feat: Support multiple conditions in 'redacted_fields'

Author: uyggnodoow

main.tf

@@ -12239,7 +12239,9 @@ resource "aws_wafv2_web_acl_logging_configuration" "this" {
   resource_arn            = aws_wafv2_web_acl.this.arn
 
   dynamic "redacted_fields" {
-    for_each = var.redacted_fields == null ? [] : [var.redacted_fields]
+    for_each = var.redacted_fields == null ? [] : var.redacted_fields
+    iterator = redacted_fields
+
     content {
       dynamic "single_header" {
         for_each = lookup(redacted_fields.value, "single_header", null) == null ? [] : [lookup(redacted_fields.value, "single_header")]

variables.tf

@@ -83,7 +83,7 @@ variable "log_destination_configs" {
 }
 
 variable "redacted_fields" {
-  type        = map(any)
+  type        = list(any)
   description = "(Optional) The parts of the request that you want to keep out of the logs. Up to 100 redacted_fields blocks are supported."
   default     = null
 }