地形aws_iam_role_policy_attachment

Question

我正在创建一些角色以及不同的策略，我并不想将它们捆绑在一起：

#Role that gets created in in identity account that okta uses to map AD groups to Roles in AWS
resource "aws_iam_role" "create_identity_role" {
    count = "${length(var.team_name)}"
    name = "${lookup(var.identity_role_name,element(var.team_name, count.index))}"
    assume_role_policy = "${data.aws_iam_policy_document.trustokta.json}"
}

#Role that gets created in each of the accounts that will determine what it is a user will be able to do inside AWS
resource "aws_iam_role" "create_assume_role" {
    count = "${length(var.team_name)}"
    name  = "${lookup(var.assume_role_name,element(var.team_name, count.index))}"
    assume_role_policy = "${data.aws_iam_policy_document.trustawsaccount.json}"
}

#Policy that gets created in the identity account which tells AWS which role to assume in a different account
resource "aws_iam_policy" "create_assume_policy" {
    count = "${length(var.team_name)}"
    name  = "${lookup(var.assume_role_name,element(var.team_name, count.index))}"
    policy = "${data.template_file.network_assume.rendered}"
}

#Tie my role and polocies together
resource "aws_iam_role_policy_attachment" "attach_assume_policy" {
    count = "${length(var.team_name)}"
    role = "${lookup(var.assume_role_name,element(var.team_name, count.index))}"
    policy_arn = "${element(aws_iam_policy.create_assume_policy.arn, count.index)}"
}

我遇到的问题是该策略将自己附加到角色上时，我不确定我是否知道应该在最终资源中将哪个变量传递到policy_arn中，以便针对在该策略中创建的每个策略进行迭代。资源就在眼前。

terraform计划时发生错误：

Answer 1

找到了问题，使用splat解决了该问题：

#Tie my role and polocies together
resource "aws_iam_role_policy_attachment" "attach_assume_policy" {
    count = "${length(var.team_name)}"
    role = "${lookup(var.assume_role_name,element(var.team_name, count.index))}"
    policy_arn = "${element(aws_iam_policy.create_assume_policy.*.arn, count.index)}"
}