Add Service Link Role flag

Author: lgallard

iam.tf

@@ -29,6 +29,7 @@ CONFIG
 
 # Service-linked role to give Amazon ES permissions to access your VPC
 resource "aws_iam_service_linked_role" "es" {
+  count            = var.create_service_link_role == true ? 1 : 0
   aws_service_name = "es.amazonaws.com"
   description      = "Service-linked role to give Amazon ES permissions to access your VPC"
 }

variables.tf

@@ -244,3 +244,10 @@ variable "timeouts_update" {
   type        = string
   default     = null
 }
+
+# Service Link Role
+variable "create_service_link_role" {
+  description = "Create service link role for AWS Elasticsearch Service"
+  type        = bool
+  default     = true
+}