Terraform:如何获得资源数组的数组/列表

Question

如何为用for_each创建的资源获取ARN的列表/数组？

# DynamoDB
resource "aws_dynamodb_table" "terraform_state" {
  for_each = var.aws_shared_accounts

  name           = "${each.key}-terraform-state"
  read_capacity  = 5
  write_capacity = 5
  hash_key       = "LockID"
  attribute {

resource "aws_iam_role" "infra_github_role" {
  name = "TerraformBackendRole"

  inline_policy {
    name = "TerrafomBackendPolicy"

    policy = jsonencode({
      Version = "2012-10-17"
      Statement = [
        {
          Action = "*"
          Effect = "Allow"
          Resource = [
            concat(
              [aws_s3_bucket.terraform_bucket.arn, "${aws_s3_bucket.terraform_bucket.arn}/*"],
              aws_dynamodb_table.terraform_state[*].arn
            )
          ]
        },
      ]
    })
  }
}

如果没有aws_iam_role，我可以运行terraform plan并查看资源

# aws_dynamodb_table.terraform-state["main"] will be created
  + resource "aws_dynamodb_table" "terraform-state" {

# aws_dynamodb_table.terraform-state["main-dev"] will be created
  + resource "aws_dynamodb_table" "terraform-state" {

添加aws_iam_role后收到的错误

Error: Unsupported attribute

  on 03-iam.tf line 16, in resource "aws_iam_role" "infra_github_role":
  16:               aws_dynamodb_table.terraform_state[*].arn

Answer 1

由于您使用了for_each，要获得arn值，您应该这样做：

values(aws_dynamodb_table.terraform_state)[*].arn