Merge pull request #9 from SPHTech-Platform/feature/add-cloudwatch-log-retention

Bugfix: Added policy statements attachment flag

Author: jmonte-sph

main.tf

@@ -50,10 +50,11 @@ module "lambda" {
   authorization_type                           = var.authorization_type
   cors                                         = var.cors
 
-  role_name             = var.role_name
-  attach_policy_jsons   = var.attach_policy_jsons
-  attach_policy_json    = var.attach_policy_json
-  attach_network_policy = var.attach_network_policy
+  role_name                = var.role_name
+  attach_policy_jsons      = var.attach_policy_jsons
+  attach_policy_json       = var.attach_policy_json
+  attach_policy_statements = var.attach_policy_statements
+  attach_network_policy    = var.attach_network_policy
 
   ignore_source_code_hash = true
 

variables.tf

@@ -243,6 +243,12 @@ variable "policy_jsons" {
   default     = []
 }
 
+variable "attach_policy_statements" {
+  description = "Controls whether policy_jsons should be added to IAM role for Lambda Function"
+  type        = bool
+  default     = false
+}
+
 variable "policy_statements" {
   description = "Additional Inline Lambda Policy Statements"
   type        = any