From 670b0f24806f922c5d8465eea8c35cfbd5a6b790 Mon Sep 17 00:00:00 2001
From: Bertrand Lanson <bertrand.lanson@protonmail.com>
Date: Wed, 29 May 2024 23:21:09 +0200
Subject: [PATCH] fix: use try on dynamic block to not raise errors on
 non-existent attributes

---
 root.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/root.tf b/root.tf
index 11457f8..e29d1bf 100644
--- a/root.tf
+++ b/root.tf
@@ -60,7 +60,7 @@ data "vault_policy_document" "root" {
       # }
 
       dynamic "allowed_parameter" {
-        for_each = rule.value.allowed_parameter != null ? rule.value.allowed_parameter : {}
+        for_each = try(rule.value.allowed_parameter, {}) != {} ? rule.value.allowed_parameter : {}
         content {
           key   = allowed_parameter.key
           value = allowed_parameter.value
@@ -68,7 +68,7 @@ data "vault_policy_document" "root" {
       }
 
       dynamic "denied_parameter" {
-        for_each = rule.value.denied_parameter != null ? rule.value.denied_parameter : {}
+        for_each = try(rule.value.denied_parameter, {}) != {} ? rule.value.denied_parameter : {}
         content {
           key   = denied_parameter.key
           value = denied_parameter.value