added null check

harrison-ai · Feb 26, 2025 · 65c640f · 65c640f
1 parent 02ce205
commit 65c640f
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/modules/sso/variables.tf b/modules/sso/variables.tf
@@ -18,8 +18,10 @@ variable "managed_permission_sets" {
     condition = alltrue([
       for ps in var.managed_permission_sets :
       ps.permissions_boundary == null ||
-      (ps.permissions_boundary.managed_policy_arn != null) !=
-      (ps.permissions_boundary.customer_managed_policy_reference != null)
+      (
+        (lookup(ps.permissions_boundary, "managed_policy_arn", null) != null) !=
+        (lookup(ps.permissions_boundary, "customer_managed_policy_reference", null) != null)
+      )
     ])
     error_message = "When permissions_boundary is set, exactly one of managed_policy_arn or customer_managed_policy_reference must be provided."
   }
@@ -45,8 +47,10 @@ variable "inline_permission_sets" {
     condition = alltrue([
       for ps in var.inline_permission_sets :
       ps.permissions_boundary == null ||
-      (ps.permissions_boundary.managed_policy_arn != null) !=
-      (ps.permissions_boundary.customer_managed_policy_reference != null)
+      (
+        (lookup(ps.permissions_boundary, "managed_policy_arn", null) != null) !=
+        (lookup(ps.permissions_boundary, "customer_managed_policy_reference", null) != null)
+      )
     ])
     error_message = "When permissions_boundary is set, exactly one of managed_policy_arn or customer_managed_policy_reference must be provided."
   }