terraform.resources() returns empty config body

[f-marschall]

Issue: Empty Config Body for Some Azure API Management Resources

Hello,

I use this project to validate Azure API Management configurations.

How can I retrieve the config body for the resources that currently return empty?

Versions

• OPA: 0.8.0
• TFLint: 0.55.1

Problem

Some resources return an empty config body:

• azurerm_api_management_product
• azurerm_api_management_product_api
• azurerm_api_management_api_policy

Other resources like:

• azurerm_api_management_api
• azurerm_api_management_named_value

return a populated config body.

All resources with terraform.resources("*", {"name": "string"}, {"expand_mode": "none"}):

{
  "config": {
    
  },
  "decl_range": {
    "end": {
      "byte": 965,
      "column": 52,
      "line": 20
    },
    "filename": "product_group.tf",
    "start": {
      "byte": 914,
      "column": 1,
      "line": 20
    }
  },
  "name": "product",
  "type": "azurerm_api_management_product"
},
{
  "config": {
    
  },
  "decl_range": {
    "end": {
      "byte": 1311,
      "column": 60,
      "line": 29
    },
    "filename": "product_group.tf",
    "start": {
      "byte": 1252,
      "column": 1,
      "line": 29
    }
  },
  "name": "product_api",
  "type": "azurerm_api_management_product_api"
},
{
  "config": {
    "name": {
      "ephemeral": false,
      "range": {
        "end": {
          "byte": 102,
          "column": 56,
          "line": 2
        },
        "filename": "api.tf",
        "start": {
          "byte": 73,
          "column": 27,
          "line": 2
        }
      },
      "sensitive": false,
      "unknown": false,
      "value": "felix-PetStore-v1"
    }
  },
  "decl_range": {
    "end": {
      "byte": 43,
      "column": 44,
      "line": 1
    },
    "filename": "api.tf",
    "start": {
      "byte": 0,
      "column": 1,
      "line": 1
    }
  },
  "name": "api",
  "type": "azurerm_api_management_api"
},
{
  "config": {
    
  },
  "decl_range": {
    "end": {
      "byte": 761,
      "column": 54,
      "line": 19
    },
    "filename": "api.tf",
    "start": {
      "byte": 708,
      "column": 1,
      "line": 19
    }
  },
  "name": "policy",
  "type": "azurerm_api_management_api_policy"
},
{
  "config": {
    "name": {
      "ephemeral": false,
      "range": {
        "end": {
          "byte": 1186,
          "column": 51,
          "line": 28
        },
        "filename": "api.tf",
        "start": {
          "byte": 1160,
          "column": 25,
          "line": 28
        }
      },
      "sensitive": false,
      "unknown": false,
      "value": "felix-PetStore"
    }
  },
  "decl_range": {
    "end": {
      "byte": 1132,
      "column": 63,
      "line": 27
    },
    "filename": "api.tf",
    "start": {
      "byte": 1070,
      "column": 1,
      "line": 27
    }
  },
  "name": "versionset",
  "type": "azurerm_api_management_api_version_set"
},
{
  "config": {
    "name": {
      "ephemeral": false,
      "range": {
        "end": {
          "byte": 119,
          "column": 54,
          "line": 2
        },
        "filename": "namedvalues.tf",
        "start": {
          "byte": 90,
          "column": 25,
          "line": 2
        }
      },
      "sensitive": false,
      "unknown": false,
      "value": "felix-backend-url"
    }
  },
  "decl_range": {
    "end": {
      "byte": 62,
      "column": 63,
      "line": 1
    },
    "filename": "namedvalues.tf",
    "start": {
      "byte": 0,
      "column": 1,
      "line": 1
    }
  },
  "name": "nv_backend_url",
  "type": "azurerm_api_management_named_value"
},
{
  "config": {
    "name": {
      "ephemeral": false,
      "range": {
        "end": {
          "byte": 520,
          "column": 53,
          "line": 12
        },
        "filename": "namedvalues.tf",
        "start": {
          "byte": 492,
          "column": 25,
          "line": 12
        }
      },
      "sensitive": false,
      "unknown": false,
      "value": "felix-backend-pw"
    }
  },
  "decl_range": {
    "end": {
      "byte": 464,
      "column": 62,
      "line": 11
    },
    "filename": "namedvalues.tf",
    "start": {
      "byte": 403,
      "column": 1,
      "line": 11
    }
  },
  "name": "nv_backend_pw",
  "type": "azurerm_api_management_named_value"
}

.tf resource without config body:

resource "azurerm_api_management_product" "product" {
  product_id            = "your-product"
  api_management_name   = module.core_module.apim.name
  resource_group_name   = module.core_module.rgapim.name
  display_name          = "${local.prefix}-your-product"
  subscription_required = true
  published             = true
}

.tf resource with config body:

resource "azurerm_api_management_named_value" "nv_backend_url" {
  name                = "${local.prefix}-backend-url"
  api_management_name = module.core_module.apim.name
  resource_group_name = module.core_module.rgapim.name
  display_name        = "${local.prefix}-backend-url"
  secret              = false
  value               = var.backend_url
  tags                = [local.prefix]
}

[bendrucker]

The "empty" resources don't have a name attribute. The "populated" ones do. You need to provide a valid schema to decode a resource's attributes:

https://github.com/terraform-linters/tflint-ruleset-opa/blob/main/docs/functions.md#terraformresources

All schema attributes are optional and so you'll just get an empty object if none of your schema attributes can be decoded from what's declared in your TF config.

[f-marschall]

Thank you!
I should've taken a break :)