Azure子网、路由表、安全组和虚拟网络可以在Terraform中配置动态块。
例如，以下是如何迭代问题中的“subsets”变量：

variable "subnets" {
  type = map(object({
    addressPrefix                     = string
    privateEndpointNetworkPolicies    = string
    privateLinkServiceNetworkPolicies = string
    service_endpoints                 = list(string)
    route_tables = object({
      name                       = string
      disableBgpRoutePropagation = bool
      routes = list(object({
        name             = string
        addressPrefix    = string
        nextHopType      = string
        nextHopIpAddress = string
      }))
    })
  }))
}

resource "azurerm_subnet" "subnet_x" {
  for_each = var.subnets

  name                 = each.key
  resource_group_name  = azurerm_resource_group.res_group_x.name
  virtual_network_name = azurerm_virtual_network.vn_x.name
  address_prefixes     = [each.value.addressPrefix]
  service_endpoints    = each.value.service_endpoints

  private_endpoint_network_policies    = each.value.privateEndpointNetworkPolicies
  private_link_service_network_policies = each.value.privateLinkServiceNetworkPolicies
}

resource "azurerm_route_table" "rt_x" {
  for_each = var.subnets

  name                = each.value.route_tables.name
  location            = azurerm_resource_group.res_group_x.location
  resource_group_name = azurerm_resource_group.res_group_x.name

  disable_bgp_route_propagation = each.value.route_tables.disableBgpRoutePropagation

  route {
    for r in each.value.route_tables.routes : {
      name                   = r.name
      address_prefix         = r.addressPrefix
      next_hop_type          = r.nextHopType
      next_hop_in_ip_address = r.nextHopIpAddress
    }
  }
}

resource "azurerm_subnet_route_table_association" "rt_assoc_x" {
  for_each = var.subnets

  subnet_id      = azurerm_subnet.subnet_x[each.key].id
  route_table_id = azurerm_route_table.rt_x[each.key].id
}

上面避免了内联子网，以限制嵌套。“for_each”用于迭代“subnets”变量，因为它是一个Map，“for”表达式用于迭代路由，因为它是一个列表。
参见dynamic blocks、"for" expressions和azurerm_subnet的文档