VPC Security Groups Not Updated on Replace about terraform-aws-rds-aurora HOT 4 CLOSED

hi @Velgus - this is due to the way security groups work. security groups are attached to the ENIs and if a security group is referenced by other security groups or still attached to other ENIs then it won't be able to delete it.

from terraform-aws-rds-aurora.

The security group was replaced in the configuration in all locations though. Should TF not be able to handle the replacement gracefully?

Basically:

1. TF creates the new security group
2. TF replaces the old security group with the new security group in all locations
3. TF deletes the old security group

Currently this replacement fails at step 2 for this module in specific, instead it tries to force step 3 pre-emptively - this skipping of step 2 did not happen with any other resources using the same security group.

from terraform-aws-rds-aurora.

its technically not a terraform issue - its the way that AWS handles security groups and their attachment/detachment with ENIs - https://www.google.com/search?client=firefox-b-1-d&q=aws+terraform+security+group+failed+to+delete

from terraform-aws-rds-aurora.

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

from terraform-aws-rds-aurora.