Merge pull request #22 from unifio/db-nonat-nolan

Only create a NAT Gateway if Private LANS are requested
unifio · Dec 20, 2016 · 8404938 · 8404938
2 parents 9b20e6f + 808a343
commit 8404938
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/az/main.tf b/az/main.tf
@@ -26,13 +26,13 @@ resource "aws_route_table_association" "rta_dmz" {
 
 ### Provisions NAT gateway
 resource "aws_nat_gateway" "nat" {
-  count         = "${length(split(",",var.az))}"
+  count         = "${length(split(",",var.az)) * signum(var.lans_per_az)}"
   allocation_id = "${element(aws_eip.eip_nat.*.id,count.index)}"
   subnet_id     = "${element(aws_subnet.dmz.*.id,count.index)}"
 }
 
 resource "aws_eip" "eip_nat" {
-  count = "${length(split(",",var.az))}"
+  count = "${length(split(",",var.az)) * signum(var.lans_per_az)}"
   vpc   = true
 }