diff --git a/roles/aws/aws_iam_role/tasks/main.yml b/roles/aws/aws_iam_role/tasks/main.yml index 6f0961645..f74f6da29 100644 --- a/roles/aws/aws_iam_role/tasks/main.yml +++ b/roles/aws/aws_iam_role/tasks/main.yml @@ -23,7 +23,7 @@ - name: Check if policy document file exists. ansible.builtin.stat: - path: "{{ role_path }}/files/{{ aws_iam_role.policy_document }}_document_policy.json" + path: "{{ playbook_dir }}/files/{{ aws_iam_role.policy_document + '_document_policy.json' }}" register: policy_file_stat - name: Fail if the assume role policy document file does not exist. @@ -31,6 +31,10 @@ msg: "The assume role policy document file '{{ aws_iam_role.policy_document + '_document_policy.json' }}' does not exist." when: not policy_file_stat.stat.exists +- name: Debug file content before setting the fact + ansible.builtin.debug: + msg: "{{ lookup('file', 'files/' + aws_iam_role.policy_document + '_document_policy.json') }}" + - name: Create assume role policy document if predefined string is passed. ansible.builtin.set_fact: _assume_role_policy: "{{ lookup('file', aws_iam_role.policy_document + '_document_policy.json') }}"