#terraform-aws-modules - February 2023

I am trying to set up a admin group that requires to have restriction in kms access/usage (some kinda boundaries to the scope of the group permission), however I am confuse between terraform-aws-iam-role and terraform-aws-iam-policy which should I use and how can I restrict the scope of the admin to not have access to the kms service?

Hello!

Maybe someone can advice how to handle issue,

Im using module cloudposse/label/null to provision tags to resources, but with iam role module cloudposse/iam-role/aws there is tags generated example

+ tags                  = {
          + "Name"              = "some name"
          + "tag1"        = "x"
          + "tag2"                  = "b"

and many mores, but this Name tag is starting with N and terraform apply is failing with some issue that iam role not supporting this tag, any tip how to change from Name to name ?