Test/scenario 5 ultra clean #339

jameslaneovermind · 2025-10-29T19:04:20Z

No description provided.

Copy the CI workflow fix from main to enable reliable CI runs without state lock conflicts.

This change creates a completely isolated VPC CIDR change test by: 1. Changing VPC name to 'workloads-ultra-clean-test' to avoid state conflicts 2. Changing VPC CIDR from 10.0.0.0/16 to 172.16.0.0/16 3. Disabling memory optimization module to eliminate contamination 4. Keeping only VPC-related changes for clean testing This ensures the test only evaluates VPC CIDR change risks without any ECS memory, JVM heap, or other scenario contamination. Impact: Critical - VPC recreation affects all network resources

Comment out memory optimization output references since the module is disabled for clean VPC testing. This resolves the 'Reference to undeclared module' errors. The outputs are disabled to match the commented-out memory_optimization module in main.tf.

…abling The correct approach is to: 1. Keep the memory optimization module enabled (fixes terraform errors) 2. Use clean defaults (2048MB memory, no reductions) 3. Change only the VPC CIDR for testing 4. Let terraform handle state properly This ensures we test pure VPC changes without terraform errors while maintaining clean resource configurations.

github-actions · 2025-10-29T19:14:19Z

Open in Overmind ↗

model|risks_v6

🔴 Change Signals

Routine 🔴 ▇▅▃▂▁ Multiple AWS resources, including ECS services and network ACL rules, are showing first-ever modifications, which is unusual compared to typical patterns.
Policies 🔴 ▃▂▁ Multiple S3 buckets and security groups are showing unusual configurations, including missing server-side encryption and required tags, and allowing SSH access from anywhere, which may need review.
Cost 🟢 ▁ Cost analysis shows a monthly decrease of $96.50 (-35.2%) from $274.11 to $177.61 USD across 100 resources, indicating regular cost optimization.

View signals ↗

🔥 Risks

Replacing ALB and ECS security groups will break ALB→ECS ingress during rule and ENI re-association ‼️High Open Risk ↗
This change replaces the ALB security group sg-05d18b768c900a686 and the ECS tasks security group sg-0f300b2ad9b497952. Today, the ECS SG only permits TCP/8080 from the ALB SG via sgr-044d84814978e5eaa, and the ALB’s ENIs eni-040021267f84c7f73 and eni-095c3a4927de0bab3 are attached to sg-05d18b768c900a686. When the groups are replaced, their GroupIds will change and the ALB ENIs will be reattached to the new ALB SG while the ECS SG rule is being recreated to reference the new source group.

During this swap, the ALB will not match the ECS ingress rule and traffic from the ALB to the ECS tasks on port 8080 will be denied. Target health checks will fail and client requests will drop until the new SGs and the referencing rule converge. The concurrent VPC replacement amplifies the disruption by forcing recreation of these security groups and their attachments.

Subnet replacement will force ENI re-creation, changing IPs/DNS and causing connectivity loss for an EC2 instance and the ALB ‼️High Open Risk ↗
This change replaces the public subnets 10.0.101.0/24 and 10.0.102.0/24. Network interfaces currently in these subnets include eni-0befc84b6800d9b4e on EC2 i-07d8a45328f65dee2 (10.0.102.214) and the ALB interface eni-0b6452ec2650eec87 (10.0.102.183; public ec2-35-179-204-37). Because ENIs cannot be moved between subnets, AWS will recreate and reattach them to the new subnets, releasing their existing private IPs and allocating new ones.

During replacement, the instance and ALB will temporarily lose network connectivity, and any consumers relying on the old private addresses or private DNS names (for example ip-10-0-102-214.eu-west-2.compute.internal and ip-10-0-102-183.eu-west-2.compute.internal) will resolve to stale or unreachable endpoints until attachments and DNS refresh complete. Public connectivity via the ALB may also experience interruption while ENIs are cycled and IPs change.

🟣 Expected Changes

~ rds-db-subnet-group › main-terraform-example

--- current
+++ proposed
@@ -6,7 +6,5 @@
   id: main-terraform-example
   name: main-terraform-example
-  subnet_ids:
-    - subnet-0303f6ca155877094
-    - subnet-0d0a1aff83bd8a460
+  subnet_ids: (known after apply)
   supported_network_types:
     - IPV4

+/- ec2-instance › i-01dcfcab37ba22689

--- current
+++ proposed
@@ -2,74 +2,64 @@
 id: github.com/overmindtech/terraform-example.ec2-instance.module.scenarios[0].aws_instance.app_server
 attributes:
-  ami: ami-0f802dc0fc1809acd
-  arn: arn:aws:ec2:eu-west-2:540044833068:instance/i-01dcfcab37ba22689
+  ami: ami-0ca1753a2af8d9bbf
+  arn: (known after apply)
   associate_public_ip_address: true
-  availability_zone: eu-west-2b
-  capacity_reservation_specification:
-    - capacity_reservation_preference: open
-  cpu_core_count: 1
-  cpu_options:
-    - core_count: 1
-      threads_per_core: 2
-  cpu_threads_per_core: 2
-  credit_specification:
-    - cpu_credits: unlimited
-  disable_api_stop: false
-  disable_api_termination: false
-  ebs_optimized: false
-  enable_primary_ipv6: null
-  enclave_options:
-    - enabled: false
+  availability_zone: (known after apply)
+  capacity_reservation_specification: (known after apply)
+  cpu_core_count: (known after apply)
+  cpu_options: (known after apply)
+  cpu_threads_per_core: (known after apply)
+  disable_api_stop: (known after apply)
+  disable_api_termination: (known after apply)
+  ebs_block_device: (known after apply)
+  ebs_optimized: (known after apply)
+  enable_primary_ipv6: (known after apply)
+  enclave_options: (known after apply)
+  ephemeral_block_device: (known after apply)
   get_password_data: false
-  hibernation: false
-  host_resource_group_arn: null
-  id: i-01dcfcab37ba22689
-  instance_initiated_shutdown_behavior: stop
-  instance_state: running
+  hibernation: null
+  host_id: (known after apply)
+  host_resource_group_arn: (known after apply)
+  iam_instance_profile: (known after apply)
+  id: (known after apply)
+  instance_initiated_shutdown_behavior: (known after apply)
+  instance_lifecycle: (known after apply)
+  instance_market_options: (known after apply)
+  instance_state: (known after apply)
   instance_type: t3.small
-  ipv6_address_count: 0
+  ipv6_address_count: (known after apply)
+  ipv6_addresses: (known after apply)
   key_name: Demo Key Pair
-  maintenance_options:
-    - auto_recovery: default
-  metadata_options:
-    - http_endpoint: enabled
-      http_protocol_ipv6: disabled
-      http_put_response_hop_limit: 1
-      http_tokens: optional
-      instance_metadata_tags: disabled
-  monitoring: false
-  placement_partition_number: 0
-  primary_network_interface_id: eni-0501ad33e98bb6f8c
-  private_dns: ip-10-0-10-239.eu-west-2.compute.internal
-  private_dns_name_options:
-    - enable_resource_name_dns_a_record: false
-      enable_resource_name_dns_aaaa_record: false
-      hostname_type: ip-name
-  private_ip: 10.0.10.239
-  public_dns: ec2-13-41-66-30.eu-west-2.compute.amazonaws.com
-  public_ip: 13.41.66.30
-  root_block_device:
-    - delete_on_termination: true
-      device_name: /dev/xvda
-      encrypted: false
-      iops: 0
-      throughput: 0
-      volume_id: vol-011ca7661217b5823
-      volume_size: 8
-      volume_type: standard
+  maintenance_options: (known after apply)
+  metadata_options: (known after apply)
+  monitoring: (known after apply)
+  network_interface: (known after apply)
+  outpost_arn: (known after apply)
+  password_data: (known after apply)
+  placement_group: (known after apply)
+  placement_partition_number: (known after apply)
+  primary_network_interface_id: (known after apply)
+  private_dns: (known after apply)
+  private_dns_name_options: (known after apply)
+  private_ip: (known after apply)
+  public_dns: (known after apply)
+  public_ip: (known after apply)
+  root_block_device: (known after apply)
+  secondary_private_ips: (known after apply)
+  security_groups: (known after apply)
   source_dest_check: true
-  subnet_id: subnet-036704734045071f9
+  spot_instance_request_id: (known after apply)
+  subnet_id: (known after apply)
   tags:
     Name: App Server
   tags_all:
     Name: App Server
-  tenancy: default
+  tenancy: (known after apply)
   terraform_address: module.scenarios[0].aws_instance.app_server
   terraform_name: module.scenarios[0].aws_instance.app_server
   timeouts: null
-  user_data: null
-  user_data_base64: null
+  user_data: (known after apply)
+  user_data_base64: (known after apply)
   user_data_replace_on_change: false
   volume_tags: null
-  vpc_security_group_ids:
-    - sg-010489fd0c4c07ca5
+  vpc_security_group_ids: (known after apply)

+/- ec2-instance › i-02f292e8a0766d313

--- current
+++ proposed
@@ -2,74 +2,64 @@
 id: github.com/overmindtech/terraform-example.ec2-instance.module.scenarios[0].aws_instance.webserver
 attributes:
-  ami: ami-0f802dc0fc1809acd
-  arn: arn:aws:ec2:eu-west-2:540044833068:instance/i-02f292e8a0766d313
+  ami: ami-0ca1753a2af8d9bbf
+  arn: (known after apply)
   associate_public_ip_address: true
-  availability_zone: eu-west-2a
-  capacity_reservation_specification:
-    - capacity_reservation_preference: open
-  cpu_core_count: 1
-  cpu_options:
-    - core_count: 1
-      threads_per_core: 2
-  cpu_threads_per_core: 2
-  credit_specification:
-    - cpu_credits: unlimited
-  disable_api_stop: false
-  disable_api_termination: false
-  ebs_optimized: false
-  enable_primary_ipv6: null
-  enclave_options:
-    - enabled: false
+  availability_zone: (known after apply)
+  capacity_reservation_specification: (known after apply)
+  cpu_core_count: (known after apply)
+  cpu_options: (known after apply)
+  cpu_threads_per_core: (known after apply)
+  disable_api_stop: (known after apply)
+  disable_api_termination: (known after apply)
+  ebs_block_device: (known after apply)
+  ebs_optimized: (known after apply)
+  enable_primary_ipv6: (known after apply)
+  enclave_options: (known after apply)
+  ephemeral_block_device: (known after apply)
   get_password_data: false
-  hibernation: false
-  host_resource_group_arn: null
-  id: i-02f292e8a0766d313
-  instance_initiated_shutdown_behavior: stop
-  instance_state: running
+  hibernation: null
+  host_id: (known after apply)
+  host_resource_group_arn: (known after apply)
+  iam_instance_profile: (known after apply)
+  id: (known after apply)
+  instance_initiated_shutdown_behavior: (known after apply)
+  instance_lifecycle: (known after apply)
+  instance_market_options: (known after apply)
+  instance_state: (known after apply)
   instance_type: t3.small
-  ipv6_address_count: 0
+  ipv6_address_count: (known after apply)
+  ipv6_addresses: (known after apply)
   key_name: Demo Key Pair
-  maintenance_options:
-    - auto_recovery: default
-  metadata_options:
-    - http_endpoint: enabled
-      http_protocol_ipv6: disabled
-      http_put_response_hop_limit: 1
-      http_tokens: optional
-      instance_metadata_tags: disabled
-  monitoring: false
-  placement_partition_number: 0
-  primary_network_interface_id: eni-0784f95b7ff052c6b
-  private_dns: ip-10-0-9-25.eu-west-2.compute.internal
-  private_dns_name_options:
-    - enable_resource_name_dns_a_record: false
-      enable_resource_name_dns_aaaa_record: false
-      hostname_type: ip-name
-  private_ip: 10.0.9.25
-  public_dns: ec2-13-40-28-149.eu-west-2.compute.amazonaws.com
-  public_ip: 13.40.28.149
-  root_block_device:
-    - delete_on_termination: true
-      device_name: /dev/xvda
-      encrypted: false
-      iops: 0
-      throughput: 0
-      volume_id: vol-0bc99e157a38768b6
-      volume_size: 8
-      volume_type: standard
+  maintenance_options: (known after apply)
+  metadata_options: (known after apply)
+  monitoring: (known after apply)
+  network_interface: (known after apply)
+  outpost_arn: (known after apply)
+  password_data: (known after apply)
+  placement_group: (known after apply)
+  placement_partition_number: (known after apply)
+  primary_network_interface_id: (known after apply)
+  private_dns: (known after apply)
+  private_dns_name_options: (known after apply)
+  private_ip: (known after apply)
+  public_dns: (known after apply)
+  public_ip: (known after apply)
+  root_block_device: (known after apply)
+  secondary_private_ips: (known after apply)
+  security_groups: (known after apply)
   source_dest_check: true
-  subnet_id: subnet-06302fc5a50644cd9
+  spot_instance_request_id: (known after apply)
+  subnet_id: (known after apply)
   tags:
     Name: Webserver
   tags_all:
     Name: Webserver
-  tenancy: default
+  tenancy: (known after apply)
   terraform_address: module.scenarios[0].aws_instance.webserver
   terraform_name: module.scenarios[0].aws_instance.webserver
   timeouts: null
-  user_data: null
-  user_data_base64: null
+  user_data: (known after apply)
+  user_data_base64: (known after apply)
   user_data_replace_on_change: false
   volume_tags: null
-  vpc_security_group_ids:
-    - sg-010489fd0c4c07ca5
+  vpc_security_group_ids: (known after apply)

~ ec2-launch-template › lt-0731f767e6be2ab94

--- current
+++ proposed
@@ -7,7 +7,7 @@
   disable_api_termination: false
   id: lt-0731f767e6be2ab94
-  image_id: ami-0f802dc0fc1809acd
+  image_id: ami-0ca1753a2af8d9bbf
   instance_type: t3.micro
-  latest_version: 20
+  latest_version: (known after apply)
   name: asg-change-launch-template-terraform-example20240827194210168200000007
   name_prefix: asg-change-launch-template-terraform-example
@@ -15,4 +14,3 @@
   terraform_name: module.scenarios[0].aws_launch_template.my_launch_template
   update_default_version: null
-  vpc_security_group_ids:
-    - sg-0f938e19644436ad3
+  vpc_security_group_ids: (known after apply)

~ elbv2-load-balancer › terraform-example

--- current
+++ proposed
@@ -29,10 +29,6 @@
   security_groups:
     - sg-0f938e19644436ad3
-  subnet_mapping:
-    - subnet_id: subnet-016bfadacc9c60bfc
-    - subnet_id: subnet-0b805a32f5d7f0c7b
-  subnets:
-    - subnet-016bfadacc9c60bfc
-    - subnet-0b805a32f5d7f0c7b
+  subnet_mapping: (known after apply)
+  subnets: (known after apply)
   terraform_address: module.scenarios[0].aws_lb.main
   terraform_name: module.scenarios[0].aws_lb.main

~ elbv2-rule › arn:aws:elasticloadbalancing:eu-west-2:540044833068:listener-rule/app/terraform-example/bf6a3b2ff7f6855b/976e92c108b4b457/a38981e3cf5f0ea2

--- current
+++ proposed
@@ -4,5 +4,5 @@
   action:
     - order: 1
-      target_group_arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/facerec-terraform-example/303eb9c3e6a1bb3a
+      target_group_arn: (known after apply)
       type: forward
   arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:listener-rule/app/terraform-example/bf6a3b2ff7f6855b/976e92c108b4b457/a38981e3cf5f0ea2

~ elbv2-rule › arn:aws:elasticloadbalancing:eu-west-2:540044833068:listener-rule/app/terraform-example/bf6a3b2ff7f6855b/976e92c108b4b457/1bc9ce43ef8c94ff

--- current
+++ proposed
@@ -4,5 +4,5 @@
   action:
     - order: 1
-      target_group_arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/visit-counter-terraform-example/4f0ba94956aba94d
+      target_group_arn: (known after apply)
       type: forward
   arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:listener-rule/app/terraform-example/bf6a3b2ff7f6855b/976e92c108b4b457/1bc9ce43ef8c94ff

+/- elbv2-target-group › facerec-terraform-example

--- current
+++ proposed
@@ -2,7 +2,7 @@
 id: github.com/overmindtech/terraform-example.elbv2-target-group.module.scenarios[0].aws_lb_target_group.face
 attributes:
-  arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/facerec-terraform-example/303eb9c3e6a1bb3a
-  arn_suffix: targetgroup/facerec-terraform-example/303eb9c3e6a1bb3a
-  connection_termination: null
+  arn: (known after apply)
+  arn_suffix: (known after apply)
+  connection_termination: (known after apply)
   deregistration_delay: "300"
   health_check:
@@ -10,44 +10,33 @@
       healthy_threshold: 2
       interval: 40
-      matcher: "200"
-      path: /
+      matcher: (known after apply)
+      path: (known after apply)
       port: traffic-port
       protocol: HTTP
       timeout: 30
       unhealthy_threshold: 3
-  id: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/facerec-terraform-example/303eb9c3e6a1bb3a
-  ip_address_type: ipv4
+  id: (known after apply)
+  ip_address_type: (known after apply)
   lambda_multi_value_headers_enabled: false
-  load_balancer_arns:
-    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:loadbalancer/app/terraform-example/bf6a3b2ff7f6855b
-  load_balancing_algorithm_type: round_robin
-  load_balancing_anomaly_mitigation: "off"
-  load_balancing_cross_zone_enabled: use_load_balancer_configuration
+  load_balancer_arns: (known after apply)
+  load_balancing_algorithm_type: (known after apply)
+  load_balancing_anomaly_mitigation: (known after apply)
+  load_balancing_cross_zone_enabled: (known after apply)
   name: facerec-terraform-example
+  name_prefix: (known after apply)
   port: 1234
-  preserve_client_ip: null
+  preserve_client_ip: (known after apply)
   protocol: HTTP
-  protocol_version: HTTP1
+  protocol_version: (known after apply)
   proxy_protocol_v2: false
   slow_start: 0
-  stickiness:
-    - cookie_duration: 86400
-      enabled: false
-      type: lb_cookie
-  target_failover:
-    - on_deregistration: null
-      on_unhealthy: null
-  target_group_health:
-    - dns_failover:
-        - minimum_healthy_targets_count: "1"
-          minimum_healthy_targets_percentage: "off"
-      unhealthy_state_routing:
-        - minimum_healthy_targets_count: 1
-          minimum_healthy_targets_percentage: "off"
-  target_health_state:
-    - enable_unhealthy_connection_termination: null
-      unhealthy_draining_interval: null
+  stickiness: (known after apply)
+  tags: null
+  tags_all: (known after apply)
+  target_failover: (known after apply)
+  target_group_health: (known after apply)
+  target_health_state: (known after apply)
   target_type: ip
   terraform_address: module.scenarios[0].aws_lb_target_group.face
   terraform_name: module.scenarios[0].aws_lb_target_group.face
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- elbv2-target-group › asg-new-terraform-example

--- current
+++ proposed
@@ -2,7 +2,7 @@
 id: github.com/overmindtech/terraform-example.elbv2-target-group.module.scenarios[0].aws_lb_target_group.my_new_target_group
 attributes:
-  arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-new-terraform-example/cd9c2344a5bd126a
-  arn_suffix: targetgroup/asg-new-terraform-example/cd9c2344a5bd126a
-  connection_termination: null
+  arn: (known after apply)
+  arn_suffix: (known after apply)
+  connection_termination: (known after apply)
   deregistration_delay: "300"
   health_check:
@@ -10,42 +10,33 @@
       healthy_threshold: 3
       interval: 30
-      matcher: "200"
+      matcher: (known after apply)
       path: /
       port: traffic-port
       protocol: HTTP
-      timeout: 5
+      timeout: (known after apply)
       unhealthy_threshold: 3
-  id: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-new-terraform-example/cd9c2344a5bd126a
-  ip_address_type: ipv4
+  id: (known after apply)
+  ip_address_type: (known after apply)
   lambda_multi_value_headers_enabled: false
-  load_balancing_algorithm_type: round_robin
-  load_balancing_anomaly_mitigation: "off"
-  load_balancing_cross_zone_enabled: use_load_balancer_configuration
+  load_balancer_arns: (known after apply)
+  load_balancing_algorithm_type: (known after apply)
+  load_balancing_anomaly_mitigation: (known after apply)
+  load_balancing_cross_zone_enabled: (known after apply)
   name: asg-new-terraform-example
+  name_prefix: (known after apply)
   port: 80
-  preserve_client_ip: null
+  preserve_client_ip: (known after apply)
   protocol: HTTP
-  protocol_version: HTTP1
+  protocol_version: (known after apply)
   proxy_protocol_v2: false
   slow_start: 0
-  stickiness:
-    - cookie_duration: 86400
-      enabled: false
-      type: lb_cookie
-  target_failover:
-    - on_deregistration: null
-      on_unhealthy: null
-  target_group_health:
-    - dns_failover:
-        - minimum_healthy_targets_count: "1"
-          minimum_healthy_targets_percentage: "off"
-      unhealthy_state_routing:
-        - minimum_healthy_targets_count: 1
-          minimum_healthy_targets_percentage: "off"
-  target_health_state:
-    - enable_unhealthy_connection_termination: null
-      unhealthy_draining_interval: null
+  stickiness: (known after apply)
+  tags: null
+  tags_all: (known after apply)
+  target_failover: (known after apply)
+  target_group_health: (known after apply)
+  target_health_state: (known after apply)
   target_type: instance
   terraform_address: module.scenarios[0].aws_lb_target_group.my_new_target_group
   terraform_name: module.scenarios[0].aws_lb_target_group.my_new_target_group
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- elbv2-target-group › asg-change-tg-terraform-example

--- current
+++ proposed
@@ -2,7 +2,7 @@
 id: github.com/overmindtech/terraform-example.elbv2-target-group.module.scenarios[0].aws_lb_target_group.my_target_group
 attributes:
-  arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-change-tg-terraform-example/0a7c62c4fe875dce
-  arn_suffix: targetgroup/asg-change-tg-terraform-example/0a7c62c4fe875dce
-  connection_termination: null
+  arn: (known after apply)
+  arn_suffix: (known after apply)
+  connection_termination: (known after apply)
   deregistration_delay: "300"
   health_check:
@@ -10,42 +10,33 @@
       healthy_threshold: 3
       interval: 30
-      matcher: "200"
+      matcher: (known after apply)
       path: /
       port: traffic-port
       protocol: HTTP
-      timeout: 5
+      timeout: (known after apply)
       unhealthy_threshold: 3
-  id: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-change-tg-terraform-example/0a7c62c4fe875dce
-  ip_address_type: ipv4
+  id: (known after apply)
+  ip_address_type: (known after apply)
   lambda_multi_value_headers_enabled: false
-  load_balancing_algorithm_type: round_robin
-  load_balancing_anomaly_mitigation: "off"
-  load_balancing_cross_zone_enabled: use_load_balancer_configuration
+  load_balancer_arns: (known after apply)
+  load_balancing_algorithm_type: (known after apply)
+  load_balancing_anomaly_mitigation: (known after apply)
+  load_balancing_cross_zone_enabled: (known after apply)
   name: asg-change-tg-terraform-example
+  name_prefix: (known after apply)
   port: 80
-  preserve_client_ip: null
+  preserve_client_ip: (known after apply)
   protocol: HTTP
-  protocol_version: HTTP1
+  protocol_version: (known after apply)
   proxy_protocol_v2: false
   slow_start: 0
-  stickiness:
-    - cookie_duration: 86400
-      enabled: false
-      type: lb_cookie
-  target_failover:
-    - on_deregistration: null
-      on_unhealthy: null
-  target_group_health:
-    - dns_failover:
-        - minimum_healthy_targets_count: "1"
-          minimum_healthy_targets_percentage: "off"
-      unhealthy_state_routing:
-        - minimum_healthy_targets_count: 1
-          minimum_healthy_targets_percentage: "off"
-  target_health_state:
-    - enable_unhealthy_connection_termination: null
-      unhealthy_draining_interval: null
+  stickiness: (known after apply)
+  tags: null
+  tags_all: (known after apply)
+  target_failover: (known after apply)
+  target_group_health: (known after apply)
+  target_health_state: (known after apply)
   target_type: instance
   terraform_address: module.scenarios[0].aws_lb_target_group.my_target_group
   terraform_name: module.scenarios[0].aws_lb_target_group.my_target_group
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- elbv2-target-group › visit-counter-terraform-example

--- current
+++ proposed
@@ -2,52 +2,32 @@
 id: github.com/overmindtech/terraform-example.elbv2-target-group.module.scenarios[0].aws_lb_target_group.visit_counter
 attributes:
-  arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/visit-counter-terraform-example/4f0ba94956aba94d
-  arn_suffix: targetgroup/visit-counter-terraform-example/4f0ba94956aba94d
-  connection_termination: null
+  arn: (known after apply)
+  arn_suffix: (known after apply)
+  connection_termination: (known after apply)
   deregistration_delay: "300"
-  health_check:
-    - enabled: true
-      healthy_threshold: 5
-      interval: 30
-      matcher: "200"
-      path: /
-      port: traffic-port
-      protocol: HTTP
-      timeout: 5
-      unhealthy_threshold: 2
-  id: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/visit-counter-terraform-example/4f0ba94956aba94d
-  ip_address_type: ipv4
+  health_check: (known after apply)
+  id: (known after apply)
+  ip_address_type: (known after apply)
   lambda_multi_value_headers_enabled: false
-  load_balancer_arns:
-    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:loadbalancer/app/terraform-example/bf6a3b2ff7f6855b
-  load_balancing_algorithm_type: round_robin
-  load_balancing_anomaly_mitigation: "off"
-  load_balancing_cross_zone_enabled: use_load_balancer_configuration
+  load_balancer_arns: (known after apply)
+  load_balancing_algorithm_type: (known after apply)
+  load_balancing_anomaly_mitigation: (known after apply)
+  load_balancing_cross_zone_enabled: (known after apply)
   name: visit-counter-terraform-example
+  name_prefix: (known after apply)
   port: 80
-  preserve_client_ip: null
+  preserve_client_ip: (known after apply)
   protocol: HTTP
-  protocol_version: HTTP1
+  protocol_version: (known after apply)
   proxy_protocol_v2: false
   slow_start: 0
-  stickiness:
-    - cookie_duration: 86400
-      enabled: false
-      type: lb_cookie
-  target_failover:
-    - on_deregistration: null
-      on_unhealthy: null
-  target_group_health:
-    - dns_failover:
-        - minimum_healthy_targets_count: "1"
-          minimum_healthy_targets_percentage: "off"
-      unhealthy_state_routing:
-        - minimum_healthy_targets_count: 1
-          minimum_healthy_targets_percentage: "off"
-  target_health_state:
-    - enable_unhealthy_connection_termination: null
-      unhealthy_draining_interval: null
+  stickiness: (known after apply)
+  tags: null
+  tags_all: (known after apply)
+  target_failover: (known after apply)
+  target_group_health: (known after apply)
+  target_health_state: (known after apply)
   target_type: ip
   terraform_address: module.scenarios[0].aws_lb_target_group.visit_counter
   terraform_name: module.scenarios[0].aws_lb_target_group.visit_counter
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-network-acl › acl-023a8cd3eff0ae406

--- current
+++ proposed
@@ -2,52 +2,10 @@
 id: github.com/overmindtech/terraform-example.ec2-network-acl.module.scenarios[0].aws_network_acl.restricted
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:network-acl/acl-023a8cd3eff0ae406
-  egress:
-    - action: allow
-      cidr_block: 0.0.0.0/0
-      from_port: 0
-      icmp_code: 0
-      icmp_type: 0
-      protocol: "-1"
-      rule_no: 100
-      to_port: 0
-  id: acl-023a8cd3eff0ae406
-  ingress:
-    - action: allow
-      cidr_block: 0.0.0.0/0
-      from_port: 1024
-      icmp_code: 0
-      icmp_type: 0
-      protocol: "6"
-      rule_no: 300
-      to_port: 65535
-    - action: allow
-      cidr_block: 0.0.0.0/0
-      from_port: 22
-      icmp_code: 0
-      icmp_type: 0
-      protocol: "6"
-      rule_no: 102
-      to_port: 22
-    - action: allow
-      cidr_block: 0.0.0.0/0
-      from_port: 80
-      icmp_code: 0
-      icmp_type: 0
-      protocol: "6"
-      rule_no: 100
-      to_port: 80
-    - action: deny
-      cidr_block: 0.0.0.0/0
-      from_port: 8000
-      icmp_code: 0
-      icmp_type: 0
-      protocol: "6"
-      rule_no: 200
-      to_port: 8100
-  owner_id: "540044833068"
-  subnet_ids:
-    - subnet-036704734045071f9
-    - subnet-06302fc5a50644cd9
+  arn: (known after apply)
+  egress: (known after apply)
+  id: (known after apply)
+  ingress: (known after apply)
+  owner_id: (known after apply)
+  subnet_ids: (known after apply)
   tags:
     Name: Restricted Example
@@ -56,3 +14,3 @@
   terraform_address: module.scenarios[0].aws_network_acl.restricted
   terraform_name: module.scenarios[0].aws_network_acl.restricted
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

~ rds-db-cluster › facial-recognition-terraform-example

--- current
+++ proposed
@@ -33,5 +33,5 @@
   engine_lifecycle_support: open-source-rds-extended-support
   engine_mode: provisioned
-  engine_version: "16.8"
+  engine_version: "16.6"
   engine_version_actual: "16.8"
   final_snapshot_identifier: test

+/- ec2-route-table › rtb-0536cdbeadfe92efa

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].aws_route_table_association.restricted-2b
 attributes:
-  id: rtbassoc-07f1611a1869cafbe
-  route_table_id: rtb-0536cdbeadfe92efa
-  subnet_id: subnet-036704734045071f9
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].aws_route_table_association.restricted-2b
   terraform_name: module.scenarios[0].aws_route_table_association.restricted-2b

+/- ec2-security-group › sg-0f5402e97d1ec84e9

--- current
+++ proposed
@@ -2,5 +2,5 @@
 id: github.com/overmindtech/terraform-example.ec2-security-group.module.scenarios[0].aws_security_group.allow_access
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:security-group/sg-0f5402e97d1ec84e9
+  arn: (known after apply)
   description: Allow access security group
   egress:
@@ -11,5 +11,5 @@
       self: false
       to_port: 0
-  id: sg-0f5402e97d1ec84e9
+  id: (known after apply)
   ingress:
     - cidr_blocks:
@@ -20,8 +20,11 @@
       to_port: 22
   name: allow_access-terraform-example
-  owner_id: "540044833068"
+  name_prefix: (known after apply)
+  owner_id: (known after apply)
   revoke_rules_on_delete: false
+  tags: null
+  tags_all: (known after apply)
   terraform_address: module.scenarios[0].aws_security_group.allow_access
   terraform_name: module.scenarios[0].aws_security_group.allow_access
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-security-group › sg-010489fd0c4c07ca5

--- current
+++ proposed
@@ -2,5 +2,5 @@
 id: github.com/overmindtech/terraform-example.ec2-security-group.module.scenarios[0].aws_security_group.instance_sg
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:security-group/sg-010489fd0c4c07ca5
+  arn: (known after apply)
   description: Managed by Terraform
   egress:
@@ -11,5 +11,5 @@
       self: false
       to_port: 0
-  id: sg-010489fd0c4c07ca5
+  id: (known after apply)
   ingress:
     - cidr_blocks:
@@ -25,10 +25,12 @@
       self: false
       to_port: 8080
-  name: terraform-20240827194211113400000009
-  name_prefix: terraform-
-  owner_id: "540044833068"
+  name: (known after apply)
+  name_prefix: (known after apply)
+  owner_id: (known after apply)
   revoke_rules_on_delete: false
+  tags: null
+  tags_all: (known after apply)
   terraform_address: module.scenarios[0].aws_security_group.instance_sg
   terraform_name: module.scenarios[0].aws_security_group.instance_sg
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-subnet › subnet-06302fc5a50644cd9

--- current
+++ proposed
@@ -2,19 +2,23 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].aws_subnet.restricted-2a
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-06302fc5a50644cd9
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2a
-  availability_zone_id: euw2-az2
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.9.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-06302fc5a50644cd9
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
     Name: Restricted 2a
@@ -24,3 +20,3 @@
   terraform_name: module.scenarios[0].aws_subnet.restricted-2a
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-subnet › subnet-036704734045071f9

--- current
+++ proposed
@@ -2,19 +2,23 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].aws_subnet.restricted-2b
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-036704734045071f9
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2b
-  availability_zone_id: euw2-az3
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.10.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-036704734045071f9
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
     Name: Restricted 2b
@@ -24,3 +20,3 @@
   terraform_name: module.scenarios[0].aws_subnet.restricted-2b
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

~ cloudwatch-alarm › scenarios--a3ec77f7-low-task-count

--- current
+++ proposed
@@ -28,5 +28,5 @@
     Description: Task count alarm for container health monitoring
     Environment: demo
-    ExpectedTasks: "3"
+    ExpectedTasks: "1"
     JavaHeapMB: "1536"
     MemoryMB: "2048"
@@ -38,5 +38,5 @@
     RiskLevel: low
     Scenario: cost-reduction
-    ThresholdTasks: "2.4"
+    ThresholdTasks: "0.8"
   tags_all:
     BusinessImpact: service-degradation
@@ -46,5 +46,5 @@
     Description: Task count alarm for container health monitoring
     Environment: demo
-    ExpectedTasks: "3"
+    ExpectedTasks: "1"
     JavaHeapMB: "1536"
     MemoryMB: "2048"
@@ -56,7 +56,7 @@
     RiskLevel: low
     Scenario: cost-reduction
-    ThresholdTasks: "2.4"
+    ThresholdTasks: "0.8"
   terraform_address: module.scenarios[0].module.memory_optimization.aws_cloudwatch_metric_alarm.low_task_count[0]
   terraform_name: module.scenarios[0].module.memory_optimization.aws_cloudwatch_metric_alarm.low_task_count[0]
-  threshold: 2.4
+  threshold: 0.8
   treat_missing_data: missing

~ cloudwatch-alarm › scenarios--a3ec77f7-unhealthy-targets

--- current
+++ proposed
@@ -10,7 +10,5 @@
   comparison_operator: GreaterThanThreshold
   datapoints_to_alarm: 0
-  dimensions:
-    LoadBalancer: app/scenarios--a3ec77f7-alb/a0268d67b29039c7
-    TargetGroup: targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
+  dimensions: (known after apply)
   evaluation_periods: 2
   id: scenarios--a3ec77f7-unhealthy-targets

~ ecs-cluster › scenarios--a3ec77f7-cluster

--- current
+++ proposed
@@ -11,5 +11,5 @@
     CreatedBy: terraform
     DaysUntilBF: "7"
-    Description: ECS cluster for memory optimization demo - all 3 containers will restart on memory change
+    Description: ECS cluster for memory optimization demo - all 1 containers will restart on memory change
     Environment: demo
     JavaHeapMB: "1536"
@@ -25,5 +25,5 @@
     CreatedBy: terraform
     DaysUntilBF: "7"
-    Description: ECS cluster for memory optimization demo - all 3 containers will restart on memory change
+    Description: ECS cluster for memory optimization demo - all 1 containers will restart on memory change
     Environment: demo
     JavaHeapMB: "1536"

~ elbv2-load-balancer › scenarios--a3ec77f7-alb

--- current
+++ proposed
@@ -27,12 +27,7 @@
   name: scenarios--a3ec77f7-alb
   preserve_host_header: false
-  security_groups:
-    - sg-05d18b768c900a686
-  subnet_mapping:
-    - subnet_id: subnet-016bfadacc9c60bfc
-    - subnet_id: subnet-0b805a32f5d7f0c7b
-  subnets:
-    - subnet-016bfadacc9c60bfc
-    - subnet-0b805a32f5d7f0c7b
+  security_groups: (known after apply)
+  subnet_mapping: (known after apply)
+  subnets: (known after apply)
   tags:
     CreatedBy: terraform

~ elbv2-listener › arn:aws:elasticloadbalancing:eu-west-2:540044833068:listener/app/scenarios--a3ec77f7-alb/a0268d67b29039c7/af5e943a0e473e91

--- current
+++ proposed
@@ -11,5 +11,5 @@
               enabled: false
           target_group:
-            - arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
+            - arn: (known after apply)
               weight: 1
       order: 1

+/- elbv2-target-group › scenarios--a3ec77f7-tg

--- current
+++ proposed
@@ -2,7 +2,7 @@
 id: github.com/overmindtech/terraform-example.elbv2-target-group.module.scenarios[0].module.memory_optimization.aws_lb_target_group.app[0]
 attributes:
-  arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
-  arn_suffix: targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
-  connection_termination: null
+  arn: (known after apply)
+  arn_suffix: (known after apply)
+  connection_termination: (known after apply)
   deregistration_delay: "5"
   health_check:
@@ -16,23 +16,20 @@
       timeout: 5
       unhealthy_threshold: 2
-  id: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
-  ip_address_type: ipv4
+  id: (known after apply)
+  ip_address_type: (known after apply)
   lambda_multi_value_headers_enabled: false
-  load_balancer_arns:
-    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:loadbalancer/app/scenarios--a3ec77f7-alb/a0268d67b29039c7
-  load_balancing_algorithm_type: round_robin
-  load_balancing_anomaly_mitigation: "off"
-  load_balancing_cross_zone_enabled: use_load_balancer_configuration
+  load_balancer_arns: (known after apply)
+  load_balancing_algorithm_type: (known after apply)
+  load_balancing_anomaly_mitigation: (known after apply)
+  load_balancing_cross_zone_enabled: (known after apply)
   name: scenarios--a3ec77f7-tg
+  name_prefix: (known after apply)
   port: 8080
-  preserve_client_ip: null
+  preserve_client_ip: (known after apply)
   protocol: HTTP
-  protocol_version: HTTP1
+  protocol_version: (known after apply)
   proxy_protocol_v2: false
   slow_start: 0
-  stickiness:
-    - cookie_duration: 86400
-      enabled: false
-      type: lb_cookie
+  stickiness: (known after apply)
   tags:
     CreatedBy: terraform
@@ -69,19 +60,9 @@
     risk:deregistration-delay: 5s
     risk:rollback-capability: none
-  target_failover:
-    - on_deregistration: null
-      on_unhealthy: null
-  target_group_health:
-    - dns_failover:
-        - minimum_healthy_targets_count: "1"
-          minimum_healthy_targets_percentage: "off"
-      unhealthy_state_routing:
-        - minimum_healthy_targets_count: 1
-          minimum_healthy_targets_percentage: "off"
-  target_health_state:
-    - enable_unhealthy_connection_termination: null
-      unhealthy_draining_interval: null
+  target_failover: (known after apply)
+  target_group_health: (known after apply)
+  target_health_state: (known after apply)
   target_type: ip
   terraform_address: module.scenarios[0].module.memory_optimization.aws_lb_target_group.app[0]
   terraform_name: module.scenarios[0].module.memory_optimization.aws_lb_target_group.app[0]
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-security-group › sg-05d18b768c900a686

--- current
+++ proposed
@@ -2,5 +2,5 @@
 id: github.com/overmindtech/terraform-example.ec2-security-group.module.scenarios[0].module.memory_optimization.aws_security_group.alb[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:security-group/sg-05d18b768c900a686
+  arn: (known after apply)
   description: Security group for ALB - allows public HTTP access
   egress:
@@ -12,5 +12,5 @@
       self: false
       to_port: 0
-  id: sg-05d18b768c900a686
+  id: (known after apply)
   ingress:
     - cidr_blocks:
@@ -22,5 +22,6 @@
       to_port: 80
   name: scenarios--a3ec77f7-alb-sg
-  owner_id: "540044833068"
+  name_prefix: (known after apply)
+  owner_id: (known after apply)
   revoke_rules_on_delete: false
   tags:
@@ -55,3 +56,3 @@
   terraform_name: module.scenarios[0].module.memory_optimization.aws_security_group.alb[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-security-group › sg-0f300b2ad9b497952

--- current
+++ proposed
@@ -2,5 +2,5 @@
 id: github.com/overmindtech/terraform-example.ec2-security-group.module.scenarios[0].module.memory_optimization.aws_security_group.ecs_tasks[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:security-group/sg-0f300b2ad9b497952
+  arn: (known after apply)
   description: Security group for ECS tasks - allows ALB access
   egress:
@@ -12,15 +12,15 @@
       self: false
       to_port: 0
-  id: sg-0f300b2ad9b497952
+  id: (known after apply)
   ingress:
     - description: HTTP from ALB
       from_port: 8080
       protocol: tcp
-      security_groups:
-        - sg-05d18b768c900a686
+      security_groups: (known after apply)
       self: false
       to_port: 8080
   name: scenarios--a3ec77f7-ecs-sg
-  owner_id: "540044833068"
+  name_prefix: (known after apply)
+  owner_id: (known after apply)
   revoke_rules_on_delete: false
   tags:
@@ -38,5 +31,5 @@
     RiskLevel: low
     Scenario: cost-reduction
-    warning:containers-affected: 3 containers
+    warning:containers-affected: 1 containers
     warning:crash-behavior: immediate OOM after memory reduction
   tags_all:
@@ -54,8 +47,8 @@
     RiskLevel: low
     Scenario: cost-reduction
-    warning:containers-affected: 3 containers
+    warning:containers-affected: 1 containers
     warning:crash-behavior: immediate OOM after memory reduction
   terraform_address: module.scenarios[0].module.memory_optimization.aws_security_group.ecs_tasks[0]
   terraform_name: module.scenarios[0].module.memory_optimization.aws_security_group.ecs_tasks[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-route-table › rtb-0c52db7871965c5a1

--- current
+++ proposed
@@ -2,15 +2,17 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_default_route_table.default[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:route-table/rtb-0c52db7871965c5a1
-  default_route_table_id: rtb-0c52db7871965c5a1
-  id: rtb-0c52db7871965c5a1
-  owner_id: "540044833068"
+  arn: (known after apply)
+  default_route_table_id: (known after apply)
+  id: (known after apply)
+  owner_id: (known after apply)
+  propagating_vgws: null
+  route: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_default_route_table.default[0]
@@ -19,3 +18,3 @@
     create: 5m
     update: 5m
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

~ ec2-address › 3.11.31.83

--- current
+++ proposed
@@ -18,10 +18,10 @@
   public_ipv4_pool: amazon
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2a
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2a
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_eip.nat[0]

~ ec2-address › 18.134.176.13

--- current
+++ proposed
@@ -18,10 +18,10 @@
   public_ipv4_pool: amazon
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2b
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2b
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_eip.nat[1]

~ ec2-internet-gateway › igw-0b7151f8472d03c8a

--- current
+++ proposed
@@ -6,13 +6,13 @@
   owner_id: "540044833068"
   tags:
-    Environment: dev
-    Name: workloads-terraform-example
+    Environment: development
+    Name: workloads-ultra-clean-test
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example
+    Environment: development
+    Name: workloads-ultra-clean-test
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_internet_gateway.this[0]
   terraform_name: module.scenarios[0].module.vpc.aws_internet_gateway.this[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-nat-gateway › nat-0f789c96969ec0dd1

--- current
+++ proposed
@@ -3,19 +3,21 @@
 attributes:
   allocation_id: eipalloc-0fadc539ccfc1cf8b
-  association_id: eipassoc-0b64d37df94f7cd18
+  association_id: (known after apply)
   connectivity_type: public
-  id: nat-0f789c96969ec0dd1
-  network_interface_id: eni-03b3c421d028a400f
-  private_ip: 10.0.101.21
-  public_ip: 3.11.31.83
-  secondary_private_ip_address_count: 0
-  subnet_id: subnet-0b805a32f5d7f0c7b
+  id: (known after apply)
+  network_interface_id: (known after apply)
+  private_ip: (known after apply)
+  public_ip: (known after apply)
+  secondary_allocation_ids: null
+  secondary_private_ip_address_count: (known after apply)
+  secondary_private_ip_addresses: (known after apply)
+  subnet_id: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2a
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2a
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_nat_gateway.this[0]

+/- ec2-nat-gateway › nat-06036dc6d716438e0

--- current
+++ proposed
@@ -3,19 +3,21 @@
 attributes:
   allocation_id: eipalloc-0dde23ba907477d4d
-  association_id: eipassoc-09ddc91ddb2353835
+  association_id: (known after apply)
   connectivity_type: public
-  id: nat-06036dc6d716438e0
-  network_interface_id: eni-03f181a29dcb758e0
-  private_ip: 10.0.102.41
-  public_ip: 18.134.176.13
-  secondary_private_ip_address_count: 0
-  subnet_id: subnet-016bfadacc9c60bfc
+  id: (known after apply)
+  network_interface_id: (known after apply)
+  private_ip: (known after apply)
+  public_ip: (known after apply)
+  secondary_allocation_ids: null
+  secondary_private_ip_address_count: (known after apply)
+  secondary_private_ip_addresses: (known after apply)
+  subnet_id: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2b
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-eu-west-2b
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_nat_gateway.this[1]

+/- ec2-route-table › rtb-07f5933d73ceaab99

--- current
+++ proposed
@@ -2,10 +2,20 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route.private_nat_gateway[0]
 attributes:
+  carrier_gateway_id: null
+  core_network_arn: null
   destination_cidr_block: 0.0.0.0/0
-  id: r-rtb-07f5933d73ceaab991080289494
-  nat_gateway_id: nat-0f789c96969ec0dd1
-  origin: CreateRoute
-  route_table_id: rtb-07f5933d73ceaab99
-  state: active
+  destination_ipv6_cidr_block: null
+  destination_prefix_list_id: null
+  egress_only_gateway_id: null
+  gateway_id: null
+  id: (known after apply)
+  instance_id: (known after apply)
+  instance_owner_id: (known after apply)
+  local_gateway_id: null
+  nat_gateway_id: (known after apply)
+  network_interface_id: (known after apply)
+  origin: (known after apply)
+  route_table_id: (known after apply)
+  state: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route.private_nat_gateway[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route.private_nat_gateway[0]
@@ -14,2 +23,5 @@
     delete: null
     update: null
+  transit_gateway_id: null
+  vpc_endpoint_id: null
+  vpc_peering_connection_id: null

+/- ec2-route-table › rtb-09d0b7c0ce1121c2d

--- current
+++ proposed
@@ -2,10 +2,20 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route.private_nat_gateway[1]
 attributes:
+  carrier_gateway_id: null
+  core_network_arn: null
   destination_cidr_block: 0.0.0.0/0
-  id: r-rtb-09d0b7c0ce1121c2d1080289494
-  nat_gateway_id: nat-06036dc6d716438e0
-  origin: CreateRoute
-  route_table_id: rtb-09d0b7c0ce1121c2d
-  state: active
+  destination_ipv6_cidr_block: null
+  destination_prefix_list_id: null
+  egress_only_gateway_id: null
+  gateway_id: null
+  id: (known after apply)
+  instance_id: (known after apply)
+  instance_owner_id: (known after apply)
+  local_gateway_id: null
+  nat_gateway_id: (known after apply)
+  network_interface_id: (known after apply)
+  origin: (known after apply)
+  route_table_id: (known after apply)
+  state: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route.private_nat_gateway[1]
   terraform_name: module.scenarios[0].module.vpc.aws_route.private_nat_gateway[1]
@@ -14,2 +23,5 @@
     delete: null
     update: null
+  transit_gateway_id: null
+  vpc_endpoint_id: null
+  vpc_peering_connection_id: null

+/- ec2-subnet › subnet-0d0a1aff83bd8a460

--- current
+++ proposed
@@ -2,29 +2,33 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].module.vpc.aws_subnet.private[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-0d0a1aff83bd8a460
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2a
-  availability_zone_id: euw2-az2
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.1.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-0d0a1aff83bd8a460
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2a
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2a
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_subnet.private[0]
   terraform_name: module.scenarios[0].module.vpc.aws_subnet.private[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-subnet › subnet-0303f6ca155877094

--- current
+++ proposed
@@ -2,29 +2,33 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].module.vpc.aws_subnet.private[1]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-0303f6ca155877094
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2b
-  availability_zone_id: euw2-az3
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.2.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-0303f6ca155877094
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2b
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2b
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_subnet.private[1]
   terraform_name: module.scenarios[0].module.vpc.aws_subnet.private[1]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-subnet › subnet-0b805a32f5d7f0c7b

--- current
+++ proposed
@@ -2,29 +2,33 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].module.vpc.aws_subnet.public[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-0b805a32f5d7f0c7b
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2a
-  availability_zone_id: euw2-az2
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.101.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-0b805a32f5d7f0c7b
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-public-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-public-eu-west-2a
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-public-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-public-eu-west-2a
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_subnet.public[0]
   terraform_name: module.scenarios[0].module.vpc.aws_subnet.public[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-subnet › subnet-016bfadacc9c60bfc

--- current
+++ proposed
@@ -2,29 +2,33 @@
 id: github.com/overmindtech/terraform-example.ec2-subnet.module.scenarios[0].module.vpc.aws_subnet.public[1]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:subnet/subnet-016bfadacc9c60bfc
+  arn: (known after apply)
   assign_ipv6_address_on_creation: false
   availability_zone: eu-west-2b
-  availability_zone_id: euw2-az3
+  availability_zone_id: (known after apply)
   cidr_block: 10.0.102.0/24
+  customer_owned_ipv4_pool: null
   enable_dns64: false
-  enable_lni_at_device_index: 0
+  enable_lni_at_device_index: null
   enable_resource_name_dns_a_record_on_launch: false
   enable_resource_name_dns_aaaa_record_on_launch: false
-  id: subnet-016bfadacc9c60bfc
+  id: (known after apply)
+  ipv6_cidr_block: null
+  ipv6_cidr_block_association_id: (known after apply)
   ipv6_native: false
-  map_customer_owned_ip_on_launch: false
+  map_customer_owned_ip_on_launch: null
   map_public_ip_on_launch: false
-  owner_id: "540044833068"
-  private_dns_hostname_type_on_launch: ip-name
+  outpost_arn: null
+  owner_id: (known after apply)
+  private_dns_hostname_type_on_launch: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-public-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-public-eu-west-2b
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-public-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-public-eu-west-2b
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_subnet.public[1]
   terraform_name: module.scenarios[0].module.vpc.aws_subnet.public[1]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-vpc › vpc-0f4ddbf8c33e5c725

--- current
+++ proposed
@@ -2,28 +2,32 @@
 id: github.com/overmindtech/terraform-example.ec2-vpc.module.scenarios[0].module.vpc.aws_vpc.this[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:vpc/vpc-0f4ddbf8c33e5c725
-  assign_generated_ipv6_cidr_block: false
-  cidr_block: 10.0.0.0/16
-  default_network_acl_id: acl-06cbf800ed6cc4f38
-  default_route_table_id: rtb-0c52db7871965c5a1
-  default_security_group_id: sg-0f938e19644436ad3
-  dhcp_options_id: dopt-038753549445222b5
+  arn: (known after apply)
+  assign_generated_ipv6_cidr_block: null
+  cidr_block: 172.16.0.0/16
+  default_network_acl_id: (known after apply)
+  default_route_table_id: (known after apply)
+  default_security_group_id: (known after apply)
+  dhcp_options_id: (known after apply)
   enable_dns_hostnames: true
   enable_dns_support: true
-  enable_network_address_usage_metrics: false
-  id: vpc-0f4ddbf8c33e5c725
+  enable_network_address_usage_metrics: (known after apply)
+  id: (known after apply)
   instance_tenancy: default
   ipv4_ipam_pool_id: null
   ipv4_netmask_length: null
-  ipv6_netmask_length: 0
-  main_route_table_id: rtb-0c52db7871965c5a1
-  owner_id: "540044833068"
+  ipv6_association_id: (known after apply)
+  ipv6_cidr_block: (known after apply)
+  ipv6_cidr_block_network_border_group: (known after apply)
+  ipv6_ipam_pool_id: null
+  ipv6_netmask_length: null
+  main_route_table_id: (known after apply)
+  owner_id: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example
+    Environment: development
+    Name: workloads-ultra-clean-test
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example
+    Environment: development
+    Name: workloads-ultra-clean-test
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_vpc.this[0]

🟠 Unmapped Changes

~ autoscaling-auto-scaling-group › module.scenarios[0].aws_autoscaling_group.my_asg

--- current
+++ proposed
@@ -33,6 +33,5 @@
   protect_from_scale_in: false
   service_linked_role_arn: arn:aws:iam::540044833068:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling
-  target_group_arns:
-    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-change-tg-terraform-example/0a7c62c4fe875dce
+  target_group_arns: (known after apply)
   terraform_address: module.scenarios[0].aws_autoscaling_group.my_asg
   terraform_name: module.scenarios[0].aws_autoscaling_group.my_asg
@@ -41,7 +40,5 @@
     - identifier: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-change-tg-terraform-example/0a7c62c4fe875dce
       type: elbv2
-  vpc_zone_identifier:
-    - subnet-016bfadacc9c60bfc
-    - subnet-0b805a32f5d7f0c7b
+  vpc_zone_identifier: (known after apply)
   wait_for_capacity_timeout: 10m
   wait_for_elb_capacity: null

~ aws_ecs_service › module.scenarios[0].aws_ecs_service.face

--- current
+++ proposed
@@ -26,13 +26,10 @@
     - container_name: facial-recognition
       container_port: 1234
-      target_group_arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/facerec-terraform-example/303eb9c3e6a1bb3a
+      target_group_arn: (known after apply)
   name: facial-recognition
   network_configuration:
     - assign_public_ip: false
-      security_groups:
-        - sg-0f938e19644436ad3
-      subnets:
-        - subnet-0303f6ca155877094
-        - subnet-0d0a1aff83bd8a460
+      security_groups: (known after apply)
+      subnets: (known after apply)
   platform_version: LATEST
   propagate_tags: NONE

~ aws_ecs_service › module.scenarios[0].aws_ecs_service.visit_counter

--- current
+++ proposed
@@ -26,13 +26,10 @@
     - container_name: visit-counter
       container_port: 80
-      target_group_arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/visit-counter-terraform-example/4f0ba94956aba94d
+      target_group_arn: (known after apply)
   name: visit-counter
   network_configuration:
     - assign_public_ip: false
-      security_groups:
-        - sg-0f938e19644436ad3
-      subnets:
-        - subnet-0303f6ca155877094
-        - subnet-0d0a1aff83bd8a460
+      security_groups: (known after apply)
+      subnets: (known after apply)
   platform_version: LATEST
   propagate_tags: NONE

+/- aws_network_acl_rule › module.scenarios[0].aws_network_acl_rule.allow_ephemeral

--- current
+++ proposed
@@ -7,7 +7,8 @@
   icmp_code: null
   icmp_type: null
-  id: nacl-3616826577
-  network_acl_id: acl-023a8cd3eff0ae406
-  protocol: "6"
+  id: (known after apply)
+  ipv6_cidr_block: null
+  network_acl_id: (known after apply)
+  protocol: tcp
   rule_action: allow
   rule_number: 300

+/- aws_network_acl_rule › module.scenarios[0].aws_network_acl_rule.allow_http

--- current
+++ proposed
@@ -7,7 +7,8 @@
   icmp_code: null
   icmp_type: null
-  id: nacl-922394748
-  network_acl_id: acl-023a8cd3eff0ae406
-  protocol: "6"
+  id: (known after apply)
+  ipv6_cidr_block: null
+  network_acl_id: (known after apply)
+  protocol: tcp
   rule_action: allow
   rule_number: 100

+/- aws_network_acl_rule › module.scenarios[0].aws_network_acl_rule.allow_outbound

--- current
+++ proposed
@@ -7,7 +7,8 @@
   icmp_code: null
   icmp_type: null
-  id: nacl-2558372166
-  network_acl_id: acl-023a8cd3eff0ae406
-  protocol: "-1"
+  id: (known after apply)
+  ipv6_cidr_block: null
+  network_acl_id: (known after apply)
+  protocol: all
   rule_action: allow
   rule_number: 100

+/- aws_network_acl_rule › module.scenarios[0].aws_network_acl_rule.allow_ssh

--- current
+++ proposed
@@ -7,7 +7,8 @@
   icmp_code: null
   icmp_type: null
-  id: nacl-3670097635
-  network_acl_id: acl-023a8cd3eff0ae406
-  protocol: "6"
+  id: (known after apply)
+  ipv6_cidr_block: null
+  network_acl_id: (known after apply)
+  protocol: tcp
   rule_action: allow
   rule_number: 102

+/- aws_network_acl_rule › module.scenarios[0].aws_network_acl_rule.deny_high_ports

--- current
+++ proposed
@@ -7,7 +7,8 @@
   icmp_code: null
   icmp_type: null
-  id: nacl-1251706279
-  network_acl_id: acl-023a8cd3eff0ae406
-  protocol: "6"
+  id: (known after apply)
+  ipv6_cidr_block: null
+  network_acl_id: (known after apply)
+  protocol: tcp
   rule_action: deny
   rule_number: 200

~ aws_rds_cluster_instance › module.scenarios[0].aws_rds_cluster_instance.face_database

--- current
+++ proposed
@@ -14,7 +14,7 @@
   endpoint: tf-20240827194315707700000013.cnx7xf6hwmba.eu-west-2.rds.amazonaws.com
   engine: aurora-postgresql
-  engine_version: "16.8"
+  engine_version: "16.6"
   engine_version_actual: "16.8"
-  force_destroy: null
+  force_destroy: false
   id: tf-20240827194315707700000013
   identifier: tf-20240827194315707700000013

+/- ec2-route-table › module.scenarios[0].aws_route_table_association.restricted-2a

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].aws_route_table_association.restricted-2a
 attributes:
-  id: rtbassoc-0e479d8b9c8eb2dd5
-  route_table_id: rtb-0536cdbeadfe92efa
-  subnet_id: subnet-06302fc5a50644cd9
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].aws_route_table_association.restricted-2a
   terraform_name: module.scenarios[0].aws_route_table_association.restricted-2a

~ aws_ecs_service › module.scenarios[0].module.memory_optimization.aws_ecs_service.app[0]

--- current
+++ proposed
@@ -11,5 +11,5 @@
   deployment_maximum_percent: 200
   deployment_minimum_healthy_percent: 100
-  desired_count: 3
+  desired_count: 1
   enable_ecs_managed_tags: false
   enable_execute_command: false
@@ -23,13 +23,10 @@
     - container_name: tomcat-app
       container_port: 8080
-      target_group_arn: arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/scenarios--a3ec77f7-tg/202d88113aa8b778
+      target_group_arn: (known after apply)
   name: scenarios--a3ec77f7-service
   network_configuration:
     - assign_public_ip: true
-      security_groups:
-        - sg-0f300b2ad9b497952
-      subnets:
-        - subnet-016bfadacc9c60bfc
-        - subnet-0b805a32f5d7f0c7b
+      security_groups: (known after apply)
+      subnets: (known after apply)
   platform_version: LATEST
   propagate_tags: NONE
@@ -37,5 +31,5 @@
   tags:
     BusinessContext: cost-optimization
-    ContainersAffected: "3"
+    ContainersAffected: "1"
     CreatedBy: terraform
     DaysUntilBF: "7"
@@ -54,5 +48,5 @@
   tags_all:
     BusinessContext: cost-optimization
-    ContainersAffected: "3"
+    ContainersAffected: "1"
     CreatedBy: terraform
     DaysUntilBF: "7"

+/- aws_default_network_acl › module.scenarios[0].module.vpc.aws_default_network_acl.this[0]

--- current
+++ proposed
@@ -2,11 +2,11 @@
 id: github.com/overmindtech/terraform-example.aws_default_network_acl.module.scenarios[0].module.vpc.aws_default_network_acl.this[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:network-acl/acl-06cbf800ed6cc4f38
-  default_network_acl_id: acl-06cbf800ed6cc4f38
+  arn: (known after apply)
+  default_network_acl_id: (known after apply)
   egress:
     - action: allow
       from_port: 0
-      icmp_code: 0
-      icmp_type: 0
+      icmp_code: null
+      icmp_type: null
       ipv6_cidr_block: ::/0
       protocol: "-1"
@@ -16,15 +13,15 @@
       cidr_block: 0.0.0.0/0
       from_port: 0
-      icmp_code: 0
-      icmp_type: 0
+      icmp_code: null
+      icmp_type: null
       protocol: "-1"
       rule_no: 100
       to_port: 0
-  id: acl-06cbf800ed6cc4f38
+  id: (known after apply)
   ingress:
     - action: allow
       from_port: 0
-      icmp_code: 0
-      icmp_type: 0
+      icmp_code: null
+      icmp_type: null
       ipv6_cidr_block: ::/0
       protocol: "-1"
@@ -34,24 +25,20 @@
       cidr_block: 0.0.0.0/0
       from_port: 0
-      icmp_code: 0
-      icmp_type: 0
+      icmp_code: null
+      icmp_type: null
       protocol: "-1"
       rule_no: 100
       to_port: 0
-  owner_id: "540044833068"
-  subnet_ids:
-    - subnet-016bfadacc9c60bfc
-    - subnet-0303f6ca155877094
-    - subnet-0b805a32f5d7f0c7b
-    - subnet-0d0a1aff83bd8a460
+  owner_id: (known after apply)
+  subnet_ids: null
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_default_network_acl.this[0]
   terraform_name: module.scenarios[0].module.vpc.aws_default_network_acl.this[0]
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- aws_default_security_group › module.scenarios[0].module.vpc.aws_default_security_group.this[0]

--- current
+++ proposed
@@ -2,6 +2,6 @@
 id: github.com/overmindtech/terraform-example.aws_default_security_group.module.scenarios[0].module.vpc.aws_default_security_group.this[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:security-group/sg-0f938e19644436ad3
-  description: default VPC security group
+  arn: (known after apply)
+  description: (known after apply)
   egress:
     - cidr_blocks:
@@ -11,5 +11,5 @@
       self: false
       to_port: 0
-  id: sg-0f938e19644436ad3
+  id: (known after apply)
   ingress:
     - cidr_blocks:
@@ -31,16 +31,17 @@
       self: false
       to_port: 80
-  name: default
-  owner_id: "540044833068"
+  name: (known after apply)
+  name_prefix: (known after apply)
+  owner_id: (known after apply)
   revoke_rules_on_delete: false
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-default
+    Environment: development
+    Name: workloads-ultra-clean-test-default
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_default_security_group.this[0]
   terraform_name: module.scenarios[0].module.vpc.aws_default_security_group.this[0]
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route.public_internet_gateway[0]

--- current
+++ proposed
@@ -2,10 +2,20 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route.public_internet_gateway[0]
 attributes:
+  carrier_gateway_id: null
+  core_network_arn: null
   destination_cidr_block: 0.0.0.0/0
+  destination_ipv6_cidr_block: null
+  destination_prefix_list_id: null
+  egress_only_gateway_id: null
   gateway_id: igw-0b7151f8472d03c8a
-  id: r-rtb-0536cdbeadfe92efa1080289494
-  origin: CreateRoute
-  route_table_id: rtb-0536cdbeadfe92efa
-  state: active
+  id: (known after apply)
+  instance_id: (known after apply)
+  instance_owner_id: (known after apply)
+  local_gateway_id: null
+  nat_gateway_id: null
+  network_interface_id: (known after apply)
+  origin: (known after apply)
+  route_table_id: (known after apply)
+  state: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route.public_internet_gateway[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route.public_internet_gateway[0]
@@ -14,2 +22,5 @@
     delete: null
     update: null
+  transit_gateway_id: null
+  vpc_endpoint_id: null
+  vpc_peering_connection_id: null

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table.private[0]

--- current
+++ proposed
@@ -2,20 +2,19 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table.private[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:route-table/rtb-07f5933d73ceaab99
-  id: rtb-07f5933d73ceaab99
-  owner_id: "540044833068"
-  route:
-    - cidr_block: 0.0.0.0/0
-      nat_gateway_id: nat-0f789c96969ec0dd1
+  arn: (known after apply)
+  id: (known after apply)
+  owner_id: (known after apply)
+  propagating_vgws: (known after apply)
+  route: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2a
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2a
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2a
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_route_table.private[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table.private[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table.private[1]

--- current
+++ proposed
@@ -2,20 +2,19 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table.private[1]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:route-table/rtb-09d0b7c0ce1121c2d
-  id: rtb-09d0b7c0ce1121c2d
-  owner_id: "540044833068"
-  route:
-    - cidr_block: 0.0.0.0/0
-      nat_gateway_id: nat-06036dc6d716438e0
+  arn: (known after apply)
+  id: (known after apply)
+  owner_id: (known after apply)
+  propagating_vgws: (known after apply)
+  route: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2b
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-private-eu-west-2b
+    Environment: development
+    Name: workloads-ultra-clean-test-private-eu-west-2b
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_route_table.private[1]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table.private[1]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table.public[0]

--- current
+++ proposed
@@ -2,20 +2,19 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table.public[0]
 attributes:
-  arn: arn:aws:ec2:eu-west-2:540044833068:route-table/rtb-0536cdbeadfe92efa
-  id: rtb-0536cdbeadfe92efa
-  owner_id: "540044833068"
-  route:
-    - cidr_block: 0.0.0.0/0
-      gateway_id: igw-0b7151f8472d03c8a
+  arn: (known after apply)
+  id: (known after apply)
+  owner_id: (known after apply)
+  propagating_vgws: (known after apply)
+  route: (known after apply)
   tags:
-    Environment: dev
-    Name: workloads-terraform-example-public
+    Environment: development
+    Name: workloads-ultra-clean-test-public
     Terraform: "true"
   tags_all:
-    Environment: dev
-    Name: workloads-terraform-example-public
+    Environment: development
+    Name: workloads-ultra-clean-test-public
     Terraform: "true"
   terraform_address: module.scenarios[0].module.vpc.aws_route_table.public[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table.public[0]
   timeouts: null
-  vpc_id: vpc-0f4ddbf8c33e5c725
+  vpc_id: (known after apply)

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table_association.private[0]

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table_association.private[0]
 attributes:
-  id: rtbassoc-077de5777fc470f2f
-  route_table_id: rtb-07f5933d73ceaab99
-  subnet_id: subnet-0d0a1aff83bd8a460
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route_table_association.private[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table_association.private[0]

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table_association.private[1]

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table_association.private[1]
 attributes:
-  id: rtbassoc-06f764dbe350db950
-  route_table_id: rtb-09d0b7c0ce1121c2d
-  subnet_id: subnet-0303f6ca155877094
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route_table_association.private[1]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table_association.private[1]

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table_association.public[0]

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table_association.public[0]
 attributes:
-  id: rtbassoc-0245ca5327e2f5561
-  route_table_id: rtb-0536cdbeadfe92efa
-  subnet_id: subnet-0b805a32f5d7f0c7b
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route_table_association.public[0]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table_association.public[0]

+/- ec2-route-table › module.scenarios[0].module.vpc.aws_route_table_association.public[1]

--- current
+++ proposed
@@ -2,7 +2,8 @@
 id: github.com/overmindtech/terraform-example.ec2-route-table.module.scenarios[0].module.vpc.aws_route_table_association.public[1]
 attributes:
-  id: rtbassoc-07eecd0c648bbac87
-  route_table_id: rtb-0536cdbeadfe92efa
-  subnet_id: subnet-016bfadacc9c60bfc
+  gateway_id: null
+  id: (known after apply)
+  route_table_id: (known after apply)
+  subnet_id: (known after apply)
   terraform_address: module.scenarios[0].module.vpc.aws_route_table_association.public[1]
   terraform_name: module.scenarios[0].module.vpc.aws_route_table_association.public[1]

💥 Blast Radius

Items 102

Edges 291

jameslaneovermind added 4 commits October 29, 2025 16:41

Add CI fix: disable state locking

5099348

Copy the CI workflow fix from main to enable reliable CI runs without state lock conflicts.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Test/scenario 5 ultra clean #339

Test/scenario 5 ultra clean #339

Uh oh!

jameslaneovermind commented Oct 29, 2025

Uh oh!

github-actions bot commented Oct 29, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Test/scenario 5 ultra clean #339

Are you sure you want to change the base?

Test/scenario 5 ultra clean #339

Uh oh!

Conversation

jameslaneovermind commented Oct 29, 2025

Uh oh!

github-actions bot commented Oct 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Open in Overmind ↗

🔴 Change Signals

🔥 Risks

🟣 Expected Changes

🟠 Unmapped Changes

💥 Blast Radius

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Oct 29, 2025 •

edited

Loading