AWS provider Dynamic HCL Configuration Practice Question
You are creating a security group in AWS and need to define multiple ingress rules based on a list of port numbers. Which meta-argument is most appropriate to use to create one resource instance per port?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
for_each
The count meta-argument creates multiple instances based on an integer, while for_each is designed for sets or maps, making it the idiomatic choice for collections like lists of port numbers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
instance_count
Why it's wrong here
This is not a valid Terraform meta-argument.
- ✗
count
Why it's wrong here
While count can work with index lookups, for_each is specifically designed for collections.
- ✗
dynamic
Why it's wrong here
Dynamic blocks are for nested resource structures, not top-level resource instances.
- ✓
for_each
Why this is correct
for_each is the standard approach for creating multiple resource instances from a collection of values.
About these practice questions
Courseiva writes every AWS provider question from scratch — 193 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official HashiCorp exam blueprint
This AWS provider practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AWS provider exam.