Merge pull request #4 from MeteoGroup/hot_fix_s3_permission

Hot fix s3 permission
MeteoGroup · Apr 21, 2020 · 0fbda1e · 0fbda1e
2 parents 73db4b1 + 3ebac7c
commit 0fbda1e
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/main.tf b/main.tf
@@ -77,10 +77,13 @@ data "aws_iam_policy_document" "bucket_policy_read" {
       type        = "AWS"
       identifiers = var.read_accounts
     }
-    condition {
-      test = "StringLike"
-      variable = "s3:prefix"
-      values = ["${var.read_prefix}*"]
+    dynamic "condition" {
+      for_each = length(var.read_prefix) > 0 ? [var.read_prefix] : []
+      content {
+        test = "StringLike"
+        variable = "s3:prefix"
+        values = ["${var.read_prefix}*"]
+      }
     }
   }
   statement {