main.tf

data "aws_caller_identity" "default" {}

resource "aws_iam_account_alias" "default" {
  count = module.this.enabled == true ? 1 : 0

  account_alias = module.this.id
}

resource "aws_iam_account_password_policy" "default" {
  count = var.password_policy_enabled == true ? 1 : 0

  allow_users_to_change_password = var.allow_users_to_change_password
  hard_expiry                    = var.hard_expiry
  max_password_age               = var.max_password_age
  minimum_password_length        = var.minimum_password_length
  password_reuse_prevention      = var.password_reuse_prevention
  require_lowercase_characters   = var.require_lowercase_characters
  require_uppercase_characters   = var.require_uppercase_characters
  require_numbers                = var.require_numbers
  require_symbols                = var.require_symbols
}

locals {
  account_alias = module.this.enabled == true ? join("", aws_iam_account_alias.default.*.account_alias) : data.aws_caller_identity.default.account_id
}