apply ecr policies and repositories as dynamic in terraform (v0.8.7)

ecr.tf

resource "aws_ecr_repository" "ecr_repositories" {
  count = "${length(var.list_of_images)}"
  name  = "${var.list_of_images[ count.index ]}"
}

resource "aws_ecr_repository_policy" "ecr_policies" {
  count      = "${ length(var.list_of_images) * length(var.list_of_allowed_iam_users) }"
  repository = "${var.list_of_images[ count.index % length(var.list_of_images) ]}"
  policy     = "${data.template_file.ecr_policy_allowed_iam_users.*.rendered[ count.index ]}"
}

data "template_file" "ecr_policy_allowed_iam_users" {
  count = "${ length(var.list_of_images) * length(var.list_of_allowed_iam_users) }"

  template = "${file("${path.module}/policy-${element(var.list_of_allowed_iam_users, count.index % length(var.list_of_allowed_iam_users))}.json")}"

  vars {
    arn = "arn:aws:iam::${var.aws_account}:user/${element(var.list_of_allowed_iam_users, count.index % length(var.list_of_allowed_iam_users))}"
  }
}

policy-ecr-power-user.json

{
  "Version": "2008-10-17",
  "Statement": [{
      "Sid": "AllowPowerUser",
      "Effect": "Allow",
      "Principal": {
        "AWS": "${arn}"
      },
      "Action": [
        "ecr:BatchCheckLayerAvailability",
        "ecr:BatchGetImage",
        "ecr:CompleteLayerUpload",
        "ecr:DescribeImages",
        "ecr:DescribeRepositories",
        "ecr:GetAuthorizationToken",
        "ecr:GetDownloadUrlForLayer",
        "ecr:GetRepositoryPolicy",
        "ecr:InitiateLayerUpload",
        "ecr:ListImages",
        "ecr:PutImage",
        "ecr:UploadLayerPart"
      ]
  }]
}

policy-ecr-pullpush-user.json

{
  "Version": "2008-10-17",
  "Statement": [{
    "Sid": "AllowPushPull",
    "Effect": "Allow",
    "Principal": {
      "AWS": "${arn}"
    },
    "Action": [
      "ecr:GetDownloadUrlForLayer",
      "ecr:BatchGetImage",
      "ecr:BatchCheckLayerAvailability",
      "ecr:PutImage",
      "ecr:DescribeImages",
      "ecr:DescribeRepositories",
      "ecr:ListImages",
      "ecr:InitiateLayerUpload",
      "ecr:UploadLayerPart",
      "ecr:CompleteLayerUpload"
    ]
  }]
}

terraform.tfvars

aws_account = "1111111111111"

list_of_images = ["repo1", "repo2"]

list_of_allowed_iam_users = ["ecr-power-user", "ecr-pullpush-user"]