#terraform-0_12 - August 2019

# Resource 1
tags = merge(
    var.tags,
    map(
      "Name", format("dev-bastion-0%s.${var.domain}",count.index+1),
      "type", "bastion"
    )
  )
  
# Resource 2

tags = merge(
    var.tags,
    map(
      "Name", format("dev-app-0%s.${var.domain}",count.index+1),
      "type", "app"
    )
  )

  dynamic "security_rule" {
    for_each = module.tf-var-globals.wl-trust

    content {
      name = "${local.saname_prefix}-wl-tcp-${count.index}"
      priority = "14${count.index}"
      direction = "Inbound"
      access = "Allow"
      protocol = "Tcp"
      source_port_range = "*"
      destination_port_range = "80"
      source_address_prefix = "${security_rule.value.ip}"
      description = "${security_rule.value.description}"
      destination_address_prefix = "*"
    }
  }

The iterator object  has two attributes:

key is the map key or list element index for the current element. If the for_each expression produces a set value then key is identical to value and should not be used.
value is the value of the current element.

resource "aws_iam_user" "mfa_user" {
  for_each = toset(var.users)
  name = each.value
  force_destroy = true
}

resource "aws_iam_user_group_membership" "mfa" {
  user = aws_iam_user.mfa_user
  groups = [
    aws_iam_group.mfa_group.name
  ]
  depends_on = [aws_iam_user.mfa_user]
}

resource "aws_iam_user" "mfa_user" {
  for_each = toset(var.users)
  name = each.value
  force_destroy = true
}

resource "aws_iam_user_group_membership" "mfa" {
  for_each = toset(var.users)
  user = aws_iam_user.mfa_user[each.key].name
  groups = [
    aws_iam_group.mfa_group.name
  ]
  depends_on = [aws_iam_user.mfa_user]
}