main.tf

variable "group_name" {
  type = "string"
  description ="Name of the IAM group"
}

variable "iam_path" {
  type = "string"
  default = "/"
  description = "path where you want to create the IAM resource"
}

variable "policy_arn" {
  description = "The ARN of the policy you want to apply"
  type = "map"
  default = {
    EC2Access = "arn:aws:iam::aws:policy/AmazonEC2FullAccess"
    ReadOnlyAccess = "arn:aws:iam::aws:policy/ReadOnlyAccess"
  }
}

module "app_testing" {
   source = "../../../modules/group/"
   group_name = "${var.group_name}"
   iam_path = "${var.iam_path}"
}

module "EC2Access_policy" {
   source = "../../../modules/group_policy_attachment"
   group_name = "${module.app_testing.group_name}"
   policy_arn = "${lookup(var.policy_arn,"EC2Access")}"
}

module "ReadOnlyAccess_policy" {
   source = "../../../modules/group_policy_attachment"
   group_name = "${module.app_testing.group_name}"
   policy_arn = "${lookup(var.policy_arn,"ReadOnlyAccess")}"
}