Merge pull request #18 from infraspecdev/refactor/policy

feat: Support policy attachment by default in sub module

Author: nimisha-gj

examples/create-standard-organization-policies/main.tf

@@ -15,11 +15,5 @@ module "tag_policy" {
   description = local.tag_policy_description
   type        = local.tag_policy_type
   tags        = local.default_tags
-}
-
-
-module "attach_tag_policy" {
-  source    = "../../modules/policy_attachment"
-  policy_id = module.tag_policy.aws_organizations_policy_id
-  target_id = local.tag_policy_taget_id
+  target_id   = local.tag_policy_taget_id
 }

modules/policy/main.tf

@@ -6,3 +6,9 @@ resource "aws_organizations_policy" "this" {
   type         = var.type
   tags         = var.tags
 }
+
+resource "aws_organizations_policy_attachment" "this" {
+  policy_id    = aws_organizations_policy.this.id
+  target_id    = var.target_id
+  skip_destroy = var.skip_destroy
+}

modules/policy/variables.tf

@@ -36,3 +36,8 @@ variable "tags" {
   type        = map(string)
   default     = {}
 }
+
+variable "target_id" {
+  description = "(Required) The unique identifier (ID) of the root, organizational unit, or account number that you want to attach the policy to."
+  type        = string
+}