Destruction of IAM User and SSM Parameter on Plan

[nsaud01]

Describe the Bug

Constant destruction and recreation of iam user and ssm parameter on plan/apply. Is there a way to avoid this?

Expected Behavior

User and SSM parameter are created once and done.

Steps to Reproduce

Any time a new TF Plan is initiated.

Screenshots

No response

Environment

No response

Additional Context

Logs:

module.s3_user.module.s3_user.module.store_write[0].aws_ssm_parameter.default["/system_user/s3user-develop/access_key_id"] will be destroyed

(because module.s3_user.module.s3_user.module.store_write[0] is not in configuration)

• resource "aws_ssm_parameter" "default" {
  • arn = "arn:aws:ssm:us-west-2:585798724347:parameter/system_user/s3user-develop/access_key_id" -> null
  • data_type = "text" -> null
  • description = "The AWS_ACCESS_KEY_ID for the s3user-develop user." -> null
  • id = "/system_user/s3user-develop/access_key_id" -> null
  • key_id = "alias/aws/ssm" -> null
  • name = "/system_user/s3user-develop/access_key_id" -> null
  • overwrite = true -> null
  • tags = {
    • "Name" = "s3user-develop"
      } -> null
  • tags_all = {
    • "Name" = "s3user-develop"
      } -> null
  • tier = "Standard" -> null
  • type = "SecureString" -> null
  • value = (sensitive value)
  • version = 6 -> null
    }

module.s3_user.module.s3_user.module.store_write[0].aws_ssm_parameter.default["/system_user/s3user-develop/secret_access_key"] will be destroyed

(because module.s3_user.module.s3_user.module.store_write[0] is not in configuration)

• resource "aws_ssm_parameter" "default" {
  • allowed_pattern = "" -> null
  • arn = "arn:aws:ssm:us-west-2:585798724347:parameter/system_user/s3user-develop/secret_access_key" -> null
  • data_type = "text" -> null
  • description = "The AWS_SECRET_ACCESS_KEY for the s3user-develop user." -> null
  • id = "/system_user/s3user-develop/secret_access_key" -> null
  • key_id = "alias/aws/ssm" -> null
  • name = "/system_user/s3user-develop/secret_access_key" -> null
  • overwrite = true -> null
  • tags = {
    • "Name" = "s3user-develop"
      } -> null
  • tags_all = {
    • "Name" = "s3user-develop"
      } -> null
  • tier = "Standard" -> null
  • type = "SecureString" -> null
  • value = (sensitive value)
  • version = 6 -> null
    }