Describe the bug

we have terraform code for key vault (Azure) in which object Id is string for access policies . but wanted to give as array i.e multiple user id (object id) in single object id.

Steps To Reproduce the issue.

main.tf :

resource "azurerm_key_vault" "example" {
name = "examplekeyvault"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
enabled_for_disk_encryption = true
tenant_id = data.azurerm_client_config.current.tenant_id
soft_delete_retention_days = 7
purge_protection_enabled = false

sku_name = "standard"

dynamic "access_policy" {
  for_each = var.access_policies
  content {
    tenant_id = data.azurerm_client_config.current.tenant_id
    object_id = access_policy.value["object_id"]
    secret_permissions = access_policy.value["secret_permissions"]
    key_permissions = access_policy.value["key_permissions"]

}}

variables.tf:

variable "access_policies" {
type = set(
object({
object_id = string,
secret_permissions = set(string),
key_permissions = set(string)
 })
)
}

keyvault > terragrunt.hcl :

input ={
access_policies = [

{ object_id = "xyz", secret_permissions = ["Get","Set"], key_permissions = ["Get"] },
{ object_id = "abc", secret_permissions = ["Get"], key_permissions = ["Get"] } ]

above code is working fine

Expecting behavior as below …

i want to keep object id as array and secret permission and key permission in 1 line …something like below which is not working even if keep object_id = set(string) in variables.tf

{ object_id = "xyz","abc" , secret_permissions = ["Get","Set"], key_permissions = ["Get"] },

in fact i wanted to keep this object ids as common in global_var.hcl file so that all environment can use have same object_id rather than local terragrunt file.

===================================================================

i tried with set(string) for object id in varaibles.tf file as below , but still issue exist.

ERROR – object_id must be string

variables.tf:

variable "access_policies" {
type = set(
object({
object_id = set(string),
secret_permissions = set(string),
key_permissions = set(string)
})
)
}