v2.0.0-rc1 Default to "create before destroy"

• Trade-offs between "create before destroy" and service interruptions clarified in README
• New feature flag preserve_security_group_id added to provide some control over when a new security group will be created to replace the existing one

Possibly breaking changes:

• create_before_destroy default changed from false to true
• With new defaults, any change to a security group rule will cause the security group itself to be replaced. Fixes #34
• Require Terraform v1.0.0 or later

More accurate control of create before destroy behaviors @Nuru (#35)

note

README and code are (hopefully) final.

This will be released as v2.0.0-rc1 due to changed defaults, requirement for Terraform 1.0, and possible service interruption when upgrading. Migration document TBD.

what

• Make create_before_destroy default to true for security groups
• Introduce preserve_security_group_id to control replacement of security group when rules change

why

• In most cases, replacing a security group with create_before_destroy = false will fail with an error because you cannot destroy a security group while it is associated with a resource
• Fixes #34

references

• Fixes #34
• hashicorp/terraform-provider-aws#25173
• hashicorp/terraform#31316