refactor(lambda): add vpc_config block only when needed

minimizes the impact of hashicorp/terraform-provider-aws#15952
codequest-eu · Mar 10, 2021 · a69fb11 · a69fb11
1 parent 46c2f69
commit a69fb11
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/lambda/main.tf b/lambda/main.tf
@@ -104,9 +104,13 @@ resource "aws_lambda_function" "lambda" {
     }
   }
 
-  vpc_config {
-    subnet_ids         = coalesce(var.subnet_ids, [])
-    security_group_ids = coalesce(var.security_group_ids, [])
+  dynamic "vpc_config" {
+    for_each = toset(var.subnet_ids != null || var.security_group_ids != null ? ["vpc_config"] : [])
+
+    content {
+      subnet_ids         = coalesce(var.subnet_ids, [])
+      security_group_ids = coalesce(var.security_group_ids, [])
+    }
   }
 
   tags = var.tags