diff --git a/modules/artifact-registry/README.md b/modules/artifact-registry/README.md
index bf0a82cc9..49fd84c24 100644
--- a/modules/artifact-registry/README.md
+++ b/modules/artifact-registry/README.md
@@ -13,7 +13,7 @@ module "docker_artifact_registry" {
location = "europe-west1"
format = "DOCKER"
id = "myregistry"
- iam_members = {
+ iam = {
"roles/artifactregistry.admin" = ["group:cicd@example.com"]
}
}
@@ -28,7 +28,7 @@ module "docker_artifact_registry" {
| project_id | Registry project id. | string | ✓ | |
| *description* | An optional description for the repository | string | | Terraform-managed registry |
| *format* | Repository format. One of DOCKER or UNSPECIFIED | string | | DOCKER |
-| *iam_members* | Map of member lists used to set authoritative bindings, keyed by role. | map(set(string)) | | {} |
+| *iam* | IAM bindings in {ROLE => [MEMBERS]} format. | map(list(string)) | | {} |
| *labels* | Labels to be attached to the registry. | map(string) | | {} |
| *location* | Registry location. Use `gcloud beta artifacts locations list' to get valid values | string | | |
diff --git a/modules/artifact-registry/main.tf b/modules/artifact-registry/main.tf
index 7a7a07d22..9b687873f 100644
--- a/modules/artifact-registry/main.tf
+++ b/modules/artifact-registry/main.tf
@@ -26,7 +26,7 @@ resource "google_artifact_registry_repository" "registry" {
resource "google_artifact_registry_repository_iam_binding" "bindings" {
provider = google-beta
- for_each = var.iam_members
+ for_each = var.iam
project = var.project_id
location = google_artifact_registry_repository.registry.location
repository = google_artifact_registry_repository.registry.name
diff --git a/modules/artifact-registry/variables.tf b/modules/artifact-registry/variables.tf
index 0726053a2..b977f6c77 100644
--- a/modules/artifact-registry/variables.tf
+++ b/modules/artifact-registry/variables.tf
@@ -14,9 +14,9 @@
* limitations under the License.
*/
-variable "iam_members" {
- description = "Map of member lists used to set authoritative bindings, keyed by role."
- type = map(set(string))
+variable "iam" {
+ description = "IAM bindings in {ROLE => [MEMBERS]} format."
+ type = map(list(string))
default = {}
}