-
Notifications
You must be signed in to change notification settings - Fork 9.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
data-source/aws_iam_role: Add permissions_boundary attribute #5186
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM with a minor comment
d.Set("max_session_duration", output.Role.MaxSessionDuration) | ||
d.Set("name", output.Role.RoleName) | ||
d.Set("path", output.Role.Path) | ||
d.Set("permissions_boundary", "") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we have to set this to an empty string? I would think that Terraform would automatically do this but maybe I'm wrong.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since the d.Set()
is wrapped in a conditional, this is to properly handle the missing attribute if its not sent back by the API (output.Role.PermissionsBoundary
is nil
). Otherwise Terraform will throw an error about the missing attribute in this scenario:
output "permissions_boundary" {
value = "${data.aws_iam_role.example.permissions_boundary}"
}
It can potentially go away after Terraform 0.12 allows returning full resources.
This has been released in version 1.29.0 of the AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. |
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks! |
Reference: #5174
Changes proposed in this pull request:
aws_iam_role
data sourceOutput from acceptance testing: AWS Commercial
Output from acceptance testing: AWS GovCloud (US)