resource "aws_iam_role" "this" {
  count            = var.enabled ? 1 : 0
  name             = var.role_name
  assume_role_policy = var.policy_document
  tags             = local.tags
}