diff --git a/.changelog/28792.txt b/.changelog/28792.txt new file mode 100644 index 000000000000..9195e3adcb24 --- /dev/null +++ b/.changelog/28792.txt @@ -0,0 +1,3 @@ +```release-note:bug +resource/aws_cloudsearch_domain_service_access_policy: Improve refresh to avoid unnecessary diffs in `access_policy` +``` diff --git a/internal/service/cloudsearch/domain_service_access_policy.go b/internal/service/cloudsearch/domain_service_access_policy.go index 5fd218b7b335..f330ec63ffbd 100644 --- a/internal/service/cloudsearch/domain_service_access_policy.go +++ b/internal/service/cloudsearch/domain_service_access_policy.go @@ -34,10 +34,11 @@ func ResourceDomainServiceAccessPolicy() *schema.Resource { Schema: map[string]*schema.Schema{ "access_policy": { - Type: schema.TypeString, - Required: true, - DiffSuppressFunc: verify.SuppressEquivalentPolicyDiffs, - ValidateFunc: validation.StringIsJSON, + Type: schema.TypeString, + Required: true, + DiffSuppressFunc: verify.SuppressEquivalentPolicyDiffs, + DiffSuppressOnRefresh: true, + ValidateFunc: validation.StringIsJSON, StateFunc: func(v interface{}) string { json, _ := structure.NormalizeJsonString(v) return json