When validating an input variable of a collection type, we typically want to write a validation rule that tests if something is true for each value within the collection, rather than true of the collection as a whole. You can write a "for each" sort of condition using Terraform's for expressions. If you are using Terraform v0.14 or later then you ...


Not technically, I understand your need to create and destroy EC2 instances, whether it's done via automation or not. About having permissions at the security group level, this can often be limited to viewing only the resource, as it is a networking firewall resource, usually who manages these objects are SDN or NaaS

Only top voted, non community-wiki answers of a minimum length are eligible