Fix ec2_instance_metadata_defaults

Author: posquit0

modules/region/README.md

@@ -5,7 +5,7 @@ This module creates following resources.
 - `aws_ebs_encryption_by_default`
 - `aws_ebs_default_kms_key` (optional)
 - `aws_ec2_image_block_public_access`
-- `aws_ec2_instance_metadata_defaults`
+- `aws_ec2_instance_metadata_defaults` (optional)
 - `aws_ec2_serial_console_access`
 - `aws_inspector2_delegated_admin_account` (optional)
 - `aws_macie2_organization_admin_account` (optional)

modules/region/ec2.tf

@@ -15,6 +15,11 @@ resource "aws_ec2_image_block_public_access" "this" {
 ###################################################
 
 resource "aws_ec2_instance_metadata_defaults" "this" {
+  count = anytrue([
+    for k, v in var.ec2.instance_metadata_defaults :
+    v != null
+  ]) ? 1 : 0
+
   http_endpoint = (var.ec2.instance_metadata_defaults.http_enabled != null
     ? (var.ec2.instance_metadata_defaults.http_enabled ? "enabled" : "disabled")
     : "no-preference"