Honestly one of the most impactful suggestions I can make to other DevOps types is this.

Terraform is shit. A declarative syntax is both unnecessarily restrictive and overly verbose. You can get logic in there, but it's a hack. Forget about it.

Try Pulumi.

The providers are mostly generated from Terraform, so there's feature parity. But what changes is that you use a real language with real logic. Go, TypeScript, Python. There may be more.

It's the absolute dog's bollocks.