resource/aws_acmpca_certificate_authority: Remove returned status value #17832
Labels
breaking-change
Introduces a breaking change in current functionality; usually deferred to the next major release.
service/acmpca
Issues and PRs that pertain to the acmpca service.
technical-debt
Addresses areas of the codebase that need refactoring or redesign.
Milestone
Community Note
Description
When an
aws_acmpca_certificate_authority
is created, it enters the stateCERTIFICATE_PENDING
, where it needs to have a certificate imported before it can be used. A root CA can create its own self-signed certificate when in this state.A certificate can be imported using the console, API, or CLI, and there is work in progress to add the
aws_acmpca_certificate_authority_certificate
resource. When a certificate is imported, the status of the certificate authority changes toACTIVE
. In all of the above cases, Terraform will still report the statusCERTIFICATE_PENDING
.The only other practitioner-controllable status is
DISABLED
. All other states are transitional, and the providers waits until the resource reaches a non-transitional state. https://docs.aws.amazon.com/acm-pca/latest/userguide/PCAUpdateCA.html details the possible states.Switching between
ACTIVE
andDISABLED
is controlled by theenabled
flag on the resource.These factors make the
status
field superfluous and sometimes-incorrect, so it should be removed.Affected Resource
The text was updated successfully, but these errors were encountered: