Terraform:aws_iam_policy_document中的条件语句 block ？

Question

有没有办法在statement中有条件地添加aws_iam_policy_document块？我正在寻找类似的东西:

data "aws_iam_policy_document" "policy" {
  statement {
    sid = "PolicyAlways"

    ...
  }

  if (var.enable_optional_policy) {
    statement {
      sid = "PolicySometimes"

      ...
    }
  }
}

Answer 1

是的。您可以(ab)使用带有boolean值的 dynamic block来选择性地包括该块。

data "aws_iam_policy_document" "policy" {
  statement {
    sid = "PolicyAlways"

    ...
  }

  dynamic "statement" {
    # The contents of the list below are arbitrary, but must be of length one. 
    # It is only used to determine whether or not to include this statement.
    for_each = var.enable_optional_policy ? [1] : []

    content {
      sid = "PolicySometimes"
      ...
    }
  }
}