✅ Terraform Plan: Staging
ℹ️ Note: The
Plan: 3 to add, 3 to change, 3 to destroy.output is always expected due to a known Terraform AWS provider issue. ECS task definitions show asmust be replacedon every plan because the provider stores container definitions in a different order than AWS returns them. This is cosmetic only - real changes (new images, env vars) are still detected correctly.
module.doppler_aws_secrets.data.external.env_vars: Reading...
module.doppler_aws_secrets.doppler_environment.config: Refreshing state... [id=integrator.staging]
module.rds.random_password.readonly[0]: Refreshing state... [id=none]
module.rds.random_password.master[0]: Refreshing state... [id=none]
module.github_actions_role.data.tls_certificate.github: Reading...
module.datadog_log_pipeline.datadog_apm_retention_filter.llmobs_traces: Refreshing state... [id=-mP2s46hR6yaYgMyEICDtg]
module.datadog_log_pipeline.datadog_apm_retention_filter.error_traces: Refreshing state... [id=h17q4OSSSEie8lqpAgBYyw]
module.github_actions_role.data.tls_certificate.github: Read complete after 0s [id=772ed8785f2c647baa040d3a1b4aa6cafacb6267]
module.datadog_log_pipeline.datadog_logs_custom_pipeline.integrator_json: Refreshing state... [id=Hfi5qZBoQXq00jWU_RovcA]
module.ai_agent_debugging_role.aws_iam_role_policy.vpc_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-vpc-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.ecr_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecr-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_metrics_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy]
module.ecs_api.aws_iam_role.api_task: Refreshing state... [id=integrator-staging-api-task-role]
module.ai_agent_debugging_role.aws_iam_role_policy.rds_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-rds-policy]
module.ecs_api.data.aws_ecr_repository.api[0]: Reading...
module.ai_agent_debugging_role.aws_iam_role_policy.deny_privilege_escalation: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-deny-privilege-escalation]
module.ai_agent_debugging_role.aws_iam_role.ai_agent_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging]
module.ai_agent_debugging_role.aws_iam_role_policy.alb_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-alb-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.secrets_manager_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-secrets-manager-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_logs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-logs-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.s3_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-s3-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.iam_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-iam-policy]
module.ai_agent_debugging_role.aws_iam_role_policy.ecs_debugging: Refreshing state... [id=integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecs-policy]
module.ecs_api.data.aws_caller_identity.current: Reading...
module.ecs_api.aws_iam_role.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role]
module.github_actions_role.data.aws_caller_identity.current: Reading...
module.ecs_api.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.rds.aws_secretsmanager_secret.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password]
data.aws_iam_openid_connect_provider.github: Reading...
module.github_actions_role.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
data.aws_caller_identity.current: Reading...
module.ecs_api.aws_cloudwatch_log_group.api_logs: Refreshing state... [id=/ecs/integrator/staging/api]
module.artifacts_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-artifacts-staging]
data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.doppler_aws_secrets.aws_iam_policy.doppler_secrets_manager: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-doppler-secrets-manager-policy]
module.ecs_api.aws_cloudwatch_log_group.poller_logs: Refreshing state... [id=/ecs/integrator/staging/poller]
data.aws_iam_openid_connect_provider.github: Read complete after 0s [id=arn:aws:iam::256586139593:oidc-provider/token.actions.githubusercontent.com]
data.aws_vpc.default: Reading...
module.doppler_aws_secrets.data.external.env_vars: Read complete after 0s [id=-]
module.ecs_api.data.aws_ecs_cluster.default: Reading...
module.ecs_api.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-ecs-exec-policy]
module.rds.aws_db_parameter_group.main: Refreshing state... [id=integrator-staging-postgres-20251121173128166300000001]
module.rds.aws_secretsmanager_secret.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0]
module.doppler_aws_secrets.aws_iam_role.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role]
module.knowledge_bucket.aws_s3_bucket.this: Refreshing state... [id=integrator-knowledge-staging]
module.ecs_api.aws_cloudwatch_log_group.migrations_logs: Refreshing state... [id=/ecs/integrator/staging/migrations]
module.ecs_api.data.aws_vpc.selected: Reading...
module.rds.data.aws_region.current: Reading...
module.rds.data.aws_region.current: Read complete after 0s [id=us-east-1]
module.doppler_aws_secrets.data.doppler_secrets.existing: Reading...
module.ecs_api.aws_iam_role_policy_attachment.api_task_execution: Refreshing state... [id=integrator-staging-api-task-execution-role-20251121173131958900000005]
module.ecs_api.data.aws_ecs_cluster.default: Read complete after 0s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.rds.aws_secretsmanager_secret_version.readonly_password[0]: Refreshing state... [id=integrator/staging/rds-readonly-password|terraform-20260115132739255000000001]
module.rds.aws_secretsmanager_secret_version.master_password[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-master-password-4QWym0|terraform-20251128130346365300000002]
module.ecs_api.aws_iam_role_policy_attachment.api_ecs_exec: Refreshing state... [id=integrator-staging-api-task-role-20260110152557084500000001]
module.doppler_aws_secrets.aws_iam_role_policy_attachment.doppler_secrets_manager: Refreshing state... [id=integrator-staging-doppler-secrets-manager-role-20251117112527179200000001]
module.doppler_aws_secrets.doppler_integration_aws_secrets_manager.integration: Refreshing state... [id=44a390e7-e35d-44e3-a573-6476e776f406]
module.github_actions_role.aws_iam_role.github_actions: Refreshing state... [id=integrator-github-actions-staging]
module.artifacts_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-artifacts-staging]
module.artifacts_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-artifacts-staging]
data.aws_vpc.default: Read complete after 0s [id=vpc-0529dea5160deb846]
data.aws_subnets.public: Reading...
module.rds.data.aws_vpc.selected: Reading...
module.knowledge_bucket.aws_s3_bucket_public_access_block.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_lifecycle_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_server_side_encryption_configuration.this: Refreshing state... [id=integrator-knowledge-staging]
module.knowledge_bucket.aws_s3_bucket_versioning.this[0]: Refreshing state... [id=integrator-knowledge-staging]
data.aws_subnets.public: Read complete after 1s [id=us-east-1]
module.ecs_api.data.aws_vpc.selected: Read complete after 1s [id=vpc-0529dea5160deb846]
module.rds.aws_db_subnet_group.main: Refreshing state... [id=integrator-staging-db-subnet-group]
module.ecs_api.aws_lb_target_group.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:targetgroup/integrator-staging-api-tg/4ebc38c1a3c18f91]
module.doppler_aws_secrets.data.doppler_secrets.existing: Read complete after 1s [id=integrator.staging]
module.ecs_api.aws_security_group.alb: Refreshing state... [id=sg-0f268d8e0027eaad9]
module.ecs_api.data.aws_subnets.public: Reading...
module.doppler_aws_secrets.doppler_secret.secrets["STATSD_METRICS_FLUSH_WAIT_TIME_SECS"]: Refreshing state... [id=integrator.staging.STATSD_METRICS_FLUSH_WAIT_TIME_SECS]
module.ecs_api.data.aws_subnets.public: Read complete after 0s [id=us-east-1]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_API_KEY"]: Refreshing state... [id=integrator.staging.LANGSMITH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_API_KEY]
module.ecs_api.data.aws_ecr_repository.api[0]: Read complete after 1s [id=integrator-api]
module.doppler_aws_secrets.doppler_secret.secrets["DD_API_KEY"]: Refreshing state... [id=integrator.staging.DD_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_EXA_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_EXA_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["SLACK_BOT_TOKEN"]: Refreshing state... [id=integrator.staging.SLACK_BOT_TOKEN]
module.rds.data.aws_vpc.selected: Read complete after 1s [id=vpc-0529dea5160deb846]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_KEY"]: Refreshing state... [id=integrator.staging.TWITTER_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_BATCH_POLLER_DISABLED"]: Refreshing state... [id=integrator.staging.WATCHDOG_BATCH_POLLER_DISABLED]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_ENDPOINT_URL"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_ENDPOINT_URL]
module.doppler_aws_secrets.doppler_secret.secrets["BRANDFETCH_API_KEY"]: Refreshing state... [id=integrator.staging.BRANDFETCH_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["PERPLEXITY_API_KEY"]: Refreshing state... [id=integrator.staging.PERPLEXITY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["AZURE_OPENAI_SUBSCRIPTION_KEY"]: Refreshing state... [id=integrator.staging.AZURE_OPENAI_SUBSCRIPTION_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_STAGING_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_STAGING_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["TOOLS_DATABASE_URL"]: Refreshing state... [id=integrator.staging.TOOLS_DATABASE_URL]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.APOLLO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["PIPEDREAM_PATH"]: Refreshing state... [id=integrator.staging.PIPEDREAM_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_ENDPOINT"]: Refreshing state... [id=integrator.staging.LANGSMITH_ENDPOINT]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_WEBHOOK_SECRET"]: Refreshing state... [id=integrator.staging.COMPOSIO_WEBHOOK_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["NOTION_API_KEY"]: Refreshing state... [id=integrator.staging.NOTION_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_USERNAME"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_ACCESS_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_ACCESS_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["WATCHDOG_MAX_FIXERS_PER_DAY"]: Refreshing state... [id=integrator.staging.WATCHDOG_MAX_FIXERS_PER_DAY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_USERNAME"]: Refreshing state... [id=integrator.staging.THERMOS_USERNAME]
module.doppler_aws_secrets.doppler_secret.secrets["ANCHOR_API_KEY"]: Refreshing state... [id=integrator.staging.ANCHOR_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_YELP_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_YELP_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["USE_APOLLO_GET_DOWNLOAD_URL_API"]: Refreshing state... [id=integrator.staging.USE_APOLLO_GET_DOWNLOAD_URL_API]
module.doppler_aws_secrets.doppler_secret.secrets["ANTHROPIC_API_KEY"]: Refreshing state... [id=integrator.staging.ANTHROPIC_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PORT"]: Refreshing state... [id=integrator.staging.THERMOS_PORT]
module.doppler_aws_secrets.doppler_secret.secrets["PYTHONPATH"]: Refreshing state... [id=integrator.staging.PYTHONPATH]
module.doppler_aws_secrets.doppler_secret.secrets["LINEAR_API_KEY"]: Refreshing state... [id=integrator.staging.LINEAR_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["BACKEND_READONLY_URL"]: Refreshing state... [id=integrator.staging.BACKEND_READONLY_URL]
module.doppler_aws_secrets.doppler_secret.secrets["TEST_CONNECTION_ID"]: Refreshing state... [id=integrator.staging.TEST_CONNECTION_ID]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_GEMINI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_GEMINI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["MERCURY_AUTOLOAD"]: Refreshing state... [id=integrator.staging.MERCURY_AUTOLOAD]
module.doppler_aws_secrets.doppler_secret.secrets["TWITTER_API_SECRET"]: Refreshing state... [id=integrator.staging.TWITTER_API_SECRET]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SEATGEEK_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SEATGEEK_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_HOST"]: Refreshing state... [id=integrator.staging.THERMOS_HOST]
module.doppler_aws_secrets.doppler_secret.secrets["VERCEL_AI_GATEWAY_API_KEY"]: Refreshing state... [id=integrator.staging.VERCEL_AI_GATEWAY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["APOLLO_URL"]: Refreshing state... [id=integrator.staging.APOLLO_URL]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_DATABASE"]: Refreshing state... [id=integrator.staging.THERMOS_DATABASE]
module.doppler_aws_secrets.doppler_secret.secrets["OPENAI_API_KEY"]: Refreshing state... [id=integrator.staging.OPENAI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_ADMIN_TOKEN"]: Refreshing state... [id=integrator.staging.COMPOSIO_ADMIN_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["GITHUB_REVIEWER_TOKEN"]: Refreshing state... [id=integrator.staging.GITHUB_REVIEWER_TOKEN]
module.doppler_aws_secrets.doppler_secret.secrets["DISABLE_MERCURY_CLEANUP"]: Refreshing state... [id=integrator.staging.DISABLE_MERCURY_CLEANUP]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_INSTACART_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_INSTACART_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ZAPIER_PATH"]: Refreshing state... [id=integrator.staging.ZAPIER_PATH]
module.doppler_aws_secrets.doppler_secret.secrets["HELICONE_API_KEY"]: Refreshing state... [id=integrator.staging.HELICONE_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["THERMOS_PASSWORD"]: Refreshing state... [id=integrator.staging.THERMOS_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["GROQ_API_KEY"]: Refreshing state... [id=integrator.staging.GROQ_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["LANGSMITH_TRACING"]: Refreshing state... [id=integrator.staging.LANGSMITH_TRACING]
module.doppler_aws_secrets.doppler_secret.secrets["FIRECRAWL_API_KEY"]: Refreshing state... [id=integrator.staging.FIRECRAWL_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["CLICKHOUSE_PASSWORD"]: Refreshing state... [id=integrator.staging.CLICKHOUSE_PASSWORD]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_TAVILY_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_TAVILY_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["COMPOSIO_SERPAPI_API_KEY"]: Refreshing state... [id=integrator.staging.COMPOSIO_SERPAPI_API_KEY]
module.doppler_aws_secrets.doppler_secret.secrets["ENCRYPTION_KEY"]: Refreshing state... [id=integrator.staging.ENCRYPTION_KEY]
module.github_actions_role.aws_iam_role_policy.cloudwatch_logs: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-cloudwatch-logs-policy]
module.github_actions_role.aws_iam_role_policy_attachment.terraform_admin[0]: Refreshing state... [id=integrator-github-actions-staging-20260115154744404400000001]
module.ecs_api.aws_security_group.api: Refreshing state... [id=sg-06a8634c658cb6242]
module.rds.aws_security_group.rds: Refreshing state... [id=sg-0c78e576a056ba44a]
github_actions_secret.aws_role_arn: Refreshing state... [id=integrator:AWS_ROLE_ARN_STAGING]
module.ecs_api.aws_lb.api: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:loadbalancer/app/integrator-staging-alb/5e4f301bcd0263cb]
github_actions_secret.ecs_subnets: Refreshing state... [id=integrator:ECS_SUBNETS_STAGING]
module.rds.aws_db_instance.main: Refreshing state... [id=db-I57KURHD3UXFT56QM2OTWRW7TQ]
github_actions_secret.ecs_security_groups: Refreshing state... [id=integrator:ECS_SECURITY_GROUPS_STAGING]
module.rds.null_resource.create_readonly_user[0]: Refreshing state... [id=3885368352693534014]
module.ecs_api.aws_ecs_task_definition.migrations: Refreshing state... [id=integrator-staging-migrations]
module.ecs_background_runner.data.aws_caller_identity.current: Reading...
module.ecs_background_runner.aws_iam_role.task: Refreshing state... [id=integrator-staging-ecs-task-role]
module.ecs_background_runner.aws_iam_policy.s3_knowledge_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-s3-knowledge-access]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Reading...
module.ecs_background_runner.data.aws_caller_identity.current: Read complete after 0s [id=256586139593]
module.ecs_api.aws_lb_listener.http: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:256586139593:listener/app/integrator-staging-alb/5e4f301bcd0263cb/d7549a73fdd1a11a]
module.ecs_background_runner.aws_cloudwatch_log_group.task_logs: Refreshing state... [id=/ecs/integrator/staging/background-runner]
module.ecs_background_runner.aws_iam_policy.ecs_exec: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-ecs-exec-policy]
module.ecs_background_runner.data.aws_ecs_cluster.default[0]: Read complete after 0s [id=arn:aws:ecs:us-east-1:256586139593:cluster/default]
module.ecs_background_runner.aws_cloudwatch_log_group.ecs_task_events: Refreshing state... [id=/aws/events/integrator/staging/ecs-task-state-change]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Reading...
module.ecs_background_runner.aws_iam_role.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role]
module.ecs_background_runner.aws_cloudwatch_event_rule.ecs_task_state_change: Refreshing state... [id=integrator-staging-ecs-task-state-change]
module.ecs_background_runner.aws_iam_role_policy_attachment.task_execution: Refreshing state... [id=integrator-staging-ecs-task-execution-role-20251121173130862100000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.s3_knowledge_access: Refreshing state... [id=integrator-staging-ecs-task-role-20260110152558095500000002]
module.ecs_background_runner.aws_iam_role_policy_attachment.ecs_exec: Refreshing state... [id=integrator-staging-ecs-task-role-20251121173131775000000004]
module.ecs_background_runner.aws_cloudwatch_event_target.ecs_task_state_change_logs: Refreshing state... [id=integrator-staging-ecs-task-state-change-LogTaskStateChanges]
module.doppler_aws_secrets.doppler_secrets_sync_aws_secrets_manager.sync: Refreshing state... [id=3cddcf0b-4014-410d-a552-88d3e5022617]
module.ecs_background_runner.data.aws_ecr_repository.background_runner[0]: Read complete after 1s [id=integrator-background-runner]
module.github_actions_role.aws_iam_role_policy.ecr: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-ecr-policy]
module.doppler_aws_secrets.null_resource.wait_for_secrets: Refreshing state... [id=4989053128215798288]
module.ecs_background_runner.aws_iam_policy.secrets_manager_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-ecs-secrets-access]
module.doppler_aws_secrets.data.aws_secretsmanager_secrets.synced: Reading...
module.ecs_background_runner.aws_iam_role_policy_attachment.secrets_access: Refreshing state... [id=integrator-staging-ecs-task-execution-role-20251121173131402400000003]
module.doppler_aws_secrets.data.aws_secretsmanager_secrets.synced: Read complete after 0s [id=us-east-1]
module.ecs_api.aws_iam_policy.api_secrets_access: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-secrets-access]
module.ecs_api.aws_ecs_task_definition.poller: Refreshing state... [id=integrator-staging-poller]
module.ecs_background_runner.aws_ecs_task_definition.background_runner: Refreshing state... [id=integrator-staging-background-runner]
module.ecs_api.aws_ecs_service.poller: Refreshing state... [id=arn:aws:ecs:us-east-1:256586139593:service/default/integrator-staging-poller]
module.ecs_api.aws_iam_policy.launch_background_runner: Refreshing state... [id=arn:aws:iam::256586139593:policy/integrator-staging-api-launch-tasks-policy]
module.ecs_api.aws_ecs_task_definition.api: Refreshing state... [id=integrator-staging-api]
module.ecs_api.aws_iam_role_policy_attachment.api_secrets_access: Refreshing state... [id=integrator-staging-api-task-execution-role-20251127102440078700000001]
module.ecs_api.aws_ecs_service.api: Refreshing state... [id=arn:aws:ecs:us-east-1:256586139593:service/default/integrator-staging-api]
module.ecs_api.aws_iam_role_policy_attachment.api_launch_tasks: Refreshing state... [id=integrator-staging-api-task-role-20251121182311833700000002]
module.github_actions_role.aws_iam_role_policy.ecs: Refreshing state... [id=integrator-github-actions-staging:integrator-github-actions-staging-ecs-policy]
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place
- destroy
-/+ destroy and then create replacement
Terraform will perform the following actions:
# module.ai_agent_debugging_role.aws_iam_role.ai_agent_debugging will be destroyed
# (because aws_iam_role.ai_agent_debugging is not in configuration)
- resource "aws_iam_role" "ai_agent_debugging" {
- arn = "arn:aws:iam::256586139593:role/integrator-ai-agent-debugging-staging" -> null
- assume_role_policy = jsonencode(
{
- Statement = [
- {
- Action = "sts:AssumeRole"
- Condition = {
- StringLike = {
- "aws:PrincipalArn" = [
- "arn:aws:iam::256586139593:user/*",
- "arn:aws:iam::256586139593:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_*",
]
}
}
- Effect = "Allow"
- Principal = {
- AWS = "arn:aws:iam::256586139593:root"
}
},
]
- Version = "2012-10-17"
}
) -> null
- create_date = "2026-01-15T17:15:14Z" -> null
- force_detach_policies = false -> null
- id = "integrator-ai-agent-debugging-staging" -> null
- managed_policy_arns = [] -> null
- max_session_duration = 43200 -> null
- name = "integrator-ai-agent-debugging-staging" -> null
- path = "/" -> null
- tags = {
- "Environment" = "staging"
- "ManagedBy" = "Terraform"
- "Name" = "integrator-ai-agent-debugging-staging"
- "Purpose" = "AI Agent Read-only Debugging"
} -> null
- tags_all = {
- "Environment" = "staging"
- "ManagedBy" = "Terraform"
- "Name" = "integrator-ai-agent-debugging-staging"
- "Purpose" = "AI Agent Read-only Debugging"
} -> null
- unique_id = "AROATXPNZY7EUBOIKAVM3" -> null
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-alb-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "elasticloadbalancing:DescribeLoadBalancers",
- "elasticloadbalancing:DescribeTargetGroups",
- "elasticloadbalancing:DescribeTargetHealth",
- "elasticloadbalancing:DescribeListeners",
- "elasticloadbalancing:DescribeRules",
- "elasticloadbalancing:DescribeTags",
- "elasticloadbalancing:DescribeLoadBalancerAttributes",
- "elasticloadbalancing:DescribeTargetGroupAttributes",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ALBReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-cloudwatch-logs-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "logs:DescribeLogGroups",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "CloudWatchLogsDescribeLogGroups"
},
- {
- Action = [
- "logs:DescribeLogStreams",
- "logs:GetLogEvents",
- "logs:FilterLogEvents",
- "logs:DescribeQueries",
- "logs:GetQueryResults",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:logs:us-east-1:256586139593:log-group:/ecs/integrator/staging/*",
- "arn:aws:logs:us-east-1:256586139593:log-group:/ecs/integrator/staging/*:*",
]
- Sid = "CloudWatchLogsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "cloudwatch:GetMetricData",
- "cloudwatch:GetMetricStatistics",
- "cloudwatch:ListMetrics",
- "cloudwatch:DescribeAlarms",
- "cloudwatch:DescribeAlarmsForMetric",
- "cloudwatch:DescribeAlarmHistory",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "CloudWatchMetricsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-deny-privilege-escalation" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "sts:AssumeRole",
- "sts:AssumeRoleWithWebIdentity",
- "sts:AssumeRoleWithSAML",
]
- Effect = "Deny"
- Resource = "*"
- Sid = "DenyAssumeRole"
},
- {
- Action = [
- "iam:Create*",
- "iam:Delete*",
- "iam:Update*",
- "iam:Put*",
- "iam:Attach*",
- "iam:Detach*",
- "iam:Add*",
- "iam:Remove*",
- "iam:Set*",
]
- Effect = "Deny"
- Resource = "*"
- Sid = "DenyIAMModifications"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-ecr-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ecr:DescribeRepositories",
- "ecr:DescribeImages",
- "ecr:DescribeImageScanFindings",
- "ecr:GetDownloadUrlForLayer",
- "ecr:BatchGetImage",
- "ecr:BatchCheckLayerAvailability",
- "ecr:ListImages",
- "ecr:ListTagsForResource",
- "ecr:GetRepositoryPolicy",
- "ecr:GetLifecyclePolicy",
- "ecr:GetLifecyclePolicyPreview",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECRReadOnly"
},
- {
- Action = [
- "ecr:GetAuthorizationToken",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECRAuthorization"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-ecs-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ecs:DescribeClusters",
- "ecs:DescribeServices",
- "ecs:DescribeTaskDefinition",
- "ecs:DescribeTasks",
- "ecs:DescribeContainerInstances",
- "ecs:ListClusters",
- "ecs:ListServices",
- "ecs:ListTasks",
- "ecs:ListTaskDefinitions",
- "ecs:ListTaskDefinitionFamilies",
- "ecs:ListContainerInstances",
- "ecs:ListAttributes",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECSReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-iam-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "iam:GetRole",
- "iam:GetRolePolicy",
- "iam:GetPolicy",
- "iam:GetPolicyVersion",
- "iam:ListRoles",
- "iam:ListRolePolicies",
- "iam:ListAttachedRolePolicies",
- "iam:ListPolicies",
- "iam:ListPolicyVersions",
- "iam:ListInstanceProfilesForRole",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "IAMReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-rds-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "rds:DescribeDBInstances",
- "rds:DescribeDBClusters",
- "rds:DescribeDBSnapshots",
- "rds:DescribeDBClusterSnapshots",
- "rds:DescribeDBParameterGroups",
- "rds:DescribeDBParameters",
- "rds:DescribeDBSubnetGroups",
- "rds:DescribeOptionGroups",
- "rds:DescribeDBLogFiles",
- "rds:DownloadDBLogFilePortion",
- "rds:ListTagsForResource",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "RDSReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-s3-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "s3:GetObject",
- "s3:GetObjectVersion",
- "s3:ListBucket",
- "s3:ListBucketVersions",
- "s3:GetBucketLocation",
- "s3:GetBucketVersioning",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:s3:::integrator-artifacts-staging",
- "arn:aws:s3:::integrator-artifacts-staging/*",
- "arn:aws:s3:::integrator-knowledge-staging",
- "arn:aws:s3:::integrator-knowledge-staging/*",
]
- Sid = "S3ArtifactsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-secrets-manager-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "secretsmanager:GetSecretValue",
- "secretsmanager:DescribeSecret",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-readonly-password*",
]
- Sid = "SecretsManagerReadOnlyPassword"
},
- {
- Action = [
- "secretsmanager:ListSecrets",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "SecretsManagerListSecrets"
},
]
- Version = "2012-10-17"
}
) -> null
}
- inline_policy {
- name = "integrator-ai-agent-debugging-staging-vpc-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ec2:DescribeVpcs",
- "ec2:DescribeSubnets",
- "ec2:DescribeSecurityGroups",
- "ec2:DescribeSecurityGroupRules",
- "ec2:DescribeNetworkInterfaces",
- "ec2:DescribeRouteTables",
- "ec2:DescribeInternetGateways",
- "ec2:DescribeNatGateways",
- "ec2:DescribeVpcEndpoints",
- "ec2:DescribeNetworkAcls",
- "ec2:DescribeVpcPeeringConnections",
- "ec2:DescribeTags",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "VPCReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
}
}
# module.ai_agent_debugging_role.aws_iam_role_policy.alb_debugging will be destroyed
# (because aws_iam_role_policy.alb_debugging is not in configuration)
- resource "aws_iam_role_policy" "alb_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-alb-policy" -> null
- name = "integrator-ai-agent-debugging-staging-alb-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "elasticloadbalancing:DescribeLoadBalancers",
- "elasticloadbalancing:DescribeTargetGroups",
- "elasticloadbalancing:DescribeTargetHealth",
- "elasticloadbalancing:DescribeListeners",
- "elasticloadbalancing:DescribeRules",
- "elasticloadbalancing:DescribeTags",
- "elasticloadbalancing:DescribeLoadBalancerAttributes",
- "elasticloadbalancing:DescribeTargetGroupAttributes",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ALBReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_logs_debugging will be destroyed
# (because aws_iam_role_policy.cloudwatch_logs_debugging is not in configuration)
- resource "aws_iam_role_policy" "cloudwatch_logs_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-logs-policy" -> null
- name = "integrator-ai-agent-debugging-staging-cloudwatch-logs-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "logs:DescribeLogGroups",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "CloudWatchLogsDescribeLogGroups"
},
- {
- Action = [
- "logs:DescribeLogStreams",
- "logs:GetLogEvents",
- "logs:FilterLogEvents",
- "logs:DescribeQueries",
- "logs:GetQueryResults",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:logs:us-east-1:256586139593:log-group:/ecs/integrator/staging/*",
- "arn:aws:logs:us-east-1:256586139593:log-group:/ecs/integrator/staging/*:*",
]
- Sid = "CloudWatchLogsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.cloudwatch_metrics_debugging will be destroyed
# (because aws_iam_role_policy.cloudwatch_metrics_debugging is not in configuration)
- resource "aws_iam_role_policy" "cloudwatch_metrics_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy" -> null
- name = "integrator-ai-agent-debugging-staging-cloudwatch-metrics-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "cloudwatch:GetMetricData",
- "cloudwatch:GetMetricStatistics",
- "cloudwatch:ListMetrics",
- "cloudwatch:DescribeAlarms",
- "cloudwatch:DescribeAlarmsForMetric",
- "cloudwatch:DescribeAlarmHistory",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "CloudWatchMetricsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.deny_privilege_escalation will be destroyed
# (because aws_iam_role_policy.deny_privilege_escalation is not in configuration)
- resource "aws_iam_role_policy" "deny_privilege_escalation" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-deny-privilege-escalation" -> null
- name = "integrator-ai-agent-debugging-staging-deny-privilege-escalation" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "sts:AssumeRole",
- "sts:AssumeRoleWithWebIdentity",
- "sts:AssumeRoleWithSAML",
]
- Effect = "Deny"
- Resource = "*"
- Sid = "DenyAssumeRole"
},
- {
- Action = [
- "iam:Create*",
- "iam:Delete*",
- "iam:Update*",
- "iam:Put*",
- "iam:Attach*",
- "iam:Detach*",
- "iam:Add*",
- "iam:Remove*",
- "iam:Set*",
]
- Effect = "Deny"
- Resource = "*"
- Sid = "DenyIAMModifications"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.ecr_debugging will be destroyed
# (because aws_iam_role_policy.ecr_debugging is not in configuration)
- resource "aws_iam_role_policy" "ecr_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecr-policy" -> null
- name = "integrator-ai-agent-debugging-staging-ecr-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ecr:DescribeRepositories",
- "ecr:DescribeImages",
- "ecr:DescribeImageScanFindings",
- "ecr:GetDownloadUrlForLayer",
- "ecr:BatchGetImage",
- "ecr:BatchCheckLayerAvailability",
- "ecr:ListImages",
- "ecr:ListTagsForResource",
- "ecr:GetRepositoryPolicy",
- "ecr:GetLifecyclePolicy",
- "ecr:GetLifecyclePolicyPreview",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECRReadOnly"
},
- {
- Action = [
- "ecr:GetAuthorizationToken",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECRAuthorization"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.ecs_debugging will be destroyed
# (because aws_iam_role_policy.ecs_debugging is not in configuration)
- resource "aws_iam_role_policy" "ecs_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-ecs-policy" -> null
- name = "integrator-ai-agent-debugging-staging-ecs-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ecs:DescribeClusters",
- "ecs:DescribeServices",
- "ecs:DescribeTaskDefinition",
- "ecs:DescribeTasks",
- "ecs:DescribeContainerInstances",
- "ecs:ListClusters",
- "ecs:ListServices",
- "ecs:ListTasks",
- "ecs:ListTaskDefinitions",
- "ecs:ListTaskDefinitionFamilies",
- "ecs:ListContainerInstances",
- "ecs:ListAttributes",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "ECSReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.iam_debugging will be destroyed
# (because aws_iam_role_policy.iam_debugging is not in configuration)
- resource "aws_iam_role_policy" "iam_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-iam-policy" -> null
- name = "integrator-ai-agent-debugging-staging-iam-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "iam:GetRole",
- "iam:GetRolePolicy",
- "iam:GetPolicy",
- "iam:GetPolicyVersion",
- "iam:ListRoles",
- "iam:ListRolePolicies",
- "iam:ListAttachedRolePolicies",
- "iam:ListPolicies",
- "iam:ListPolicyVersions",
- "iam:ListInstanceProfilesForRole",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "IAMReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.rds_debugging will be destroyed
# (because aws_iam_role_policy.rds_debugging is not in configuration)
- resource "aws_iam_role_policy" "rds_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-rds-policy" -> null
- name = "integrator-ai-agent-debugging-staging-rds-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "rds:DescribeDBInstances",
- "rds:DescribeDBClusters",
- "rds:DescribeDBSnapshots",
- "rds:DescribeDBClusterSnapshots",
- "rds:DescribeDBParameterGroups",
- "rds:DescribeDBParameters",
- "rds:DescribeDBSubnetGroups",
- "rds:DescribeOptionGroups",
- "rds:DescribeDBLogFiles",
- "rds:DownloadDBLogFilePortion",
- "rds:ListTagsForResource",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "RDSReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.s3_debugging will be destroyed
# (because aws_iam_role_policy.s3_debugging is not in configuration)
- resource "aws_iam_role_policy" "s3_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-s3-policy" -> null
- name = "integrator-ai-agent-debugging-staging-s3-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "s3:GetObject",
- "s3:GetObjectVersion",
- "s3:ListBucket",
- "s3:ListBucketVersions",
- "s3:GetBucketLocation",
- "s3:GetBucketVersioning",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:s3:::integrator-artifacts-staging",
- "arn:aws:s3:::integrator-artifacts-staging/*",
- "arn:aws:s3:::integrator-knowledge-staging",
- "arn:aws:s3:::integrator-knowledge-staging/*",
]
- Sid = "S3ArtifactsReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.secrets_manager_debugging will be destroyed
# (because aws_iam_role_policy.secrets_manager_debugging is not in configuration)
- resource "aws_iam_role_policy" "secrets_manager_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-secrets-manager-policy" -> null
- name = "integrator-ai-agent-debugging-staging-secrets-manager-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "secretsmanager:GetSecretValue",
- "secretsmanager:DescribeSecret",
]
- Effect = "Allow"
- Resource = [
- "arn:aws:secretsmanager:us-east-1:256586139593:secret:integrator/staging/rds-readonly-password*",
]
- Sid = "SecretsManagerReadOnlyPassword"
},
- {
- Action = [
- "secretsmanager:ListSecrets",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "SecretsManagerListSecrets"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ai_agent_debugging_role.aws_iam_role_policy.vpc_debugging will be destroyed
# (because aws_iam_role_policy.vpc_debugging is not in configuration)
- resource "aws_iam_role_policy" "vpc_debugging" {
- id = "integrator-ai-agent-debugging-staging:integrator-ai-agent-debugging-staging-vpc-policy" -> null
- name = "integrator-ai-agent-debugging-staging-vpc-policy" -> null
- policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ec2:DescribeVpcs",
- "ec2:DescribeSubnets",
- "ec2:DescribeSecurityGroups",
- "ec2:DescribeSecurityGroupRules",
- "ec2:DescribeNetworkInterfaces",
- "ec2:DescribeRouteTables",
- "ec2:DescribeInternetGateways",
- "ec2:DescribeNatGateways",
- "ec2:DescribeVpcEndpoints",
- "ec2:DescribeNetworkAcls",
- "ec2:DescribeVpcPeeringConnections",
- "ec2:DescribeTags",
]
- Effect = "Allow"
- Resource = "*"
- Sid = "VPCReadOnly"
},
]
- Version = "2012-10-17"
}
) -> null
- role = "integrator-ai-agent-debugging-staging" -> null
}
# module.ecs_api.aws_ecs_service.api will be updated in-place
~ resource "aws_ecs_service" "api" {
id = "arn:aws:ecs:us-east-1:256586139593:service/default/integrator-staging-api"
name = "integrator-staging-api"
tags = {
"Environment" = "staging"
"ManagedBy" = "Terraform"
"Name" = "integrator-staging-api-service"
}
~ task_definition = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-api:70" -> (known after apply)
# (16 unchanged attributes hidden)
# (4 unchanged blocks hidden)
}
# module.ecs_api.aws_ecs_service.poller will be updated in-place
~ resource "aws_ecs_service" "poller" {
id = "arn:aws:ecs:us-east-1:256586139593:service/default/integrator-staging-poller"
name = "integrator-staging-poller"
tags = {
"Environment" = "staging"
"ManagedBy" = "Terraform"
"Name" = "integrator-staging-poller-service"
}
~ task_definition = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-poller:56" -> (known after apply)
# (16 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# module.ecs_api.aws_ecs_task_definition.api must be replaced
-/+ resource "aws_ecs_task_definition" "api" {
~ arn = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-api:70" -> (known after apply)
~ arn_without_revision = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-api" -> (known after apply)
~ container_definitions = (sensitive value) # forces replacement
~ enable_fault_injection = false -> (known after apply)
~ id = "integrator-staging-api" -> (known after apply)
~ revision = 70 -> (known after apply)
tags = {
"Environment" = "staging"
"ManagedBy" = "Terraform"
"Name" = "integrator-staging-api"
}
# (10 unchanged attributes hidden)
}
# module.ecs_api.aws_ecs_task_definition.poller must be replaced
-/+ resource "aws_ecs_task_definition" "poller" {
~ arn = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-poller:56" -> (known after apply)
~ arn_without_revision = "arn:aws:ecs:us-east-1:256586139593:task-definition/integrator-staging-poller" -> (known after apply)
~ container_definitions = (sensitive value) # forces replacement
~ enable_fault_injection = false -> (known after apply)
~ id = "integrator-staging-poller" -> (known after apply)
~ revision = 56 -> (known after apply)
tags = {
"Environment" = "staging"
"ManagedBy" = "Terraform"
"Name" = "integrator-staging-poller"
}
# (10 unchanged attributes hidden)
}
# module.ecs_api.aws_iam_policy.launch_background_runner will be updated in-place
~ resource "aws_iam_policy" "launch_background_runner" {
id = "arn:aws:iam::256586139593:policy/integrator-staging-api-launch-tasks-policy"
name = "integrator-staging-api-launch-tasks-policy"
~ policy = jsonencode(
{
- Statement = [
- {
- Action = [
- "ecs:RunTask",
- "ecs:DescribeTasks",
... (output truncated)