title: Attach a single IAM policy to two separate roles in two different regions (same account) using terraform and apex
body: <p>I have a terraform infrastructure setup, where a module is being used in different environments (same account, different regions). The issue I have is that for each environment I need to attach the policy to a Role in that environment. So every time I try to update the infrastructure using <code>apex infra -e &lt;env&gt; apply</code>, the Role previously attached to the Policy is overwritten by the Role in the new environment.</p>
  
  <p><code>Terraform v0.12.13</code></p>
  
  <p><code>Apex version 1.0.0-rc2</code>  </p>
  
  <p>Is there any way to tell terraform, <strong>to add the Role to the current list of Roles attached to a policy?</strong></p>
  
  <pre><code>data "aws_iam_policy" "ecsPolicy" {
    arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
  }
  
  resource "aws_iam_policy_attachment" "ecs_task_attach" {
    name       = "${var.apex_environment}_ecsTaskExec"
    roles      = [aws_iam_role.ecs_task_executor_role.name]
    policy_arn = data.aws_iam_policy.ecsPolicy.arn
  }   
  </code></pre>
  
  <p>Creating separate policies to attach to different users would be my last </p>