Azure – Using list(string) from KeyVault through json loaded in dynamic block terraform

I tried to create an email receiver in the Azure Monitor Action Group for each email address in the list stored in the secret present in the vault using count instead of dynamic foreach and I was able to provision the requirement successfully.

It seems that your scenario does not support using for_each with an object (map) that is derived from a list. This is uncommon, as usually this conversion from a list to a map with indices as keys should be successful. However, there may be some particularities in your situation that trigger this problem.

For this case I suggestcount is a better choice than dynamic foreach for your task of looping through a simple list of email addresses. count is easy to use for lists that have a fixed order and don’t require individual labels for each item.

Before you configure anything, verify that the JSON data in the Azure Key Vault consists of a list of email addresses in this format: ["[email protected]", "[email protected]", ...].

My demo terraform configuration:

provider "azurerm" {
  features {}
}

variable "key_vault_name" {
  description = "The name of the key vault"
  type        = string
}

variable "resource_group_name" {
  description = "The name of the resource group"
  type        = string
}

variable "secret_name" {
  description = "The name of the secret in the key vault"
  type        = string
}

data "azurerm_key_vault" "this" {
  name                = var.key_vault_name
  resource_group_name = var.resource_group_name
}

data "azurerm_key_vault_secret" "secret" {
  name         = var.secret_name
  key_vault_id = data.azurerm_key_vault.this.id
}

resource "azurerm_monitor_action_group" "SIDevelopment" {
  name                = "Test"
  resource_group_name = "demorg-vk"
  short_name          = "Test"


  count = length(jsondecode(data.azurerm_key_vault_secret.secret.value))

  email_receiver {
    name                    = "emailReceiver-${count.index}"
    email_address           = jsondecode(data.azurerm_key_vault_secret.secret.value)[count.index]
    use_common_alert_schema = false
  }
}



output "kv" {
  value     = tolist(jsondecode(data.azurerm_key_vault_secret.secret.value))
  sensitive = true
}

output "string" {
  value     = jsondecode("["[email protected]","[email protected]"]")
  sensitive = true
}

Output: