Merge pull request #3 from ab180/add-options

fix: attach role policy to both task and execution
ab180 · Jun 26, 2023 · f7a4218 · f7a4218
2 parents f4e4039 + 2a4976b
commit f7a4218
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -50,6 +50,14 @@ resource "aws_iam_role_policy" "user_defined" {
   policy = var.task_role_policy_document
 }
 
+resource "aws_iam_role_policy" "user_defined_execution" {
+  count = var.task_role_policy_document != "" ? 1 : 0
+
+  name   = "${var.name_prefix}-user-defined-execution"
+  role   = aws_iam_role.execution.id
+  policy = var.task_role_policy_document
+}
+
 #####
 # IAM - Task role, basic. Append policies to this role for S3, DynamoDB etc.
 #####