Question

我正在尝试创建一个内联策略以在我的 terraform 模块中附加多个 IAM 用户。

这是我的 main.tf

locals {
  name_prefix = var.environment
}

resource "aws_iam_user" "npdata" {
  count = length(var.username)
  name = element(var.username,count.index )
  tags = merge({
    Name = element(var.username,count.index )
    },
    var.default_tags,
  )
}

resource "aws_iam_user_policy" "lb_ro" {
  name = "test"
  user = element(aws_iam_user.npdata.*.name,count.index)
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        actions = [
         "s3:GetObject",
         "s3:ListBucket",
         "s3:PutObject",
         "s3:GetObjectVersion"
    ]
        Effect   = "Allow"
        resources = [
          var.dev_arn,
          var.prd_arn
    ]
      },
    ]
  })
}

但地形计划出错

Error: Reference to "count" in non-counted context

  on modules/iam-user/main.tf line 18, in resource "aws_iam_user_policy" "lb_ro":
  18:   user = element(aws_iam_user.npdata.*.name,count.index)

The "count" object can only be used in "module", "resource", and "data"
blocks, and only when the "count" argument is set.

如何使用计数向资源提供 IAM 用户列表aws_iam_user_policy

Answer 1

您尝试在此处使用 count.index 变量：

user = element(aws_iam_user.npdata.*.name,count.index)

但您尚未为 count 资源声明 aws_iam_user_policy，因此该变量不存在。

此外，您不能将单个内联策略分配给多个用户，因此您必须创建多个内联策略资源。因此您需要将 count = length(var.username) 添加到 aws_iam_user_policy 资源中。

创建内联策略以通过 terraform 附加到 IAM 用户

1 个答案: