ConflictException: Tags can only be provided when a resource is being created, not updated.

[camproto]

Description

After update of aws provider to 6.15.0 and using this module I got the following error:

ConflictException: Tags can only be provided when a resource is being
created, not updated.

See bug issue on aws provider
hashicorp/terraform-provider-aws#42194

• ✋ I have searched the open/closed issues and my issue is not listed.

Is there a workaround preventing this issue?

⚠️ Note

Before you submit an issue, please perform the following first:

1. Remove the local .terraform directory (! ONLY if state is stored remotely, which hopefully you are following that best practice!): rm -rf .terraform/
2. Re-initialize the project root to pull down modules: terraform init
3. Re-attempt your terraform plan or apply and check if the issue still persists

Versions

• Module version [Required]:

• Terraform version:

• Provider version(s):

Reproduction Code [Required]

Steps to reproduce the behavior:

Expected behavior

Actual behavior

Terminal Output Screenshot(s)

Additional context

[camproto]

Same problem with aws provider v6.6.0, the min version of this module.

[ScottEspo]

You beat me to it... I was going to suggest potentially adding a lifecycle to ignore tag changes in here:

resource "aws_cloudwatch_log_delivery_source" "this" {
  count = local.create_log_delivery && var.create_log_delivery_source ? 1 : 0

  region = var.region

  name         = coalesce(var.log_delivery_source_name, var.bus_name)
  log_type     = try(format("%s_LOGS", contains(["INFO", "ERROR", "TRACE"], upper(var.log_config.level)) ? upper(var.log_config.level) : "ERROR"), "ERROR_LOGS")
  resource_arn = var.create_bus ? aws_cloudwatch_event_bus.this[0].arn : data.aws_cloudwatch_event_bus.this[0].arn

  tags = var.tags
}

That is the resource that bit us... We apply Org tags to some resources - this is one :) - may be others though

[antonbabenko]

Please open a PR with such a chance.