locals.tf (13 lines of code) (raw):

locals { role_definition_resource_substring = "providers/Microsoft.Authorization/roleDefinitions" } # Helper locals to make the dynamic block more readable locals { managed_identities = { user_assigned = length(var.managed_identities.user_assigned_resource_ids) > 0 ? { this = { type = "UserAssigned" user_assigned_resource_ids = var.managed_identities.user_assigned_resource_ids } } : {} } }