Add a condition to build SNAT rules only when a NAT GW is requested

FlexibleEngineCloud · Mar 4, 2021 · dcac70d · dcac70d
1 parent 1480768
commit dcac70d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -47,7 +47,7 @@ locals {
   vpc_subnets_map    = zipmap(local.vpc_subnets_keys, local.vpc_subnets_values)
 
   vpc_subnets_snat_cidr     = flatten([for name in var.vpc_snat_subnets : [for subnet in var.vpc_subnets : subnet.subnet_cidr if subnet.subnet_name == name]])
-  vpc_subnets_snat_cidr_map = zipmap(local.vpc_subnets_snat_cidr, local.vpc_subnets_snat_cidr)
+  vpc_subnets_snat_cidr_map = var.enable_nat_gateway ? zipmap(local.vpc_subnets_snat_cidr, local.vpc_subnets_snat_cidr) : {}
 
 }