Use all_subscription_ids flags instead of subscription_ids as this va…

…riable is always populated for each management group while the other is not (#54)
sysdiglabs · Aug 29, 2024 · fe6b782 · fe6b782
1 parent 3614fe6
commit fe6b782
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/agentless-scanning/organizational.tf b/modules/agentless-scanning/organizational.tf
@@ -13,8 +13,8 @@ data "azurerm_management_group" "management_groups" {
 }
 
 locals {
-  subscriptions = toset(var.is_organizational && length(var.management_group_ids) == 0 ? data.azurerm_management_group.root_management_group[0].subscription_ids :
-  flatten([for m in data.azurerm_management_group.management_groups : m.subscription_ids]))
+  subscriptions = toset(var.is_organizational && length(var.management_group_ids) == 0 ? data.azurerm_management_group.root_management_group[0].all_subscription_ids :
+  flatten([for m in data.azurerm_management_group.management_groups : m.all_subscription_ids]))
 }
 
 resource "azurerm_lighthouse_assignment" "lighthouse_assignment_for_tenant" {