Reintroduce create_policy

schubergphilis · Apr 23, 2024 · f5c7ef8 · f5c7ef8
1 parent bc33e4f
commit f5c7ef8
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -15,7 +15,7 @@ module "lambda_role" {
 
   source                = "github.com/schubergphilis/terraform-aws-mcaf-role?ref=v0.3.3"
   name                  = join("-", compact([var.role_prefix, "LambdaRole", var.name]))
-  create_policy         = true
+  create_policy         = var.create_policy
   permissions_boundary  = var.permissions_boundary
   postfix               = false
   principal_identifiers = ["edgelambda.amazonaws.com", "lambda.amazonaws.com"]

diff --git a/variables.tf b/variables.tf
@@ -110,6 +110,12 @@ variable "permissions_boundary" {
   description = "The permissions boundary to set on the role"
 }
 
+variable "create_policy" {
+  type        = bool
+  default     = null
+  description = "Overrule whether the Lambda role policy has to be created"
+}
+
 variable "policy" {
   type        = string
   default     = null