allow disable

[tormodmacleod]

it'd be nice to be able to disable the provisioner in certain circumstances. we use it to copy the AMIs to our DR account. however we sometimes create images that are only ever going to be used in the dev environment. for example, we might only want to create an image if we're running on a protected branch in our CICD system

  post-processor "ami-copy" {
    ami_users        = [123456789012]
    role_name        = "ec2-image-backup"
    ensure_available = true
    disable          = var.ci_commit_branch == "main" ? false : true
  }

this would save us having to clean a bunch of images out of our DR account 🙂