diff --git a/cloud_AWS/terraform/module/cloudexport.tf b/cloud_AWS/terraform/module/cloudexport.tf index 4d9dea0..cad00ea 100644 --- a/cloud_AWS/terraform/module/cloudexport.tf +++ b/cloud_AWS/terraform/module/cloudexport.tf @@ -21,7 +21,7 @@ resource "kentik-cloudexport_item" "aws_export" { for bucketobject in aws_s3_bucket.vpc_logs : (var.s3_flowlogs_path == "" ? bucketobject.bucket : "${bucketobject.bucket}/${var.s3_flowlogs_path}") ]) - iam_role_arn = var.create_role ? aws_iam_role.kentik_role[0].arn : "" + iam_role_arn = var.create_role ? aws_iam_role.kentik_role[0].arn : var.aws_iam_role_no_create region = var.region delete_after_read = var.delete_after_read multiple_buckets = var.multiple_buckets diff --git a/cloud_AWS/terraform/module/variables.tf b/cloud_AWS/terraform/module/variables.tf index 060e357..9e9e56f 100644 --- a/cloud_AWS/terraform/module/variables.tf +++ b/cloud_AWS/terraform/module/variables.tf @@ -101,3 +101,9 @@ variable "external_id" { type = string default = "" } + +variable "aws_iam_role_no_create" { + description = "AWS Role to use if create role is false" + type = string + default = "" +}