@intentius/chant-lexicon-terraform 0.59.0 → 0.61.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/describe-resources.d.ts +59 -0
- package/dist/describe-resources.d.ts.map +1 -1
- package/dist/hcl/edges.d.ts +124 -0
- package/dist/hcl/edges.d.ts.map +1 -0
- package/dist/hcl/parse.d.ts +42 -0
- package/dist/hcl/parse.d.ts.map +1 -1
- package/dist/hcl/roots.d.ts +6 -0
- package/dist/hcl/roots.d.ts.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/integrity.json +2 -2
- package/dist/manifest.json +1 -1
- package/dist/op/activities/terraform.d.ts +44 -8
- package/dist/op/activities/terraform.d.ts.map +1 -1
- package/dist/op/adoption.d.ts +110 -35
- package/dist/op/adoption.d.ts.map +1 -1
- package/package.json +2 -2
- package/src/__fixtures__/ACCEPTANCE.md +92 -58
- package/src/__fixtures__/graph-roots/README.md +21 -0
- package/src/__fixtures__/graph-roots/app/main.tf +41 -0
- package/src/__fixtures__/graph-roots/app/modules/cdn/main.tf +7 -0
- package/src/__fixtures__/graph-roots/network/main.tf +16 -0
- package/src/__fixtures__/live-estate/README.md +65 -19
- package/src/__fixtures__/live-estate/adoptable.tf +13 -0
- package/src/__fixtures__/live-ls.json +5 -5
- package/src/__fixtures__/live-plan.json +67 -35
- package/src/composites/terraform-adopt-op.acceptance.test.ts +36 -50
- package/src/composites/terraform-apply-op.acceptance.test.ts +4 -2
- package/src/describe-resources.live.test.ts +76 -4
- package/src/describe-resources.test.ts +35 -0
- package/src/describe-resources.ts +110 -3
- package/src/hcl/edges.test.ts +207 -0
- package/src/hcl/edges.ts +316 -0
- package/src/hcl/parse.ts +53 -0
- package/src/hcl/roots.ts +14 -0
- package/src/index.ts +1 -0
- package/src/op/activities/choudoufu.test.ts +3 -3
- package/src/op/activities/terraform.ts +70 -21
- package/src/op/adoption.test.ts +129 -11
- package/src/op/adoption.ts +181 -49
|
@@ -7,20 +7,31 @@ naming the estate `stateless-e2e-block`. Under `terraform.binary:
|
|
|
7
7
|
`describeResources()` branch onto `live-plan` instead of `terraform show`.
|
|
8
8
|
|
|
9
9
|
`../live-plan.json` and `../live-ls.json` were recorded from this exact
|
|
10
|
-
configuration
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
10
|
+
configuration by the published choudoufu **v0.15.0** release binary (`gh
|
|
11
|
+
release download v0.15.0 -R INTENTIUS/choudoufu -p
|
|
12
|
+
'choudoufu_v0.15.0_darwin_arm64.tar.gz' -p SHA256SUMS`, verified against
|
|
13
|
+
`SHA256SUMS`,
|
|
14
|
+
`db29573cb7d8dfa7205eeaecc0e4bcf154e941b8bb8179fb93ad53ac5c959409`), running
|
|
15
|
+
against choudoufu's own pinned floci emulator
|
|
16
|
+
(`ghcr.io/lex00/floci@sha256:a39185cc3971d0188663d61043cb038dff1260d8a975b1aa72c4e2bb1feac3cb`,
|
|
17
|
+
that repository's `live/floci-image`), on 2026-09-08 for chant #2241. The
|
|
18
|
+
first recording (#2104) was made by a choudoufu built from source; a release
|
|
19
|
+
binary and a pinned image is what makes this one reproducible.
|
|
14
20
|
|
|
15
21
|
```
|
|
22
|
+
# unowned.tf, rule.tf and adoptable.tf are held back over the apply: they
|
|
23
|
+
# declare resources this fixture needs to exist as something other than a
|
|
24
|
+
# marked, bound resource.
|
|
16
25
|
choudoufu init
|
|
17
|
-
choudoufu apply -auto-approve # with storage.tf
|
|
26
|
+
choudoufu apply -auto-approve # with storage.tf, without those three
|
|
18
27
|
aws logs create-log-group --log-group-name /stateless-e2e-block/adoptable
|
|
19
28
|
aws logs create-log-group --log-group-name /stateless-e2e-block/held-elsewhere
|
|
20
29
|
aws logs tag-log-group --log-group-name /stateless-e2e-block/held-elsewhere \
|
|
21
30
|
--tags tofu-estate=other-estate,tofu-address=aws_cloudwatch_log_group.elsewhere
|
|
31
|
+
aws ec2 create-vpc --cidr-block 10.88.0.0/16 # unmarked, and nothing declares its id
|
|
22
32
|
rm storage.tf # the applied bucket becomes an owned orphan
|
|
23
|
-
|
|
33
|
+
# restore unowned.tf, rule.tf and adoptable.tf, then:
|
|
34
|
+
TOFU_LIVE_COLLECT_UNCLAIMED=1 choudoufu live-plan -detailed-exitcode -json
|
|
24
35
|
choudoufu live-ls -estate=stateless-e2e-block -json -consistent .
|
|
25
36
|
```
|
|
26
37
|
|
|
@@ -33,24 +44,59 @@ run produced it, not because a fixture author typed it:
|
|
|
33
44
|
| bound by derivation | `aws_cloudwatch_log_group.app`, whose identity is the name in the block |
|
|
34
45
|
| omission, `ABSENT` | `aws_cloudwatch_log_group.never_applied` and `aws_security_group_rule.https`, declared and never applied |
|
|
35
46
|
| omission, `UNOWNED` | the two log groups the `unowned[]` section also carries |
|
|
47
|
+
| omission, `NEEDS_DISCOVERY` | `aws_vpc.adoptable`, whose id EC2 assigns, so no argument in the block determines it |
|
|
36
48
|
| unowned, adoptable | `aws_cloudwatch_log_group.adoptable`, with the two tag values that would claim it |
|
|
37
49
|
| unowned, held elsewhere | `aws_cloudwatch_log_group.held_elsewhere`, carrying `other-estate` |
|
|
50
|
+
| adoptable by content match | `aws_vpc.adoptable` again, this time in `adoptable[]`, carrying the live VPC's id, `matched: cidr_block=10.88.0.0/16`, both marker values and the tagging command |
|
|
38
51
|
| owned orphan | `aws_s3_bucket.data` in the listing, `declared: false` after `storage.tf` was removed |
|
|
39
52
|
| listing gap | `aws_security_group_rule.https`, on the declaration-carried rung |
|
|
40
53
|
|
|
41
|
-
##
|
|
42
|
-
|
|
43
|
-
**The
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
+
## What the v0.15.0 re-recording changed (#2241)
|
|
55
|
+
|
|
56
|
+
**The document now has an `adoptable` section and a `swept` list.** choudoufu
|
|
57
|
+
PR 963 added both, answering
|
|
58
|
+
[choudoufu #962](https://github.com/INTENTIUS/choudoufu/issues/962), which
|
|
59
|
+
chant #2168 filed. `adoptable[]` is the estate-wide sweep's content matches:
|
|
60
|
+
a live resource the sweep bound to a declared instance by comparing
|
|
61
|
+
identity-bearing arguments, for a declaration that carries no identity of its
|
|
62
|
+
own. `swept[]` is the resource types that sweep listed in full, which is what
|
|
63
|
+
tells an empty `adoptable[]` apart from a run that never looked. `adoptable.tf`
|
|
64
|
+
and the out-of-band VPC beside it are new in this recording and exist to put a
|
|
65
|
+
real row in that section.
|
|
66
|
+
|
|
67
|
+
**The sidecar was present throughout, and `-estate` was not passed.** The
|
|
68
|
+
first recording could not do that: `live-plan -json` was the `-estate` form
|
|
69
|
+
only, and that form refused a configuration naming its own estate. choudoufu
|
|
70
|
+
v0.14.0 (PR 915,
|
|
71
|
+
[#894](https://github.com/INTENTIUS/choudoufu/issues/894)) settled the name
|
|
72
|
+
from the declaration instead, so this recording runs the live root exactly as
|
|
73
|
+
chant runs it. `live-ls` still takes `-estate`, and needs to: it reads the
|
|
74
|
+
account and has no configuration to derive a name from. chant passes it the
|
|
75
|
+
same way.
|
|
76
|
+
|
|
77
|
+
**The `-json` run carries `TOFU_LIVE_COLLECT_UNCLAIMED=1`.** Without it the
|
|
78
|
+
sweep answers only the removal question, and `adoptable[]` and `swept[]` come
|
|
79
|
+
back empty (`internal/command/live_collect_unclaimed.go`: the setting defaults
|
|
80
|
+
on under `-adoption-only` and off otherwise). `choudoufuLivePlan` sets the same
|
|
81
|
+
variable on its `-json` run under `adoptionOnly` and on no other run, so an
|
|
82
|
+
observation read's document has both sections empty. This one is an adoption
|
|
83
|
+
run's document, and the 36 "Incomplete sweep for undeclared resources"
|
|
84
|
+
warnings in `diagnostics[]` are the sweep's own, not noise a fixture author
|
|
85
|
+
left in.
|
|
86
|
+
|
|
87
|
+
## Two things about the recording a reader needs
|
|
88
|
+
|
|
89
|
+
**The plan document is not the first `live-plan` after the apply.** It is a
|
|
90
|
+
later one. The tagging index the marker read goes through is eventually
|
|
91
|
+
consistent, and on the run immediately after an apply every marker-bound row
|
|
92
|
+
in `bound[]` comes back with `source: "marker"` and no `identity` at all,
|
|
93
|
+
which would make `describeResources()` fall back to the address for a
|
|
94
|
+
`physicalId` it can normally give. Re-running settles it. `live-ls` has
|
|
95
|
+
`-consistent` for the same reason and the same window; `live-plan` has no such
|
|
96
|
+
flag, so the recording waits instead. Filed upstream as
|
|
97
|
+
[choudoufu #1014](https://github.com/INTENTIUS/choudoufu/issues/1014): a row
|
|
98
|
+
that says `source: "marker"` and carries no identity is telling a consumer two
|
|
99
|
+
things that disagree, whatever the read underneath was doing.
|
|
54
100
|
|
|
55
101
|
**The plan document's leading progress lines are not part of it.**
|
|
56
102
|
`live-plan -json` prints its refresh progress to stdout ahead of the document.
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
# Coverage: the content-matched adoption row (choudoufu #962, chant #2241). A
|
|
2
|
+
# VPC's identity is assigned by EC2 at create time, so no argument in this
|
|
3
|
+
# block determines it and `live-plan` reports the instance under `omissions`
|
|
4
|
+
# with reason NEEDS_DISCOVERY. The unmarked live VPC standing at this exact
|
|
5
|
+
# cidr is found by choudoufu's content matcher during the estate-wide sweep
|
|
6
|
+
# instead, and lands in the document's `adoptable[]` section rather than in
|
|
7
|
+
# `unowned[]`, which only ever carries identities the configuration declares.
|
|
8
|
+
#
|
|
9
|
+
# The recording creates that VPC out of band and never applies this block, so
|
|
10
|
+
# the row in `../live-plan.json` is a real content match rather than a bind.
|
|
11
|
+
resource "aws_vpc" "adoptable" {
|
|
12
|
+
cidr_block = "10.88.0.0/16"
|
|
13
|
+
}
|
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
}
|
|
18
18
|
},
|
|
19
19
|
{
|
|
20
|
-
"id": "arn:aws:ec2:us-east-1:000000000000:elastic-ip/eipalloc-
|
|
20
|
+
"id": "arn:aws:ec2:us-east-1:000000000000:elastic-ip/eipalloc-97cdd2ced8825b5da",
|
|
21
21
|
"type": "aws_eip",
|
|
22
22
|
"address": "aws_eip.pool[0]",
|
|
23
23
|
"slot": "0",
|
|
@@ -30,7 +30,7 @@
|
|
|
30
30
|
}
|
|
31
31
|
},
|
|
32
32
|
{
|
|
33
|
-
"id": "arn:aws:ec2:us-east-1:000000000000:elastic-ip/eipalloc-
|
|
33
|
+
"id": "arn:aws:ec2:us-east-1:000000000000:elastic-ip/eipalloc-42787371c98073bbb",
|
|
34
34
|
"type": "aws_eip",
|
|
35
35
|
"address": "aws_eip.pool[1]",
|
|
36
36
|
"slot": "1",
|
|
@@ -54,7 +54,7 @@
|
|
|
54
54
|
}
|
|
55
55
|
},
|
|
56
56
|
{
|
|
57
|
-
"id": "arn:aws:ec2:us-east-1:000000000000:security-group/sg-
|
|
57
|
+
"id": "arn:aws:ec2:us-east-1:000000000000:security-group/sg-9038a29ced36e1bb7",
|
|
58
58
|
"type": "aws_security_group",
|
|
59
59
|
"address": "aws_security_group.main",
|
|
60
60
|
"declared": true,
|
|
@@ -65,7 +65,7 @@
|
|
|
65
65
|
}
|
|
66
66
|
},
|
|
67
67
|
{
|
|
68
|
-
"id": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-
|
|
68
|
+
"id": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-b870b7fc",
|
|
69
69
|
"type": "aws_subnet",
|
|
70
70
|
"address": "aws_subnet.app",
|
|
71
71
|
"declared": true,
|
|
@@ -76,7 +76,7 @@
|
|
|
76
76
|
}
|
|
77
77
|
},
|
|
78
78
|
{
|
|
79
|
-
"id": "arn:aws:ec2:us-east-1:000000000000:vpc/vpc-
|
|
79
|
+
"id": "arn:aws:ec2:us-east-1:000000000000:vpc/vpc-dc8685c5",
|
|
80
80
|
"type": "aws_vpc",
|
|
81
81
|
"address": "aws_vpc.main",
|
|
82
82
|
"declared": true,
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"estate": "stateless-e2e-block",
|
|
3
|
-
"choudoufu_version": "",
|
|
3
|
+
"choudoufu_version": "v0.15.0",
|
|
4
4
|
"upstream_version": "1.13.0-dev",
|
|
5
5
|
"bound": [
|
|
6
6
|
{
|
|
@@ -15,31 +15,31 @@
|
|
|
15
15
|
{
|
|
16
16
|
"addr": "aws_eip.pool[0]",
|
|
17
17
|
"type": "aws_eip",
|
|
18
|
-
"identity": "eipalloc-
|
|
18
|
+
"identity": "eipalloc-97cdd2ced8825b5da",
|
|
19
19
|
"source": "marker"
|
|
20
20
|
},
|
|
21
21
|
{
|
|
22
22
|
"addr": "aws_eip.pool[1]",
|
|
23
23
|
"type": "aws_eip",
|
|
24
|
-
"identity": "eipalloc-
|
|
24
|
+
"identity": "eipalloc-42787371c98073bbb",
|
|
25
25
|
"source": "marker"
|
|
26
26
|
},
|
|
27
27
|
{
|
|
28
28
|
"addr": "aws_security_group.main",
|
|
29
29
|
"type": "aws_security_group",
|
|
30
|
-
"identity": "sg-
|
|
30
|
+
"identity": "sg-9038a29ced36e1bb7",
|
|
31
31
|
"source": "marker"
|
|
32
32
|
},
|
|
33
33
|
{
|
|
34
34
|
"addr": "aws_subnet.app",
|
|
35
35
|
"type": "aws_subnet",
|
|
36
|
-
"identity": "subnet-
|
|
36
|
+
"identity": "subnet-b870b7fc",
|
|
37
37
|
"source": "marker"
|
|
38
38
|
},
|
|
39
39
|
{
|
|
40
40
|
"addr": "aws_vpc.main",
|
|
41
41
|
"type": "aws_vpc",
|
|
42
|
-
"identity": "vpc-
|
|
42
|
+
"identity": "vpc-dc8685c5",
|
|
43
43
|
"source": "marker"
|
|
44
44
|
}
|
|
45
45
|
],
|
|
@@ -62,7 +62,12 @@
|
|
|
62
62
|
{
|
|
63
63
|
"addr": "aws_security_group_rule.https",
|
|
64
64
|
"reason": "ABSENT",
|
|
65
|
-
"detail": "The provider reports no aws_security_group_rule exists with identity \"sg-
|
|
65
|
+
"detail": "The provider reports no aws_security_group_rule exists with identity \"sg-9038a29ced36e1bb7_ingress_tcp_443_443_10.99.0.0/16\", so this resource has not been created yet. The plan will propose creating it."
|
|
66
|
+
},
|
|
67
|
+
{
|
|
68
|
+
"addr": "aws_vpc.adoptable",
|
|
69
|
+
"reason": "NEEDS_DISCOVERY",
|
|
70
|
+
"detail": "No import identity exists for this instance: EC2 assigns the VPC ID (vpc-…) at create time; no configuration argument determines it. Marker discovery will find it; until then the plan will propose creating it."
|
|
66
71
|
}
|
|
67
72
|
],
|
|
68
73
|
"unowned": [
|
|
@@ -80,6 +85,28 @@
|
|
|
80
85
|
"tofu_estate": "other-estate"
|
|
81
86
|
}
|
|
82
87
|
],
|
|
88
|
+
"adoptable": [
|
|
89
|
+
{
|
|
90
|
+
"addr": "aws_vpc.adoptable",
|
|
91
|
+
"type": "aws_vpc",
|
|
92
|
+
"identity": "vpc-9fb568c5",
|
|
93
|
+
"matched": [
|
|
94
|
+
{
|
|
95
|
+
"attribute": "cidr_block",
|
|
96
|
+
"value": "10.88.0.0/16"
|
|
97
|
+
}
|
|
98
|
+
],
|
|
99
|
+
"adopt_tofu_estate": "stateless-e2e-block",
|
|
100
|
+
"adopt_tofu_address": "aws_vpc.adoptable",
|
|
101
|
+
"adopt_command": "aws ec2 create-tags --resources 'vpc-9fb568c5' --tags 'Key=tofu-estate,Value=stateless-e2e-block' 'Key=tofu-address,Value=aws_vpc.adoptable' --region 'us-east-1' --endpoint-url 'http://localhost:4660'"
|
|
102
|
+
}
|
|
103
|
+
],
|
|
104
|
+
"swept": [
|
|
105
|
+
"aws_eip",
|
|
106
|
+
"aws_security_group",
|
|
107
|
+
"aws_subnet",
|
|
108
|
+
"aws_vpc"
|
|
109
|
+
],
|
|
83
110
|
"diagnostics": [
|
|
84
111
|
{
|
|
85
112
|
"severity": "warning",
|
|
@@ -99,47 +126,47 @@
|
|
|
99
126
|
{
|
|
100
127
|
"severity": "warning",
|
|
101
128
|
"summary": "Incomplete sweep for undeclared resources",
|
|
102
|
-
"detail": "The estate-wide sweep listed a aws_appflow_flow that the provider could not fully read (Error Listing Remote Resources: listing AppFlow Flow resources: operation error Appflow: ListFlows, https response error StatusCode: 404, RequestID:
|
|
129
|
+
"detail": "The estate-wide sweep listed a aws_appflow_flow that the provider could not fully read (Error Listing Remote Resources: listing AppFlow Flow resources: operation error Appflow: ListFlows, https response error StatusCode: 404, RequestID: ae133949-d4c9-438f-8fb7-98a5da8b06dc, api error UnknownOperationException: Unknown operation: POST /list-flows), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
103
130
|
},
|
|
104
131
|
{
|
|
105
132
|
"severity": "warning",
|
|
106
133
|
"summary": "Incomplete sweep for undeclared resources",
|
|
107
|
-
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_browser_profile that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Browser Profiles: operation error Bedrock AgentCore Control: ListBrowserProfiles, https response error StatusCode: 404, RequestID:
|
|
134
|
+
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_browser_profile that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Browser Profiles: operation error Bedrock AgentCore Control: ListBrowserProfiles, https response error StatusCode: 404, RequestID: 4eff4167-f7fd-4f68-b657-7d72ac774a53, api error UnknownOperationException: Unknown operation: POST /browser-profiles), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
108
135
|
},
|
|
109
136
|
{
|
|
110
137
|
"severity": "warning",
|
|
111
138
|
"summary": "Incomplete sweep for undeclared resources",
|
|
112
|
-
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_evaluator that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Evaluators: operation error Bedrock AgentCore Control: ListEvaluators, https response error StatusCode: 404, RequestID:
|
|
139
|
+
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_evaluator that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Evaluators: operation error Bedrock AgentCore Control: ListEvaluators, https response error StatusCode: 404, RequestID: d28be8b1-421d-4df7-943d-9f0080f5a895, api error UnknownOperationException: Unknown operation: POST /evaluators), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
113
140
|
},
|
|
114
141
|
{
|
|
115
142
|
"severity": "warning",
|
|
116
143
|
"summary": "Incomplete sweep for undeclared resources",
|
|
117
|
-
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_harness that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Harnesses: operation error Bedrock AgentCore Control: ListHarnesses, https response error StatusCode: 404, RequestID:
|
|
144
|
+
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_harness that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Harnesses: operation error Bedrock AgentCore Control: ListHarnesses, https response error StatusCode: 404, RequestID: c5f87cbf-8801-446d-8518-4e1fab6883ef, api error UnknownOperationException: Unknown operation: GET /harnesses), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
118
145
|
},
|
|
119
146
|
{
|
|
120
147
|
"severity": "warning",
|
|
121
148
|
"summary": "Incomplete sweep for undeclared resources",
|
|
122
|
-
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_online_evaluation_config that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Online Evaluation Config resources: operation error Bedrock AgentCore Control: ListOnlineEvaluationConfigs, https response error StatusCode: 404, RequestID:
|
|
149
|
+
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_online_evaluation_config that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Online Evaluation Config resources: operation error Bedrock AgentCore Control: ListOnlineEvaluationConfigs, https response error StatusCode: 404, RequestID: 57c51b2b-ad49-436f-b3ad-174025ae14c7, api error UnknownOperationException: Unknown operation: POST /online-evaluation-configs), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
123
150
|
},
|
|
124
151
|
{
|
|
125
152
|
"severity": "warning",
|
|
126
153
|
"summary": "Incomplete sweep for undeclared resources",
|
|
127
|
-
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_policy_engine that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Policy Engines: operation error Bedrock AgentCore Control: ListPolicyEngines, https response error StatusCode: 404, RequestID:
|
|
154
|
+
"detail": "The estate-wide sweep listed a aws_bedrockagentcore_policy_engine that the provider could not fully read (Error Listing Remote Resources: listing Bedrock AgentCore Policy Engines: operation error Bedrock AgentCore Control: ListPolicyEngines, https response error StatusCode: 404, RequestID: 484e9146-20c8-4c6d-a9dc-757d422fb0ae, api error UnknownOperationException: Unknown operation: GET /policy-engines), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
128
155
|
},
|
|
129
156
|
{
|
|
130
157
|
"severity": "warning",
|
|
131
158
|
"summary": "Incomplete sweep for undeclared resources",
|
|
132
|
-
"detail": "The estate-wide sweep listed a aws_cleanrooms_collaboration that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Collaboration resources: operation error CleanRooms: ListCollaborations, https response error StatusCode: 404, RequestID:
|
|
159
|
+
"detail": "The estate-wide sweep listed a aws_cleanrooms_collaboration that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Collaboration resources: operation error CleanRooms: ListCollaborations, https response error StatusCode: 404, RequestID: 7270a23a-4741-4881-b5f9-2e322c8261cc, api error UnknownOperationException: Unknown operation: GET /collaborations), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
133
160
|
},
|
|
134
161
|
{
|
|
135
162
|
"severity": "warning",
|
|
136
163
|
"summary": "Incomplete sweep for undeclared resources",
|
|
137
|
-
"detail": "The estate-wide sweep listed a aws_cleanrooms_configured_table that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Configured Table resources: operation error CleanRooms: ListConfiguredTables, https response error StatusCode: 404, RequestID:
|
|
164
|
+
"detail": "The estate-wide sweep listed a aws_cleanrooms_configured_table that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Configured Table resources: operation error CleanRooms: ListConfiguredTables, https response error StatusCode: 404, RequestID: 5934d25c-522c-4d11-a9e4-18c4219f1b05, api error UnknownOperationException: Unknown operation: GET /configuredTables), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
138
165
|
},
|
|
139
166
|
{
|
|
140
167
|
"severity": "warning",
|
|
141
168
|
"summary": "Incomplete sweep for undeclared resources",
|
|
142
|
-
"detail": "The estate-wide sweep listed a aws_cleanrooms_membership that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Membership resources: operation error CleanRooms: ListMemberships, https response error StatusCode: 404, RequestID:
|
|
169
|
+
"detail": "The estate-wide sweep listed a aws_cleanrooms_membership that the provider could not fully read (Error Listing Remote Resources: listing Clean Rooms Membership resources: operation error CleanRooms: ListMemberships, https response error StatusCode: 404, RequestID: 39426f1b-61e1-4000-9f93-747ab7352abc, api error UnknownOperationException: Unknown operation: GET /memberships), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
143
170
|
},
|
|
144
171
|
{
|
|
145
172
|
"severity": "warning",
|
|
@@ -149,22 +176,22 @@
|
|
|
149
176
|
{
|
|
150
177
|
"severity": "warning",
|
|
151
178
|
"summary": "Incomplete sweep for undeclared resources",
|
|
152
|
-
"detail": "The estate-wide sweep listed a aws_cloudwatch_alarm_mute_rule that the provider could not fully read (Error Listing Remote Resources: listing CloudWatch Alarm Mute Rules: operation error CloudWatch: ListAlarmMuteRules, https response error StatusCode: 400, RequestID:
|
|
179
|
+
"detail": "The estate-wide sweep listed a aws_cloudwatch_alarm_mute_rule that the provider could not fully read (Error Listing Remote Resources: listing CloudWatch Alarm Mute Rules: operation error CloudWatch: ListAlarmMuteRules, https response error StatusCode: 400, RequestID: 07fff713-2a42-4646-90f9-053d18a5f582, api error UnsupportedOperation: Operation ListAlarmMuteRules is not supported by CloudWatch JSON.), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
153
180
|
},
|
|
154
181
|
{
|
|
155
182
|
"severity": "warning",
|
|
156
183
|
"summary": "Incomplete sweep for undeclared resources",
|
|
157
|
-
"detail": "The estate-wide sweep listed a aws_ec2_network_insights_access_scope that the provider could not fully read (Error Listing Remote Resources: listing EC2 Network Insights Access Scopes: operation error EC2: DescribeNetworkInsightsAccessScopes, https response error StatusCode: 400, RequestID:
|
|
184
|
+
"detail": "The estate-wide sweep listed a aws_ec2_network_insights_access_scope that the provider could not fully read (Error Listing Remote Resources: listing EC2 Network Insights Access Scopes: operation error EC2: DescribeNetworkInsightsAccessScopes, https response error StatusCode: 400, RequestID: 50a41743-b5a5-4138-aa38-6dd85b2a13b0, api error UnsupportedOperation: Operation DescribeNetworkInsightsAccessScopes is not supported.), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
158
185
|
},
|
|
159
186
|
{
|
|
160
187
|
"severity": "warning",
|
|
161
188
|
"summary": "Incomplete sweep for undeclared resources",
|
|
162
|
-
"detail": "The estate-wide sweep listed a aws_ec2_transit_gateway_metering_policy that the provider could not fully read (Error Listing Remote Resources: listing EC2 Transit Gateway Metering Policies: operation error EC2: DescribeTransitGatewayMeteringPolicies, https response error StatusCode: 400, RequestID:
|
|
189
|
+
"detail": "The estate-wide sweep listed a aws_ec2_transit_gateway_metering_policy that the provider could not fully read (Error Listing Remote Resources: listing EC2 Transit Gateway Metering Policies: operation error EC2: DescribeTransitGatewayMeteringPolicies, https response error StatusCode: 400, RequestID: 688193b4-ad92-4d71-b96d-88e5481c5808, api error UnsupportedOperation: Operation DescribeTransitGatewayMeteringPolicies is not supported.), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
163
190
|
},
|
|
164
191
|
{
|
|
165
192
|
"severity": "warning",
|
|
166
193
|
"summary": "Incomplete sweep for undeclared resources",
|
|
167
|
-
"detail": "The estate-wide sweep listed a aws_ecs_daemon_task_definition that the provider could not fully read (Error Listing Remote Resources: listing ECS Daemon Task Definitions: operation error ECS: ListDaemonTaskDefinitions, https response error StatusCode: 400, RequestID:
|
|
194
|
+
"detail": "The estate-wide sweep listed a aws_ecs_daemon_task_definition that the provider could not fully read (Error Listing Remote Resources: listing ECS Daemon Task Definitions: operation error ECS: ListDaemonTaskDefinitions, https response error StatusCode: 400, RequestID: bd8a781e-1847-4313-8b34-46f13faba8e1, api error UnsupportedOperation: Operation ListDaemonTaskDefinitions is not supported.), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
168
195
|
},
|
|
169
196
|
{
|
|
170
197
|
"severity": "warning",
|
|
@@ -184,37 +211,37 @@
|
|
|
184
211
|
{
|
|
185
212
|
"severity": "warning",
|
|
186
213
|
"summary": "Incomplete sweep for undeclared resources",
|
|
187
|
-
"detail": "The estate-wide sweep listed a aws_glue_catalog that the provider could not fully read (Error Listing Remote Resources: listing Glue Catalogs: operation error Glue: GetCatalogs, https response error StatusCode: 400, RequestID:
|
|
214
|
+
"detail": "The estate-wide sweep listed a aws_glue_catalog that the provider could not fully read (Error Listing Remote Resources: listing Glue Catalogs: operation error Glue: GetCatalogs, https response error StatusCode: 400, RequestID: 04110ba2-c8f1-47b5-a718-2f34cb884808, api error InvalidAction: Action GetCatalogs is not supported), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
188
215
|
},
|
|
189
216
|
{
|
|
190
217
|
"severity": "warning",
|
|
191
218
|
"summary": "Incomplete sweep for undeclared resources",
|
|
192
|
-
"detail": "The estate-wide sweep listed a aws_mailmanager_rule_set that the provider could not fully read (Error Listing Remote Resources: listing SES Mail Manager Rule Set resources: operation error MailManager: ListRuleSets, https response error StatusCode: 404, RequestID:
|
|
219
|
+
"detail": "The estate-wide sweep listed a aws_mailmanager_rule_set that the provider could not fully read (Error Listing Remote Resources: listing SES Mail Manager Rule Set resources: operation error MailManager: ListRuleSets, https response error StatusCode: 404, RequestID: e7e4cddb-2f37-45f5-8e63-fbae9f31f433, deserialization failed, unexpected smithy-protocol response header '' (HTTP status: 404 Not Found)), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
193
220
|
},
|
|
194
221
|
{
|
|
195
222
|
"severity": "warning",
|
|
196
223
|
"summary": "Incomplete sweep for undeclared resources",
|
|
197
|
-
"detail": "The estate-wide sweep listed a aws_mailmanager_traffic_policy that the provider could not fully read (Error Listing Remote Resources: operation error MailManager: ListTrafficPolicies, https response error StatusCode: 404, RequestID:
|
|
224
|
+
"detail": "The estate-wide sweep listed a aws_mailmanager_traffic_policy that the provider could not fully read (Error Listing Remote Resources: operation error MailManager: ListTrafficPolicies, https response error StatusCode: 404, RequestID: 7042fd87-2ca6-4581-a96f-f5cbfcce5da5, deserialization failed, unexpected smithy-protocol response header '' (HTTP status: 404 Not Found)), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
198
225
|
},
|
|
199
226
|
{
|
|
200
227
|
"severity": "warning",
|
|
201
228
|
"summary": "Incomplete sweep for undeclared resources",
|
|
202
|
-
"detail": "The estate-wide sweep listed a aws_opensearchserverless_collection that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Serverless Collections: operation error OpenSearchServerless: ListCollections, https response error StatusCode: 404, RequestID:
|
|
229
|
+
"detail": "The estate-wide sweep listed a aws_opensearchserverless_collection that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Serverless Collections: operation error OpenSearchServerless: ListCollections, https response error StatusCode: 404, RequestID: a34ec68c-9815-4557-8de6-b9520cdbcd6d, api error UnknownOperationException: Unknown operation: OpenSearchServerless.ListCollections), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
203
230
|
},
|
|
204
231
|
{
|
|
205
232
|
"severity": "warning",
|
|
206
233
|
"summary": "Incomplete sweep for undeclared resources",
|
|
207
|
-
"detail": "The estate-wide sweep listed a aws_opensearchserverless_collection_group that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Serverless Collection Groups: operation error OpenSearchServerless: ListCollectionGroups, https response error StatusCode: 404, RequestID:
|
|
234
|
+
"detail": "The estate-wide sweep listed a aws_opensearchserverless_collection_group that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Serverless Collection Groups: operation error OpenSearchServerless: ListCollectionGroups, https response error StatusCode: 404, RequestID: 9e9600b3-ee10-43f4-8c44-726555eca28a, api error UnknownOperationException: Unknown operation: OpenSearchServerless.ListCollectionGroups), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
208
235
|
},
|
|
209
236
|
{
|
|
210
237
|
"severity": "warning",
|
|
211
238
|
"summary": "Incomplete sweep for undeclared resources",
|
|
212
|
-
"detail": "The estate-wide sweep listed a aws_osis_pipeline that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Ingestion Pipeline resources: operation error OSIS: ListPipelines, https response error StatusCode: 404, RequestID:
|
|
239
|
+
"detail": "The estate-wide sweep listed a aws_osis_pipeline that the provider could not fully read (Error Listing Remote Resources: listing OpenSearch Ingestion Pipeline resources: operation error OSIS: ListPipelines, https response error StatusCode: 404, RequestID: 508da4e1-c093-43f5-924a-c8413f9faa92, api error UnknownOperationException: Unknown operation: GET /2022-01-01/osis/listPipelines), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
213
240
|
},
|
|
214
241
|
{
|
|
215
242
|
"severity": "warning",
|
|
216
243
|
"summary": "Incomplete sweep for undeclared resources",
|
|
217
|
-
"detail": "The estate-wide sweep listed a aws_pinpointsmsvoicev2_pool that the provider could not fully read (Error Listing Remote Resources: operation error Pinpoint SMS Voice V2: DescribePools, https response error StatusCode: 404, RequestID:
|
|
244
|
+
"detail": "The estate-wide sweep listed a aws_pinpointsmsvoicev2_pool that the provider could not fully read (Error Listing Remote Resources: operation error Pinpoint SMS Voice V2: DescribePools, https response error StatusCode: 404, RequestID: d3f8ba2e-5abd-4f03-8397-0b3f99ad0c93, api error UnknownOperationException: Unknown operation: PinpointSMSVoiceV2.DescribePools), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
218
245
|
},
|
|
219
246
|
{
|
|
220
247
|
"severity": "warning",
|
|
@@ -224,17 +251,17 @@
|
|
|
224
251
|
{
|
|
225
252
|
"severity": "warning",
|
|
226
253
|
"summary": "Incomplete sweep for undeclared resources",
|
|
227
|
-
"detail": "The estate-wide sweep listed a aws_rekognition_collection that the provider could not fully read (Error Listing Remote Resources: listing Rekognition Collections: operation error Rekognition: ListCollections, https response error StatusCode: 404, RequestID:
|
|
254
|
+
"detail": "The estate-wide sweep listed a aws_rekognition_collection that the provider could not fully read (Error Listing Remote Resources: listing Rekognition Collections: operation error Rekognition: ListCollections, https response error StatusCode: 404, RequestID: 39d31e09-0904-4824-85c7-362b603466c5, api error UnknownOperationException: Unknown operation: RekognitionService.ListCollections), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
228
255
|
},
|
|
229
256
|
{
|
|
230
257
|
"severity": "warning",
|
|
231
258
|
"summary": "Incomplete sweep for undeclared resources",
|
|
232
|
-
"detail": "The estate-wide sweep listed a aws_resiliencehubv2_policy that the provider could not fully read (Error Listing Remote Resources: listing Resilience Hub V2 Policies: operation error resiliencehubv2: ListPolicies, https response error StatusCode: 404, RequestID:
|
|
259
|
+
"detail": "The estate-wide sweep listed a aws_resiliencehubv2_policy that the provider could not fully read (Error Listing Remote Resources: listing Resilience Hub V2 Policies: operation error resiliencehubv2: ListPolicies, https response error StatusCode: 404, RequestID: 690450ba-7995-479e-a606-167e8c1794a8, api error UnknownOperationException: Unknown operation: GET /v2/list-policies), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
233
260
|
},
|
|
234
261
|
{
|
|
235
262
|
"severity": "warning",
|
|
236
263
|
"summary": "Incomplete sweep for undeclared resources",
|
|
237
|
-
"detail": "The estate-wide sweep listed a aws_route53_resolver_rule that the provider could not fully read (Error Listing Remote Resources: listing Route53 Resolver Rules: operation error Route53Resolver: ListResolverRules, https response error StatusCode: 404, RequestID:
|
|
264
|
+
"detail": "The estate-wide sweep listed a aws_route53_resolver_rule that the provider could not fully read (Error Listing Remote Resources: listing Route53 Resolver Rules: operation error Route53Resolver: ListResolverRules, https response error StatusCode: 404, RequestID: 4c6abdde-36e7-47ee-82ec-4d76d2c249e8, api error UnknownOperationException: Unknown operation: Route53Resolver.ListResolverRules), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
238
265
|
},
|
|
239
266
|
{
|
|
240
267
|
"severity": "warning",
|
|
@@ -249,27 +276,32 @@
|
|
|
249
276
|
{
|
|
250
277
|
"severity": "warning",
|
|
251
278
|
"summary": "Incomplete sweep for undeclared resources",
|
|
252
|
-
"detail": "The estate-wide sweep listed a aws_s3files_file_system that the provider could not fully read (Error Listing Remote Resources: operation error S3Files: ListFileSystems, https response error StatusCode: 404, RequestID:
|
|
279
|
+
"detail": "The estate-wide sweep listed a aws_s3files_file_system that the provider could not fully read (Error Listing Remote Resources: operation error S3Files: ListFileSystems, https response error StatusCode: 404, RequestID: e1d315db-5917-4eaa-a08b-1f9eeba455da, api error UnknownOperationException: Unknown operation: GET /file-systems), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
253
280
|
},
|
|
254
281
|
{
|
|
255
282
|
"severity": "warning",
|
|
256
283
|
"summary": "Incomplete sweep for undeclared resources",
|
|
257
|
-
"detail": "The estate-wide sweep listed a aws_sagemaker_hub_content_reference that the provider could not fully read (Error Listing Remote Resources: listing SageMaker Hub Content Reference resources: operation error SageMaker: ListHubs, https response error StatusCode: 400, RequestID:
|
|
284
|
+
"detail": "The estate-wide sweep listed a aws_sagemaker_hub_content_reference that the provider could not fully read (Error Listing Remote Resources: listing SageMaker Hub Content Reference resources: operation error SageMaker: ListHubs, https response error StatusCode: 400, RequestID: 551fad4d-791d-4fbb-abcf-3079c7893256, api error UnknownOperationException: Operation ListHubs is not supported by floci), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
258
285
|
},
|
|
259
286
|
{
|
|
260
287
|
"severity": "warning",
|
|
261
288
|
"summary": "Incomplete sweep for undeclared resources",
|
|
262
|
-
"detail": "The estate-wide sweep listed a aws_securityhub_automation_rule_v2 that the provider could not fully read (Error Listing Remote Resources: listing Security Hub V2 Automation Rules: operation error SecurityHub: ListAutomationRulesV2, https response error StatusCode: 404, RequestID:
|
|
289
|
+
"detail": "The estate-wide sweep listed a aws_securityhub_automation_rule_v2 that the provider could not fully read (Error Listing Remote Resources: listing Security Hub V2 Automation Rules: operation error SecurityHub: ListAutomationRulesV2, https response error StatusCode: 404, RequestID: d454a16e-a22c-422b-924d-693e2be63ce9, api error UnknownOperationException: Unknown operation: GET /automationrulesv2/list), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
263
290
|
},
|
|
264
291
|
{
|
|
265
292
|
"severity": "warning",
|
|
266
293
|
"summary": "Incomplete sweep for undeclared resources",
|
|
267
|
-
"detail": "The estate-wide sweep listed a aws_securityhub_connector_v2 that the provider could not fully read (Error Listing Remote Resources: listing Security Hub V2 Connectors: operation error SecurityHub: ListConnectorsV2, https response error StatusCode: 404, RequestID:
|
|
294
|
+
"detail": "The estate-wide sweep listed a aws_securityhub_connector_v2 that the provider could not fully read (Error Listing Remote Resources: listing Security Hub V2 Connectors: operation error SecurityHub: ListConnectorsV2, https response error StatusCode: 404, RequestID: 47ec8f1e-0e2d-4095-b066-decba9207b8f, api error UnknownOperationException: Unknown operation: GET /connectorsv2), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
268
295
|
},
|
|
269
296
|
{
|
|
270
297
|
"severity": "warning",
|
|
271
298
|
"summary": "Incomplete sweep for undeclared resources",
|
|
272
|
-
"detail": "The estate-wide sweep listed a aws_workspaces_pool that the provider could not fully read (Error Listing Remote Resources: listing WorkSpaces Pools: operation error WorkSpaces: DescribeWorkspacesPools, https response error StatusCode: 404, RequestID:
|
|
299
|
+
"detail": "The estate-wide sweep listed a aws_workspaces_pool that the provider could not fully read (Error Listing Remote Resources: listing WorkSpaces Pools: operation error WorkSpaces: DescribeWorkspacesPools, https response error StatusCode: 404, RequestID: 32f0a46a-0637-4a62-9b7b-458adab88422, api error UnknownOperationException: Unknown operation: WorkspacesService.DescribeWorkspacesPools), so its ownership markers cannot be read and it cannot be matched to this estate. This is expected for a resource this estate does not own, such as an AWS-managed default; the sweep continues over the rest of this type's objects and every other type."
|
|
300
|
+
},
|
|
301
|
+
{
|
|
302
|
+
"severity": "warning",
|
|
303
|
+
"summary": "Unbound instance with unreadable live markers of its type",
|
|
304
|
+
"detail": "Nothing bound to aws_vpc.adoptable, so the plan below proposes creating it - but 1 live aws_vpc resource(s) this run listed came back with no readable ownership marker, and the estate's tag index holds no marker for this address either. If one of them is in fact this estate's aws_vpc.adoptable, applying will create a second resource carrying the same marker rather than adopting the first. Check the resources reported as foreign below before applying; live-import binds one by hand."
|
|
273
305
|
},
|
|
274
306
|
{
|
|
275
307
|
"severity": "warning",
|