aws_iam_role.force_detach_policies no longer works

[aleybovich]

Reproduce:

1. Create an aws role with terraform

resource "aws_iam_role" "sample-instance-role" {
   name               = "sample-instance-role"
   path               = "/"
   force_detach_policies = true
   ... other stuff ...
}

2. Manually add another policy to that role (e.g. via aws console)
3. run terraform destroy

You get an error sample-instance-role: DeleteConflict: Cannot delete entity, must detach all policies first.

force_detach_policies feature has been added a few months ago specifically for this purpose - it detaches all policies that weer added outside of terraform so that the role can be deleted. This used to work briefly in one or two versions but it no longer does in 0.10.7

Documentation: https://www.terraform.io/docs/providers/aws/r/iam_role.html#force_detach_policies

[hashibot]

This issue has been automatically migrated to hashicorp/terraform-provider-aws#2279 because it looks like an issue with that provider. If you believe this is not an issue with the provider, please reply to this issue and let us know.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.