aws_codebuildproject requires two "applys" when created with a new IAM role

[sethcleveland]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

terraform -v
Terraform v0.12.20
+ provider.aws v2.45.0

Affected Resource(s)

• aws_codebuild_project

Terraform Configuration Files

A terraform apply with this module demonstrates the issue - https://github.com/tmknom/terraform-aws-codebuild/tree/master/examples/complete

Expected Behavior

First terraform apply creates the codebuild project successfully.

Actual Behavior

The first terraform apply errors with this message

Error: Error creating CodeBuild project: InvalidInputException:

  on ../../main.tf line 6, in resource "aws_codebuild_project" "default":
   6: resource "aws_codebuild_project" "default" {

Running terraform apply again resolves the issue.

Steps to Reproduce

1. terraform apply
2. terraform apply

Important Factoids

Creating the iam_role and waiting a few seconds seems to resolve this issue. However, that seems to defeat the purpose of a well-contained module.

References

My best guess is that this is related to the following IAM eventual consistency issues.

• related issue: interpolation does not wait for resources to complete creation? terraform#15536
• related pull request: fix: Invalid repo policy due to IAM eventual consistency #1165

• #0000

[bflad]

Hi @sethcleveland 👋 Thank you for reporting this issue and sorry you are running into trouble. This is due to a regression in version 2.45.0 of the Terraform AWS Provider (#11682) and was resolved in Terraform AWS Provider version 2.46.0, which was released January 23rd. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. 👍

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!