Terraform中如何关联子网与EIP批量创建AWS NAT网关？

报错原因 #

你用for_each创建了aws_eip.eip资源，这会让它成为映射（map）类型的资源集合，而非列表。而aws_eip.eip.*.allocation_id是针对count创建的列表型资源的语法，因此会触发"This object does not have an attribute named 'allocation_id'"错误。

解决方案 #

要实现子网与EIP的一一对应，推荐统一用for_each通过明确的关联键（比如子网名称、可用区）来迭代，避免依赖不确定的列表顺序。

方案1：通过名称/标识关联（推荐） #

假设你的var.vpc.public_subnets和var.vpc.eip都包含name字段，且同名的子网与EIP需要配对：

1. 先将子网列表转为映射：

locals {
  public_subnets_map = { for subnet in var.vpc.public_subnets : subnet.name => subnet }
}

2. 修改子网资源为for_each迭代：

resource "aws_subnet" "public_subnet" {
  for_each = local.public_subnets_map

  vpc_id            = aws_vpc.vpc.id
  availability_zone = each.value.availability_zone
  cidr_block        = each.value.cidr_block
  tags              = each.value.tags
}

3. NAT网关通过名称关联子网与EIP：

resource "aws_nat_gateway" "ngw" {
  for_each = local.public_subnets_map

  allocation_id = aws_eip.eip[each.key].allocation_id
  subnet_id     = aws_subnet.public_subnet[each.key].id
}

方案2：通过可用区关联 #

如果子网与EIP是按可用区配对的，可用AZ作为关联键：

locals {
  public_subnets_by_az = { for subnet in var.vpc.public_subnets : subnet.availability_zone => subnet }
  eips_by_az = { for eip in var.vpc.eip : eip.availability_zone => eip }
}

resource "aws_subnet" "public_subnet" {
  for_each = local.public_subnets_by_az

  vpc_id            = aws_vpc.vpc.id
  availability_zone = each.key
  cidr_block        = each.value.cidr_block
  tags              = each.value.tags
}

resource "aws_eip" "eip" {
  for_each = local.eips_by_az

  vpc  = true
  tags = each.value.tags
}

resource "aws_nat_gateway" "ngw" {
  for_each = local.public_subnets_by_az

  allocation_id = aws_eip.eip[each.key].allocation_id
  subnet_id     = aws_subnet.public_subnet[each.key].id
}

方案3：兼容现有count写法（不推荐） #

如果暂时不想修改子网的count写法，可将EIP的映射转为列表，但要注意列表顺序不保证与子网对应，可能导致配对错误：

resource "aws_nat_gateway" "ngw" {
  count = length(var.vpc.public_subnets)

  allocation_id = values(aws_eip.eip)[count.index].allocation_id
  subnet_id     = aws_subnet.public_subnet[count.index].id
}

内容的提问来源于stack exchange，提问作者zerros