[bugfix] aws_elasticache_replication_group : added fix for migration from AUTH to RBAC #45518
+244
−19
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Rollback Plan
If a change needs to be reverted, we will publish an updated version of the library.
Changes to Security Controls
Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.
Description
This enables migration from AUTH to RBAC for
aws_elasticache_replication_group.Earlier
auth_token_update_strategyalways requiredauth_tokenbut it was breaking terraform while migrating from AUTH to RBAC. As migrating from AUTH to RBAC expectsauth_token_update_strategyto beDELETEandauth_tokento be null/removed from configuration.[AWS Doc link] (https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html#Migrate-From-RBAC-to-Auth)
After the current fix,
auth_token_update_strategywill still be requiringauth_tokenexcept whenauth_token_update_strategyisDELETE. This is handled with CustomizeDiffauthTokenUpdateStrategyValidate()Relations
Closes #39546
References
https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html#Migrate-From-RBAC-to-Auth
https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.RBAC.html
Output from Acceptance Testing