Terraform：在列表内循环，这是 for_each 循环的一部分

Question

您好 Terraform 大师，

这是我的工作代码：

## Resource Definition ##


module "iam_group_with_custom_policies_looptest" {
  source   = "./modules/iam-group-with-policies"
  for_each = var.user_groups
  name     = each.key

  group_users = each.value.user_list

  custom_group_policies = [
    {
      name   = each.value.policy_name
      policy = jsonencode(lookup(var.actions, "${each.value.policy_ref}"))
    },
  ]
}

## Module Definition ##


resource "aws_iam_policy" "custom" {
  count = length(var.custom_group_policies)

  name        = var.custom_group_policies[count.index]["name"]
  policy      = var.custom_group_policies[count.index]["policy"]
  description = lookup(var.custom_group_policies[count.index], "description", null)

  tags = var.tags
}

---

## variable definition ##

variable "users" {
  description = "Map of user names to configuration."
  type        = map(any)
}

variable "user_groups" {
  description = "Map of user groups and associated custom policies"
  type        = map(any)
}

variable "actions" {
  description = "Map of user groups and associated custom policies"
  type        = map(any)
}

---

## Input vars as json ##

{
    "users":
        {
        "user8": {
            "create_iam_user_login_profile": false,
            "create_iam_access_key": false
            },
        "user9": {
            "create_iam_user_login_profile": false,
            "create_iam_access_key": false
            }
        },
    "user_groups": 
        {
        "EC2_viewer": {
          "policy_name": "custom_ec2",
          "user_list": ["user8", "user9"],
          "policy_ref": "ec2_viewer"
            }
        }
}

---

{
    "actions":{
        "s3_viewer":{
            "Version" : "2012-10-17",
            "Statement" : [{
                "Action" : [
                    "s3:ListAllMyBuckets"
                             ],
                "Effect" : "Allow",
                "Resource" : "*"
                        }]
                    },
        "ec2_viewer":{
            "Version" : "2012-10-17",
            "Statement" : [{
                "Action" : [
                    "ec2:DescribeFastLaunchImages",
                    "ec2:DescribeInstances"
                            ],
                "Effect" : "Allow",
                "Resource" : "*"
                        }]
                    }
        }
}

现在我在扩展此代码时遇到问题，它不支持我想将另一个 object 添加到资源定义中名为“custom_group_policies”的列表中的情况。

  custom_group_policies = [
    {
      name   = each.value.policy_name
      policy = jsonencode(lookup(var.actions, "${each.value.policy_ref}"))
    },
  ]

如果我想将多个策略附加到同一个组，则需要这样做，如果我在变量定义中的“policy_ref”和“policy_name”中添加更多对象，就会发生这种情况：

    "user_groups": 
        {
        "EC2_viewer": {
          "policy_name": "custom_ec2",
          "user_list": ["user8", "user9"],
          "policy_ref": "ec2_viewer"
            }
        }

有人可以帮助我或向我展示如何在 for_each 循环促进的列表中实现对 policy_name 和 policy_ref 的循环。