aws_opsworks_application password keeps reapplying

[ghost]

This issue was originally opened by @kshinn as hashicorp/terraform#17959. It was migrated here as a result of the provider split. The original body of the issue is below.

---

Terraform Version

Terraform v0.11.7

Terraform Configuration Files

resource "aws_opsworks_application" "node_app_prod" {
  name        = "Node Application"
  short_name  = "node_application"
  stack_id    = "${aws_opsworks_stack.node_app.id}"
  type        = "nodejs"
  description = "Nodejs proxy server with a react frontend"

  app_source = {
    type     = "s3"
    url      = "s3-archive.tgz"
    username = "<AWS_ACCESS_ID>"
    password = "<AWS_SECRET_ID>"
  }
}

Debug Output

Crash Output

Expected Behavior

No changes. Infrastructure is up-to-date.

Actual Behavior

Terraform will perform the following actions:

  ~ aws_opsworks_application.feed_admin
      app_source.0.password: <sensitive> => <sensitive> (attribute changed)

  ~ aws_opsworks_application.feed_admin_prod
      app_source.0.password: <sensitive> => <sensitive> (attribute changed)

Plan: 0 to add, 2 to change, 0 to destroy.

Steps to Reproduce

1. Create an aws_opsworks_application resource using s3 as the app_source as above.
2. terraform plan

Additional Context

References

[ghost]

This has been released in version 2.39.0 of the Terraform AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template for triage. Thanks!

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!