From 551c6d63bb02cb097c3bc7ae1988fadec4c392c5 Mon Sep 17 00:00:00 2001
From: Phileas Lebada <phileas.lebada+github@bluereport.net>
Date: Thu, 26 Aug 2021 13:02:16 +0200
Subject: [PATCH] fix: Discourage usage of iam_policy_attachment in example
 (#1529)

---
 examples/bottlerocket/main.tf | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/examples/bottlerocket/main.tf b/examples/bottlerocket/main.tf
index 86166df..b254af0 100644
--- a/examples/bottlerocket/main.tf
+++ b/examples/bottlerocket/main.tf
@@ -57,8 +57,7 @@ EOT
 
 # SSM policy for bottlerocket control container access
 # https://github.com/bottlerocket-os/bottlerocket/blob/develop/QUICKSTART-EKS.md#enabling-ssm
-resource "aws_iam_policy_attachment" "ssm" {
-  name       = "ssm"
-  roles      = [module.eks.worker_iam_role_name]
+resource "aws_iam_role_policy_attachment" "ssm" {
+  role       = module.eks.worker_iam_role_name
   policy_arn = data.aws_iam_policy.ssm.arn
 }