Closed dthauvin closed 1 month ago
Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.
If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thank you!
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
Community Note
Terraform CLI and Terraform AWS Provider Version
Affected Resource(s)
Terraform Configuration Files
Debug Output
Expected Behavior
Terraform should remove the following initial security settings of lake formation :
The Super permission is granted to the group IAMAllowedPrincipals on all existing AWS Glue Data Catalog resources.
"Use only IAM access control" settings are enabled for new Data Catalog resources.
In typical AWS Lake formation setup or migration AWS admins account want to disable these settings at the right time.
if blocks
create_database_default_permissions
orcreate_table_default_permissions
are empty, terraform should remove the initial security settings.Using AWS CLI i get the right behavior :
file://debug-lf-settings.json
Result in AWS console :
Actual Behavior
Nothing happen , Terraform do not detect changes to apply.
Steps to Reproduce
terraform apply
If blocks
create_database_default_permissions
orcreate_table_default_permissions
are missing at the first run creation, the resourceaws_lakeformation_data_lake_settings
will delete Lakeformation initial settings.terraform apply
As user need to keep inital lakeformation settings to perform lake formation activation at the right moment, user must do something like :
terraform apply
or
simply does not work . Initial setting are not remove when user want it. terraform say :
References
AWS Documentation