[Bug]: App Runner Observability catch-22

[emarref]

Terraform Core Version

1.3.4

AWS Provider Version

4.38.0

Affected Resource(s)

• aws_apprunner_service

Expected Behavior

I should be able to omit the observability_configuration block entirely if I do not want observability, or at least disable it with the observability_enabled = false option within that block without specifying an arn.

Actual Behavior

I created an App Runner service manually via the console (with no observability configured). I then imported it into my terraform configuration.

When I run terraform plan I get a diff notifying observability_enabled = false -> null.

When I add the block to set this value to false then run terraform plan again, I get an error telling me that observability_configuration_arn is required.

When I try again with observability_enabled = null instead of false, I get the same error:

I think it is an issue with the validation. If observability_enabled is set to false, observability_configuration_arn should not be required.

Relevant Error/Panic Output Snippet

Terraform will perform the following actions:

  # aws_apprunner_service.staging will be updated in-place
  ~ resource "aws_apprunner_service" "staging" {
        id                             = "arn:aws:apprunner:us-east-1:669859274049:service/mss-test/b394ed30588645e2b3ff9a98a3c3277e"
        tags                           = {}
        # (7 unchanged attributes hidden)

      - observability_configuration {
          - observability_enabled = false -> null
        }

        # (4 unchanged blocks hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

Terraform Configuration Files

resource "aws_apprunner_service" "staging" {
  service_name = "staging"

  source_configuration {
    auto_deployments_enabled = true

    authentication_configuration {
      access_role_arn = data.aws_iam_role.app_runner_service_role.arn
    }

    image_repository {
      image_identifier      = "${aws_ecr_repository.staging.repository_url}:latest"
      image_repository_type = "ECR"

      image_configuration {
        port = 3000
      }
    }
  }
}

Steps to Reproduce

terraform apply

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

No response

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[emarref]

Quick update - adding an empty ARN prevents the issue.

  observability_configuration {
    observability_enabled = false
    observability_configuration_arn = ""
  }

The above succeeds without any change of state or error.

[bschaatsbergen]

Good catch, thanks @emarref 👍

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.