tests/config: Conformance pack tests fail in GovCloud, AccessDeniedException

[YakDriver]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Acceptance tests are failing in GovCloud for aws_config_conformance_pack:

    --- FAIL: TestAccAWSConfig_serial/ConformancePack (138.77s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/disappears (11.30s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/S3Template (14.58s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/S3TemplateAndTemplateBody (14.64s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/updateS3Delivery (13.53s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/basic (11.14s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/forceNew (11.15s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/inputParameters (11.12s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/S3Delivery (14.35s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/updateInputParameters (11.23s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/updateS3Template (14.61s)
        --- FAIL: TestAccAWSConfig_serial/ConformancePack/updateTemplateBody (11.13s)

New or Affected Resource(s)

• aws_config_conformance_pack

Potential Terraform Configuration

resource "aws_config_conformance_pack" "test" {
  depends_on    = [aws_config_configuration_recorder.test]
  name          = "yak_pack"
  template_body = <<EOT
Resources:
  IAMPasswordPolicy:
    Properties:
      ConfigRuleName: IAMPasswordPolicy
      Source:
        Owner: AWS
        SourceIdentifier: IAM_PASSWORD_POLICY
    Type: AWS::Config::ConfigRule
EOT
}

Debug

=== RUN   TestAccAWSConfig_serial/ConformancePack/updateTemplateBody
    resource_aws_config_conformance_pack_test.go:347: Step 1/3 error: Error running apply: exit status 1
        
        Error: error creating Config Conformance Pack (tf-acc-test-1420825262838762206): AccessDeniedException: 
        	status code: 400, request id: fd104c01-65d5-4442-8345-d4d8926bafc6
        
          on terraform_plugin_test.tf line 35, in resource "aws_config_conformance_pack" "test":
          35: resource "aws_config_conformance_pack" "test" {  

References

• #0000

[github-actions]

Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.

If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thank you!

[richardcrabtree]

I am experiencing this issue as well. I get a 400 error when attempting to put a compliance pack into govcloud. It's also not possible to do this with either the cli or boto3 so it's likely an AWS limitation.