terminate doesn't tolerate dependency

[navi86]

hello,

Terraform Version

Terraform v0.12.12
+ provider.aws v2.28.1

terminate process doesn't tolerate dependency as far as I understand it's correctly.

Affected Resource(s)

• aws_iam_role_policy_attachment
• aws_iam_policy

resource "aws_iam_policy" "s3_replication_policy" {
  count = var.enable_s3_replication ? 1 : 0
  name  = local.policy

  policy = data.aws_iam_policy_document.s3_replication_policy[0].json
}

# Attach IAM policy to S3 replication role
resource "aws_iam_role_policy_attachment" "replication" {
  count      = var.enable_s3_replication ? 1 : 0
  role       = "${aws_iam_role.s3_replication[0].name}"
  policy_arn = "${aws_iam_policy.s3_replication_policy[0].arn}"
}

Debug Output

according to graph "aws_iam_role_policy_attachment" depends on aws_iam_policy

Expected Behavior

Attachment policy would be deleted and then process of deletion policy will start.

Actual Behavior

Destroying process runs in parallel:
[0m�[1mmodule.s3.aws_iam_role_policy_attachment.replication[0]: Destroying...
�[0m�[1mmodule.s3.aws_iam_policy.s3_replication_policy[0]: Destroying...
therefore I got an error that "deleteConflict: Cannot delete a policy attached to entities."

[justinretzolk]

Hey @navi86 👋 Thank you for taking the time to file this issue. Given that there's been a number of Terraform and AWS provider releases since you initially filed it, can you confirm whether you're still experiencing this behavior?