fix(macie-account): support single account

Author: posquit0

modules/macie-account/README.md

@@ -3,7 +3,7 @@
 This module creates following resources.
 
 - `aws_macie2_account`
-- `aws_macie2_organization_configuration`
+- `aws_macie2_organization_configuration` (optional)
 - `aws_macie2_member` (optional)
 - `aws_macie2_classification_export_configuration` (optional)
 

modules/macie-account/main.tf

@@ -89,6 +89,11 @@ resource "aws_macie2_member" "this" {
 ###################################################
 
 resource "aws_macie2_organization_configuration" "this" {
+  count = anytrue([
+    for account in var.member_accounts :
+    account.type == "ORGANIZATION"
+  ]) ? 1 : 0
+
   region = aws_macie2_account.this.region
 
   auto_enable = var.organization_config.auto_enable

modules/macie-account/outputs.tf

@@ -65,9 +65,12 @@ output "organization_config" {
   description = <<EOF
   The organization configuration for the macie account.
   EOF
-  value = {
-    auto_enable = aws_macie2_organization_configuration.this.auto_enable
-  }
+  value = (length(aws_macie2_organization_configuration.this) > 0
+    ? {
+      auto_enable = aws_macie2_organization_configuration.this[0].auto_enable
+    }
+    : null
+  )
 }
 
 output "discovery_result_repository" {