read only 권한 계정 발급

aws_total/terraform/00_old/tf-dev-cloud-20221025/changes.txt

@@ -0,0 +1,768 @@
+aws_route_table_association.rta-iac-c: Refreshing state... [id=rtbassoc-0fd9ea480fc1bd2ec]
+aws_route_table_association.rta-iac-a: Refreshing state... [id=rtbassoc-0d9f0c70e1d159ede]
+aws_route_table_association.rta-iac-b: Refreshing state... [id=rtbassoc-04f3b256e59854ac7]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io: Refreshing state... [id=sgrule-3927496604]
+aws_route.route-private-rt-datasaker-iac-0-0-0-0--0: Refreshing state... [id=r-rtb-02fa87e2873f596311080289494]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-3238310385]
+aws_security_group.sg-iac-datasaker: Refreshing state... [id=sg-07d769a675ed05b35]
+aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-361293936]
+aws_subnet.sbn-iac-a: Refreshing state... [id=subnet-08330ae1fd7c5d77e]
+aws_subnet.sbn-iac-b: Refreshing state... [id=subnet-0c8c4d1df1a2920e4]
+aws_subnet.sbn-iac-c: Refreshing state... [id=subnet-06e724baf7d879769]
+aws_route_table.rt-datasaker-iac: Refreshing state... [id=rtb-02fa87e2873f59631]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io: Refreshing state... [id=sgrule-3300624291]
+aws_vpc_dhcp_options.vpc-dhcp-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26]
+aws_key_pair.kp-bastion-datasaker: Refreshing state... [id=kp-bastion-datasaker]
+aws_eip.eip-natgw-datasaker: Refreshing state... [id=eipalloc-08b46670f70c2d11d]
+aws_vpc.vpc-datasaker: Refreshing state... [id=vpc-0b6e0b906c678a22f]
+aws_security_group.sg-dev-datasaker: Refreshing state... [id=sg-0aed067b37f609a6f]
+aws_vpc_dhcp_options_association.vpc-dhcp-asso-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26-vpc-0b6e0b906c678a22f]
+aws_route_table.rt-datasaker-pub: Refreshing state... [id=rtb-057ad7940bd4d0e47]
+aws_subnet.sbn-dev-a: Refreshing state... [id=subnet-0c875e254456809f7]
+aws_security_group.sg-dmz-datasaker: Refreshing state... [id=sg-07f27eba164d59dfa]
+aws_internet_gateway.igw-datasaker: Refreshing state... [id=igw-024cfe034db889aee]
+aws_route_table.rt-datasaker-dev: Refreshing state... [id=rtb-0222c34fe74835820]
+aws_subnet.sbn-dev-c: Refreshing state... [id=subnet-0940fd78504acbbde]
+aws_subnet.sbn-dev-b: Refreshing state... [id=subnet-05672a669943fc12f]
+aws_subnet.sbn-dmz-a: Refreshing state... [id=subnet-0de55619bee2411f8]
+aws_subnet.sbn-dmz-b: Refreshing state... [id=subnet-0a5d787353f874684]
+aws_subnet.sbn-dmz-c: Refreshing state... [id=subnet-0ee26ffc561efb292]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io: Refreshing state... [id=sgrule-3441164403]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io: Refreshing state... [id=sgrule-4096359581]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-4111863151]
+aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-320777473]
+aws_route.r-0-0-0-0--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e471080289494]
+aws_route.r-__--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e472750132062]
+aws_route_table_association.rta-dmz-a: Refreshing state... [id=rtbassoc-02b2175a50034917e]
+aws_nat_gateway.natgw-datasaker: Refreshing state... [id=nat-0149e41fa11377dfd]
+aws_route_table_association.rta-dev-a: Refreshing state... [id=rtbassoc-0459be806f7412cc4]
+aws_route_table_association.rta-dev-c: Refreshing state... [id=rtbassoc-02bd4922ff04a92c9]
+aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-807868327]
+aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-3686484473]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io: Refreshing state... [id=sgrule-3688340000]
+aws_route_table_association.rta-dev-b: Refreshing state... [id=rtbassoc-099a4bf3c51f94b59]
+aws_launch_template.lt-dmz-bastion-datasaker: Refreshing state... [id=lt-0a499abed36cc72a3]
+aws_route_table_association.rta-dmz-b: Refreshing state... [id=rtbassoc-094e0157c4a065f34]
+aws_route_table_association.rta-dmz-c: Refreshing state... [id=rtbassoc-0989ba31270eaee71]
+aws_route.route-private-rt-datasaker-dev-0-0-0-0--0: Refreshing state... [id=r-rtb-0222c34fe748358201080289494]
+aws_autoscaling_group.ag-dmz-bastion-datasaker: Refreshing state... [id=ag-dmz-bastion-datasaker]
+
+Note: Objects have changed outside of Terraform
+
+Terraform detected the following changes made outside of Terraform since the
+last "terraform apply":
+
+  # aws_autoscaling_group.ag-dmz-bastion-datasaker has changed
+  ~ resource "aws_autoscaling_group" "ag-dmz-bastion-datasaker" {
+        id                        = "ag-dmz-bastion-datasaker"
+      + load_balancers            = []
+        name                      = "ag-dmz-bastion-datasaker"
+      + suspended_processes       = []
+      + target_group_arns         = []
+      + termination_policies      = []
+        # (19 unchanged attributes hidden)
+
+
+        # (2 unchanged blocks hidden)
+    }
+
+  # aws_eip.eip-natgw-datasaker has changed
+  ~ resource "aws_eip" "eip-natgw-datasaker" {
+      + association_id       = "eipassoc-0a0634f3c2394e898"
+        id                   = "eipalloc-08b46670f70c2d11d"
+      + network_interface    = "eni-013cb7e830637be38"
+      + private_dns          = "ip-172-21-0-244.ap-northeast-2.compute.internal"
+      + private_ip           = "172.21.0.244"
+        tags                 = {
+            "Name" = "eip-natgw-datasaker"
+        }
+        # (8 unchanged attributes hidden)
+    }
+
+  # aws_launch_template.lt-dmz-bastion-datasaker has changed
+  ~ resource "aws_launch_template" "lt-dmz-bastion-datasaker" {
+        id                      = "lt-0a499abed36cc72a3"
+        name                    = "lt-dmz-bastion-datasaker"
+      + security_group_names    = []
+        tags                    = {
+            "Name" = "lt-dmz-bastion-datasaker"
+        }
+      + vpc_security_group_ids  = []
+        # (9 unchanged attributes hidden)
+
+
+
+
+      ~ network_interfaces {
+          + ipv4_addresses              = []
+          + ipv4_prefixes               = []
+          + ipv6_addresses              = []
+          + ipv6_prefixes               = []
+            # (9 unchanged attributes hidden)
+        }
+        # (3 unchanged blocks hidden)
+    }
+
+  # aws_route.route-private-rt-datasaker-iac-0-0-0-0--0 has been deleted
+  - resource "aws_route" "route-private-rt-datasaker-iac-0-0-0-0--0" {
+      - destination_cidr_block = "0.0.0.0/0" -> null
+      - id                     = "r-rtb-02fa87e2873f596311080289494" -> null
+      - nat_gateway_id         = "nat-0149e41fa11377dfd" -> null
+      - origin                 = "CreateRoute" -> null
+      - route_table_id         = "rtb-02fa87e2873f59631" -> null
+      - state                  = "active" -> null
+    }
+
+  # aws_route_table.rt-datasaker-dev has changed
+  ~ resource "aws_route_table" "rt-datasaker-dev" {
+        id               = "rtb-0222c34fe74835820"
+      ~ route            = [
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = "0.0.0.0/0"
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = ""
+              + instance_id                = ""
+              + ipv6_cidr_block            = ""
+              + local_gateway_id           = ""
+              + nat_gateway_id             = "nat-0149e41fa11377dfd"
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+        ]
+        tags             = {
+            "Name" = "rt-datasaker-dev"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+  # aws_route_table.rt-datasaker-iac has been deleted
+  - resource "aws_route_table" "rt-datasaker-iac" {
+      - arn              = "arn:aws:ec2:ap-northeast-2:508259851457:route-table/rtb-02fa87e2873f59631" -> null
+      - id               = "rtb-02fa87e2873f59631" -> null
+      - owner_id         = "508259851457" -> null
+      - propagating_vgws = [] -> null
+      - route            = [] -> null
+      - tags             = {
+          - "Name" = "rt-datasaker-iac"
+        } -> null
+      - tags_all         = {
+          - "Name" = "rt-datasaker-iac"
+        } -> null
+      - vpc_id           = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_route_table.rt-datasaker-pub has changed
+  ~ resource "aws_route_table" "rt-datasaker-pub" {
+        id               = "rtb-057ad7940bd4d0e47"
+      ~ route            = [
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = ""
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = "igw-024cfe034db889aee"
+              + instance_id                = ""
+              + ipv6_cidr_block            = "::/0"
+              + local_gateway_id           = ""
+              + nat_gateway_id             = ""
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = "0.0.0.0/0"
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = "igw-024cfe034db889aee"
+              + instance_id                = ""
+              + ipv6_cidr_block            = ""
+              + local_gateway_id           = ""
+              + nat_gateway_id             = ""
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+        ]
+        tags             = {
+            "Name" = "rt-datasaker-pub"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+  # aws_route_table_association.rta-iac-a has been deleted
+  - resource "aws_route_table_association" "rta-iac-a" {
+      - id             = "rtbassoc-0d9f0c70e1d159ede" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-08330ae1fd7c5d77e" -> null
+    }
+
+  # aws_route_table_association.rta-iac-b has been deleted
+  - resource "aws_route_table_association" "rta-iac-b" {
+      - id             = "rtbassoc-04f3b256e59854ac7" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-0c8c4d1df1a2920e4" -> null
+    }
+
+  # aws_route_table_association.rta-iac-c has been deleted
+  - resource "aws_route_table_association" "rta-iac-c" {
+      - id             = "rtbassoc-0fd9ea480fc1bd2ec" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-06e724baf7d879769" -> null
+    }
+
+  # aws_security_group.sg-dev-datasaker has changed
+  ~ resource "aws_security_group" "sg-dev-datasaker" {
+      ~ egress                 = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 0
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 65535
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 8
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "icmp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 8
+            },
+        ]
+        id                     = "sg-0aed067b37f609a6f"
+      ~ ingress                = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 22
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 22
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 8
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "icmp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 8
+            },
+        ]
+        name                   = "secg-dev-datasaker"
+        tags                   = {
+            "Name" = "sg-dev-datasaker"
+        }
+        # (6 unchanged attributes hidden)
+    }
+
+  # aws_security_group.sg-dmz-datasaker has changed
+  ~ resource "aws_security_group" "sg-dmz-datasaker" {
+      ~ egress                 = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 0
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 65535
+            },
+        ]
+        id                     = "sg-07f27eba164d59dfa"
+      ~ ingress                = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 30000
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 30000
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 443
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 443
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 80
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 80
+            },
+          + {
+              + cidr_blocks      = [
+                  + "115.178.73.2/32",
+                  + "115.178.73.91/32",
+                ]
+              + description      = ""
+              + from_port        = 22
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 22
+            },
+        ]
+        name                   = "secg-dmz-datasaker"
+        tags                   = {
+            "Name" = "sg-dmz-datasaker"
+        }
+        # (6 unchanged attributes hidden)
+    }
+
+  # aws_security_group.sg-iac-datasaker has been deleted
+  - resource "aws_security_group" "sg-iac-datasaker" {
+      - arn                    = "arn:aws:ec2:ap-northeast-2:508259851457:security-group/sg-07d769a675ed05b35" -> null
+      - description            = "Security group iac-datasaker" -> null
+      - egress                 = [] -> null
+      - id                     = "sg-07d769a675ed05b35" -> null
+      - ingress                = [] -> null
+      - name                   = "secg-iac-datasaker" -> null
+      - owner_id               = "508259851457" -> null
+      - revoke_rules_on_delete = false -> null
+      - tags                   = {
+          - "Name" = "sg-iac-datasaker"
+        } -> null
+      - tags_all               = {
+          - "Name" = "sg-iac-datasaker"
+        } -> null
+      - vpc_id                 = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io" {
+        id                = "sgrule-3441164403"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io" {
+        id                = "sgrule-3688340000"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 0 -> null
+      - id                = "sgrule-3927496604" -> null
+      - protocol          = "tcp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 65535 -> null
+      - type              = "egress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io" {
+        id                = "sgrule-4111863151"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 8 -> null
+      - id                = "sgrule-3238310385" -> null
+      - protocol          = "icmp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 0 -> null
+      - type              = "ingress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io" {
+        id                = "sgrule-4096359581"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 22 -> null
+      - id                = "sgrule-3300624291" -> null
+      - protocol          = "tcp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 22 -> null
+      - type              = "ingress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io" {
+        id                = "sgrule-3686484473"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io" {
+        id                = "sgrule-807868327"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io" {
+        id                = "sgrule-320777473"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 8 -> null
+      - id                = "sgrule-361293936" -> null
+      - protocol          = "icmp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 8 -> null
+      - type              = "egress" -> null
+    }
+
+  # aws_subnet.sbn-dev-a has changed
+  ~ resource "aws_subnet" "sbn-dev-a" {
+        id                                             = "subnet-0c875e254456809f7"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-b has changed
+  ~ resource "aws_subnet" "sbn-dev-b" {
+        id                                             = "subnet-05672a669943fc12f"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-c has changed
+  ~ resource "aws_subnet" "sbn-dev-c" {
+        id                                             = "subnet-0940fd78504acbbde"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-iac-a has been deleted
+  - resource "aws_subnet" "sbn-iac-a" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-08330ae1fd7c5d77e" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2a" -> null
+      - availability_zone_id                           = "apne2-az1" -> null
+      - cidr_block                                     = "172.21.16.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-08330ae1fd7c5d77e" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-a.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-a.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_subnet.sbn-iac-b has been deleted
+  - resource "aws_subnet" "sbn-iac-b" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-0c8c4d1df1a2920e4" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2b" -> null
+      - availability_zone_id                           = "apne2-az2" -> null
+      - cidr_block                                     = "172.21.18.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-0c8c4d1df1a2920e4" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-b.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-b.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_subnet.sbn-iac-c has been deleted
+  - resource "aws_subnet" "sbn-iac-c" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-06e724baf7d879769" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2c" -> null
+      - availability_zone_id                           = "apne2-az3" -> null
+      - cidr_block                                     = "172.21.20.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-06e724baf7d879769" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-c.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-c.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_vpc.vpc-datasaker has changed
+  ~ resource "aws_vpc" "vpc-datasaker" {
+      ~ dhcp_options_id                      = "dopt-021d4c0e9e138e269" -> "dopt-086d99ae90c3cde26"
+        id                                   = "vpc-0b6e0b906c678a22f"
+        tags                                 = {
+            "Name" = "vpc-datasaker"
+        }
+        # (18 unchanged attributes hidden)
+    }
+
+  # aws_vpc_dhcp_options.vpc-dhcp-datasaker has changed
+  ~ resource "aws_vpc_dhcp_options" "vpc-dhcp-datasaker" {
+        id                   = "dopt-086d99ae90c3cde26"
+      + netbios_name_servers = []
+      + ntp_servers          = []
+        tags                 = {
+            "Name" = "vpc-dhcp-datasaker"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+
+Unless you have made equivalent changes to your configuration, or ignored the
+relevant attributes using ignore_changes, the following plan may include
+actions to undo or respond to these changes.
+
+─────────────────────────────────────────────────────────────────────────────
+
+Terraform used the selected providers to generate the following execution
+plan. Resource actions are indicated with the following symbols:
+  ~ update in-place
+
+Terraform will perform the following actions:
+
+  # aws_subnet.sbn-dev-a will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-a" {
+        id                                             = "subnet-0c875e254456809f7"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-b will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-b" {
+        id                                             = "subnet-05672a669943fc12f"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-c will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-c" {
+        id                                             = "subnet-0940fd78504acbbde"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+Plan: 0 to add, 3 to change, 0 to destroy.
+
+─────────────────────────────────────────────────────────────────────────────
+
+Note: You didn't use the -out option to save this plan, so Terraform can't
+guarantee to take exactly these actions if you run "terraform apply" now.