Create Secrets Manager replicas in multiple regions

Terraform Providers AWS
1

I am trying to create a Secrets Manager Secret with replicas in multiple regions, and all examples I’ve seen only replicate to a single region. Is this possible with aws_secretsmanager_secret?

The region argument only accepts a string, not a list. I’ve also tried a for_each loop using a variable set of regions, but this leads to duplicate secrets failing to be created in my home region.

resource "aws_secretsmanager_secret" "master" {
  for_each = var.other_regions
  name = "SecretName"
  kms_key_id = aws_kms_key.secret-key.key_id
  replica {
    kms_key_id = aws_kms_replica_key.secret-replica-key[each.key].key_id
    region = each.key
  }
}
2

Solved it with a dynamic block:

resource "aws_secretsmanager_secret" "master" {
  name = "SecretName"
  kms_key_id = aws_kms_key.secret-key.key_id
  region = "us-east-1"
  dynamic "replica" {
    for_each = var.other_regions
    content {
      kms_key_id = aws_kms_key.secret-key.key_id
      region = replica.value
    }
  }
}