Add validation for version labels of secrets-manager-secret module (#7

)
tedilabs · Apr 11, 2022 · ff61683 · ff61683
1 parent 3d8132e
commit ff61683
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/secrets-manager-secret/variables.tf b/modules/secrets-manager-secret/variables.tf
@@ -44,6 +44,13 @@ variable "versions" {
       alltrue([
         for version in var.versions :
         length(version.labels) > 0
+      ]),
+      alltrue([
+        for version in var.versions :
+        alltrue([
+          for label in version.labels :
+          !contains(["AWSCURRENT", "AWSPENDING", "AWSPREVIOUS"], label)
+        ])
       ])
     ])
     error_message = "Not valid parameters for `versions`."