Error on EC2 instance role change

[limitusus]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

Terraform v0.11.13
+ provider.aws v2.5.0

Affected Resource(s)

• aws_instance

Terraform Configuration Files

resource "aws_instance" "host0001" {
  ami           = "ami-086063d8c95bfa211"
  instance_type = "t3.medium"
  ebs_optimized = "true"
  subnet_id     = "sg-12345678"

  vpc_security_group_ids = [
    "sg-xxxxxxxx",
  ]

  iam_instance_profile = "my-profile"

  tags {
    Name = "host0001"
  }
}

Debug Output

https://gist.github.com/limitusus/429bef80ba7ffc7af90083c886e048f6

Panic Output

No Panic

Expected Behavior

IAM profile change is only supported for "running" instances, so for "stopped" instances, remove the attached profile and then attach a new profile.

Actual Behavior

terraform tries to switch profile directly regardless of the instance's state and causes error.

Steps to Reproduce

1. Prepare .tf file for an EC2 instance with profile A
2. terraform apply and the instance is created
3. stops the instance
4. Edit .tf file for the EC2 instance with different profile B
5. terraform apply again and error reproduces

Important Factoids

References

AWS document says

To replace the IAM role on an instance that already has an attached IAM role, the instance must be in the running state.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!