Setting session_duration in aws_ssoadmin_permission_set seems to clear relay_state #17411
Labels
bug
Addresses a defect in current functionality.
service/ssoadmin
Issues and PRs that pertain to the ssoadmin service.
Milestone
Community Note
Terraform CLI and Terraform AWS Provider Version
Affected Resource(s)
Terraform Configuration Files
Please include all Terraform configurations required to reproduce the bug. Bug reports without a functional reproduction may be closed without investigation.
Expected Behavior
If I apply the above, it will apply correctly with the
session_duration
set to its default ofPT1H
. The issue arises when I want to alter the default session duration.Actual Behavior
Changing
session_duration
to a value longer than 2 hours - for example,PT3H
- results in the silent removal of therelay_state
attribute from the Permission Set. A subsequentterraform apply
then shows therelay_state
attribute as missing and will add it but also setsession_duration
back toPT1H
. Whereupon you loop around forever.Steps to Reproduce
terraform apply
using the above code.session_duration
toPT3H
or higher.terraform apply
terraform plan
showsrelay_state
missing.terraform apply
to re-addrelay_state
.terraform plan
showssession_duration
set toPT1H
.The text was updated successfully, but these errors were encountered: