Latest version of terraform is doing a better job of validation, and spots that match is an unknown function. Unfortunately because it's masked with can, the message is still cryptic (it displays the error_message rather than the internal "Call to unknown function").
Fixed the uses of match to regex. Also, terraform's regex flavour does not support lookarounds, so have flipped the domain check.
Latest version of terraform is doing a better job of validation, and spots that
matchis an unknown function. Unfortunately because it's masked withcan, the message is still cryptic (it displays theerror_messagerather than the internal "Call to unknown function").Fixed the uses of
matchtoregex. Also, terraform's regex flavour does not support lookarounds, so have flipped the domain check.