The aws_wafregional_regex_match_set throws "produced an unexpected new value for was present, but now absent"

[dat-billyf]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform CLI and Terraform AWS Provider Version

$ terraform -v
Terraform v0.12.29
+ provider.aws v3.12.0

Your version of Terraform is out of date! The latest version
is 0.13.5. You can update by downloading from https://www.terraform.io/downloads.html

Affected Resource(s)

• aws_wafregional_regex_match_set

Terraform Configuration Files

resource aws_wafregional_regex_match_set regex_match_set {
  name = "provisioning_header"
  regex_match_tuple {
    regex_pattern_set_id = "provisioning_header_set_id"
    text_transformation = "NONE"
    field_to_match {
      type = "HEADER"
    }
  }
}

Debug Output

https://gist.github.com/dat-billyf/2215229b7145323eda304a45bafa7962

Panic Output

Expected Behavior

The resources should've been created (which they were) and terraform should haved exited with status code 0, not 1.

Actual Behavior

Terraform exited with status code 1.

Steps to Reproduce

1. terraform apply repeatedly while making changes to the resource during testing until apply can no longer be invoked.

Important Factoids

1. Running on WAF v1, not v2.

References

Looks awfully similar:

• The aws_appmesh_virtual_service throws "produced an unexpected new value for was present, but now absent" error. #15084
• resource/aws_subnet: an unexpected new value for was present, but now absent. #12829

[dat-billyf]

Looks like the following resolved it (confusing error message though):

resource aws_wafregional_regex_match_set regex_match_set {
  name = "provisioning_header"
  regex_match_tuple {
    regex_pattern_set_id = aws_wafregional_regex_pattern_set.example.id
    text_transformation = "NONE"
    field_to_match {
      data = "Hostname"
      type = "HEADER"
    }
  }
}
resource "aws_wafregional_regex_pattern_set" "example" {
  name                  = "hostname"
  regex_pattern_strings = [ "test" ]
}

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!