Скачать или смотреть Manipulating Local Variables in Terraform: Simplifying AWS SSO Managed Policies

Learn how to effectively manage local variables in Terraform to create dynamic AWS SSO managed policies with ease.
---
This video is based on the question https://stackoverflow.com/q/71264510/ asked by the user 'JimmyPop13' ( https://stackoverflow.com/u/7080252/ ) and on the answer https://stackoverflow.com/a/71266613/ provided by the user 'Matthew Schuchard' ( https://stackoverflow.com/u/5343387/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: Terraform - Manipulate local variables

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/l...
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
Manipulating Local Variables in Terraform: Simplifying AWS SSO Managed Policies

Managing AWS resources efficiently often requires configuration management tools like Terraform. However, structuring complex variable configurations can sometimes bog down your workflow, especially when dealing with multiple resource attachments. In this guide, we will address a common issue: how to manipulate local variables in Terraform to generate multiple AWS SSO managed policies dynamically.

The Problem

In a typical scenario, you may want to set up numerous aws_ssoadmin_managed_policy_attachments for different roles, such as admin and auditor. The initial configuration may utilize local variables to define roles and their associated managed policy names, leading to a situation where you might need to update these variables frequently. Doing so manually could be tedious, particularly as the number of roles expands.

For instance, you might start with something like this:

[[See Video to Reveal this Text or Code Snippet]]

To transform these variables into a format suitable for iterating through them and creating resources, you could use a for_each loop within Terraform. The output from this configuration may resemble:

[[See Video to Reveal this Text or Code Snippet]]

The Desired Output

What you want is to utilize a list of managed policy names (e.g., multiple policies for admin), and loop through them to generate a suitable output, like this:

[[See Video to Reveal this Text or Code Snippet]]

The Solution

To achieve your goal more efficiently, we recommend simplifying your variable structure and using sets to handle multiple managed policy names. This will eliminate redundancy and streamline your configurations significantly.

Step 1: Simplifying the Role Definition

Instead of defining each managed policy name as a separate string, you can define roles using a set, like so:

[[See Video to Reveal this Text or Code Snippet]]

Using the toset function helps avoid duplicates and allows for a cleaner iteration over policy names.

Step 2: Streamlining the For Loop

Next, you can improve your for loop to dynamically create the policy mapping:

[[See Video to Reveal this Text or Code Snippet]]

Step 3: Final Output Structure

The output structure should now reflect the dynamic mapping as required, yielding results similar to the desired output mentioned above. The use of the set type ensures that each managed policy is unique, making the configuration cleaner and easier to use in the for_each meta-argument.

[[See Video to Reveal this Text or Code Snippet]]

Conclusion

By structuring your local variables efficiently and utilizing Terraform's functional capabilities, you can significantly simplify the management of AWS SSO policies. This enhancement saves you time and minimizes the potential for errors due to hardcoded strings. Whether you are scaling up roles or adjusting policy names, these strategies help keep your Terraform configurations dynamic and maintainable.

With this approach, you’ll find that manipulating local variables in Terraform can become a straightforward and efficient endeavor, allowing you to focus more on building and managing your infrastructure instead of getting caught up in complex variable structures.