hashicorp / terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.
https://registry.terraform.io/providers/hashicorp/aws
Mozilla Public License 2.0
9.89k stars 9.22k forks source link

[Bug]: Provider does not recognize changes on `client_password_auth_type` in `aws_db_proxy`'s `auth` section #39465

Open AvihaiSam opened 2 months ago

AvihaiSam commented 2 months ago

Terraform Core Version

1.8.0

AWS Provider Version

5.68.0

Affected Resource(s)

aws_db_proxy

Expected Behavior

after changing client_password_auth_type - we expect TF to identify the changes

Actual Behavior

TF doesn't identify any changes

Relevant Error/Panic Output Snippet

No response

Terraform Configuration Files

resource "aws_db_proxy" "rds_proxy" {
  count                  = var.create_rds_proxy ? 1 : 0
  name                   = "rds-proxy"
  debug_logging          = false
  engine_family          = "POSTGRESQL"
  idle_client_timeout    = 1800
  require_tls            = false
  role_arn               = aws_iam_role.rds_proxy[0].arn
  vpc_security_group_ids = [module.security_group.security_group_id]
  vpc_subnet_ids         = var.db_subnet_ids

  dynamic "auth" {
    for_each = aws_secretsmanager_secret.services
    content {
      auth_scheme               = "SECRETS"
      description               = "${auth.value.name} secret"
      iam_auth                  = "DISABLED"
      secret_arn                = auth.value.arn
      client_password_auth_type = var.rds_proxy_auth_type
    }
  }

  tags       = local.tags
}

Steps to Reproduce

after deployment - change var.rds_proxy_auth_type value hit terraform plan 0 changes

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

None

github-actions[bot] commented 2 months ago

Community Note

Voting for Prioritization

Volunteering to Work on This Issue

omrishur commented 2 months ago

👍

AvihaiSam commented 2 months ago

current workarround: use var.rds_proxy_auth_type inside the description 🫤