terraform fails when an iam user or role is renamed

[hashibot]

This issue was originally opened by @justin8 as hashicorp/terraform#7939. It was migrated here as part of the provider split. The original body of the issue is below.

---

When renaming a role/user (probably groups as well, but I haven't tested this). It attempts to delete the old resource without detaching the policies, then returns this:

Error applying plan:

1 error(s) occurred:

* aws_iam_user.jenkins-test: Error deleting IAM User jenkins-test: DeleteConflict: Cannot delete entity, must detach all policies first.
    status code: 409, request id: 8c1f8c69-5967-11e6-b3ac-ab2eb361e21c

Terraform does not automatically rollback in the face of errors.
Instead, your Terraform state file has been partially updated with
any resources that successfully completed. Please address the error
above and apply again to incrementally change your infrastructure.

According to hashicorp/terraform#3227 it sounds like this should have already been fixed, but it doesn't seem this way.

Terraform Version

v0.6.616

References

hashicorp/terraform#3227

[bflad]

This was fixed in terraform-provider-aws version 1.7.1. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!