[Bug]: aws_bedrock_guardrail resource not deleting Pii types on removal from terraform #41505
Labels
bug
Addresses a defect in current functionality.
needs-triage
Waiting for first response or review from a maintainer.
service/bedrock
Issues and PRs that pertain to the bedrock service.
Terraform Core Version
1.10.5
AWS Provider Version
5.88.0
Affected Resource(s)
aws_bedrock_guardrail
Expected Behavior
It should delete the PII types from Sensitive information filters in AWS bedrock guardrail if I remove pii_entities_config for that PII type from sensitive_information_policy_config section in terraform
Actual Behavior
When I remove pii_entities_config section for a specific PII type, it doesn't get removed from the console. I have to make a small change into the description of the aws_bedrock_guardrail resource and then it removes the PII type from the console on terraform apply.
Relevant Error/Panic Output Snippet
Terraform Configuration Files
resource "aws_bedrock_guardrail" "ca_guardrail" { name="CA_Guardraill_us-east-1" count=1 blocked_input_messaging = "Your inputs must not contain any PII" blocked_outputs_messaging = "Your outputs must not contain any PII" sensitive_information_policy_config { pii_entities_config { action = "BLOCK" type = "NAME" } pii_entities_config { action = "BLOCK" type = "ADDRESS" } pii_entities_config { action = "BLOCK" type = "AWS_SECRET_KEY" } pii_entities_config { action = "BLOCK" type = "DRIVER_ID" } } description = "Guardrail Version 2" }
Steps to Reproduce
This should delete the pii type from aws for the pii that we removed from the sensitive_information_policy_config, but it wont delete.
Debug Output
No response
Panic Output
No response
Important Factoids
No response
References
No response
Would you like to implement a fix?
None
The text was updated successfully, but these errors were encountered: