Data source dependencies in Terraform - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to reference the AWS VPC data source.

Terraform

data "aws_vpc" "main" {
  id = [1]
}

Drag options to blanks, or click blank then click option'

Aaws_vpc.main.id

Bvar.vpc_id

Cvpc-123456

Dlocal.vpc_id

Attempts:

3 left

💡 Hint

Common Mistakes

Using the data source name instead of a variable.

Hardcoding the VPC ID directly in the code.

The id attribute should reference a variable holding the VPC ID, such as var.vpc_id.

2fill in blank

medium

Complete the code to create a subnet using the VPC ID from the data source.

Terraform

resource "aws_subnet" "example" {
  vpc_id = [1]
  cidr_block = "10.0.1.0/24"
}

Drag options to blanks, or click blank then click option'

Alocal.vpc_id

Bvar.vpc_id

Caws_vpc.main.id

Ddata.aws_vpc.main.id

Attempts:

3 left

💡 Hint

Common Mistakes

Using a variable instead of the data source.

Referencing the resource instead of the data source.

The subnet's vpc_id should reference the ID from the data source: data.aws_vpc.main.id.

3fill in blank

hard

Fix the error in the data source dependency to correctly get the subnet IDs.

Terraform

data "aws_subnet_ids" "selected" {
  vpc_id = [1]
}

Drag options to blanks, or click blank then click option'

Adata.aws_vpc.main.id

Bvar.vpc_id

Clocal.vpc_id

Daws_vpc.main.id

Attempts:

3 left

💡 Hint

Common Mistakes

Omitting the data. prefix.

Using a variable instead of the data source.

The vpc_id must reference the data source with data.aws_vpc.main.id to ensure proper dependency.

4fill in blank

hard

Fill both blanks to create a security group that depends on the VPC data source.

Terraform

resource "aws_security_group" "example" {
  name        = "example-sg"
  description = "Example security group"
  vpc_id      = [1]

  ingress {
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    cidr_blocks = [[2]]
  }
}

Drag options to blanks, or click blank then click option'

Adata.aws_vpc.main.id

B"0.0.0.0/0"

Cvar.vpc_id

D"10.0.0.0/16"

Attempts:

3 left

💡 Hint

Common Mistakes

Using a variable instead of the data source for VPC ID.

Not quoting the CIDR block string.

The vpc_id should come from the data source data.aws_vpc.main.id. The ingress cidr_blocks should allow traffic from "0.0.0.0/0" for public access.

5fill in blank

hard

Fill all three blanks to output the subnet IDs from the data source with a condition.

Terraform

output "public_subnet_ids" {
  value = [for id in [1] : id if [2](id, [3])]
}

Drag options to blanks, or click blank then click option'

Adata.aws_subnet_ids.selected.ids

Bstarts_with

C"subnet-"

Dvar.subnet_ids

Attempts:

3 left

💡 Hint

Common Mistakes

Using a variable instead of the data source for subnet IDs.

Incorrect syntax for the filter condition.

The output iterates over subnet IDs from the data source data.aws_subnet_ids.selected.ids, filtering IDs that start with "subnet-" using the starts_with function.

Practice

1. What is the main purpose of using data source dependencies in Terraform?

easy

A. To fetch existing resource information before creating new resources

B. To delete resources automatically after creation

C. To speed up Terraform plan execution by skipping resources

D. To create duplicate resources with the same configuration

Solution

1. Step 1: Understand data source role

   Data sources in Terraform are used to read information about existing resources outside Terraform or created by other means.

2. Step 2: Identify dependency purpose

   Dependencies ensure Terraform fetches this existing info before creating or modifying other resources that rely on it.

3. Final Answer:

   To fetch existing resource information before creating new resources -> Option A

4. Quick Check:

   Data source dependencies = fetch info first [OK]

Hint: Data sources get info before resource creation [OK]

Common Mistakes:

• Thinking data sources create or delete resources
• Confusing dependencies with resource lifecycle
• Assuming data sources speed up plans by skipping

2. Which syntax correctly adds an explicit dependency on a data source named aws_vpc.main in a resource block?

easy

A. depends_on = {aws_vpc.main}

B. depends_on = aws_vpc.main

C. depends_on = ["aws_vpc.main"]

D. depends_on = [aws_vpc.main]

Solution

1. Step 1: Recall depends_on syntax

   Terraform expects depends_on to be a list of resource or data source references without quotes.

2. Step 2: Analyze options

   depends_on = [aws_vpc.main] uses a list with the correct reference syntax. depends_on = aws_vpc.main misses list brackets. depends_on = ["aws_vpc.main"] uses quotes making it a string, not a reference. depends_on = {aws_vpc.main} uses braces which is invalid.

3. Final Answer:

   depends_on = [aws_vpc.main] -> Option D

4. Quick Check:

   depends_on requires list of references [OK]

Hint: Use square brackets and no quotes for depends_on [OK]

Common Mistakes:

• Using quotes around resource names
• Omitting square brackets for depends_on
• Using curly braces instead of square brackets

3. Given this Terraform snippet:

data "aws_ami" "example" {
  most_recent = true
  filter {
    name   = "name"
    values = ["amzn2-ami-hvm-*-x86_64-gp2"]
  }
}

resource "aws_instance" "web" {
  ami           = data.aws_ami.example.id
  instance_type = "t2.micro"
}

What happens if the data source aws_ami.example fails to find a matching AMI?

medium

A. Terraform will skip the instance creation silently

B. Terraform will create the instance with a default AMI

C. Terraform plan will fail with an error before creating the instance

D. Terraform will retry the data source until it finds an AMI

Solution

1. Step 1: Understand data source failure behavior

   If a data source cannot find the requested resource, Terraform plan fails with an error because it cannot resolve the value.

2. Step 2: Check resource dependency

   The resource depends on the data source's output for the AMI ID, so without it, resource creation cannot proceed.

3. Final Answer:

   Terraform plan will fail with an error before creating the instance -> Option C

4. Quick Check:

   Data source failure = plan error [OK]

Hint: Missing data source value causes plan failure [OK]

Common Mistakes:

• Assuming default values are used automatically
• Thinking Terraform retries data sources
• Believing resource creation skips silently

4. You have this Terraform configuration:

data "aws_subnet" "selected" {
  filter {
    name   = "tag:Name"
    values = ["my-subnet"]
  }
}

resource "aws_instance" "app" {
  ami           = "ami-123456"
  instance_type = "t2.micro"
  subnet_id     = data.aws_subnet.selected.id
  depends_on    = [aws_instance.app]
}

What is the problem with this configuration?

medium

A. The resource depends_on itself causing a circular dependency

B. The data source filter syntax is invalid

C. The subnet_id should not use data source references

D. The instance_type is not a valid type

Solution

1. Step 1: Analyze depends_on usage

   The resource aws_instance.app declares depends_on referencing itself, which creates a circular dependency.

2. Step 2: Understand circular dependency impact

   Circular dependencies cause Terraform to fail planning or applying because it cannot resolve resource order.

3. Final Answer:

   The resource depends_on itself causing a circular dependency -> Option A

4. Quick Check:

   depends_on self-reference = circular dependency error [OK]

Hint: Avoid depends_on referencing the same resource [OK]

Common Mistakes:

• Confusing data source filter syntax as error
• Thinking subnet_id cannot use data sources
• Assuming instance_type is invalid without checking

5. You want to create an AWS security group that allows inbound traffic only from instances in a specific subnet fetched via a data source. Which approach correctly ensures Terraform creates the security group only after the subnet data is fetched?

hard

A. Use depends_on = [data.aws_subnet.target] in the security group resource

B. No need for depends_on; Terraform infers dependency from data source usage

C. Create the security group first, then fetch the subnet data source

D. Use a null_resource to delay security group creation

Solution

1. Step 1: Understand implicit dependencies

   When a resource uses a data source attribute (like subnet ID), Terraform automatically creates a dependency to fetch data first.

2. Step 2: Evaluate explicit depends_on necessity

   Explicit depends_on is not needed unless the dependency is indirect or complex; here, implicit dependency suffices.

3. Final Answer:

   No need for depends_on; Terraform infers dependency from data source usage -> Option B

4. Quick Check:

   Data source usage creates implicit dependency [OK]

Hint: Data source references create implicit dependencies [OK]

Common Mistakes:

• Adding unnecessary depends_on for direct data source use
• Creating resources in wrong order ignoring implicit dependencies
• Using null_resource unnecessarily