v7.1.1 - 2025/10/08

- Added validation to `var.aws_cli_command` to stop an empty command
  being asked for. Slight improvement as this means the empty command is
  evaluated before it is passed to the AWS CLI.
- Updated to v1.11.4 for testing.
- Added v1.13.3 for testing.

Author: rquadling

.github/workflows/build.yml

@@ -10,8 +10,9 @@ jobs:
     strategy:
       matrix:
         terraform_version:
+          - 1.13.3
           - 1.12.2
-          - 1.11.3
+          - 1.11.4
           - 1.10.5
           - 1.9.8
           - 1.8.5

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+# v7.1.1 - 2025/10/08
+- Added validation to `var.aws_cli_command` to stop an empty command being asked for. Slight improvement as this means
+  the empty command is evaluated before it is passed to the AWS CLI.
+- Updated to v1.11.4 for testing.
+- Added v1.13.3 for testing.
+
 # v7.1.0 - 2025/07/03
 - Added v1.12.2 for testing
 - Improved support for retrying, both in terms of the retry mode and the number of retries via the new `var.retries`

README.md

@@ -164,7 +164,7 @@ No modules.
 |------|-------------|------|---------|:--------:|------------|
 | <a name="input_alternative_path"></a> [alternative\_path](#input\_alternative\_path) | Use an alternative path for all files produced internally | `string` | `""` | no | None |
 | <a name="input_assume_role_arn"></a> [assume\_role\_arn](#input\_assume\_role\_arn) | The ARN of the role being assumed (optional).<br/><br/>  The optional ARN must match the format documented in https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html. | `string` | `""` | no | The optional ARN must match the format documented in https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html. |
-| <a name="input_aws_cli_commands"></a> [aws\_cli\_commands](#input\_aws\_cli\_commands) | The AWS CLI command, subcommands, and options.<br/><br/>  For options that can accept a value, then the following examples are both fine to use:<br/>  1. `"--option", "value"`<br/>  2. `"--option=value"`<br/><br/>  In the event that the value contains a space, it must be wrapped with quotes.<br/>  1. `"--option", "'value with a space wrapped in single quotes'"`<br/>  2. `"--option='value with a space wrapped in single quotes'"` | `list(string)` | n/a | yes | None |
+| <a name="input_aws_cli_commands"></a> [aws\_cli\_commands](#input\_aws\_cli\_commands) | The AWS CLI command, subcommands, and options.<br/><br/>  For options that can accept a value, then the following examples are both fine to use:<br/>  1. `"--option", "value"`<br/>  2. `"--option=value"`<br/><br/>  In the event that the value contains a space, it must be wrapped with quotes.<br/>  1. `"--option", "'value with a space wrapped in single quotes'"`<br/>  2. `"--option='value with a space wrapped in single quotes'"` | `list(string)` | n/a | yes | The `var.aws_cli_commands` cannot be empty. |
 | <a name="input_aws_cli_query"></a> [aws\_cli\_query](#input\_aws\_cli\_query) | The `--query` value for the AWS CLI call.<br/><br/>  The value for `var.aws_cli_query` is based upon JMESPath, and you can get good information from https://jmespath.org.<br/>  If not supplied, then the entire results from the AWS CLI call will be returned. | `string` | `""` | no | None |
 | <a name="input_external_id"></a> [external\_id](#input\_external\_id) | External id for assuming the role (optional).<br/><br/>  The length of optional external\_id, when supplied, must be between 2 and 1224 characters.<br/>  The optional external\_id can only contain upper- and lower-case alphanumeric characters with no spaces. You can also include underscores or any of the following characters: `=,.@-`.<br/>  The optional external\_id match the regular expression `^[\w=,.@-]*$`. | `string` | `""` | no | The length of optional external\_id, when supplied, must be between 2 and 1224 characters.<br>The optional external\_id must match the regular expression '^[\w=,.@-]*$'. |
 | <a name="input_profile"></a> [profile](#input\_profile) | The specific AWS profile to use (must be configured appropriately and is optional).<br/><br/>  The optional profile must start with a letter and can only contain letters, numbers, hyphens, and underscores. | `string` | `""` | no | The optional profile must start with a letter and can only contain letters, numbers, hyphens, and underscores. |

tests/test_empty_command/expected_plan_errors.json

@@ -1,8 +1,8 @@
 [
   {
-    "variable": "data.local_file.awscli_results_file",
+    "variable": "var.aws_cli_commands",
     "problems": [
-      "usage: aws [options] <command> <subcommand> [<subcommand> ...] [parameters]\nTo see help text, you can run:\n\n  aws help\n  aws <command> help\n  aws <command> <subcommand> help\n\naws: error: the following arguments are required: command"
+      "The `var.aws_cli_commands` cannot be empty."
     ]
   }
 ]

tests/test_empty_command/terraform.tfvars

@@ -1,4 +1,4 @@
-aws_cli_commands = []
+aws_cli_commands = ["   ", "   ", "   ", "", "               "]
 region           = "eu-west-1"
 
 alternative_path = "test-reports/test_empty_command/aws"

variables.tf

@@ -12,6 +12,11 @@ variable "aws_cli_commands" {
   2. `"--option='value with a space wrapped in single quotes'"`
 EOT
   type        = list(string)
+
+  validation {
+    condition     = length(trimspace(join("", var.aws_cli_commands))) > 0
+    error_message = "The `var.aws_cli_commands` cannot be empty."
+  }
 }
 
 variable "aws_cli_query" {