cloudposse/terraform-aws-security-group 2.0.0-rc1 on GitHub

Trade-offs between "create before destroy" and service interruptions clarified in README
New feature flag preserve_security_group_id added to provide some control over when a new security group will be created to replace the existing one

Possibly breaking changes:

create_before_destroy default changed from false to true
With new defaults, any change to a security group rule will cause the security group itself to be replaced. Fixes #34
Require Terraform v1.0.0 or later

More accurate control of create before destroy behaviors @Nuru (#35)

note

README and code are (hopefully) final.

This will be released as v2.0.0-rc1 due to changed defaults, requirement for Terraform 1.0, and possible service interruption when upgrading. Migration document TBD.

what

Make create_before_destroy default to true for security groups
Introduce preserve_security_group_id to control replacement of security group when rules change

why

In most cases, replacing a security group with create_before_destroy = false will fail with an error because you cannot destroy a security group while it is associated with a resource
Fixes #34

cloudposse/terraform-aws-security-group 2.0.0-rc1
v2.0.0-rc1 Default to "create before destroy"

on GitHub

note

what

why

references

cloudposse/terraform-aws-security-group 2.0.0-rc1 v2.0.0-rc1 Default to "create before destroy" on GitHub

note

what

why

references

cloudposse/terraform-aws-security-group 2.0.0-rc1
v2.0.0-rc1 Default to "create before destroy"

on GitHub