Defaults control_finding_generator to null to allow org to manage set…

…ting
plus3it · Aug 29, 2023 · 6b64c32 · 6b64c32
1 parent da889a2
commit 6b64c32
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/modules/account/variables.tf b/modules/account/variables.tf
@@ -7,7 +7,12 @@ variable "auto_enable_controls" {
 variable "control_finding_generator" {
   description = "Manages whether the account reports consolidated control findings, or generates separate findings for every enabled standard."
   type        = string
-  default     = "SECURITY_CONTROL"
+  default     = null
+
+  validation {
+    condition     = contains(["SECURITY_CONTROL", "STANDARDS_CONTROL", null], var.control_finding_generator)
+    error_message = "control_finding_generator must be one of: SECURITY_CONTROL, STANDARDS_CONTROL, null"
+  }
 }
 
 variable "enable_default_standards" {

diff --git a/variables.tf b/variables.tf
@@ -17,7 +17,12 @@ variable "auto_enable_controls" {
 variable "control_finding_generator" {
   description = "Manages whether the account reports consolidated control findings, or generates separate findings for every enabled standard."
   type        = string
-  default     = "SECURITY_CONTROL"
+  default     = null
+
+  validation {
+    condition     = contains(["SECURITY_CONTROL", "STANDARDS_CONTROL", null], var.control_finding_generator)
+    error_message = "control_finding_generator must be one of: SECURITY_CONTROL, STANDARDS_CONTROL, null"
+  }
 }
 
 variable "enable_default_standards" {