fix: pull only enabled subscriptions (#59)

lacework · Apr 4, 2022 · aac728d · aac728d
1 parent 80f3611
commit aac728d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -1,7 +1,7 @@
 locals {
   subscription_ids = var.all_subscriptions ? (
     // the user wants to grant access to all subscriptions
-    [for s in data.azurerm_subscriptions.available.subscriptions : s.subscription_id]
+    [for s in data.azurerm_subscriptions.available.subscriptions : s.subscription_id if s.state == "Enabled"]
     ) : (
     // or, if the user wants to grant a list of subscriptions,
     // if none then we default to the primary subscription