Dynamic block syntax in Terraform - Time & Space Complexity

Time Complexity: Dynamic block syntax

O(n)

Understanding Time Complexity

We want to understand how the time to apply Terraform changes grows when using dynamic blocks.

Specifically, how does adding more repeated blocks affect the number of operations Terraform performs?

Scenario Under Consideration

Analyze the time complexity of this Terraform dynamic block example.

resource "aws_security_group" "example" {
  name = "example-sg"

  dynamic "ingress" {
    for_each = var.ingress_rules
    content {
      from_port   = ingress.value.from_port
      to_port     = ingress.value.to_port
      protocol    = ingress.value.protocol
      cidr_blocks = ingress.value.cidr_blocks
    }
  }
}

This creates a security group with multiple ingress rules generated dynamically from a list.

Identify Repeating Operations

Look at what repeats when Terraform applies this configuration.

• Primary operation: Creating or updating each ingress rule block inside the security group.
• How many times: Once for each item in var.ingress_rules.

How Execution Grows With Input

As the number of ingress rules increases, Terraform performs more operations.

Input Size (n)	Approx. API Calls/Operations
10	About 10 ingress rule operations
100	About 100 ingress rule operations
1000	About 1000 ingress rule operations

Pattern observation: The number of operations grows directly with the number of ingress rules.

Final Time Complexity

Time Complexity: O(n)

This means the time to apply changes grows linearly with the number of dynamic blocks.

Common Mistake

[X] Wrong: "Adding more dynamic blocks won't affect apply time much because Terraform handles them all at once."

[OK] Correct: Each dynamic block creates separate resources or settings, so Terraform must process each one individually, increasing apply time.

Interview Connect

Understanding how repeated resource blocks affect deployment time helps you design efficient infrastructure code and explain your choices clearly.

Self-Check

What if we replaced the dynamic block with a fixed number of static blocks? How would the time complexity change?

Practice

1. What is the main purpose of a dynamic block in Terraform?

easy

A. To generate multiple nested blocks from a list or map dynamically

B. To create a new Terraform provider

C. To define variables with default values

D. To execute shell commands during deployment

Solution

1. Step 1: Understand the role of dynamic blocks

   Dynamic blocks allow repeating nested blocks based on a collection like a list or map.

2. Step 2: Compare with other options

   Options A, B, and D describe unrelated Terraform features.

3. Final Answer:

   To generate multiple nested blocks from a list or map dynamically -> Option A

4. Quick Check:

   Dynamic block = repeated nested blocks [OK]

Hint: Dynamic blocks repeat nested blocks from lists/maps [OK]

Common Mistakes:

• Confusing dynamic blocks with variable declarations
• Thinking dynamic blocks create providers
• Assuming dynamic blocks run commands

2. Which of the following is the correct syntax to start a dynamic block named ingress in Terraform?

easy

A. dynamic ingress { for_each = var.rules content { ... } }

B. dynamic(ingress) { for_each = var.rules content { ... } }

C. dynamic "ingress" { for_each = var.rules content { ... } }

D. dynamic { ingress for_each = var.rules content { ... } }

Solution

1. Step 1: Recall dynamic block syntax

   The block must be declared as dynamic "block_name" { ... } with quotes around the block name.

2. Step 2: Check each option

   dynamic "ingress" { for_each = var.rules content { ... } } uses correct syntax with quotes and proper structure; others miss quotes or have wrong syntax.

3. Final Answer:

   dynamic "ingress" { for_each = var.rules content { ... } } -> Option C

4. Quick Check:

   Dynamic block syntax requires quotes around block name [OK]

Hint: Use quotes around block name in dynamic block [OK]

Common Mistakes:

• Omitting quotes around the block name
• Using parentheses instead of braces
• Placing block name outside dynamic keyword

3. Given this Terraform snippet:

dynamic "tag" {
  for_each = {"env" = "prod", "team" = "devops"}
  content {
    key   = tag.key
    value = tag.value
  }
}

What will be the result in the generated resource configuration?

medium

A. No tag blocks generated because map keys are strings

B. A single tag block with key and value set to the entire map

C. Syntax error due to incorrect for_each usage

D. Two tag blocks with keys "env" and "team" and their values

Solution

1. Step 1: Understand for_each with map in dynamic block

   Using a map with for_each creates one nested block per key-value pair.

2. Step 2: Analyze content block usage

   Inside content, tag.key and tag.value refer to each map entry's key and value, creating two blocks.

3. Final Answer:

   Two tag blocks with keys "env" and "team" and their values -> Option D

4. Quick Check:

   Map for_each creates one block per key-value pair [OK]

Hint: Map in for_each creates one block per key-value pair [OK]

Common Mistakes:

• Thinking only one block is created for whole map
• Confusing key and value references inside content
• Assuming syntax error due to map usage

4. Identify the error in this Terraform dynamic block snippet:

dynamic "egress" {
  for_each = var.egress_rules
  content = {
    from_port = egress.value.from
    to_port   = egress.value.to
  }
}

medium

A. The content block should use braces, not an assignment

B. The variable egress is undefined inside the block

C. Missing quotes around "egress" in dynamic block declaration

D. for_each cannot be used with variables

Solution

1. Step 1: Check dynamic block content syntax

   The content must be a block, not an assignment. It should be content { ... }, not content = { ... }.

2. Step 2: Verify other parts

   Variable egress is valid as the iterator, quotes are present, and for_each can use variables.

3. Final Answer:

   The content block should use braces, not an assignment -> Option A

4. Quick Check:

   content must be a block, not an equals assignment [OK]

Hint: Use content { ... } block, not content = { ... } [OK]

Common Mistakes:

• Writing content as an assignment instead of a block
• Assuming iterator variable is undefined
• Forgetting quotes around dynamic block name

5. You want to create multiple network_interface blocks dynamically in an AWS instance resource using a list of maps with keys device_index and subnet_id. Which dynamic block correctly achieves this?

hard

A. dynamic "network_interface" {
for_each = var.interfaces
content {
device_index = network_interface.value.device_index
subnet_id = network_interface.value.subnet_id
}
}

B. dynamic "network_interface" {
for_each = var.interfaces
content {
device_index = each.value.device_index
subnet_id = each.value.subnet_id
}
}

C. dynamic "network_interface" {
for_each = var.interfaces
content {
device_index = network_interface.device_index
subnet_id = network_interface.subnet_id
}
}

D. dynamic "network_interface" {
for_each = var.interfaces
content {
device_index = network_interface.key.device_index
subnet_id = network_interface.key.subnet_id
}
}

Solution

1. Step 1: Identify the iterator variable in dynamic block

   Terraform uses each as the iterator inside dynamic blocks for for_each.

2. Step 2: Check how to access map values

   Use each.value.key_name to access map elements inside content block.

3. Step 3: Evaluate options

   dynamic "network_interface" { for_each = var.interfaces content { device_index = each.value.device_index subnet_id = each.value.subnet_id } } correctly uses each.value.device_index and each.value.subnet_id. Others incorrectly use network_interface or network_interface.key.

4. Final Answer:

   dynamic "network_interface" { for_each = var.interfaces content { device_index = each.value.device_index subnet_id = each.value.subnet_id } } -> Option B

5. Quick Check:

   Use each.value to access map in dynamic block [OK]

Hint: Use each.value inside dynamic content block [OK]

Common Mistakes:

• Using block name as iterator variable
• Using .key instead of .value for map access
• Omitting the each keyword