Here's my problem: I'm trying to dump security groups from an environment containing r

Thank you for reporting issue <img class="emoji" title=":octocat:" alt=":octocat:" src

<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/us

Thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-u

[RFC] resources tagged by cloudformation about terraforming HOT 3 CLOSED

dtan4 commented on August 31, 2024

[RFC] resources tagged by cloudformation

from terraforming.

Comments (3)

dtan4 commented on August 31, 2024

Thank you for reporting issue

The document Tagging Your Amazon EC2 Resources - Amazon Elastic Compute Cloud says:

Generally allowed characters are: letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - = . _ : / @.

So we sometimes want to use ':' as tag name, which is not allowed to HCL parser.

It seems to be good to quote the key.
Quoted name is valid in Terraform.

resource "aws_security_group" "hoge" {
  tags {
    "hoge:fuga" = "fuga"
  }
}

$ terraform plan
The Terraform execution plan has been generated and is shown below.
Resources are shown in alphabetical order for quick scanning. Green resources
will be created (or destroyed and then created if an existing resource
exists), yellow resources are being changed in-place, and red resources
will be destroyed.

Note: You didn't specify an "-out" parameter to save this plan, so when
"apply" is called, Terraform can't guarantee this is what will execute.

+ aws_security_group.hoge
    description:    "" => "Managed by Terraform"
    egress.#:       "" => "<computed>"
    ingress.#:      "" => "<computed>"
    name:           "" => "<computed>"
    owner_id:       "" => "<computed>"
    tags.#:         "" => "1"
    tags.hoge:fuga: "" => "fuga"
    vpc_id:         "" => "<computed>"