aws_cloudwatch_metric_alarm - Provider produced inconsistent final plan

[magzim21]

Terraform and AWS Provider Version

Terraform v1.10.5
on darwin_arm64
+ provider registry.terraform.io/cyrilgdn/postgresql v1.23.0
+ provider registry.terraform.io/gavinbunney/kubectl v1.19.0
+ provider registry.terraform.io/hashicorp/archive v2.7.0
+ provider registry.terraform.io/hashicorp/aws v5.92.0
+ provider registry.terraform.io/hashicorp/cloudinit v2.3.6
+ provider registry.terraform.io/hashicorp/helm v2.17.0
+ provider registry.terraform.io/hashicorp/kubernetes v2.36.0
+ provider registry.terraform.io/hashicorp/null v3.2.3
+ provider registry.terraform.io/hashicorp/random v3.7.1
+ provider registry.terraform.io/hashicorp/time v0.13.0
+ provider registry.terraform.io/hashicorp/tls v4.0.6

Affected Resource(s) or Data Source(s)

aws_cloudwatch_metric_alarm

Expected Behavior

successful apply

Actual Behavior

error

Relevant Error/Panic Output

╷
│ Error: Provider produced inconsistent final plan
│
│ When expanding the plan for
│ aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory
│ to include new values learned so far during apply,
│ provider "registry.terraform.io/hashicorp/aws"
│ produced an invalid new value for .threshold: was
│ cty.NumberIntVal(2.576980376e+09), but now
│ cty.NumberIntVal(5.153960755e+09).
│
│ This is a bug in the provider, which should be
│ reported in the provider's own issue tracker.
╵
~/L/Cl/O/Desktop/gitlab-mimecast/human-risk/es-terraform/terraform dev *2 ❯ 

Sample Terraform Configuration

Click to expand configuration

resource "aws_cloudwatch_metric_alarm" "human_risk_score_freeable_memory" {
  alarm_name          = format("P4 - %s-freeable-memory", aws_rds_cluster_instance.human_risk_score.identifier)
  comparison_operator = "LessThanOrEqualToThreshold"
  evaluation_periods  = "2"
  metric_name         = "FreeableMemory"
  namespace           = "AWS/RDS"
  period              = "120"
  statistic           = "Average"
  threshold           = lookup(local.thresholds.freeable_memory, aws_rds_cluster_instance.human_risk_score.instance_class)
  alarm_description   = "Freeable Memory alert for RDS"
  alarm_actions       = [aws_sns_topic.opsgenie.arn]
  ok_actions          = [aws_sns_topic.opsgenie.arn]

  dimensions = {
    DBInstanceIdentifier = aws_rds_cluster_instance.human_risk_score.identifier
  }
}

Steps to Reproduce

terraform init
terraform apply

Debug Logging

Click to expand log output

...
...
2025-05-28T21:16:37.066-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.066-0700 [TRACE] vertex "aws_cloudwatch_metric_alarm.human_risk_score_disk_queue_depth (expand)": visit complete
2025-05-28T21:16:37.066-0700 [TRACE] vertex "aws_cloudwatch_metric_alarm.human_risk_score_write_latency (expand)": expanding dynamic subgraph
2025-05-28T21:16:37.066-0700 [TRACE] vertex "aws_cloudwatch_metric_alarm.human_risk_score_write_latency (expand)": produced no dynamic subgraph
2025-05-28T21:16:37.066-0700 [TRACE] vertex "aws_cloudwatch_metric_alarm.human_risk_score_write_latency (expand)": visit complete
2025-05-28T21:16:37.066-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.067-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.067-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.067-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.067-0700 [TRACE] Re-validating config for "aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory"
2025-05-28T21:16:37.067-0700 [TRACE] GRPCProvider: ValidateResourceConfig
2025-05-28T21:16:37.067-0700 [TRACE] GRPCProvider: GetProviderSchema
2025-05-28T21:16:37.067-0700 [TRACE] GRPCProvider: returning cached schema: EXTRA_VALUE_AT_END=registry.terraform.io/hashicorp/aws
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Received request: @module=sdk.proto tf_provider_addr=registry.terraform.io/hashicorp/aws tf_resource_type=aws_cloudwatch_metric_alarm @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/tf5server/server.go:714 tf_proto_version=5.8 tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_rpc=ValidateResourceTypeConfig timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: No announced client capabilities: tf_proto_version=5.8 @module=sdk.proto tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=ValidateResourceTypeConfig @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/client_capabilities.go:16 timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Sending request downstream: tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=ValidateResourceTypeConfig @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/downstream_request.go:22 @module=sdk.proto tf_proto_version=5.8 tf_provider_addr=registry.terraform.io/hashicorp/aws timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: calling downstream server: @module=sdk.mux tf_mux_provider="*schema.GRPCProviderServer" tf_rpc=ValidateResourceTypeConfig @caller=github.com/hashicorp/terraform-plugin-mux@v0.18.0/internal/logging/mux.go:19 timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Calling downstream: tf_provider_addr=registry.terraform.io/hashicorp/aws tf_resource_type=aws_cloudwatch_metric_alarm @module=sdk.helper_schema @caller=github.com/hashicorp/terraform-plugin-sdk/v2@v2.36.1/helper/schema/grpc_provider.go:315 tf_mux_provider="*schema.GRPCProviderServer" tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_rpc=ValidateResourceTypeConfig timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Called downstream: @caller=github.com/hashicorp/terraform-plugin-sdk/v2@v2.36.1/helper/schema/grpc_provider.go:317 @module=sdk.helper_schema tf_provider_addr=registry.terraform.io/hashicorp/aws tf_mux_provider="*schema.GRPCProviderServer" tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=ValidateResourceTypeConfig timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Received downstream response: diagnostic_warning_count=0 tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=ValidateResourceTypeConfig @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/downstream_request.go:42 diagnostic_error_count=0 tf_proto_version=5.8 tf_req_duration_ms=0 @module=sdk.proto timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Served request: tf_proto_version=5.8 tf_req_id=26a41d74-41f9-5adf-ee8d-337ca0a05a33 @module=sdk.proto tf_rpc=ValidateResourceTypeConfig @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/tf5server/server.go:735 tf_provider_addr=registry.terraform.io/hashicorp/aws tf_resource_type=aws_cloudwatch_metric_alarm timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] GRPCProvider: PlanResourceChange
2025-05-28T21:16:37.068-0700 [TRACE] GRPCProvider: GetProviderSchema
2025-05-28T21:16:37.068-0700 [TRACE] GRPCProvider: returning cached schema: EXTRA_VALUE_AT_END=registry.terraform.io/hashicorp/aws
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Received request: tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad @module=sdk.proto tf_provider_addr=registry.terraform.io/hashicorp/aws tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=PlanResourceChange @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/tf5server/server.go:812 tf_proto_version=5.8 timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Announced client capabilities: tf_client_capability_deferral_allowed=true tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_resource_type=aws_cloudwatch_metric_alarm @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/client_capabilities.go:80 tf_proto_version=5.8 tf_rpc=PlanResourceChange @module=sdk.proto timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Sending request downstream: @module=sdk.proto tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_resource_type=aws_cloudwatch_metric_alarm tf_rpc=PlanResourceChange tf_proto_version=5.8 tf_provider_addr=registry.terraform.io/hashicorp/aws @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/downstream_request.go:22 timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.068-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: calling downstream server: @caller=github.com/hashicorp/terraform-plugin-mux@v0.18.0/internal/logging/mux.go:19 @module=sdk.mux tf_mux_provider="*schema.GRPCProviderServer" tf_rpc=PlanResourceChange timestamp=2025-05-28T21:16:37.068-0700
2025-05-28T21:16:37.069-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Calling downstream: tf_resource_type=aws_cloudwatch_metric_alarm @caller=github.com/hashicorp/terraform-plugin-sdk/v2@v2.36.1/helper/schema/schema.go:709 @module=sdk.helper_schema tf_mux_provider="*schema.GRPCProviderServer" tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_provider_addr=registry.terraform.io/hashicorp/aws tf_rpc=PlanResourceChange timestamp=2025-05-28T21:16:37.069-0700
2025-05-28T21:16:37.070-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Called downstream: @caller=github.com/hashicorp/terraform-plugin-sdk/v2@v2.36.1/helper/schema/schema.go:711 @module=sdk.helper_schema tf_mux_provider="*schema.GRPCProviderServer" tf_resource_type=aws_cloudwatch_metric_alarm tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_rpc=PlanResourceChange timestamp=2025-05-28T21:16:37.069-0700
2025-05-28T21:16:37.070-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Received downstream response: @module=sdk.proto tf_proto_version=5.8 tf_provider_addr=registry.terraform.io/hashicorp/aws tf_rpc=PlanResourceChange tf_req_duration_ms=1 tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_resource_type=aws_cloudwatch_metric_alarm @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/internal/tf5serverlogging/downstream_request.go:42 diagnostic_error_count=0 diagnostic_warning_count=0 timestamp=2025-05-28T21:16:37.070-0700
2025-05-28T21:16:37.070-0700 [TRACE] provider.terraform-provider-aws_v5.92.0_x5: Served request: @caller=github.com/hashicorp/terraform-plugin-go@v0.26.0/tfprotov5/tf5server/server.go:844 tf_proto_version=5.8 tf_provider_addr=registry.terraform.io/hashicorp/aws tf_req_id=9b1e6607-f306-29e7-f627-3eeba17a4dad tf_rpc=PlanResourceChange @module=sdk.proto tf_resource_type=aws_cloudwatch_metric_alarm timestamp=2025-05-28T21:16:37.070-0700
2025-05-28T21:16:37.070-0700 [WARN]  Provider "registry.terraform.io/hashicorp/aws" produced an invalid plan for aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory, but we are tolerating it because it is using the legacy plugin SDK.
    The following problems may be the cause of any confusing errors from downstream operations:
      - .treat_missing_data: planned value cty.StringVal("missing") for a non-computed attribute
      - .actions_enabled: planned value cty.True for a non-computed attribute
2025-05-28T21:16:37.070-0700 [TRACE] checkPlannedChange: Verifying that actual change (action Create) matches planned change (action Create)
2025-05-28T21:16:37.071-0700 [ERROR] vertex "aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory" error: Provider produced inconsistent final plan
2025-05-28T21:16:37.071-0700 [TRACE] vertex "aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory": visit complete, with errors
2025-05-28T21:16:37.071-0700 [TRACE] dag/walk: upstream of "provider[\"registry.terraform.io/hashicorp/aws\"] (close)" errored, so skipping
2025-05-28T21:16:37.071-0700 [TRACE] dag/walk: upstream of "root" errored, so skipping
2025-05-28T21:16:37.071-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/kubernetes" is in the global cache
2025-05-28T21:16:37.071-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/gavinbunney/kubectl" is in the global cache
2025-05-28T21:16:37.071-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/helm" is in the global cache
2025-05-28T21:16:37.071-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/hashicorp/aws" is in the global cache
2025-05-28T21:16:37.071-0700 [TRACE] terraform.contextPlugins: Schema for provider "registry.terraform.io/cyrilgdn/postgresql" is in the global cache
2025-05-28T21:16:37.072-0700 [DEBUG] states/remote: state read serial is: 290; serial is: 290
2025-05-28T21:16:37.072-0700 [DEBUG] states/remote: state read lineage is: b2e6d91b-f11b-f2e4-ae8a-67a21fabec0c; lineage is: b2e6d91b-f11b-f2e4-ae8a-67a21fabec0c
2025-05-28T21:16:37.120-0700 [INFO]  backend-s3: Uploading remote state: tf_backend.operation=Put tf_backend.req_id=47184b11-7468-7282-27c4-4571e39419c9 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate
2025-05-28T21:16:37.120-0700 [DEBUG] backend-s3: HTTP Request Sent: aws.region=eu-west-2 aws.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform aws.s3.key=prod-us-east-1.tfstate rpc.method=PutObject rpc.service=S3 rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.operation=Put tf_backend.req_id=47184b11-7468-7282-27c4-4571e39419c9 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate net.peer.name=mc-terraform-prod-533267351471-tstate-es-terraform.s3.eu-west-2.amazonaws.com http.user_agent="APN/1.0 HashiCorp/1.0 Terraform/1.10.5 (+https://www.terraform.io) m/G aws-sdk-go-v2/1.31.0 os/macos lang/go#1.23.3 md/GOOS#darwin md/GOARCH#arm64 api/s3#1.63.0 ft/s3-transfer" http.request.header.x_amz_date=20250529T041637Z http.request.header.x_amz_decoded_content_length=2087580 http.url=https://mc-terraform-prod-533267351471-tstate-es-terraform.s3.eu-west-2.amazonaws.com/prod-us-east-1.tfstate?x-id=PutObject http.request.header.x_amz_security_token="*****" http.request.header.x_amz_trailer=x-amz-checksum-sha256 http.request.header.accept_encoding=identity http.method=PUT http.request.header.x_amz_content_sha256=STREAMING-UNSIGNED-PAYLOAD-TRAILER http.request.header.content_type=application/json http.request.body="[Redacted: 2.0 MB (2,087,663 bytes), Type: application/json]" http.request.header.amz_sdk_request="attempt=1; max=5" http.request.header.authorization="AWS4-HMAC-SHA256 Credential=ASIA************YLJQ/20250529/eu-west-2/s3/aws4_request, SignedHeaders=accept-encoding;amz-sdk-invocation-id;amz-sdk-request;content-encoding;content-length;content-type;host;x-amz-content-sha256;x-amz-date;x-amz-decoded-content-length;x-amz-sdk-checksum-algorithm;x-amz-security-token;x-amz-trailer, Signature=*****" http.request.header.x_amz_sdk_checksum_algorithm=SHA256 http.request.header.content_encoding=aws-chunked http.request.header.amz_sdk_invocation_id=3be1968e-a71f-467c-806e-963aa5319a5b http.request_content_length=2087663
2025-05-28T21:16:38.726-0700 [DEBUG] backend-s3: HTTP Response Received: aws.region=eu-west-2 aws.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform aws.s3.key=prod-us-east-1.tfstate rpc.method=PutObject rpc.service=S3 rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.operation=Put tf_backend.req_id=47184b11-7468-7282-27c4-4571e39419c9 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.duration=1605 http.response.header.x_amz_server_side_encryption=AES256 http.response.header.x_amz_checksum_type=FULL_OBJECT http.response.body="" http.status_code=200 http.response.header.x_amz_id_2="U7macB87dalcUws0vPodu9P4TFM+B2ONFjMGEsspkSnJpI6oTXyrurvDt1/vHzxOnphdM9ylHUY/FkzXIoCxTw==" http.response.header.x_amz_request_id=5P03M9RB2DJNK76K http.response.header.etag="\"8298dc8f4fc698c642e3fca30eea16bd\"" http.response.header.date="Thu, 29 May 2025 04:16:39 GMT" http.response.header.x_amz_version_id=sfUm6tRXgLjoF4v7XDxHH.c.UCT.VN5q http.response.header.server=AmazonS3 http.response.header.x_amz_checksum_sha256=2qmFbimGH1usutwYIHak2qGE1JW58kSU5kfbryNCJeA=
2025-05-28T21:16:38.728-0700 [DEBUG] backend-s3: HTTP Request Sent: aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=PutItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.operation=Put tf_backend.req_id=47184b11-7468-7282-27c4-4571e39419c9 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.request.header.x_amz_target=DynamoDB_20120810.PutItem http.request.header.amz_sdk_invocation_id=3dfddc48-be3c-44c8-bd47-9965cdf19475 http.request.header.x_amz_date=20250529T041638Z
  http.request.body=
  | {"Item":{"Digest":{"S":"8298dc8f4fc698c642e3fca30eea16bd"},"LockID":{"S":"mc-terraform-prod-533267351471-tstate-es-terraform/prod-us-east-1.tfstate-md5"}},"TableName":"mc-terraform-prod-533267351471-tstate-es-terraform"}
   http.method=POST net.peer.name=533267351471.ddb.eu-west-2.amazonaws.com http.user_agent="APN/1.0 HashiCorp/1.0 Terraform/1.10.5 (+https://www.terraform.io) aws-sdk-go-v2/1.31.0 os/macos lang/go#1.23.3 md/GOOS#darwin md/GOARCH#arm64 api/dynamodb#1.35.0" http.request.header.x_amz_security_token="*****" http.request.header.amz_sdk_request="attempt=1; max=5" http.request.header.accept_encoding=identity http.url=https://533267351471.ddb.eu-west-2.amazonaws.com/ http.request_content_length=220 http.request.header.authorization="AWS4-HMAC-SHA256 Credential=ASIA************YLJQ/20250529/eu-west-2/dynamodb/aws4_request, SignedHeaders=accept-encoding;amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date;x-amz-security-token;x-amz-target, Signature=*****" http.request.header.content_type=application/x-amz-json-1.0
2025-05-28T21:16:38.916-0700 [DEBUG] backend-s3: HTTP Response Received: aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=PutItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.operation=Put tf_backend.req_id=47184b11-7468-7282-27c4-4571e39419c9 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate
  http.response.body=
  | {}
   http.duration=188 http.response_content_length=2 http.response.header.server=Server http.response.header.date="Thu, 29 May 2025 04:16:38 GMT" http.response.header.x_amz_crc32=2745614147 http.status_code=200 http.response.header.content_type=application/x-amz-json-1.0 http.response.header.connection=keep-alive http.response.header.x_amzn_requestid=KUOAD8BO3CF6URTTT3BMVGR3N3VV4KQNSO5AEMVJF66Q9ASUAAJG
╷
│ Error: Provider produced inconsistent final plan
│
│ When expanding the plan for aws_cloudwatch_metric_alarm.human_risk_score_freeable_memory to include new values learned so far during apply, provider
│ "registry.terraform.io/hashicorp/aws" produced an invalid new value for .threshold: was cty.NumberIntVal(5.153960755e+09), but now
│ cty.NumberIntVal(2.576980376e+09).
│
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.
╵
╷
│ Error: deleting IAM Policy (arn:aws:iam::533267351471:policy/api-gateway-cloudwatch-logs): operation error IAM: DeletePolicy, https response error StatusCode: 409, RequestID: a9a9991b-ead6-4598-8a36-a50cc9af9a2b, DeleteConflict: Cannot delete a policy attached to entities.
│
│
╵
2025-05-28T21:16:38.918-0700 [INFO]  backend-s3: Attempting to unlock remote state (DynamoDB only)...: tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate
2025-05-28T21:16:38.918-0700 [DEBUG] backend-s3: HTTP Request Sent: aws.dynamodb.consistent_read=true aws.dynamodb.projection="LockID, Info" aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=GetItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.method=POST http.url=https://533267351471.ddb.eu-west-2.amazonaws.com/ net.peer.name=533267351471.ddb.eu-west-2.amazonaws.com http.user_agent="APN/1.0 HashiCorp/1.0 Terraform/1.10.5 (+https://www.terraform.io) aws-sdk-go-v2/1.31.0 os/macos lang/go#1.23.3 md/GOOS#darwin md/GOARCH#arm64 api/dynamodb#1.35.0" http.request.header.x_amz_date=20250529T041638Z
  http.request.body=
  | {"ConsistentRead":true,"Key":{"LockID":{"S":"mc-terraform-prod-533267351471-tstate-es-terraform/prod-us-east-1.tfstate"}},"ProjectionExpression":"LockID, Info","TableName":"mc-terraform-prod-533267351471-tstate-es-terraform"}
   http.request.header.authorization="AWS4-HMAC-SHA256 Credential=ASIA************YLJQ/20250529/eu-west-2/dynamodb/aws4_request, SignedHeaders=accept-encoding;amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date;x-amz-security-token;x-amz-target, Signature=*****" http.request.header.content_type=application/x-amz-json-1.0 http.request.header.amz_sdk_request="attempt=1; max=5" http.request_content_length=225 http.request.header.x_amz_target=DynamoDB_20120810.GetItem http.request.header.accept_encoding=identity http.request.header.x_amz_security_token="*****" http.request.header.amz_sdk_invocation_id=3f6b8bb3-72ff-4b90-b094-93a38f7b2127
2025-05-28T21:16:39.094-0700 [DEBUG] backend-s3: HTTP Response Received: aws.dynamodb.consistent_read=true aws.dynamodb.projection="LockID, Info" aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=GetItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.duration=175 http.response.header.x_amz_crc32=3652297627 http.response.header.content_type=application/x-amz-json-1.0
  http.response.body=
  | {"Item":{"LockID":{"S":"mc-terraform-prod-533267351471-tstate-es-terraform/prod-us-east-1.tfstate"},"Info":{"S":"{\"ID\":\"e59d8950-3815-6470-7367-f22b4e113dc3\",\"Operation\":\"OperationTypeApply\",\"Info\":\"\",\"Who\":\"monishenko@mimecast.com@MBLP7T3V33MF\",\"Version\":\"1.10.5\",\"Created\":\"2025-05-29T04:14:19.141394Z\",\"Path\":\"mc-terraform-prod-533267351471-tstate-es-terraform/prod-us-east-1.tfstate\"}"}}}
   http.status_code=200 http.response_content_length=420 http.response.header.connection=keep-alive http.response.header.x_amzn_requestid=3ROABM5C19KGODOI0RG11B3KMVVV4KQNSO5AEMVJF66Q9ASUAAJG http.response.header.server=Server http.response.header.date="Thu, 29 May 2025 04:16:38 GMT"
2025-05-28T21:16:39.096-0700 [DEBUG] backend-s3: HTTP Request Sent: aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=DeleteItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.request.header.x_amz_target=DynamoDB_20120810.DeleteItem
  http.request.body=
  | {"Key":{"LockID":{"S":"mc-terraform-prod-533267351471-tstate-es-terraform/prod-us-east-1.tfstate"}},"TableName":"mc-terraform-prod-533267351471-tstate-es-terraform"}
   http.method=POST http.url=https://533267351471.ddb.eu-west-2.amazonaws.com/ net.peer.name=533267351471.ddb.eu-west-2.amazonaws.com http.request.header.x_amz_security_token="*****" http.request.header.amz_sdk_invocation_id=4661b22e-64cd-4c04-bea1-794850ace0d9 http.request.header.accept_encoding=identity http.user_agent="APN/1.0 HashiCorp/1.0 Terraform/1.10.5 (+https://www.terraform.io) aws-sdk-go-v2/1.31.0 os/macos lang/go#1.23.3 md/GOOS#darwin md/GOARCH#arm64 api/dynamodb#1.35.0" http.request.header.x_amz_date=20250529T041639Z http.request_content_length=165 http.request.header.authorization="AWS4-HMAC-SHA256 Credential=ASIA************YLJQ/20250529/eu-west-2/dynamodb/aws4_request, SignedHeaders=accept-encoding;amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date;x-amz-security-token;x-amz-target, Signature=*****" http.request.header.content_type=application/x-amz-json-1.0 http.request.header.amz_sdk_request="attempt=1; max=5"
2025-05-28T21:16:39.270-0700 [DEBUG] backend-s3: HTTP Response Received: aws.dynamodb.table_names=["mc-terraform-prod-533267351471-tstate-es-terraform"] aws.region=eu-west-2 db.system=dynamodb rpc.method=DeleteItem rpc.service=DynamoDB rpc.system=aws-api tf_aws.sdk=aws-sdk-go-v2 tf_aws.signing_region="" tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate http.response.header.x_amz_crc32=2745614147 http.response.header.content_type=application/x-amz-json-1.0 http.response.header.connection=keep-alive http.response.header.x_amzn_requestid=AASNOD8K6UTA8IQL8NL7I74VRNVV4KQNSO5AEMVJF66Q9ASUAAJG http.response.header.server=Server http.response.header.date="Thu, 29 May 2025 04:16:39 GMT"
  http.response.body=
  | {}
   http.duration=174 http.status_code=200 http.response_content_length=2
2025-05-28T21:16:39.270-0700 [INFO]  backend-s3: Unlocked remote state (DynamoDB only): tf_backend.lock.id=e59d8950-3815-6470-7367-f22b4e113dc3 tf_backend.operation=Unlock tf_backend.req_id=57779e01-e6af-0fbe-436c-f30ad26d4002 tf_backend.s3.bucket=mc-terraform-prod-533267351471-tstate-es-terraform tf_backend.s3.path=prod-us-east-1.tfstate
2025-05-28T21:16:39.272-0700 [DEBUG] provider.stdio: received EOF, stopping recv loop: err="rpc error: code = Unavailable desc = error reading from server: EOF"
2025-05-28T21:16:39.283-0700 [INFO]  provider: plugin process exited: plugin=.terraform_prod_us-east-1/providers/registry.terraform.io/hashicorp/aws/5.92.0/darwin_arm64/terraform-provider-aws_v5.92.0_x5 id=47045
2025-05-28T21:16:39.283-0700 [DEBUG] provider: plugin exited
~/L/Cl/O/De/gitl/human-risk/es-terraform/terraform dev *2 !1 ❯ ter                                                                               2m 24s

GenAI / LLM Assisted Development

n/a

Important Facts and References

This error is somehow co-related with changing rds instance size. It is not related to increasing/descreasing specifically.

Would you like to implement a fix?

No

[github-actions]

Community Guidelines

This comment is added to every new Issue to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

• Please vote on this Issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
• Please see our prioritization guide for additional information on how the maintainers handle prioritization.
• Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Issue and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.
• For new resources and data sources, use skaff to generate scaffolding with comments detailing common expectations.

[justinretzolk]

Hey @magzim21 👋 Thank you for taking the time to raise this! It looks like the provider is specifically complaining about threshold, which appears to reference a local value and a aws_rds_cluster_instance. Can you provide a more complete reproduction configuration that includes the definition for those as well, so that whoever picks this up has the information necessary to reproduce?