add a validation check that source and destination accounts are diffe…

…rent
dominodatalab · Oct 4, 2023 · fb9ea82 · fb9ea82
1 parent 7f94d5f
commit fb9ea82
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/dst_backup_vault.tf b/dst_backup_vault.tf
@@ -2,4 +2,11 @@ resource "aws_backup_vault" "aws_dst_backup_vault" {
   name        = "aws_backup_vault"
   provider    = aws.dst
   kms_key_arn = aws_kms_key.aws_dst_backup_kms_key.arn
-}
+
+  lifecycle {
+    precondition {
+      condition     = data.aws_caller_identity.current.account_id != data.aws_caller_identity.dst_account.account_id
+      error_message = "Destination account ID (${data.aws_caller_identity.dst_account.account_id}) must not match source account ID (${data.aws_caller_identity.current.account_id})"
+    }
+  }
+}