Resource dependencies (implicit) in Terraform - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

Implicit resource dependency in Terraform

Given the following Terraform configuration, which resource will Terraform create first during apply?

Terraform

resource "aws_vpc" "main" {
  cidr_block = "10.0.0.0/16"
}

resource "aws_subnet" "subnet1" {
  vpc_id     = aws_vpc.main.id
  cidr_block = "10.0.1.0/24"
}

resource "aws_instance" "web" {
  subnet_id = aws_subnet.subnet1.id
  ami       = "ami-123456"
  instance_type = "t2.micro"
}

A aws_vpc.main

B aws_subnet.subnet1

C aws_instance.web

D All resources are created simultaneously

💡 Hint

Look at which resource IDs are referenced by others.

Terraform automatically creates resources in the order of their dependencies. Since aws_subnet.subnet1 depends on aws_vpc.main (via vpc_id), and aws_instance.web depends on aws_subnet.subnet1 (via subnet_id), aws_vpc.main is created first.

❓ Architecture

intermediate

Understanding implicit dependencies in Terraform modules

If a Terraform module outputs a resource ID that another resource uses as input, what does this imply about the creation order?

Terraform

module "network" {
  source = "./network"
}

resource "aws_instance" "app" {
  subnet_id = module.network.subnet_id
  ami       = "ami-abc123"
  instance_type = "t3.micro"
}

A aws_instance.app is created before the module resources

B The module resources are created before aws_instance.app

C Both are created simultaneously

D Terraform will throw an error due to circular dependency

💡 Hint

Consider how outputs create dependencies.

Since aws_instance.app uses an output from the module as input, Terraform implicitly creates the module resources first to provide the required value.

❓ security

advanced

Implicit dependency impact on security group rules

Consider these Terraform resources: resource "aws_security_group" "sg" { name = "allow_http" ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } } resource "aws_instance" "web" { ami = "ami-xyz" instance_type = "t2.micro" vpc_security_group_ids = [aws_security_group.sg.id] } What is the effect of the implicit dependency on the security of the deployment?

A Both are created simultaneously, which may cause the instance to have no security group

B The instance is created before the security group, causing a security risk

C Terraform will fail to apply due to missing explicit dependency

D The security group is created before the instance, ensuring the instance has the correct rules applied

💡 Hint

Think about resource references in arguments.

Because aws_instance.web references aws_security_group.sg.id, Terraform creates the security group first, ensuring the instance is launched with the correct security settings.

❓ Configuration

advanced

Terraform implicit dependency with data sources

Given this Terraform snippet: data "aws_ami" "latest" { most_recent = true owners = ["amazon"] filter { name = "name" values = ["amzn2-ami-hvm-*-x86_64-gp2"] } } resource "aws_instance" "example" { ami = data.aws_ami.latest.id instance_type = "t2.micro" } What does Terraform do regarding the order of resource creation?

A Terraform fetches the AMI data before creating the instance

B Terraform creates the instance first, then fetches the AMI data

C Terraform fetches the AMI data and creates the instance simultaneously

D Terraform throws an error because data sources cannot be used as inputs

💡 Hint

Data sources provide information needed before resource creation.

Terraform evaluates data sources before creating dependent resources, so it fetches the AMI ID before launching the instance.

✅ Best Practice

expert

Avoiding implicit dependency pitfalls in complex Terraform configurations

In a complex Terraform setup, you have multiple resources referencing each other indirectly. Which practice helps ensure predictable resource creation order and avoids hidden implicit dependency issues?

A Avoid referencing resource attributes and rely on manual apply order

B Remove all references between resources to prevent dependencies

C Use explicit depends_on blocks to declare dependencies when implicit ones are unclear

D Use random resource names to force Terraform to recreate resources

💡 Hint

Explicit dependencies clarify creation order.

Explicit depends_on blocks help Terraform understand resource order when implicit references are not obvious, preventing race conditions and errors.