fix(s3_website_origin): purge empty strings

cloudposse · Jun 9, 2024 · 734a336 · 734a336
1 parent f950681
commit 734a336
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -168,7 +168,7 @@ data "aws_iam_policy_document" "s3_website_origin" {
 
     principals {
       type        = "AWS"
-      identifiers = var.block_origin_public_access_enabled ? flatten([aws_cloudfront_origin_access_identity.default[*].iam_arn, [var.cloudfront_origin_access_identity_iam_arn]]) : ["*"]
+      identifiers = var.block_origin_public_access_enabled ? compact(flatten([aws_cloudfront_origin_access_identity.default[*].iam_arn, [var.cloudfront_origin_access_identity_iam_arn]])) : ["*"]
     }
     dynamic "condition" {
       for_each = local.website_password_enabled ? ["password"] : []