fix syntax for passthrough var

terraform-modules · Mar 24, 2026 · b2068fe · b2068fe
1 parent b4cb30e
commit b2068fe
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/policies/sc-dbuser/policy.tf b/policies/sc-dbuser/policy.tf
@@ -89,15 +89,15 @@ data "aws_iam_policy_document" "inline" {
       test     = "StringEquals"
       variable = "secretsmanager:ResourceTag/jbid"
       values = [
-        "&{aws:PrincipalTag/jbid}"
+        "$${aws:PrincipalTag/jbid}"
       ]
     }
     # Name tag pattern includes the caller identifier.
     condition {
       test     = "StringLike"
       variable = "secretsmanager:ResourceTag/Name"
       values = [
-        "*&{aws:PrincipalTag/jbid}*"
+        "*$${aws:PrincipalTag/jbid}*"
       ]
     }
   }