fix: allow example to be applied without changes

Get account_id from aws_caller_identity
terraform-aws-modules · Nov 22, 2021 · edce090 · edce090
1 parent 5c3cf3c
commit edce090
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/examples/complete/README.md b/examples/complete/README.md
@@ -41,6 +41,7 @@ Note that this example may create resources which cost money. Run `terraform des
 |------|------|
 | [aws_kms_key.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key) | resource |
 | [aws_sqs_queue_policy.users_unencrypted_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqs_queue_policy) | resource |
+| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
 
 ## Inputs
 

diff --git a/examples/complete/main.tf b/examples/complete/main.tf
@@ -2,6 +2,8 @@ provider "aws" {
   region = "eu-west-1"
 }
 
+data "aws_caller_identity" "current" {}
+
 resource "aws_kms_key" "this" {}
 
 module "users_unencrypted" {
@@ -37,7 +39,7 @@ resource "aws_sqs_queue_policy" "users_unencrypted_policy" {
       {
         "Effect": "Allow",
         "Principal": {
-          "AWS": "arn:aws:iam::myaccount:root"
+          "AWS": "arn:aws:iam::${data.aws_caller_identity.current.account_id}:root"
         },
         "Action": [
           "SQS:SendMessage",