I have found that the best way to use terraform is to let it be declarative and generate what you need as json (from some api or tooling).

Much less issues this way, and the json is actually what will happen with resources at a given provider. Once you start to use imperative stuff you lose a bit of predictability - your entire configuration is no longer declared, it just kinda looks that way.