diff --git a/group-assignment/README.md b/group-assignment/README.md index acd72d1..a19c51a 100644 --- a/group-assignment/README.md +++ b/group-assignment/README.md @@ -43,7 +43,7 @@ No modules. | [description](#input\_description) | Permission set description | `string` | `null` | no | | [identity\_store\_id](#input\_identity\_store\_id) | AWS SSO/IDC Instance ID | `string` | n/a | yes | | [instance\_arn](#input\_instance\_arn) | AWS SSO/IDC Instance ARN | `string` | n/a | yes | -| [name](#input\_name) | Permission set name | `string` | n/a | yes | +| [name](#input\_name) | Permission set name | `string` | `null` | no | | [org\_account\_ids](#input\_org\_account\_ids) | List of AWS Account ID to which to associate with this group | `list(string)` | `[]` | no | | [org\_account\_names](#input\_org\_account\_names) | List of AWS Account aliases to which to associate with this group (note it use the commercial side alias for GovCloud) | `list(string)` | `[]` | no | | [org\_all](#input\_org\_all) | Flag indicating to associate this group to all ACTIVE accounts in the organization | `bool` | `false` | no | diff --git a/group-assignment/main.tf b/group-assignment/main.tf index 3df2dfa..d372bca 100644 --- a/group-assignment/main.tf +++ b/group-assignment/main.tf @@ -9,6 +9,13 @@ resource "aws_identitystore_group" "group" { identity_store_id = var.identity_store_id display_name = local.name description = local.description + + lifecycle { + precondition { + condition = local.name != null + error_message = "The group name is required in either the variable name or the settings file." + } + } } resource "aws_identitystore_group_membership" "group" { diff --git a/group-assignment/variables.tf b/group-assignment/variables.tf index ac807a7..735685e 100644 --- a/group-assignment/variables.tf +++ b/group-assignment/variables.tf @@ -1,6 +1,7 @@ variable "name" { description = "Permission set name" type = string + default = null } variable "description" {