changed count formula and added proper managed policy

binbashar · May 24, 2022 · ac622e1 · ac622e1
1 parent be08c9c
commit ac622e1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/security.tf b/security.tf
@@ -115,7 +115,7 @@ data "aws_iam_policy_document" "cross_org_instance_access" {
 
 # SSM Policy
 resource "aws_iam_role_policy_attachment" "ec2_ssm_access" {
-  count      = var.enable_ssm_access ? 1 : 0
+  count      = var.enable_ssm_access == true ? 1 : 0
   role       = aws_iam_role.basic_instance_assume_role[0].name
-  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonSSMManagedInstanceCore"
+  policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
 }