Description

We have a requirement to use different name_prefix value for IAM role and IAM policy. Currently the module doesn't offer this.

Versions

• Module version [Required]: 20.35.0

Expected behavior

should have an additional variable to specify the IAM Policy name prefix value. This will remove the dependency on the name_prefix value for the IAM role.

name_prefix = var.iam_role_use_name_prefix ? "${local.iam_role_name}${var.prefix_separator}" : null

Actual behavior

name_prefix is configured to take the iam_role_name value and there is no seperate variable for the iam policy name prefix.

resource "aws_iam_role" "this" {
  count = local.create_iam_role ? 1 : 0

  name        = var.iam_role_use_name_prefix ? null : local.iam_role_name
  name_prefix = var.iam_role_use_name_prefix ? "${local.iam_role_name}${var.prefix_separator}" : null
  path        = var.iam_role_path
  description = var.iam_role_description

  assume_role_policy    = data.aws_iam_policy_document.assume_role_policy[0].json
  permissions_boundary  = var.iam_role_permissions_boundary
  force_detach_policies = true

  tags = merge(var.tags, var.iam_role_tags)
}