fix: Correct loop extraction logic for tls.issuer_cert_authority (#337)

* fix: Remove unnecessary for_each

* fix: Add comment on tls in complete example

* fix: Correct loop logic

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

Author: crashGoBoom

examples/complete/main.tf

@@ -144,6 +144,14 @@ module "ecs" {
 
             port_name      = local.container_name
             discovery_name = local.container_name
+            # Example TLS configuration
+            # tls = {
+            #   issuer_cert_authority = {
+            #     aws_pca_authority_arn = aws_acmpca_certificate_authority.this.arn
+            #   }
+            #   role_arn = module.tls_role.iam_role_arn
+            #   kms_key = module.tls_role.kms_key_arn
+            # }
           }
         ]
       }

modules/service/main.tf

@@ -251,7 +251,7 @@ resource "aws_ecs_service" "this" {
 
             content {
               dynamic "issuer_cert_authority" {
-                for_each = tls.value.issuer_cert_authority
+                for_each = [tls.value.issuer_cert_authority]
 
                 content {
                   aws_pca_authority_arn = issuer_cert_authority.value.aws_pca_authority_arn