From b2068fea45c20816b1b40ab8cceffd0dab514353 Mon Sep 17 00:00:00 2001
From: "Matthew C. Morgan" <matthew.c.morgan@census.gov>
Date: Tue, 24 Mar 2026 12:39:02 -0400
Subject: [PATCH] fix syntax for passthrough var

---
 policies/sc-dbuser/policy.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/policies/sc-dbuser/policy.tf b/policies/sc-dbuser/policy.tf
index e073441..0f09dc0 100644
--- a/policies/sc-dbuser/policy.tf
+++ b/policies/sc-dbuser/policy.tf
@@ -89,7 +89,7 @@ data "aws_iam_policy_document" "inline" {
       test     = "StringEquals"
       variable = "secretsmanager:ResourceTag/jbid"
       values = [
-        "&{aws:PrincipalTag/jbid}"
+        "$${aws:PrincipalTag/jbid}"
       ]
     }
     # Name tag pattern includes the caller identifier.
@@ -97,7 +97,7 @@ data "aws_iam_policy_document" "inline" {
       test     = "StringLike"
       variable = "secretsmanager:ResourceTag/Name"
       values = [
-        "*&{aws:PrincipalTag/jbid}*"
+        "*$${aws:PrincipalTag/jbid}*"
       ]
     }
   }