dsk-iac/terraform/tf-dev-cloud-20221025/changes.txt

aws_route_table_association.rta-iac-c: Refreshing state... [id=rtbassoc-0fd9ea480fc1bd2ec]
aws_route_table_association.rta-iac-a: Refreshing state... [id=rtbassoc-0d9f0c70e1d159ede]
aws_route_table_association.rta-iac-b: Refreshing state... [id=rtbassoc-04f3b256e59854ac7]
aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io: Refreshing state... [id=sgrule-3927496604]
aws_route.route-private-rt-datasaker-iac-0-0-0-0--0: Refreshing state... [id=r-rtb-02fa87e2873f596311080289494]
aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-3238310385]
aws_security_group.sg-iac-datasaker: Refreshing state... [id=sg-07d769a675ed05b35]
aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-361293936]
aws_subnet.sbn-iac-a: Refreshing state... [id=subnet-08330ae1fd7c5d77e]
aws_subnet.sbn-iac-b: Refreshing state... [id=subnet-0c8c4d1df1a2920e4]
aws_subnet.sbn-iac-c: Refreshing state... [id=subnet-06e724baf7d879769]
aws_route_table.rt-datasaker-iac: Refreshing state... [id=rtb-02fa87e2873f59631]
aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io: Refreshing state... [id=sgrule-3300624291]
aws_vpc_dhcp_options.vpc-dhcp-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26]
aws_key_pair.kp-bastion-datasaker: Refreshing state... [id=kp-bastion-datasaker]
aws_eip.eip-natgw-datasaker: Refreshing state... [id=eipalloc-08b46670f70c2d11d]
aws_vpc.vpc-datasaker: Refreshing state... [id=vpc-0b6e0b906c678a22f]
aws_security_group.sg-dev-datasaker: Refreshing state... [id=sg-0aed067b37f609a6f]
aws_vpc_dhcp_options_association.vpc-dhcp-asso-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26-vpc-0b6e0b906c678a22f]
aws_route_table.rt-datasaker-pub: Refreshing state... [id=rtb-057ad7940bd4d0e47]
aws_subnet.sbn-dev-a: Refreshing state... [id=subnet-0c875e254456809f7]
aws_security_group.sg-dmz-datasaker: Refreshing state... [id=sg-07f27eba164d59dfa]
aws_internet_gateway.igw-datasaker: Refreshing state... [id=igw-024cfe034db889aee]
aws_route_table.rt-datasaker-dev: Refreshing state... [id=rtb-0222c34fe74835820]
aws_subnet.sbn-dev-c: Refreshing state... [id=subnet-0940fd78504acbbde]
aws_subnet.sbn-dev-b: Refreshing state... [id=subnet-05672a669943fc12f]
aws_subnet.sbn-dmz-a: Refreshing state... [id=subnet-0de55619bee2411f8]
aws_subnet.sbn-dmz-b: Refreshing state... [id=subnet-0a5d787353f874684]
aws_subnet.sbn-dmz-c: Refreshing state... [id=subnet-0ee26ffc561efb292]
aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io: Refreshing state... [id=sgrule-3441164403]
aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io: Refreshing state... [id=sgrule-4096359581]
aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-4111863151]
aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-320777473]
aws_route.r-0-0-0-0--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e471080289494]
aws_route.r-__--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e472750132062]
aws_route_table_association.rta-dmz-a: Refreshing state... [id=rtbassoc-02b2175a50034917e]
aws_nat_gateway.natgw-datasaker: Refreshing state... [id=nat-0149e41fa11377dfd]
aws_route_table_association.rta-dev-a: Refreshing state... [id=rtbassoc-0459be806f7412cc4]
aws_route_table_association.rta-dev-c: Refreshing state... [id=rtbassoc-02bd4922ff04a92c9]
aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-807868327]
aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-3686484473]
aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io: Refreshing state... [id=sgrule-3688340000]
aws_route_table_association.rta-dev-b: Refreshing state... [id=rtbassoc-099a4bf3c51f94b59]
aws_launch_template.lt-dmz-bastion-datasaker: Refreshing state... [id=lt-0a499abed36cc72a3]
aws_route_table_association.rta-dmz-b: Refreshing state... [id=rtbassoc-094e0157c4a065f34]
aws_route_table_association.rta-dmz-c: Refreshing state... [id=rtbassoc-0989ba31270eaee71]
aws_route.route-private-rt-datasaker-dev-0-0-0-0--0: Refreshing state... [id=r-rtb-0222c34fe748358201080289494]
aws_autoscaling_group.ag-dmz-bastion-datasaker: Refreshing state... [id=ag-dmz-bastion-datasaker]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # aws_autoscaling_group.ag-dmz-bastion-datasaker has changed
  ~ resource "aws_autoscaling_group" "ag-dmz-bastion-datasaker" {
        id                        = "ag-dmz-bastion-datasaker"
      + load_balancers            = []
        name                      = "ag-dmz-bastion-datasaker"
      + suspended_processes       = []
      + target_group_arns         = []
      + termination_policies      = []
        # (19 unchanged attributes hidden)


        # (2 unchanged blocks hidden)
    }

  # aws_eip.eip-natgw-datasaker has changed
  ~ resource "aws_eip" "eip-natgw-datasaker" {
      + association_id       = "eipassoc-0a0634f3c2394e898"
        id                   = "eipalloc-08b46670f70c2d11d"
      + network_interface    = "eni-013cb7e830637be38"
      + private_dns          = "ip-172-21-0-244.ap-northeast-2.compute.internal"
      + private_ip           = "172.21.0.244"
        tags                 = {
            "Name" = "eip-natgw-datasaker"
        }
        # (8 unchanged attributes hidden)
    }

  # aws_launch_template.lt-dmz-bastion-datasaker has changed
  ~ resource "aws_launch_template" "lt-dmz-bastion-datasaker" {
        id                      = "lt-0a499abed36cc72a3"
        name                    = "lt-dmz-bastion-datasaker"
      + security_group_names    = []
        tags                    = {
            "Name" = "lt-dmz-bastion-datasaker"
        }
      + vpc_security_group_ids  = []
        # (9 unchanged attributes hidden)




      ~ network_interfaces {
          + ipv4_addresses              = []
          + ipv4_prefixes               = []
          + ipv6_addresses              = []
          + ipv6_prefixes               = []
            # (9 unchanged attributes hidden)
        }
        # (3 unchanged blocks hidden)
    }

  # aws_route.route-private-rt-datasaker-iac-0-0-0-0--0 has been deleted
  - resource "aws_route" "route-private-rt-datasaker-iac-0-0-0-0--0" {
      - destination_cidr_block = "0.0.0.0/0" -> null
      - id                     = "r-rtb-02fa87e2873f596311080289494" -> null
      - nat_gateway_id         = "nat-0149e41fa11377dfd" -> null
      - origin                 = "CreateRoute" -> null
      - route_table_id         = "rtb-02fa87e2873f59631" -> null
      - state                  = "active" -> null
    }

  # aws_route_table.rt-datasaker-dev has changed
  ~ resource "aws_route_table" "rt-datasaker-dev" {
        id               = "rtb-0222c34fe74835820"
      ~ route            = [
          + {
              + carrier_gateway_id         = ""
              + cidr_block                 = "0.0.0.0/0"
              + core_network_arn           = ""
              + destination_prefix_list_id = ""
              + egress_only_gateway_id     = ""
              + gateway_id                 = ""
              + instance_id                = ""
              + ipv6_cidr_block            = ""
              + local_gateway_id           = ""
              + nat_gateway_id             = "nat-0149e41fa11377dfd"
              + network_interface_id       = ""
              + transit_gateway_id         = ""
              + vpc_endpoint_id            = ""
              + vpc_peering_connection_id  = ""
            },
        ]
        tags             = {
            "Name" = "rt-datasaker-dev"
        }
        # (5 unchanged attributes hidden)
    }

  # aws_route_table.rt-datasaker-iac has been deleted
  - resource "aws_route_table" "rt-datasaker-iac" {
      - arn              = "arn:aws:ec2:ap-northeast-2:508259851457:route-table/rtb-02fa87e2873f59631" -> null
      - id               = "rtb-02fa87e2873f59631" -> null
      - owner_id         = "508259851457" -> null
      - propagating_vgws = [] -> null
      - route            = [] -> null
      - tags             = {
          - "Name" = "rt-datasaker-iac"
        } -> null
      - tags_all         = {
          - "Name" = "rt-datasaker-iac"
        } -> null
      - vpc_id           = "vpc-0b6e0b906c678a22f" -> null
    }

  # aws_route_table.rt-datasaker-pub has changed
  ~ resource "aws_route_table" "rt-datasaker-pub" {
        id               = "rtb-057ad7940bd4d0e47"
      ~ route            = [
          + {
              + carrier_gateway_id         = ""
              + cidr_block                 = ""
              + core_network_arn           = ""
              + destination_prefix_list_id = ""
              + egress_only_gateway_id     = ""
              + gateway_id                 = "igw-024cfe034db889aee"
              + instance_id                = ""
              + ipv6_cidr_block            = "::/0"
              + local_gateway_id           = ""
              + nat_gateway_id             = ""
              + network_interface_id       = ""
              + transit_gateway_id         = ""
              + vpc_endpoint_id            = ""
              + vpc_peering_connection_id  = ""
            },
          + {
              + carrier_gateway_id         = ""
              + cidr_block                 = "0.0.0.0/0"
              + core_network_arn           = ""
              + destination_prefix_list_id = ""
              + egress_only_gateway_id     = ""
              + gateway_id                 = "igw-024cfe034db889aee"
              + instance_id                = ""
              + ipv6_cidr_block            = ""
              + local_gateway_id           = ""
              + nat_gateway_id             = ""
              + network_interface_id       = ""
              + transit_gateway_id         = ""
              + vpc_endpoint_id            = ""
              + vpc_peering_connection_id  = ""
            },
        ]
        tags             = {
            "Name" = "rt-datasaker-pub"
        }
        # (5 unchanged attributes hidden)
    }

  # aws_route_table_association.rta-iac-a has been deleted
  - resource "aws_route_table_association" "rta-iac-a" {
      - id             = "rtbassoc-0d9f0c70e1d159ede" -> null
      - route_table_id = "rtb-02fa87e2873f59631" -> null
      - subnet_id      = "subnet-08330ae1fd7c5d77e" -> null
    }

  # aws_route_table_association.rta-iac-b has been deleted
  - resource "aws_route_table_association" "rta-iac-b" {
      - id             = "rtbassoc-04f3b256e59854ac7" -> null
      - route_table_id = "rtb-02fa87e2873f59631" -> null
      - subnet_id      = "subnet-0c8c4d1df1a2920e4" -> null
    }

  # aws_route_table_association.rta-iac-c has been deleted
  - resource "aws_route_table_association" "rta-iac-c" {
      - id             = "rtbassoc-0fd9ea480fc1bd2ec" -> null
      - route_table_id = "rtb-02fa87e2873f59631" -> null
      - subnet_id      = "subnet-06e724baf7d879769" -> null
    }

  # aws_security_group.sg-dev-datasaker has changed
  ~ resource "aws_security_group" "sg-dev-datasaker" {
      ~ egress                 = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 0
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 65535
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 8
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "icmp"
              + security_groups  = []
              + self             = false
              + to_port          = 8
            },
        ]
        id                     = "sg-0aed067b37f609a6f"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 22
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 22
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 8
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "icmp"
              + security_groups  = []
              + self             = false
              + to_port          = 8
            },
        ]
        name                   = "secg-dev-datasaker"
        tags                   = {
            "Name" = "sg-dev-datasaker"
        }
        # (6 unchanged attributes hidden)
    }

  # aws_security_group.sg-dmz-datasaker has changed
  ~ resource "aws_security_group" "sg-dmz-datasaker" {
      ~ egress                 = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 0
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 65535
            },
        ]
        id                     = "sg-07f27eba164d59dfa"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 30000
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 30000
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 443
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 443
            },
          + {
              + cidr_blocks      = [
                  + "0.0.0.0/0",
                ]
              + description      = ""
              + from_port        = 80
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 80
            },
          + {
              + cidr_blocks      = [
                  + "115.178.73.2/32",
                  + "115.178.73.91/32",
                ]
              + description      = ""
              + from_port        = 22
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 22
            },
        ]
        name                   = "secg-dmz-datasaker"
        tags                   = {
            "Name" = "sg-dmz-datasaker"
        }
        # (6 unchanged attributes hidden)
    }

  # aws_security_group.sg-iac-datasaker has been deleted
  - resource "aws_security_group" "sg-iac-datasaker" {
      - arn                    = "arn:aws:ec2:ap-northeast-2:508259851457:security-group/sg-07d769a675ed05b35" -> null
      - description            = "Security group iac-datasaker" -> null
      - egress                 = [] -> null
      - id                     = "sg-07d769a675ed05b35" -> null
      - ingress                = [] -> null
      - name                   = "secg-iac-datasaker" -> null
      - owner_id               = "508259851457" -> null
      - revoke_rules_on_delete = false -> null
      - tags                   = {
          - "Name" = "sg-iac-datasaker"
        } -> null
      - tags_all               = {
          - "Name" = "sg-iac-datasaker"
        } -> null
      - vpc_id                 = "vpc-0b6e0b906c678a22f" -> null
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io" {
        id                = "sgrule-3441164403"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io" {
        id                = "sgrule-3688340000"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io has been deleted
  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io" {
      - cidr_blocks       = [
          - "0.0.0.0/0",
        ] -> null
      - from_port         = 0 -> null
      - id                = "sgrule-3927496604" -> null
      - protocol          = "tcp" -> null
      - security_group_id = "sg-07d769a675ed05b35" -> null
      - self              = false -> null
      - to_port           = 65535 -> null
      - type              = "egress" -> null
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io" {
        id                = "sgrule-4111863151"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io has been deleted
  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io" {
      - cidr_blocks       = [
          - "0.0.0.0/0",
        ] -> null
      - from_port         = 8 -> null
      - id                = "sgrule-3238310385" -> null
      - protocol          = "icmp" -> null
      - security_group_id = "sg-07d769a675ed05b35" -> null
      - self              = false -> null
      - to_port           = 0 -> null
      - type              = "ingress" -> null
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io" {
        id                = "sgrule-4096359581"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io has been deleted
  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io" {
      - cidr_blocks       = [
          - "0.0.0.0/0",
        ] -> null
      - from_port         = 22 -> null
      - id                = "sgrule-3300624291" -> null
      - protocol          = "tcp" -> null
      - security_group_id = "sg-07d769a675ed05b35" -> null
      - self              = false -> null
      - to_port           = 22 -> null
      - type              = "ingress" -> null
    }

  # aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io" {
        id                = "sgrule-3686484473"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io" {
        id                = "sgrule-807868327"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io has changed
  ~ resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io" {
        id                = "sgrule-320777473"
        # (7 unchanged attributes hidden)
    }

  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io has been deleted
  - resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io" {
      - cidr_blocks       = [
          - "0.0.0.0/0",
        ] -> null
      - from_port         = 8 -> null
      - id                = "sgrule-361293936" -> null
      - protocol          = "icmp" -> null
      - security_group_id = "sg-07d769a675ed05b35" -> null
      - self              = false -> null
      - to_port           = 8 -> null
      - type              = "egress" -> null
    }

  # aws_subnet.sbn-dev-a has changed
  ~ resource "aws_subnet" "sbn-dev-a" {
        id                                             = "subnet-0c875e254456809f7"
      ~ tags                                           = {
          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

  # aws_subnet.sbn-dev-b has changed
  ~ resource "aws_subnet" "sbn-dev-b" {
        id                                             = "subnet-05672a669943fc12f"
      ~ tags                                           = {
          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

  # aws_subnet.sbn-dev-c has changed
  ~ resource "aws_subnet" "sbn-dev-c" {
        id                                             = "subnet-0940fd78504acbbde"
      ~ tags                                           = {
          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

  # aws_subnet.sbn-iac-a has been deleted
  - resource "aws_subnet" "sbn-iac-a" {
      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-08330ae1fd7c5d77e" -> null
      - assign_ipv6_address_on_creation                = false -> null
      - availability_zone                              = "ap-northeast-2a" -> null
      - availability_zone_id                           = "apne2-az1" -> null
      - cidr_block                                     = "172.21.16.0/23" -> null
      - enable_dns64                                   = false -> null
      - enable_resource_name_dns_a_record_on_launch    = true -> null
      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
      - id                                             = "subnet-08330ae1fd7c5d77e" -> null
      - ipv6_native                                    = false -> null
      - map_customer_owned_ip_on_launch                = false -> null
      - map_public_ip_on_launch                        = false -> null
      - owner_id                                       = "508259851457" -> null
      - private_dns_hostname_type_on_launch            = "resource-name" -> null
      - tags                                           = {
          - "Name"                            = "sbn-iac-a.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - tags_all                                       = {
          - "Name"                            = "sbn-iac-a.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
    }

  # aws_subnet.sbn-iac-b has been deleted
  - resource "aws_subnet" "sbn-iac-b" {
      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-0c8c4d1df1a2920e4" -> null
      - assign_ipv6_address_on_creation                = false -> null
      - availability_zone                              = "ap-northeast-2b" -> null
      - availability_zone_id                           = "apne2-az2" -> null
      - cidr_block                                     = "172.21.18.0/23" -> null
      - enable_dns64                                   = false -> null
      - enable_resource_name_dns_a_record_on_launch    = true -> null
      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
      - id                                             = "subnet-0c8c4d1df1a2920e4" -> null
      - ipv6_native                                    = false -> null
      - map_customer_owned_ip_on_launch                = false -> null
      - map_public_ip_on_launch                        = false -> null
      - owner_id                                       = "508259851457" -> null
      - private_dns_hostname_type_on_launch            = "resource-name" -> null
      - tags                                           = {
          - "Name"                            = "sbn-iac-b.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - tags_all                                       = {
          - "Name"                            = "sbn-iac-b.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
    }

  # aws_subnet.sbn-iac-c has been deleted
  - resource "aws_subnet" "sbn-iac-c" {
      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-06e724baf7d879769" -> null
      - assign_ipv6_address_on_creation                = false -> null
      - availability_zone                              = "ap-northeast-2c" -> null
      - availability_zone_id                           = "apne2-az3" -> null
      - cidr_block                                     = "172.21.20.0/23" -> null
      - enable_dns64                                   = false -> null
      - enable_resource_name_dns_a_record_on_launch    = true -> null
      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
      - id                                             = "subnet-06e724baf7d879769" -> null
      - ipv6_native                                    = false -> null
      - map_customer_owned_ip_on_launch                = false -> null
      - map_public_ip_on_launch                        = false -> null
      - owner_id                                       = "508259851457" -> null
      - private_dns_hostname_type_on_launch            = "resource-name" -> null
      - tags                                           = {
          - "Name"                            = "sbn-iac-c.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - tags_all                                       = {
          - "Name"                            = "sbn-iac-c.datasaker"
          - "SubnetType"                      = "Private"
          - "kubernetes.io/cluster/datasaker" = "owned"
          - "kubernetes.io/role/elb"          = "1"
          - "kubernetes.io/role/internal-elb" = "1"
        } -> null
      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
    }

  # aws_vpc.vpc-datasaker has changed
  ~ resource "aws_vpc" "vpc-datasaker" {
      ~ dhcp_options_id                      = "dopt-021d4c0e9e138e269" -> "dopt-086d99ae90c3cde26"
        id                                   = "vpc-0b6e0b906c678a22f"
        tags                                 = {
            "Name" = "vpc-datasaker"
        }
        # (18 unchanged attributes hidden)
    }

  # aws_vpc_dhcp_options.vpc-dhcp-datasaker has changed
  ~ resource "aws_vpc_dhcp_options" "vpc-dhcp-datasaker" {
        id                   = "dopt-086d99ae90c3cde26"
      + netbios_name_servers = []
      + ntp_servers          = []
        tags                 = {
            "Name" = "vpc-dhcp-datasaker"
        }
        # (5 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_subnet.sbn-dev-a will be updated in-place
  ~ resource "aws_subnet" "sbn-dev-a" {
        id                                             = "subnet-0c875e254456809f7"
      ~ tags                                           = {
          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

  # aws_subnet.sbn-dev-b will be updated in-place
  ~ resource "aws_subnet" "sbn-dev-b" {
        id                                             = "subnet-05672a669943fc12f"
      ~ tags                                           = {
          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

  # aws_subnet.sbn-dev-c will be updated in-place
  ~ resource "aws_subnet" "sbn-dev-c" {
        id                                             = "subnet-0940fd78504acbbde"
      ~ tags                                           = {
          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
            # (6 unchanged elements hidden)
        }
      ~ tags_all                                       = {
          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
            # (6 unchanged elements hidden)
        }
        # (14 unchanged attributes hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.