resource "aws_iam_user_policy_attachment" "this" { for_each = toset(var.users) user = each.key policy_arn = aws_iam_policy.mdradmin_tfstate_setup.arn }