如何将子网 ID 动态添加到 azure keyvault 网络规则

Question

我需要帮助将所有子网 ID 添加到网络 ACL 列表中。为了使问题简单，我只保留了下面所需的代码。

variable "subnet_names" {
 type = list(string)
 default = ["subnet1","subnet2"]
}

data "azurerm_subnet" "subnet_ids" {
  count = length(var.subnet_names)
  name = var.subnet_names[count.index]
  virtual_network_name = "vnetname"
  resource_group_name = "kvrgname"
}

resource "azurerm_key_vault" "keyvault"{

  network_acls {
    bypass = "AzureServices"
    default_action = Deny
    virtual_network_subnet_ids = [ data.azurerm_subnet.subnet_ids[*].id ]
  }
}

Answer 1

应该是（不需要括号）：

virtual_network_subnet_ids = data.azurerm_subnet.subnet_ids[*].id