aws_security_group - description doesn't change

[adubkov]

# saltmaster
resource "aws_security_group" "satmaster" {
    name = "saltmaster"
    description = "${concat(var.environment, \" saltmaster111\")}"
    ...
}

aws_security_group.satmaster: Modifying...
  description: "eoe-cul saltmaster" => "cep-cul saltmaster1111 "

But nothing was changed.

[adubkov]

Terraform v0.4.0-dev

[catsby]

The AWS API for Security Groups doesn't allow update at this time:

• http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html

Unfortunately, description here should be a ForceNew operation

[bts]

This (the lack of ForceNew) should probably still be considered a "bug" though, right?

If a user wants to change the description on an ELB, they can't do so through terraform -- they have manually delete the resource (and its dependencies) and then rebuild with terraform.

[jszwedko]

I agree, this still feels like a bug @catsby

[inferiorhumanorgans]

Looks like this was resolved in #1871

[phinze]

Yep - fixed in #1871 - after that the description change will be detected and the SG will be replaced to apply the change.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.