Mastering Terraform Expressions - Conditional Logic, Iteration, and Collection

Mastering Terraform Expressions - Conditional Logic, Iteration, and Collection

Terraform expressions enable dynamic infrastructure configurations. A conditional expression selects AWS instance types based on environment variables, switching between “t2.micro” and “t3.micro” depending on the value of var.environment.

Why This Matters

Manual repetition in infrastructure code increases error risk and maintenance costs. Terraform expressions reduce redundancy by enabling logic-driven configurations. For example, dynamic blocks automate security group rule creation, avoiding manual duplication of ingress/egress rules. Splat expressions streamline resource attribute collection, such as gathering EC2 instance IDs into a list, which is critical for downstream automation.

Key Insights

• “Conditional expressions reduce environment-specific configuration duplication in Terraform.”
• “Dynamic blocks manage nested resource iterations, like AWS Security Group ingress rules.”
• “Splat expressions retrieve attributes from resource collections, such as aws_instance.*.id.”

Working Example

variable "environment" {
  type    = string
  default = "staging"
}

resource "aws_instance" "example" {
  instance_type = var.environment == "dev" ? "t2.micro" : "t3.micro"
}

resource "aws_security_group" "ingress_rule" {
  dynamic "ingress" {
    for_each = var.ingress_rules
    content {
      from_port   = ingress.value.from_port
      to_port     = ingress.value.to_port
      protocol    = ingress.value.protocol
      cidr_blocks = ingress.value.cidr_blocks
    }
  }
}

locals {
  all_instance_ids = aws_instance.example.*.id
}

output "instances" {
  value = local.all_instance_ids
}

Practical Applications

• Use Case: Conditional expressions for environment-specific资源配置 (e.g., dev/prod instance sizing).
• Pitfall: Overusing dynamic blocks without proper iteration logic can lead to misconfigured security group rules.

References:

• https://dev.to/andylovecloud/day-10-mastering-terraform-expressions-conditional-logic-iteration-and-collection-4igd