29 questions · Dynamic HCL Configuration · All types, answers revealed
What happens if you use a dynamic block with a 'for_each' expression that evaluates to an empty set?
An empty list or set results in no dynamic blocks being created.
Why this answer
If the collection for a dynamic block is empty, the block is not rendered at all in the resulting resource configuration.
You are writing a module that accepts a list of objects. You want to validate that the 'port' attribute in each object is a number. How can you enforce this?
Strictly speaking, type constraints in the variable block are the foundation.
Why this answer
Using the 'type' constraint with an 'object' or 'list(object)' definition allows you to specify the expected type of every attribute.
In a dynamic block, you need to access the current iteration item. What is the default label assigned to the iterator object?
The iterator automatically takes the name of the dynamic block defined.
Why this answer
By default, the iterator name is the same as the name of the dynamic block, unless an 'iterator' argument is explicitly provided.
You want to optionally create an S3 bucket only if a specific variable 'create_bucket' is set to true. Which HCL feature is best for this?
Setting count = var.enabled ? 1 : 0 is the common pattern for optional resource creation.
Why this answer
Conditional expressions using the ternary operator are the standard way to conditionally enable or disable resources by setting count to 0 or 1.
Which TWO of the following are valid uses of the 'for' expression?
Using [] syntax.
Why this answer
for expressions can be used to generate lists (using brackets) or maps (using braces).
Which THREE of the following are valid ways to transform data for Terraform configuration?
Utility function for list transformation.
Why this answer
for expressions, the flatten() function, and the merge() function are standard ways to manipulate data.
Which TWO of the following are valid meta-arguments for managing resource instances?
A core meta-argument for resource instances.
Why this answer
count and for_each are the two primary meta-arguments in Terraform for creating multiple resource instances.
Which TWO of the following functions are most useful for manipulating lists?
Used for joining lists.
Why this answer
flatten() and concat() are essential for managing list structures.
Which THREE of the following represent potential pitfalls when using 'count'?
Forces integer index management.
Why this answer
Issues include index shifts during item removal, inability to use map keys for identification, and rigid structure for varying configurations.
Which THREE of the following are valid HCL collection types?
A core collection type.
Why this answer
list, map, and set are the primary collection types used in HCL.
Which of these is a valid use case for a dynamic block?
Dynamic blocks are designed for nested, repeatable configuration blocks.
Why this answer
Dynamic blocks are specifically intended to generate nested, repeatable blocks within a resource, such as 'ingress' rules in a security group or 'tags' in an instance.
Which TWO of the following statements are correct regarding 'for_each' and state?
Using keys makes resource identity stable.
Why this answer
for_each uses keys which provides stable identities, whereas count uses indices which can cause resource drift if lists change.
Which meta-argument is best for deploying resources that are strictly dependent on the number of items in a configuration?
count is the primary meta-argument for simple integer-based replication.
Why this answer
count is the simplest meta-argument for simple, index-based resource replication where individual resource identity is not critical.
Which TWO of the following are requirements when using a 'dynamic' block?
Required to define the content of the generated block.
Why this answer
A dynamic block requires a 'for_each' argument to define the iteration, and a 'content' block to define the nested structure.
When using for_each on a resource, how do you access the value of the current iteration inside the resource configuration?
each.value provides the current element from the map or set.
Why this answer
The 'each.value' object is the standard way to access the value in the collection currently being processed by for_each.
You are creating a security group in AWS and need to define multiple ingress rules based on a list of port numbers. Which meta-argument is most appropriate to use to create one resource instance per port?
for_each is the standard approach for creating multiple resource instances from a collection of values.
Why this answer
The count meta-argument creates multiple instances based on an integer, while for_each is designed for sets or maps, making it the idiomatic choice for collections like lists of port numbers.
You are iterating over a map using for_each. You need to access the key of the current map element. Which object do you use?
each.key is the correct reference for the map index.
Why this answer
each.key provides the key of the map entry currently being processed during a for_each iteration.
How can you debug the output of a complex 'for' expression in Terraform?
terraform console provides an interactive REPL for testing HCL.
Why this answer
The 'terraform console' command is the standard way to interactively evaluate HCL expressions and debug complex transformations.
When using 'for_each' on a list of strings, what must you do to ensure the configuration is stable?
Converting to a set provides stable keys based on the value content.
Why this answer
Using a list directly with for_each is often unstable if the list order changes. Converting it to a set with toset() ensures each item has a stable key.
Which function is most useful when you have a nested list of objects and want to create a single flat list to iterate over with for_each?
flatten simplifies nested list structures into a single list.
Why this answer
The flatten() function is specifically designed to take nested lists and turn them into a single-level list.
In HCL, how do you handle a scenario where a variable might be null but you need to provide a non-null default value for a resource argument?
coalesce() returns the first non-null argument, making it perfect for defaults.
Why this answer
The coalesce() function is ideal for providing a fallback value if the primary input is null.
Which function allows you to safely access a map value even if the key might not exist?
lookup() is designed to provide a default if a key is missing.
Why this answer
The lookup() function allows you to provide a default value to return if the requested key is not found in the map.
You are attempting to use a conditional expression to set a variable, but the types returned by the true and false results differ. What happens?
Terraform demands that both expressions return the same type.
Why this answer
Terraform requires that both branches of a conditional expression return the same type, otherwise it will throw a type mismatch error during the planning phase.
What is the primary difference between 'count' and 'for_each' regarding state management?
Because count uses integer indices, changing the list order or removing items causes index shifts.
Why this answer
count depends on list order, so removing an item from the middle of the list causes all subsequent resources to be recreated. for_each uses keys, which are stable.
You want to pass a complex object type to a module, but you need to ensure specific attributes are present. How do you define this in the variable block?
The object type constraint enforces both the presence and the type of specific attributes.
Why this answer
The 'object' type constraint allows you to define a schema with specific attributes and their corresponding types.
You have a list of strings that you want to convert into a set to use with for_each. Which function is preferred?
toset converts a list to a set, ideal for stable iteration.
Why this answer
The toset() function is the correct way to convert a list of strings into a set, which is required for for_each to avoid index-based instability.
Which THREE of the following are valid ways to pass data to a module dynamically?
Standard approach.
Why this answer
Passing variables, using for_each in the module block (if supported), or local variable composition are standard.
You are using a dynamic block to define multiple 'tag' blocks inside an AWS resource. The dynamic block is failing because it expects a set of objects but receives a flat list. Which function best prepares your data?
toset converts a list to a set, which is the preferred input for for_each to maintain stable resource indices.
Why this answer
The toset() function converts a list of strings or objects into a set, which is required by for_each to avoid index-based dependencies.
You have a list of objects representing AWS tags. You need to transform this list into a map for use with a for_each argument. Which function should you use?
The for expression is the standard HCL construct for transforming lists into maps for resource iteration.
Why this answer
The for expression is the primary tool for transforming collections, allowing you to iterate over a list and produce a map.
Ready to test yourself?
Try a timed practice session using only Dynamic HCL Configuration questions.