fix: Policy generation when ebs_csi_kms_cmk_ids is set (#203)

Co-authored-by: Anton Babenko <[email protected]>
terraform-aws-modules · Mar 23, 2022 · e2b4054 · e2b4054
1 parent 691bb92
commit e2b4054
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -256,7 +256,7 @@ data "aws_iam_policy_document" "ebs_csi" {
         "kms:RevokeGrant",
       ]
 
-      resources = statement.value
+      resources = var.ebs_csi_kms_cmk_ids
 
       condition {
         test     = "Bool"
@@ -277,7 +277,7 @@ data "aws_iam_policy_document" "ebs_csi" {
         "kms:DescribeKey",
       ]
 
-      resources = statement.value
+      resources = var.ebs_csi_kms_cmk_ids
     }
   }
 }