地形 | aws_route53_record |构建变更集 : InvalidChangeBatch 时出错

Question

执行时 terraform plan我没有错误，但是当我执行 terraform apply 时我收到以下错误。

地形计划输出:-

+ aws_route53_record.alm_route_record1
      id:                                        <computed>
      allow_overwrite:                           <computed>
      fqdn:                                      <computed>
      name:                                      "${aws_acm_certificate.acm.domain_validation_options.0.resource_record_name}"
      records.#:                                 <computed>
      ttl:                                       "300"
      type:                                      "${aws_acm_certificate.acm.domain_validation_options.0.resource_record_type}"
      zone_id:                                   "Z2J2U5QM63SJ94"

acm.tf

resource "aws_acm_certificate" "acm" {
  domain_name       = “example.com”
  validation_method = "DNS"

  tags = {
    Environment   = "${lookup(var.environment, terraform.workspace)}"
    ManagedBy     = "terraform"
  }
}

data "aws_route53_zone" "route_zone" {
  name         = "example.org."
  private_zone = false
}

resource "aws_route53_record" "alm_route_record1" {
  name    = "${aws_acm_certificate.acm.domain_validation_options.0.resource_record_name}"
  type    = "${aws_acm_certificate.acm.domain_validation_options.0.resource_record_type}"
  zone_id = "${data.aws_route53_zone.route_zone.id}"
  records = ["${aws_acm_certificate.acm.domain_validation_options.0.resource_record_value}"]
  ttl     = 300
}

resource "aws_acm_certificate_validation" "dns_validation" {
  certificate_arn         = "${aws_acm_certificate.acm.arn}"
  validation_record_fqdns = ["${aws_route53_record.alm_route_record1.fqdn}"]
}

错误日志:-

aws_route53_record.alm_route_record1: [ERR]: Error building changeset: InvalidChangeBatch: [Tried to create resource record set [name='_c12c2dee87ee95f2104e7a94875e5519.ca.tuigroup.com.', type='CNAME'] but it already exists] status code: 400, request id: 4f145fdb-45a0-11e9-b0f7-4baff3471f37

点击我页面的 WebURL 后，它显示

503 Service Temporarily Unavailable

我觉得 records正在接受现有的 CNAME

Answer 1

似乎 2.0 之后的最新 aws 提供程序有错误 ( https://github.com/terraform-providers/terraform-provider-aws/issues/7918 )

请保留旧版本，例如版本1.60并等待修复。

provider "aws" {
  access_key = "${var.access_key}"
  secret_key = "${var.secret_key}"
  region     = "${var.region}"

  version = "~> 1.60"
}