search

hashicorp / terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.
https://registry.terraform.io/providers/hashicorp/aws
Mozilla Public License 2.0
9.87k stars 9.21k forks source link

[Bug]: RDS window maintenance not editable #29183

Open gillesdgl opened 1 year ago

gillesdgl commented 1 year ago

Terraform Core Version

1.1.4

AWS Provider Version

4.6

Affected Resource(s)

It is specify on the terraform doc here that the maintenance_window field is editable. However after running terraform the changes to the maintenance_window field is not applied and RDS still have random maintenance frame window assigned.

Expected Behavior

The maintenance window frame should match the one define by the maintenance_window parameter.

Actual Behavior

AWS still assign random maintenance window.

Relevant Error/Panic Output Snippet

No response

Terraform Configuration Files

here is the variable.tf

variable "maintenance_window" {
  description = "The window to perform maintenance in. Syntax: 'ddd:hh24:mi-ddd:hh24:mi'. Eg: 'Mon:00:00-Mon:03:00'"
  type        = string
  default     = "Sat:14:00-Sat:22:00"

variable "apply_immediately" {
  description = "Specifies whether any database modifications are applied immediately, or during the next maintenance window"
  type        = bool
  default     = false
}
}

Here is the main.tf

module "rds_postgres" {
  source = "path/to/source/repo"
  auto_minor_version_upgrade             = var.auto_minor_version_upgrade
  maintenance_window              = var.maintenance_window
  apply_immediately               = var.apply_immediately
  backup_window                   = var.backup_window

}

Steps to Reproduce

Apply terraform with a specific maintenance window and apply_immediately set to false

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

None

github-actions[bot] commented 1 year ago

Community Note

Voting for Prioritization

Volunteering to Work on This Issue

justinretzolk commented 1 year ago

Hey @gillesdgl 👋 Thank you for taking the time to raise this! So that we can have a better idea of the configuration, can you supply the relevant sections of the Terraform configuration within the module that you're calling (or a link to it, if it's public) as well?

gillesdgl commented 1 year ago

@justinretzolk fyi the module is private but here is the configuration:

resource "aws_db_instance" "rds" {

  identifier        = var.identifier
  engine            = var.engine
  engine_version    = var.engine_version
  instance_class    = var.instance_class
  allocated_storage = var.allocated_storage
  storage_type      = var.storage_type
  storage_encrypted = var.storage_encrypted
  kms_key_id        = var.kms_key_id

  db_name                             = var.db_name
  username                            = var.username
  port                                = var.port
  iam_database_authentication_enabled = var.iam_database_authentication_enabled

  vpc_security_group_ids = [data.aws_security_group.allow_all_internal_traffic.id]
  db_subnet_group_name   = "${var.tag_name_prefix}-${var.db_subnet_group_name}"
  parameter_group_name   = var.parameter_group_name

  availability_zone   = var.availability_zone
  multi_az            = var.multi_az
  publicly_accessible = var.publicly_accessible

  allow_major_version_upgrade = var.allow_major_version_upgrade
  auto_minor_version_upgrade  = var.auto_minor_version_upgrade
  apply_immediately           = var.apply_immediately
  maintenance_window          = var.maintenance_window

  snapshot_identifier       = var.snapshot_identifier
  copy_tags_to_snapshot     = var.copy_tags_to_snapshot
  skip_final_snapshot       = var.skip_final_snapshot
  final_snapshot_identifier = local.final_snapshot_identifier

  performance_insights_enabled          = var.performance_insights_enabled
  performance_insights_retention_period = var.performance_insights_enabled ? var.performance_insights_retention_period : null
  performance_insights_kms_key_id       = var.performance_insights_enabled ? var.kms_key_id : null

  backup_retention_period = var.backup_retention_period
  backup_window           = var.backup_window
  max_allocated_storage   = var.max_allocated_storage
  monitoring_interval     = var.monitoring_interval
  monitoring_role_arn     = var.monitoring_interval > 0 ? local.monitoring_role_arn : null

  enabled_cloudwatch_logs_exports = var.enabled_cloudwatch_logs_exports

  deletion_protection      = var.deletion_protection
  delete_automated_backups = var.delete_automated_backups

  timeouts {
    create = lookup(var.timeouts, "create", null)
    delete = lookup(var.timeouts, "delete", null)
    update = lookup(var.timeouts, "update", null)
  }
}

The 2 important field are specify in the issue comment. maintenance_window and apply_immediately. My first suggestion is that since the apply_immediately option is not activated, then the change on the maintenance_window parameter is not made either.

justinretzolk commented 1 year ago

Thanks for providing that information, @gillesdgl. One more bit of clarification, based on your last comment at the bottom: If you apply the change to maintenance_window with apply_immediately set to false, and then wait until the next maintenance window (as it was perviously set), are you seeing the change take effect?

gillesdgl commented 1 year ago

@justinretzolk I just check today as the maintenance window was set for the 6 of february. The mainatenance window change it date to another one that does not correspond wha I set on the terraform configuration "Sat:14:00-Sat:22:00". So the apply_immediately setting is not related.

justinretzolk commented 1 year ago

Hey @gillesdgl 👋 Thanks for following up here. Can you supply debug logs (redacted as necessary) so that we can have those as well?

gillesdgl commented 1 year ago

here are the log. Some information like account id or credential has been clean.

14:32:57 " http.response.header.content_type=text/xml http.status_code=200 tf_resource_type=aws_db_subnet_group timestamp=2023-02-13T13:32:57.835Z
14:32:57 2023-02-13T13:32:57.865Z [WARN]  Provider "registry.terraform.io/hashicorp/aws" produced an invalid plan for module.rds_postgres.aws_db_subnet_group.rds_subnet_group, but we are tolerating it because it is using the legacy plugin SDK.
14:32:57     The following problems may be the cause of any confusing errors from downstream operations:
14:32:57       - .description: planned value cty.StringVal("Managed by Terraform") for a non-computed attribute
14:32:57 2023-02-13T13:32:57.876Z [WARN]  Provider "registry.terraform.io/hashicorp/aws" produced an invalid plan for module.rds_postgres.aws_db_instance.rds, but we are tolerating it because it is using the legacy plugin SDK.
14:32:57     The following problems may be the cause of any confusing errors from downstream operations:
14:32:57       - .security_group_names: planned value cty.SetValEmpty(cty.String) for a non-computed attribute
14:32:57       - .domain: planned value cty.StringVal("") for a non-computed attribute
14:32:57       - .replicate_source_db: planned value cty.StringVal("") for a non-computed attribute
14:32:57       - .customer_owned_ip_enabled: planned value cty.False for a non-computed attribute
14:32:57       - .custom_iam_instance_profile: planned value cty.StringVal("") for a non-computed attribute
14:32:57       - .domain_iam_role_name: planned value cty.StringVal("") for a non-computed attribute
14:32:58 2023-02-13T13:32:57.899Z [INFO]  ReferenceTransformer: reference not found: "local.aws_secret"
14:32:58 2023-02-13T13:32:57.899Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version" references: []
14:32:58 2023-02-13T13:32:57.921Z [DEBUG] provider.terraform-provider-aws_v4.54.0_x5: [DEBUG] Waiting for state to become: [success]
14:32:58 2023-02-13T13:32:57.921Z [DEBUG] provider.terraform-provider-aws_v4.54.0_x5: HTTP Request Sent: http.request.header.content_type=application/x-amz-json-1.1 tf_resource_type=aws_secretsmanager_secret_version @caller=github.com/hashicorp/aws-sdk-go-base/v2/awsv1shim/v2@v2.0.0-beta.24/logger.go:90 aws.sdk=aws-sdk-go aws.service="Secrets Manager" http.request_content_length=163 tf_rpc=ReadResource @module=aws aws.region=us-east-1 http.flavor=1.1 http.request.body={"SecretId":"arn:aws:secretsmanager:us-east-1:{aws_account_id}:secret:glc-central-mgt-dev-rds-cloud-console-q5boPT","VersionId":""} http.request.header.x_amz_date=20230213T133257Z aws.operation=GetSecretValue http.method=POST http.request.header.authorization="AWS4-HMAC-SHA256 Credential=ASIA************UMFF/20230213/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-length;content-type;host;x-amz-date;x-amz-security-token;x-amz-target, Signature=*****" http.request.header.x_amz_security_token=***** http.request.header.x_amz_target=secretsmanager.GetSecretValue http.url=https://secretsmanager.us-east-1.amazonaws.com/ http.user_agent="APN/1.0 HashiCorp/1.0 Terraform/1.3.6 (+https://www.terraform.io) terraform-provider-aws/4.54.0 (+https://registry.terraform.io/providers/hashicorp/aws) aws-sdk-go/1.44.197 (go1.19.3; linux; amd64)" net.peer.name=secretsmanager.us-east-1.amazonaws.com tf_mux_provider=*schema.GRPCProviderServer tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id= timestamp=2023-02-13T13:32:57.920Z
14:32:58 2023-02-13T13:32:57.971Z [DEBUG] provider.terraform-provider-aws_v4.54.0_x5: HTTP Response Received: @caller=github.com/hashicorp/aws-sdk-go-base/v2/awsv1shim/v2@v2.0.0-beta.24/logger.go:138 http.response.header.x_amzn_requestid= tf_req_id= aws.operation=GetSecretValue aws.region=us-east-1 aws.service="Secrets Manager" http.duration=48 http.response_content_length=629 tf_provider_addr=registry.terraform.io/hashicorp/aws http.response.header.content_type=application/x-amz-json-1.1 http.response.header.date="Mon, 13 Feb 2023 13:32:56 GMT" http.status_code=200 tf_resource_type=aws_secretsmanager_secret_version tf_rpc=ReadResource @module=aws aws.sdk=aws-sdk-go http.response.body={"ARN":"arn:aws:secretsmanager:us-east-1:{aws_account_id}:secret:","CreatedDate":1.67025990043E9,"Name":"","SecretString":"{\"database\":\"graylog_cloud_console\",\"host\":\"\",\"jdbc\":\"jdbc:postgresql://glc-central-mgt-dev-graylog-cloud-console.ctejyi5dl6cr.us-east-1.rds.amazonaws.com:5432/graylog_cloud_console\",\"password\":\"29!Z2uJ5ow\",\"port\":5432,\"username\":\"postgres\"}","VersionId":"","VersionStages":["AWSCURRENT"]} tf_mux_provider=*schema.GRPCProviderServer timestamp=2023-02-13T13:32:57.969Z
14:32:58 2023-02-13T13:32:57.994Z [WARN]  Provider "registry.terraform.io/hashicorp/aws" produced an invalid plan for module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version, but we are tolerating it because it is using the legacy plugin SDK.
14:32:58     The following problems may be the cause of any confusing errors from downstream operations:
14:32:58       - .secret_binary: sensitive planned value for a non-computed attribute
14:32:58 2023-02-13T13:32:57.995Z [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
14:32:58 2023-02-13T13:32:58.082Z [DEBUG] provider: plugin process exited: path=.terraform/providers/registry.terraform.io/hashicorp/aws/4.54.0/linux_amd64/terraform-provider-aws_v4.54.0_x5 pid=2531811
14:32:58 2023-02-13T13:32:58.091Z [DEBUG] provider: plugin exited
14:32:58 2023-02-13T13:32:58.106Z [DEBUG] building apply graph to check for errors
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] adding implicit provider configuration provider["registry.terraform.io/hashicorp/random"], implied first by module.rds_postgres.random_password.rds_db_password (expand)
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_db_instance.rds (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_cloudwatch_log_group.rds_log_group (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "module.rds_postgres.data.aws_vpc.selected (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "module.rds_postgres.data.aws_partition.current (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "module.rds_postgres.random_password.rds_db_password (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/random"]
14:32:58 2023-02-13T13:32:58.117Z [DEBUG] ProviderTransformer: "data.aws_kms_key.rds_kms (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.data.aws_subnets.private_subnets (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_secretsmanager_secret.rds_secret (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_db_instance_automated_backups_replication.rds_backup_replication (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_db_subnet_group.rds_subnet_group (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_db_instance.rds" (*terraform.NodeApplyableResourceInstance) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_iam_role_policy_attachment.enhanced_monitoring (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.data.aws_security_group.allow_all_internal_traffic (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.data.aws_iam_policy_document.enhanced_monitoring (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_iam_role.enhanced_monitoring (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.118Z [DEBUG] ProviderTransformer: "aws_db_parameter_group.rds (expand)" (*terraform.nodeExpandApplyableResource) needs provider["registry.terraform.io/hashicorp/aws"]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.tags.local.tags_to_return (expand)" references: [module.tags.local.tags_provided (expand) module.tags.var.additional_tags (expand)]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "var.monitoring_role_name_suffix" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "var.parameter_group_name_suffix" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.snapshot_identifier (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.cloudwatch_log_group_kms_key_id (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_password (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_address (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.iam_database_authentication_enabled (expand)" references: [var.iam_database_authentication_enabled]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.engine_version (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.monitoring_role_name (expand)" references: [module.tags.output.tag_name_prefix (expand) var.monitoring_role_name_suffix]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.data.aws_iam_policy_document.enhanced_monitoring (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "var.deletion_protection" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.kms_key_id (expand)" references: [data.aws_kms_key.rds_kms (expand)]
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.port (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "var.parameter_group_name" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.create_db_backup_replication (expand)" references: []
14:32:58 2023-02-13T13:32:58.133Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_username (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_endpoint (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.data.aws_vpc.selected (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.backup_window" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.storage_encrypted (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.timeouts (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_iam_role.enhanced_monitoring (expand)" references: [module.rds_postgres.var.create_monitoring_role (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.engine (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.db_subnet_group_name (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.monitoring_role_description (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.instance_class" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.additional_tags" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.parameter_group_name (expand)" references: [module.tags.output.tag_name_prefix (expand) var.parameter_group_name_suffix]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.allocated_storage (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.monitoring_interval (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_db_subnet_group.rds_subnet_group (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.tags.var.additional_tags (expand)" references: [var.additional_tags]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_cloudwatch_log_groups (expand)" references: [module.rds_postgres.aws_cloudwatch_log_group.rds_log_group (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.auto_minor_version_upgrade" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_db_instance.rds" references: [module.rds_postgres.var.availability_zone (expand) module.rds_postgres.var.storage_type (expand) module.rds_postgres.random_password.rds_db_password (expand) module.rds_postgres.var.backup_window (expand) module.rds_postgres.var.username (expand) module.rds_postgres.var.instance_class (expand) module.rds_postgres.var.monitoring_interval (expand) module.rds_postgres.var.maintenance_window (expand) module.rds_postgres.var.skip_final_snapshot (expand) module.rds_postgres.var.db_name (expand) module.rds_postgres.var.allow_major_version_upgrade (expand) module.rds_postgres.var.tags (expand) module.rds_postgres.var.tag_name_prefix (expand) module.rds_postgres.var.db_subnet_group_name (expand) module.rds_postgres.var.copy_tags_to_snapshot (expand) module.rds_postgres.var.delete_automated_backups (expand) module.rds_postgres.var.performance_insights_enabled (expand) module.rds_postgres.var.kms_key_id (expand) module.rds_postgres.var.publicly_accessible (expand) module.rds_postgres.var.apply_immediately (expand) module.rds_postgres.var.auto_minor_version_upgrade (expand) module.rds_postgres.var.storage_encrypted (expand) module.rds_postgres.var.performance_insights_enabled (expand) module.rds_postgres.var.performance_insights_retention_period (expand) module.rds_postgres.var.performance_insights_enabled (expand) module.rds_postgres.var.parameter_group_name (expand) module.rds_postgres.var.multi_az (expand) module.rds_postgres.var.monitoring_interval (expand) module.rds_postgres.local.monitoring_role_arn (expand) module.rds_postgres.var.port (expand) module.rds_postgres.var.iam_database_authentication_enabled (expand) module.rds_postgres.var.deletion_protection (expand) module.rds_postgres.var.engine (expand) module.rds_postgres.var.enabled_cloudwatch_logs_exports (expand) module.rds_postgres.local.final_snapshot_identifier (expand) module.rds_postgres.data.aws_security_group.allow_all_internal_traffic (expand) module.rds_postgres.var.snapshot_identifier (expand) module.rds_postgres.var.allocated_storage (expand) module.rds_postgres.var.backup_retention_period (expand) module.rds_postgres.var.engine_version (expand) module.rds_postgres.var.identifier (expand) module.rds_postgres.var.kms_key_id (expand) module.rds_postgres.var.max_allocated_storage (expand) module.rds_postgres.var.timeouts (expand) module.rds_postgres.var.timeouts (expand) module.rds_postgres.var.timeouts (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.iam_database_authentication_enabled" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.delete_automated_backups (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.local.aws_secret (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.random_password.rds_db_password (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand) module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/hashicorp/aws\"]" references: [var.required_tags var.account_id]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "provider[\"registry.terraform.io/hashicorp/random\"]" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.data.aws_subnets.private_subnets (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.account_id" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.identifier_suffix" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.apply_immediately (expand)" references: [var.apply_immediately]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.db_name (expand)" references: [var.db_name]
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.final_snapshot_identifier_prefix (expand)" references: []
14:32:58 2023-02-13T13:32:58.134Z [DEBUG] ReferenceTransformer: "var.required_tags" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.enabled_cloudwatch_logs_exports" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.backup_retention_period (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.multi_az (expand)" references: [var.multi_az]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags.var.required_tags (expand)" references: [var.required_tags]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.enhanced_monitoring_iam_role_arn (expand)" references: [module.rds_postgres.aws_iam_role.enhanced_monitoring (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.maintenance_window" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.local.monitoring_role_arn (expand)" references: [module.rds_postgres.var.create_monitoring_role (expand) module.rds_postgres.aws_iam_role.enhanced_monitoring (expand) module.rds_postgres.var.monitoring_role_arn (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.create_monitoring_role (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.create_cloudwatch_log_group (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.username (expand)" references: [var.username]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags.output.map (expand)" references: [module.tags.local.tags_to_return (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.local.final_snapshot_identifier (expand)" references: [module.rds_postgres.var.skip_final_snapshot (expand) module.rds_postgres.var.final_snapshot_identifier_prefix (expand) module.rds_postgres.var.identifier (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_secretsmanager_secret.rds_secret (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_db_instance.rds (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.aws_secretsmanager_secret_rds_password_suffix" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_arn (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_cloudwatch_log_group.rds_log_group (expand)" references: [module.rds_postgres.var.enabled_cloudwatch_logs_exports (expand) module.rds_postgres.var.create_cloudwatch_log_group (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.cloudwatch_log_group_retention_in_days (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.deletion_protection (expand)" references: [var.deletion_protection]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.parameter_group_family" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.performance_insights_retention_period (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.storage_type (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_db_instance_automated_backups_replication.rds_backup_replication (expand)" references: [module.rds_postgres.var.create_db_backup_replication (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.aws_secretsmanager_secret_rds_password (expand)" references: [module.tags.output.tag_name_prefix (expand) var.aws_secretsmanager_secret_rds_password_suffix]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.monitoring_role_arn (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.skip_final_snapshot (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.data.aws_partition.current (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.apply_immediately" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags.output.tag_name_prefix (expand)" references: [module.tags.local.tags_provided (expand) module.tags.local.tags_provided (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.instance_class (expand)" references: [var.instance_class]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.publicly_accessible (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags.local.tags_provided (expand)" references: [module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand) module.tags.var.required_tags (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.performance_insights_enabled (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.random_password.rds_db_password (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.db_name" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.tag_name_prefix (expand)" references: [module.tags.output.tag_name_prefix (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.tags (expand)" references: [module.tags.output.map (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.enabled_cloudwatch_logs_exports (expand)" references: [var.enabled_cloudwatch_logs_exports]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.aws_iam_role_policy_attachment.enhanced_monitoring (expand)" references: [module.rds_postgres.var.create_monitoring_role (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.data.aws_security_group.allow_all_internal_traffic (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.auto_minor_version_upgrade (expand)" references: [var.auto_minor_version_upgrade]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.maintenance_window (expand)" references: [var.maintenance_window]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.backup_window (expand)" references: [var.backup_window]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.copy_tags_to_snapshot (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.output.db_instance_id (expand)" references: [module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds module.rds_postgres.aws_db_instance.rds (expand)]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "data.aws_kms_key.rds_kms (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.allow_major_version_upgrade (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.identifier (expand)" references: [module.tags.output.tag_name_prefix (expand) var.identifier_suffix]
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.username" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.tags (close)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.aws_secretsmanager_secret_rds_password" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.availability_zone (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres (close)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "aws_db_parameter_group.rds (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "var.multi_az" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.max_allocated_storage (expand)" references: []
14:32:58 2023-02-13T13:32:58.135Z [DEBUG] ReferenceTransformer: "module.rds_postgres.var.option_group_name (expand)" references: []
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.cloudwatch_log_group_retention_in_days (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.aws_secretsmanager_secret_rds_password (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_db_instance_automated_backups_replication.rds_backup_replication (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.data.aws_partition.current (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_iam_role_policy_attachment.enhanced_monitoring (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_id (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.option_group_name (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: aws_db_parameter_group.rds (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.cloudwatch_log_group_kms_key_id (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.monitoring_role_name (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_password (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_address (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.data.aws_iam_policy_document.enhanced_monitoring (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.create_db_backup_replication (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_username (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_endpoint (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.data.aws_vpc.selected (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.monitoring_role_description (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_db_subnet_group.rds_subnet_group (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_cloudwatch_log_groups (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.local.aws_secret (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_secretsmanager_secret.rds_secret (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.aws_cloudwatch_log_group.rds_log_group (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.db_instance_arn (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.var.create_cloudwatch_log_group (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.output.enhanced_monitoring_iam_role_arn (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.173Z [DEBUG] pruneUnusedNodes: module.rds_postgres.data.aws_subnets.private_subnets (expand) is no longer needed, removing
14:32:58 2023-02-13T13:32:58.177Z [INFO]  backend/local: plan operation completed
14:32:58 2023-02-13T13:32:58.177Z [INFO]  backend/local: writing plan output to: plan.tfplan
14:32:58 2023-02-13T13:32:58.260Z [DEBUG] [aws-sdk-go] DEBUG: Request dynamodb/GetItem Details:
14:32:58 ---[ REQUEST POST-SIGN ]-----------------------------
14:32:58 POST / HTTP/1.1
14:32:58 Host: dynamodb.us-east-1.amazonaws.com
14:32:58 User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.3.6 aws-sdk-go/1.42.35 (go1.19.3; linux; amd64)
14:32:58 Content-Length: 243
14:32:58 Accept-Encoding: identity
14:32:58 Content-Type: application/x-amz-json-1.0
14:32:58 X-Amz-Date: 20230213T133258Z
14:32:58 X-Amz-Target: DynamoDB_20120810.GetItem
14:32:58
14:32:58 -----------------------------------------------------
14:32:58 2023-02-13T13:32:58.300Z [DEBUG] [aws-sdk-go] DEBUG: Response dynamodb/GetItem Details:
14:32:58 ---[ RESPONSE ]--------------------------------------
14:32:58 HTTP/1.1 200 OK
14:32:58 Connection: close
14:32:58 Content-Length: 437
14:32:58 Content-Type: application/x-amz-json-1.0
14:32:58 Date: Mon, 13 Feb 2023 13:32:58 GMT
14:32:58 Server: Server
14:32:58 
14:32:58 
14:32:58 -----------------------------------------------------
14:32:58 2023-02-13T13:32:58.300Z [DEBUG] [aws-sdk-go] {"Item":{"LockID":{"S":""},"Info":{"S":"{\"ID\":\"\",\"Operation\":\"OperationTypePlan\",\"Info\":\"\",\"Who\":\"jenkins@\",\"Version\":\"1.3.6\",\"Created\":\"2023-02-13T13:32:51.022745715Z\",\"Path\":\""}"}}}
14:32:58 2023-02-13T13:32:58.301Z [DEBUG] [aws-sdk-go] DEBUG: Request dynamodb/DeleteItem Details:
14:32:58 ---[ REQUEST POST-SIGN ]-----------------------------
14:32:58 POST / HTTP/1.1
14:32:58 Host: dynamodb.us-east-1.amazonaws.com
14:32:58 User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.3.6 aws-sdk-go/1.42.35 (go1.19.3; linux; amd64)
14:32:58 Content-Length: 183
14:32:58 Accept-Encoding: identity
14:32:58 Content-Type: application/x-amz-json-1.0
14:32:58 X-Amz-Date: 20230213T133258Z
14:32:58 X-Amz-Target: DynamoDB_20120810.DeleteItem
14:32:58 
14:32:58 {"Key":{"LockID":{"S":""}},"TableName":""}
14:32:58 -----------------------------------------------------
14:32:58 2023-02-13T13:32:58.356Z [DEBUG] [aws-sdk-go] DEBUG: Response dynamodb/DeleteItem Details:
14:32:58 ---[ RESPONSE ]--------------------------------------
14:32:58 HTTP/1.1 200 OK
14:32:58 Connection: close
14:32:58 Content-Length: 2
14:32:58 Content-Type: application/x-amz-json-1.0
14:32:58 Date: Mon, 13 Feb 2023 13:32:58 GMT
14:32:58 Server: Server
14:32:58 
14:32:58 
14:32:58 -----------------------------------------------------
14:32:58 2023-02-13T13:32:58.356Z [DEBUG] [aws-sdk-go] {}
[Pipeline] echo
14:32:58 module.rds_postgres.random_password.rds_db_password: Refreshing state... [id=none]
14:32:58 aws_db_parameter_group.rds: Refreshing state... [id=]
14:32:58 data.aws_kms_key.rds_kms: Reading...
14:32:58 module.rds_postgres.data.aws_iam_policy_document.enhanced_monitoring: Reading...
14:32:58 module.rds_postgres.data.aws_vpc.selected: Reading...
14:32:58 module.rds_postgres.data.aws_partition.current: Reading...
14:32:58 module.rds_postgres.data.aws_partition.current: Read complete after 0s [id=aws]
14:32:58 module.rds_postgres.data.aws_iam_policy_document.enhanced_monitoring: Read complete after 0s [id=]
14:32:58 module.rds_postgres.aws_iam_role.enhanced_monitoring[0]: Refreshing state... [id=]
14:32:58 data.aws_kms_key.rds_kms: Read complete after 0s [id=]
14:32:58 module.rds_postgres.aws_secretsmanager_secret.rds_secret: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:{aws_account_id}:secret:]
14:32:58 module.rds_postgres.aws_iam_role_policy_attachment.enhanced_monitoring[0]: Refreshing state... [id=]
14:32:58 module.rds_postgres.data.aws_vpc.selected: Read complete after 0s [id=vpc-]
14:32:58 module.rds_postgres.data.aws_security_group.allow_all_internal_traffic: Reading...
14:32:58 module.rds_postgres.data.aws_subnets.private_subnets: Reading...
14:32:58 module.rds_postgres.data.aws_security_group.allow_all_internal_traffic: Read complete after 1s [id=sg-]
14:32:58 module.rds_postgres.aws_db_instance.rds: Refreshing state... [id=]
14:32:58 module.rds_postgres.data.aws_subnets.private_subnets: Read complete after 1s [id=us-east-1]
14:32:58 module.rds_postgres.aws_db_subnet_group.rds_subnet_group: Refreshing state... [id=]
14:32:58 module.rds_postgres.aws_secretsmanager_secret_version.rds_secret_version: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:{aws_account_id}:secret:]
14:32:58 
14:32:58 Terraform used the selected providers to generate the following execution
14:32:58 plan. Resource actions are indicated with the following symbols:
14:32:58   ~ update in-place
14:32:58 
14:32:58 Terraform will perform the following actions:
14:32:58 
14:32:58   # module.rds_postgres.aws_db_instance.rds will be updated in-place
14:32:58   ~ resource "aws_db_instance" "rds" {
14:32:58       ~ apply_immediately                     = false -> true
14:32:58       ~ engine_version                        = "14.3" -> "14.2"
14:32:58         id                                    = "glc-central-mgt-dev-graylog-cloud-console"
14:32:58         name                                  = "graylog_cloud_console"
14:32:58         tags                                  = {
14:32:58             "BackupFrequency" = "n/a"
14:32:58             "CreatedBy"       = "cloudops"
14:32:58             "CreationMethod"  = "terraform"
14:32:58             "Customer"        = "central"
14:32:58             "Environment"     = "mgt-dev"
14:32:58             "PatchWindow"     = "n/a"
14:32:58             "Region"          = "us-east-1"
14:32:58             "TicketNumber"    = "n/a"
14:32:58             "UsedBy"          = "cloudops"
14:32:58         }
14:32:58         # (62 unchanged attributes hidden)
14:32:58 
14:32:58         # (1 unchanged block hidden)
14:32:58     }
14:32:58 
14:32:58 Plan: 0 to add, 1 to change, 0 to destroy.
14:32:58 
14:32:58 ─────────────────────────────────────────────────────────────────────────────
14:32:58 
14:32:58 Saved the plan to: plan.tfplan
14:32:58 
14:32:58 To perform exactly these actions, run the following command to apply:
14:32:58     terraform apply "plan.tfplan"
14:32:58 
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Checkov scan)
[Pipeline] sh
14:32:58 + jq .
14:32:58 + terraform show -json plan.tfplan
[Pipeline] sh
14:33:03 + checkov --quiet -f tfplan.json -o junitxml
14:33:15 + true
[Pipeline] junit
14:33:15 Recording test results
14:33:15 [Checks API] No suitable checks publisher found.