#terraform - February 2020

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

on ../outputs.tf line 7, in output "distribution_cross_account_role_arn":
   7:   count       = var.aws_env == "prod" ? 1 : 0

An argument named "count" is not expected here.

output "slack_channel" {
  value = var.enabled ? var.slack_channel : "UNSET"
}

locals {
  aws_env = "prod"
}

output "test" {
   value = local.aws_env == "prod" ? "This is prod" : "UNSET"
}

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

test = This is prod

resource "aws_dynamodb_table" "table" {
    
  for_each = toset(var.table_regions)
  
  provider = aws.each.key

The "count" value depends on resource attributes that cannot be determined
until apply, so Terraform cannot predict how many instances will be created.

The "for_each" value depends on resource attributes that cannot be determined
until apply, so Terraform cannot predict how many instances will be created.

# download the state file
terraform state pull > local_state.out

# change the state file
terraform state mv -state=local_state.out module.network.module.vpn1.azurerm_subnet.vpn1 module.network.azurerm_subnet.vpn1

Move "module.network.module.vpn1.azurerm_subnet.vpn1" to "module.network.azurerm_subnet.vpn1"
Successfully moved 1 object(s).

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

 apply_immediately          = true

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

resource "aws_api_gateway_domain_name" "domain" {
  certificate_arn = var.certificate_arn
  regional_certificate_arn = ""

data "terraform_remote_state" "eks" {
  backend   = "s3"
  workspace = terraform.workspace
  config = {
    bucket               = "my-state-bucket"
    workspace_key_prefix = "eks"
    key                  = "terraform.tfstate"
    region               = var.region
  }
}

data "terraform_remote_state" "dns" {
  backend   = "s3"
  workspace = terraform.workspace
  config = {
    bucket               = "my-state-bucket"
    workspace_key_prefix = "dns"
    key                  = "terraform.tfstate"
    region               = var.region
  }
}

locals {
  eks_cluster_identity_oidc_issuer = data.terraform_remote_state.eks.outputs.eks_cluster_identity_oidc_issuer
  zone_id                          = data.terraform_remote_state.dns.outputs.zone_id
}

I need to deploy multiple lambda across multiple accounts.
I use federated login to access aws.
Terraform is in github.
I need to know if there is a way to deploy module based on conditional basis (probably var.env=prod/stage/dev) instead of using multiple branches for each account.

data "aws_api_gateway_rest_api" "api" {
  name = var.api_name
}

resource "aws_api_gateway_domain_name" "domain" {
  certificate_arn          = data.aws_api_gateway_rest_api.api.endpoint_configuration == "EDGE" ? var.certificate_arn : null
  regional_certificate_arn = data.aws_api_gateway_rest_api.api.endpoint_configuration == "REGIONAL" ? var.certificate_arn : null
  domain_name              = var.domain_name

  tags = var.tags
}

Error: Error creating API Gateway Domain Name: BadRequestException: A certificate was not provided for the endpoint type EDGE.

value       = var.aws_env == "prod" ? aws_iam_role.asset_distribution_cross_account.*.arn : "valid only for prod"

  <networkConnectors>
    %{~ for item in element(local.mq_network_brokers, count.index) ~}
    <networkConnector name="connector" userName="commonUser" uri="static:(${item})"/>
    %{~ endfor ~}
  </networkConnectors>

how do you impose the hierarchy with git though

also, and possibly lastly, what do you do when you have multiple AWS accounts/environment?

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

Generated Mon, 24 Feb 2020 17:21:23 GMT
Request ID: _Gnok9D5N1_Cw1Lu7Ld44vXH78Pwj-l26vxQyWbUC6GzDIhMZxhp0w==

$ terraform workspace list
dev
uat
prod

resource "aws_s3_bucket_object" "object" {
  for_each      = fileset(var.directory, "**")
  ....
}

output "objects" {
  value = fileset(var.directory, "**")
}