Merge pull request #56 from forumone/loosen-private-instances

gustavderdrache · web-flow · commit 2221f87dc3be · 2024-10-24T11:01:30.000-04:00
Loosen public IP restriction to BoolIfExists
diff --git a/cluster/iam_ssm_document.tf b/cluster/iam_ssm_document.tf
@@ -43,7 +43,7 @@ data "aws_iam_policy_document" "automation_ssm_ec2" {
     resources = ["arn:aws:ec2:*:*:network-interface/*"]
 
     condition {
-      test     = "Bool"
+      test     = "BoolIfExists"
       variable = "ec2:AssociatePublicIp"
       values   = ["false"]
     }

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@ data "aws_iam_policy_document" "automation_ssm_ec2" {`
`43`	`43`	`resources = ["arn:aws:ec2:::network-interface/*"]`
`44`	`44`
`45`	`45`	`condition {`
`46`		`- test = "Bool"`
	`46`	`+ test = "BoolIfExists"`
`47`	`47`	`variable = "ec2:AssociatePublicIp"`
`48`	`48`	`values = ["false"]`
`49`	`49`	`}`