search

PaloAltoNetworks / terraform-provider-prismacloud

Terraform PrismaCloud provider
https://www.terraform.io/docs/providers/prismacloud/
Mozilla Public License 2.0
54 stars 65 forks source link

AWS Cloud Account/Organization Issue #240

Open dkrose1999 opened 1 year ago

dkrose1999 commented 1 year ago

Describe the bug

AWS Organization deletes and recreates every time I run terraform code.

Expected behavior

If there are no changes to the AWS Organization, then this resource should not be revised in any way when running a plan.

Current behavior

If I create an AWS Cloud Organization in Prisma via Terraform, all works well during creation. However, when I add a different resource(e.g. role, permission group, etc), then the entire cloud organization will delete and recreate itself.

Possible solution

That back end developers need to troubleshoot and fix.

Steps to reproduce

  1. create an account group via terraform
  2. create an AWS Cloud organization via "prismacloud_org_cloud_account_v2" and include the account group (this should work)
  3. create any other resource that is unrelated to cloud org in any way(doesn't matter what / e.g permission group)
  4. run terraform apply and take note of the fact that terraform will delete and recreate the cloud org (it works, but shouldn't do it)

Context

I can't automate AWS Organization because I don't trust this process and don't want to screw up our Prisma environment.

welcome-to-palo-alto-networks[bot] commented 1 year ago

:tada: Thanks for opening your first issue here! Welcome to the community!

AnushreeHS commented 1 year ago

@dkrose1999 Thanks for opening the issue. We are unable to reproduce it, if you are still having the issue, could you please give us more information and we will look into it.

dkrose1999 commented 1 year ago

You asked for more information. I will elaborate on the issue, but I don't have an error message. The cloud org will modify every time I run a plan/apply. Ironically, I didn't change a thing when this happens for it to be modified. What other information are you requesting?