Preconditions and postconditions in Terraform - Mini Project: Build & Apply

Using Preconditions and Postconditions in Terraform

📖 Scenario: You are setting up a simple cloud infrastructure using Terraform. You want to ensure that certain conditions are met before and after creating resources to avoid mistakes and ensure correctness.

🎯 Goal: Build a Terraform configuration that uses precondition and postcondition blocks to validate resource creation rules.

📋 What You'll Learn

Create a variable with a specific value

Add a precondition to check the variable value before resource creation

Create a resource with a tag

Add a postcondition to verify the resource tag after creation

💡 Why This Matters

🌍 Real World

Preconditions and postconditions help prevent mistakes by validating inputs and outputs in infrastructure code before and after deployment.

💼 Career

Cloud engineers use these checks to ensure infrastructure is created only under correct conditions and meets expected configurations, reducing errors and downtime.

1

Create a variable called environment with value production

Write a Terraform variable block named environment and set its default value to "production".

Terraform

# Define a variable named environment with default value "production"
# Your code here

Need a hint?

Use the variable block with default set to "production".

2

Add a precondition to check environment equals production

Add a precondition block inside a terraform block that requires the variable environment to be exactly "production" before applying.

Terraform

variable "environment" {
  type    = string
  default = "production"
}

terraform {
  # Add precondition block here
  # Your code here
}

Need a hint?

Use precondition inside terraform with condition and error_message.

3

Create an AWS S3 bucket resource named my_bucket with tag Environment = production

Add a resource block for aws_s3_bucket named my_bucket. Set the bucket name to "my-unique-bucket-12345" and add a tag with key Environment and value production.

Terraform

variable "environment" {
  type    = string
  default = "production"
}

terraform {
  required_version = ">= 1.2"

  precondition {
    condition     = var.environment == "production"
    error_message = "The environment must be 'production' to proceed."
  }
}

# Add aws_s3_bucket resource named my_bucket with tag Environment=production
# Your code here

Need a hint?

Use resource "aws_s3_bucket" "my_bucket" with bucket and tags map.

4

Add a postcondition to verify the S3 bucket tag Environment is production

Inside the terraform block, add a postcondition that checks the Environment tag of the aws_s3_bucket.my_bucket resource is "production". Use an error message "Bucket tag Environment must be 'production'.".

Terraform

variable "environment" {
  type    = string
  default = "production"
}

terraform {
  required_version = ">= 1.2"

  precondition {
    condition     = var.environment == "production"
    error_message = "The environment must be 'production' to proceed."
  }

  # Add postcondition block here
  # Your code here
}

resource "aws_s3_bucket" "my_bucket" {
  bucket = "my-unique-bucket-12345"

  tags = {
    Environment = "production"
  }
}

Need a hint?

Use postcondition inside terraform with condition and error_message.