Add instance profile for bastion instance

Author: jana-opszero

main.tf

@@ -41,6 +41,7 @@ resource "aws_instance" "this" {
   associate_public_ip_address = true
   subnet_id                   = var.subnet_id
   vpc_security_group_ids      = concat(var.security_group_ids, [aws_security_group.this.id])
+  iam_instance_profile        = var.instance_profile != "" ? var.instance_profile : null
 
   monitoring = true
 

variables.tf

@@ -111,3 +111,8 @@ variable "instance_profiles" {
   #}
 }
 
+
+variable "instance_profile" {
+  default = {}
+  description = "Instance profile role ARN for instances"
+}