Don't create IAM role for the service if there are no load balancers (#…

…156)
cloudposse · Feb 7, 2022 · c04d65d · c04d65d
1 parent 4294ee2
commit c04d65d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -4,7 +4,7 @@ locals {
   create_task_role        = local.enabled && length(var.task_role_arn) == 0
   task_exec_role_arn      = try(var.task_exec_role_arn[0], tostring(var.task_exec_role_arn), "")
   create_exec_role        = local.enabled && length(var.task_exec_role_arn) == 0
-  enable_ecs_service_role = module.this.enabled && var.network_mode != "awsvpc" && length(var.ecs_load_balancers) <= 1
+  enable_ecs_service_role = module.this.enabled && var.network_mode != "awsvpc" && length(var.ecs_load_balancers) >= 1
 
   volumes = concat(var.docker_volumes, var.efs_volumes)
 }