Merge pull request #21773 from haarchri/fix/sso-permissionset

fix missing provisionSsoAdminPermissionSet() after delete a policy
hashicorp · Dec 17, 2021 · 1915c4c · 1915c4c
2 parents 149048f + f3f080c
commit 1915c4c
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.changelog/21773.txt b/.changelog/21773.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssoadmin_managed_policy_attachment: Fix missing call to `ProvisionPermissionSet` after detaching the managed policy
+```
diff --git a/internal/service/ssoadmin/managed_policy_attachment.go b/internal/service/ssoadmin/managed_policy_attachment.go
@@ -137,6 +137,11 @@ func resourceManagedPolicyAttachmentDelete(d *schema.ResourceData, meta interfac
 		return fmt.Errorf("error detaching Managed Policy (%s) from SSO Permission Set (%s): %w", managedPolicyArn, permissionSetArn, err)
 	}
 
+	// Provision ALL accounts after detaching the managed policy
+	if err := provisionSsoAdminPermissionSet(conn, permissionSetArn, instanceArn); err != nil {
+		return err
+	}
+
 	return nil
 }