  for_each = var.enable_config_rules_standard ? toset(local.crules) : {}
+  for_each = toset(local.crules)
   name     = format("inf-config-rule_%v", each.key)
   source {
     owner             = "AWS"
@@ -36,16 +37,15 @@ locals {
       parameter = jsonencode({ AllowedDays = "30" })
     }
   ]
-
-  crule_list         = var.enable_config_rules_standard ? local.crules : []
   crule_stopped_list = var.enable_config_rules_stopped ? [for cr in local.crules_stopped : cr.rule] : []
+  crule_stopped_map  = var.enable_config_rules_stopped ? { for cr in local.crules_stopped : cr.name => cr } : {}
 
   all_crules       = concat(local.crule_list, local.crule_stopped_list)
   all_crules_names = { for c in local.all_crules : c => format("inf-config-rule_%v", c) }
 }
 
 resource "aws_config_config_rule" "config_rules_stopped" {
-  for_each = var.enable_config_rules_stopped ? { for cr in local.crules_stopped : cr.name => cr } : {}
+  for_each = local.crule_stopped_map
   name     = format("inf-config-rule_%v", each.key)
   source {
     owner             = "AWS"