test(module): really test the generated access key

main.tftest.hcl

@@ -5,11 +5,10 @@ provider "aws" {
 
 run "main" {
   assert {
-    condition     = output.access_key_id != null
-    error_message = "invalid IAM access key ID"
+    condition     = data.external.main.result.Arn == local.expected_arn
+    error_message = "user ARN mismatch"
+  }
+  module {
+    source = "./test"
   }
 }
-
-variables {
-  name = "tftest-user"
-}