[Bug]: r/aws_redshiftserverless_namespace: removing kms_key_id from config has no effect and can lead to problems

Terraform Core Version

1.9.5

AWS Provider Version

5.66.0

Affected Resource(s)

aws_redshiftserverless_namespace

Expected Behavior

The KmsKeyId in the Namespace, once set to a non-default value, cannot be unset. So when kms_key_id attribute is removed from resource config, the expected behavior should be to either prevent the change or replace the resource.

Actual Behavior

Apply results in "No changes. Your infrastructure matches the configuration.". KmsKeyId is removed from the configuration while still being associated with the namespace. Subsequent terraform plan also does not highlight a potential drift. This means that the truth about the resource is unavailable in the resource config. Committing the config to VCS, might result in further problems and confusion.

Relevant Error/Panic Output Snippet

No response

Terraform Configuration Files

resource "aws_kms_key" "test" {}

resource "aws_redshiftserverless_namespace" "test" {
  namespace_name = "test"
  kms_key_id = aws_kms_key.test.arn 
}

Steps to Reproduce

Apply the config above
Remove kms_key_id from the config and apply again.

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

Yes

hashicorp / terraform-provider-aws