locals.ddos.tf (4 lines of code) (raw):

locals { ddos_protection_plan = try(var.virtual_wan_settings.ddos_protection_plan.name, null) != null ? var.virtual_wan_settings.ddos_protection_plan : null ddos_protection_plan_enabled = local.ddos_protection_plan != null }