diff --git a/roles/aws/aws_iam_role/tasks/main.yml b/roles/aws/aws_iam_role/tasks/main.yml index f6e8842e1..30e7c47c6 100644 --- a/roles/aws/aws_iam_role/tasks/main.yml +++ b/roles/aws/aws_iam_role/tasks/main.yml @@ -23,7 +23,7 @@ - name: Check if policy document file exists. ansible.builtin.stat: - path: "{{ aws_iam_role.policy_document + '_document_policy.json' }}" + path: "{{ playbook_dir }}/files/{{ aws_iam_role.policy_document + '_document_policy.json' }}" register: policy_file_stat - name: Fail if the assume role policy document file does not exist. @@ -33,7 +33,7 @@ - name: Create assume role policy document if predefined string is passed. ansible.builtin.set_fact: - _assume_role_policy: "{{ lookup('file', aws_iam_role.policy_document + '_document_policy.json') }}" + _assume_role_policy: lookup('file', 'files/' + aws_iam_role.policy_document + '_document_policy.json') when: aws_iam_role.policy_document | type_debug == 'string' and policy_file_stat.stat.exists - name: Create assume role policy document if template is provided.