Question

Your team manages 40 VLANs on an IOS XE device using the Terraform iosxe RESTCONF provider. The VLANs were originally declared with a `count` meta-argument iterating over a list. A colleague removes the third VLAN (index 2) from the middle of the list and runs `terraform apply`. The plan unexpectedly shows changes to nearly every VLAN resource, not just a single deletion. What is the root cause and the best remediation?

Accepted Answer

`count` addresses resources by positional index, so removing a middle element shifts all later indices; refactor to `for_each` with a map keyed by VLAN ID so each resource has a stable address.

Answer

The RESTCONF provider does not support deletion of list entries, so Terraform recreates all VLANs; add a `lifecycle { prevent_destroy = true }` block to stop the changes.

Answer

The device ETag changed after the manual edit, invalidating Terraform state; run `terraform refresh` to resync and the spurious changes will disappear.

Answer

Terraform detected configuration drift on the device; run `terraform import` for each VLAN to rebuild state and eliminate the extra changes.