ucceeded 2 minutes ago in 49s

Search logs
2s
Current runner version: '2.306.0'
Operating System
Runner Image
Runner Image Provisioner
GITHUB_TOKEN Permissions
Secret source: Actions
Prepare workflow directory
Prepare all required actions
Getting action download info
Download action repository 'aws-actions/configure-aws-credentials@v2'
(SHA:5fd3084fc36e372ff1fff382a39b10d03659f355)
Download action repository 'actions/checkout@v3'
(SHA:c85c95e3d7251135ab7dc9ce3241c5835cc595a9)
Download action repository 'hashicorp/setup-terraform@v2'
(SHA:633666f66e0061ca3b725c73b2ec20cd13a8fdd1)
Complete job name: Run Terraform
2s
Run aws-actions/configure-aws-credentials@v2
(node:1606) NOTE: We are formalizing our plans to enter AWS SDK for JavaScript (v2)
into maintenance mode in 2023.

Please migrate your code to use AWS SDK for JavaScript (v3).
For more information, check the migration guide at https://a.co/7PzMCcy
(Use `node --trace-warnings ...` to show where the warning was created)
1s
Run actions/checkout@v3
Syncing repository: davivienda-colombia/davi-vivi-assistant-iac
Getting Git version info
Temporarily overriding HOME='/home/runner/work/_temp/f59c05c3-6302-43b4-bbef-
19f0f1935784' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
/usr/bin/git config --global --add safe.directory /home/runner/work/davi-vivi-
assistant-iac/davi-vivi-assistant-iac
Deleting the contents of '/home/runner/work/davi-vivi-assistant-iac/davi-vivi-
assistant-iac'
Initializing the repository
Disabling automatic garbage collection
Setting up auth
Fetching the repository
Determining the checkout info
Checking out the ref
/usr/bin/git log -1 --format='%H'
'fcb5b2a1b678e2b9be5e1339fdb1b97acafcaced'
1s
Run hashicorp/setup-terraform@v2
/usr/bin/unzip -o -q /home/runner/work/_temp/627fe4fe-f4e8-4b14-8d77-08f13b5ed4f4
0s
Run git config --local --remove-section http."https://github.com/"
17s
Run terraform init \

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically

use this backend unless the backend configuration changes.
Initializing modules...
- backend in components/backend
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-api-gateway-
iac.git?ref=v1.0.0 for backend.api_core_mngr...
- backend.api_core_mngr in .terraform/modules/backend.api_core_mngr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-api-gateway-
iac.git?ref=v1.0.0 for backend.api_interpreter_mngr...
- backend.api_interpreter_mngr in .terraform/modules/backend.api_interpreter_mngr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-cloudwatch-
iac.git?ref=v1.0.0 for backend.clwtch_log_group_core_mngr_virginia...
- backend.clwtch_log_group_core_mngr_virginia in
.terraform/modules/backend.clwtch_log_group_core_mngr_virginia
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-cloudwatch-
iac.git?ref=v1.0.0 for backend.clwtch_log_group_data_mngr_virginia...
- backend.clwtch_log_group_data_mngr_virginia in
.terraform/modules/backend.clwtch_log_group_data_mngr_virginia
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-cloudwatch-
iac.git?ref=v1.0.0 for backend.clwtch_log_group_interpreter_mngr_virginia...
- backend.clwtch_log_group_interpreter_mngr_virginia in
.terraform/modules/backend.clwtch_log_group_interpreter_mngr_virginia
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-bastion-
iac.git?ref=v1.0.0 for backend.ec2_bastion_instance_virginia...
- backend.ec2_bastion_instance_virginia in
.terraform/modules/backend.ec2_bastion_instance_virginia
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-backend-
iac.git?ref=v1.1.1 for backend.ecs_backend_core_mngr...
- backend.ecs_backend_core_mngr in .terraform/modules/backend.ecs_backend_core_mngr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecr-iac.git?
ref=v1.0.0 for backend.ecs_backend_core_mngr.ecr...
- backend.ecs_backend_core_mngr.ecr in
.terraform/modules/backend.ecs_backend_core_mngr.ecr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-iam-iac.git?
ref=v1.0.0 for backend.ecs_backend_core_mngr.role_ecs...
- backend.ecs_backend_core_mngr.role_ecs in
.terraform/modules/backend.ecs_backend_core_mngr.role_ecs
- backend.ecs_backend_core_mngr.role_ecs.lambda_permissions in
.terraform/modules/backend.ecs_backend_core_mngr.role_ecs/modules/
lambda_permissions
- backend.ecs_backend_core_mngr.role_ecs.policy in
.terraform/modules/backend.ecs_backend_core_mngr.role_ecs/modules/policy
- backend.ecs_backend_core_mngr.role_ecs.role in
.terraform/modules/backend.ecs_backend_core_mngr.role_ecs/modules/role
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_core_mngr.service...
- backend.ecs_backend_core_mngr.service in
.terraform/modules/backend.ecs_backend_core_mngr.service
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_core_mngr.task_definition...
- backend.ecs_backend_core_mngr.task_definition in
.terraform/modules/backend.ecs_backend_core_mngr.task_definition
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-backend-
iac.git?ref=v1.1.1 for backend.ecs_backend_data_mngr...
- backend.ecs_backend_data_mngr in .terraform/modules/backend.ecs_backend_data_mngr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecr-iac.git?
ref=v1.0.0 for backend.ecs_backend_data_mngr.ecr...
- backend.ecs_backend_data_mngr.ecr in
.terraform/modules/backend.ecs_backend_data_mngr.ecr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-iam-iac.git?
ref=v1.0.0 for backend.ecs_backend_data_mngr.role_ecs...
- backend.ecs_backend_data_mngr.role_ecs in
.terraform/modules/backend.ecs_backend_data_mngr.role_ecs
- backend.ecs_backend_data_mngr.role_ecs.lambda_permissions in
.terraform/modules/backend.ecs_backend_data_mngr.role_ecs/modules/
lambda_permissions
- backend.ecs_backend_data_mngr.role_ecs.policy in
.terraform/modules/backend.ecs_backend_data_mngr.role_ecs/modules/policy
- backend.ecs_backend_data_mngr.role_ecs.role in
.terraform/modules/backend.ecs_backend_data_mngr.role_ecs/modules/role
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_data_mngr.service...
- backend.ecs_backend_data_mngr.service in
.terraform/modules/backend.ecs_backend_data_mngr.service
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_data_mngr.task_definition...
- backend.ecs_backend_data_mngr.task_definition in
.terraform/modules/backend.ecs_backend_data_mngr.task_definition
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-backend-
iac.git?ref=v1.1.1 for backend.ecs_backend_interpreter_mngr...
- backend.ecs_backend_interpreter_mngr in
.terraform/modules/backend.ecs_backend_interpreter_mngr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecr-iac.git?
ref=v1.0.0 for backend.ecs_backend_interpreter_mngr.ecr...
- backend.ecs_backend_interpreter_mngr.ecr in
.terraform/modules/backend.ecs_backend_interpreter_mngr.ecr
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-iam-iac.git?
ref=v1.0.0 for backend.ecs_backend_interpreter_mngr.role_ecs...
- backend.ecs_backend_interpreter_mngr.role_ecs in
.terraform/modules/backend.ecs_backend_interpreter_mngr.role_ecs
- backend.ecs_backend_interpreter_mngr.role_ecs.lambda_permissions in
.terraform/modules/backend.ecs_backend_interpreter_mngr.role_ecs/modules/
lambda_permissions
- backend.ecs_backend_interpreter_mngr.role_ecs.policy in
.terraform/modules/backend.ecs_backend_interpreter_mngr.role_ecs/modules/policy
- backend.ecs_backend_interpreter_mngr.role_ecs.role in
.terraform/modules/backend.ecs_backend_interpreter_mngr.role_ecs/modules/role
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_interpreter_mngr.service...
- backend.ecs_backend_interpreter_mngr.service in
.terraform/modules/backend.ecs_backend_interpreter_mngr.service
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_backend_interpreter_mngr.task_definition...
- backend.ecs_backend_interpreter_mngr.task_definition in
.terraform/modules/backend.ecs_backend_interpreter_mngr.task_definition
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-ecs-iac.git?
ref=v1.1.1 for backend.ecs_cluster...
- backend.ecs_cluster in .terraform/modules/backend.ecs_cluster
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-iam-iac.git?
ref=v1.0.0 for backend.ecs_policy_data_mngr...
- backend.ecs_policy_data_mngr in
.terraform/modules/backend.ecs_policy_data_mngr/modules/policy
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-iam-iac.git?
ref=v1.0.0 for backend.ecs_policy_interpreter_mngr...
- backend.ecs_policy_interpreter_mngr in
.terraform/modules/backend.ecs_policy_interpreter_mngr/modules/policy
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-secrets-
manager-iac.git?ref=v1.0.0 for backend.secrets_manager_interpreter...
- backend.secrets_manager_interpreter in
.terraform/modules/backend.secrets_manager_interpreter
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-secrets-
manager-iac.git?ref=v1.0.0 for backend.secrets_manager_rds...
- backend.secrets_manager_rds in .terraform/modules/backend.secrets_manager_rds
- frontend in components/frontend
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-cloudfront-
iac.git?ref=v1.0.0 for frontend.vivi_cf_cache_policy...
- frontend.vivi_cf_cache_policy in
.terraform/modules/frontend.vivi_cf_cache_policy/modules/cache-policy
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-s3-iac.git?
ref=v1.0.0 for frontend.vivi_s3_web_app_virginia...
- frontend.vivi_s3_web_app_virginia in
.terraform/modules/frontend.vivi_s3_web_app_virginia
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-frontend-
iac.git?ref=v1.0.0 for frontend.vivi_web...
- frontend.vivi_web in .terraform/modules/frontend.vivi_web
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-cloudfront-
iac.git?ref=v1.0.0 for frontend.vivi_web.cloudfront...
- frontend.vivi_web.cloudfront in .terraform/modules/frontend.vivi_web.cloudfront
Downloading git::https://github.com/davivienda-colombia/davi-coe-aws-wafv2-iac.git?
ref=v1.0.1 for frontend.wafv2_virginia...
- frontend.wafv2_virginia in .terraform/modules/frontend.wafv2_virginia

Initializing provider plugins...

- terraform.io/builtin/terraform is built in to Terraform
- Finding hashicorp/aws versions matching ">= 4.0.0, < 5.0.0"...
- Finding latest version of hashicorp/time...
- Installing hashicorp/aws v4.67.0...
- Installed hashicorp/aws v4.67.0 (signed by HashiCorp)
- Installing hashicorp/time v0.9.1...
- Installed hashicorp/time v0.9.1 (signed by HashiCorp)

Terraform has created a lock file .terraform.lock.hcl to record the provider

selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,

rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
0s
Run terraform fmt
6s
Run terraform validate
Success! The configuration is valid.

14s
Run terraform plan -input=false -compact-warnings -var-file=dev.tfvars -out=tfplan
module.backend.data.terraform_remote_state.networking: Reading...
module.backend.module.ec2_bastion_instance_virginia.data.aws_iam_policy.ec2_role_po
licy_for_ssm[0]: Reading...
module.backend.module.ecs_backend_data_mngr.module.role_ecs.module.role.data.aws_ia
m_policy_document.assume_role[0]: Reading...
module.backend.module.ecs_backend_data_mngr.module.ecr.aws_ecr_repository.this[0]:
Refreshing state... [id=data-mngr-virginia]
module.backend.module.clwtch_log_group_interpreter_mngr_virginia.aws_cloudwatch_log
_group.this[0]: Refreshing state... [id=/aws/ecs/interpreter-mngr-virginia]
module.backend.module.secrets_manager_interpreter.aws_secretsmanager_secret.this[0]
: Refreshing state... [id=arn:aws:secretsmanager:us-east-
1:***:secret:INTERPRETER_SECRET1_DEV-TWh0lA]
module.backend.module.ec2_bastion_instance_virginia.data.aws_region.current:
Reading...
module.backend.module.ecs_backend_data_mngr.module.role_ecs.module.role.data.aws_ia
m_policy_document.assume_role[0]: Read complete after 0s [id=3683910268]
module.backend.module.ec2_bastion_instance_virginia.data.aws_region.current: Read
complete after 0s [id=us-east-1]
module.backend.module.ecs_backend_core_mngr.module.ecr.aws_ecr_repository.this[0]:
Refreshing state... [id=core-mngr-virginia]
module.backend.module.ecs_backend_interpreter_mngr.module.role_ecs.module.role.data
.aws_iam_policy_document.assume_role[0]: Reading...
module.backend.module.ecs_backend_interpreter_mngr.module.role_ecs.module.role.data
.aws_iam_policy_document.assume_role[0]: Read complete after 0s [id=3683910268]
module.backend.module.ecs_backend_core_mngr.module.role_ecs.module.role.data.aws_ia
m_policy_document.assume_role[0]: Reading...
module.backend.module.ecs_backend_core_mngr.module.role_ecs.module.role.data.aws_ia
m_policy_document.assume_role[0]: Read complete after 0s [id=3683910268]
module.backend.module.secrets_manager_rds.aws_secretsmanager_secret.this[0]:
Refreshing state... [id=arn:aws:secretsmanager:us-east-
1:***:secret:VIVI_RDS_POSTGRES_CREDENTIALS-1OF5av]
module.backend.data.terraform_remote_state.networking: Read complete after 1s
module.backend.module.ecs_cluster.aws_ecs_cluster.this[0]: Refreshing state...
[id=arn:aws:ecs:us-east-1:***:cluster/vivi-dev-mngrs-cluster]
module.backend.module.ec2_bastion_instance_virginia.data.aws_iam_policy_document.as
sume_role[0]: Reading...
module.backend.module.ec2_bastion_instance_virginia.data.aws_iam_policy_document.as
sume_role[0]: Read complete after 0s [id=1903849331]
module.backend.module.clwtch_log_group_core_mngr_virginia.aws_cloudwatch_log_group.
this[0]: Refreshing state... [id=/aws/ecs/core-mngr-virginia]
module.backend.module.ec2_bastion_instance_virginia.data.aws_ami.amzn2: Reading...
module.backend.module.clwtch_log_group_data_mngr_virginia.aws_cloudwatch_log_group.
this[0]: Refreshing state... [id=/aws/ecs/data-mngr-virginia]
module.backend.module.ecs_backend_interpreter_mngr.module.ecr.aws_ecr_repository.th
is[0]: Refreshing state... [id=interpreter-mngr-virginia]
module.frontend.module.vivi_s3_web_app_virginia.aws_s3_bucket.this_no_prefix[0]:
Refreshing state... [id=vivi-web-component-dev]
module.frontend.module.vivi_web.module.cloudfront.aws_cloudfront_origin_access_iden
tity.this[0]: Refreshing state... [id=E1VESR5RDV4UH]
module.backend.module.ec2_bastion_instance_virginia.aws_iam_role.private_bastion[0]
: Refreshing state... [id=bastion-20230704205251878100000002]
module.backend.module.secrets_manager_interpreter.aws_secretsmanager_secret_version
.this[0]: Refreshing state... [id=arn:aws:secretsmanager:us-east-
1:***:secret:INTERPRETER_SECRET1_DEV-TWh0lA|CAF9F5D1-E641-4543-8DF1-AA053E2C5A87]
module.backend.module.ec2_bastion_instance_virginia.data.aws_iam_policy.ec2_role_po
licy_for_ssm[0]: Read complete after 1s
[id=arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore]
module.backend.module.secrets_manager_rds.aws_secretsmanager_secret_version.this[0]
: Refreshing state... [id=arn:aws:secretsmanager:us-east-
1:***:secret:VIVI_RDS_POSTGRES_CREDENTIALS-1OF5av|B3419E2D-7D7C-4291-9D77-
00C27A9D9C75]
module.backend.module.ecs_backend_data_mngr.module.ecr.aws_ecr_lifecycle_policy.thi
s[0]: Refreshing state... [id=data-mngr-virginia]
module.backend.module.ecs_backend_data_mngr.module.role_ecs.module.role.aws_iam_rol
e.this[0]: Refreshing state... [id=ecs-data-mngr-virginia]
module.backend.module.ecs_backend_interpreter_mngr.module.role_ecs.module.role.aws_
iam_role.this[0]: Refreshing state... [id=ecs-interpreter-mngr-virginia]
module.backend.module.ecs_backend_core_mngr.module.role_ecs.module.role.aws_iam_rol
e.this[0]: Refreshing state... [id=ecs-core-mngr-virginia]
module.backend.module.ecs_backend_core_mngr.module.ecr.aws_ecr_lifecycle_policy.thi
s[0]: Refreshing state... [id=core-mngr-virginia]
module.backend.module.ecs_backend_core_mngr.aws_security_group.this[0]: Refreshing
state... [id=sg-0188e981e7b4bbf59]
module.backend.module.ecs_backend_core_mngr.aws_lb_target_group.this[0]: Refreshing
state... [id=arn:aws:elasticloadbalancing:us-east-1:***:targetgroup/core-mngr-tg/
b6dec8357eaefa7b]
module.backend.module.ecs_backend_data_mngr.aws_lb_target_group.this[0]: Refreshing
state... [id=arn:aws:elasticloadbalancing:us-east-1:***:targetgroup/data-mngr-tg/
da86f89168a8e177]
module.backend.module.ec2_bastion_instance_virginia.aws_security_group.this[0]:
Refreshing state... [id=sg-06aad413ed74af0ab]
module.backend.module.api_interpreter_mngr.aws_api_gateway_rest_api.this[0]:
Refreshing state... [id=yh9jt1942d]
module.backend.module.ecs_backend_interpreter_mngr.aws_security_group.this[0]:
Refreshing state... [id=sg-09c6e6d17547a0cd3]
module.backend.module.ecs_backend_interpreter_mngr.aws_lb_target_group.this[0]:
Refreshing state...
[id=arn:aws:elasticloadbalancing:us-east-1:***:targetgroup/interpreter-mngr-tg/
36ce21edb4eae260]
module.backend.module.ecs_backend_data_mngr.aws_security_group.this[0]: Refreshing
state... [id=sg-03cb53fe16ced9216]
module.backend.module.api_core_mngr.aws_api_gateway_rest_api.this[0]: Refreshing
state... [id=vh9pgj78yc]
module.backend.module.ec2_bastion_instance_virginia.data.aws_ami.amzn2: Read
complete after 0s [id=ami-04610228df433d0c5]
module.frontend.module.vivi_cf_cache_policy.aws_cloudfront_cache_policy.policy:
Refreshing state... [id=5101beb4-19ba-439c-9058-7a472c00d365]
module.backend.module.ecs_backend_interpreter_mngr.module.ecr.aws_ecr_lifecycle_pol
icy.this[0]: Refreshing state... [id=interpreter-mngr-virginia]
module.backend.module.ecs_policy_data_mngr.aws_iam_policy.policy[0]: Refreshing
state... [id=arn:aws:iam::***:policy/ecs_secrets_data_mngr]
module.backend.data.aws_caller_identity.current: Reading...
module.backend.module.ecs_policy_interpreter_mngr.aws_iam_policy.policy[0]:
Refreshing state... [id=arn:aws:iam::***:policy/ecs_secrets_interpreter_mngr]
module.backend.module.ec2_bastion_instance_virginia.aws_iam_instance_profile.privat
e_bastion[0]: Refreshing state... [id=bastion-20230704205252953400000004]
module.backend.module.ec2_bastion_instance_virginia.aws_iam_role_policy_attachment.
EC2RoleforSSM_role_attach[0]: Refreshing state... [id=bastion-
20230704205251878100000002-20230704205253074400000005]
module.backend.module.ecs_backend_core_mngr.module.role_ecs.module.role.aws_iam_rol
e_policy_attachment.custom[0]: Refreshing state... [id=ecs-core-mngr-virginia-
20230704205252778000000003]
module.backend.module.api_core_mngr.aws_api_gateway_deployment.this[0]: Refreshing
state... [id=1p3sly]
module.backend.module.api_interpreter_mngr.aws_api_gateway_deployment.this[0]:
Refreshing state... [id=f2zf0z]
module.backend.module.ecs_backend_data_mngr.aws_lb_listener.this[0]: Refreshing
state... [id=arn:aws:elasticloadbalancing:us-east-1:***:listener/net/nlb-vivi-
mngrs/6fde171cd19b0958/751cdd80a38d8e7a]
module.backend.module.ecs_backend_core_mngr.aws_lb_listener.this[0]: Refreshing
state... [id=arn:aws:elasticloadbalancing:us-east-1:***:listener/net/nlb-vivi-
mngrs/6fde171cd19b0958/2b1fa2eaf64d07d0]
module.backend.module.ecs_backend_interpreter_mngr.aws_lb_listener.this[0]:
Refreshing state...
[id=arn:aws:elasticloadbalancing:us-east-1:***:listener/net/nlb-vivi-mngrs/
6fde171cd19b0958/b61c5fa0a646652e]
module.backend.data.aws_caller_identity.current: Read complete after 0s [id=***]
module.backend.module.ecs_backend_data_mngr.module.task_definition.aws_ecs_task_def
inition.this[0]: Refreshing state... [id=data-mngr-virginia]
module.backend.module.api_core_mngr.aws_api_gateway_stage.this[0]: Refreshing
state... [id=ags-vh9pgj78yc-stage]
module.backend.module.ecs_backend_core_mngr.module.task_definition.aws_ecs_task_def
inition.this[0]: Refreshing state... [id=core-mngr-virginia]
module.backend.module.ecs_backend_interpreter_mngr.module.task_definition.aws_ecs_t
ask_definition.this[0]: Refreshing state... [id=interpreter-mngr-virginia]
module.backend.module.api_interpreter_mngr.aws_api_gateway_stage.this[0]:
Refreshing state... [id=ags-yh9jt1942d-stage]
module.backend.module.ec2_bastion_instance_virginia.aws_instance.this[0]:
Refreshing state... [id=i-07205e8b84e2630ad]
module.backend.module.ecs_backend_data_mngr.module.service.aws_ecs_service.this[0]:
Refreshing state...
[id=arn:aws:ecs:us-east-1:***:service/vivi-dev-mngrs-cluster/data-mngr-virginia]
module.backend.module.ecs_backend_data_mngr.module.role_ecs.module.role.aws_iam_rol
e_policy_attachment.custom[0]: Refreshing state... [id=ecs-data-mngr-virginia-
20230714171701417700000001]
module.backend.module.ecs_backend_data_mngr.module.role_ecs.module.role.aws_iam_rol
e_policy_attachment.custom[1]: Refreshing state... [id=ecs-data-mngr-virginia-
20230718201525705700000001]
module.backend.module.ecs_backend_interpreter_mngr.module.role_ecs.module.role.aws_
iam_role_policy_attachment.custom[0]: Refreshing state... [id=ecs-interpreter-mngr-
virginia-20230704205253224900000006]
module.backend.module.ecs_backend_interpreter_mngr.module.role_ecs.module.role.aws_
iam_role_policy_attachment.custom[1]: Refreshing state... [id=ecs-interpreter-mngr-
virginia-20230709234125990700000001]
module.backend.module.ecs_backend_core_mngr.module.service.aws_ecs_service.this[0]:
Refreshing state...
[id=arn:aws:ecs:us-east-1:***:service/vivi-dev-mngrs-cluster/core-mngr-virginia]
module.frontend.module.vivi_s3_web_app_virginia.aws_s3_bucket_public_access_block.t
his[0]: Refreshing state... [id=vivi-web-component-dev]
module.frontend.data.aws_iam_policy_document.vivi_s3_web_app_virginia: Reading...
module.frontend.data.aws_iam_policy_document.vivi_s3_web_app_virginia: Read
complete after 0s [id=156147185]
module.backend.module.ecs_backend_interpreter_mngr.module.service.aws_ecs_service.t
his[0]: Refreshing state... [id=arn:aws:ecs:us-east-1:***:service/vivi-dev-mngrs-
cluster/interpreter-mngr-virginia]
module.frontend.module.vivi_web.module.cloudfront.aws_cloudfront_distribution.this[
0]: Refreshing state... [id=E21N71EARA5PM5]
module.frontend.module.vivi_s3_web_app_virginia.aws_s3_bucket_policy.this[0]:
Refreshing state... [id=vivi-web-component-dev]
module.backend.module.ec2_bastion_instance_virginia.aws_cloudwatch_metric_alarm.thi
s[0]: Refreshing state... [id=bastion-instance-unused]

Terraform used the selected providers to generate the following execution

plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

# module.backend.module.api_core_mngr.aws_api_gateway_stage.this[0] will be
updated in-place
~ resource "aws_api_gateway_stage" "this" {
~ deployment_id = "57k7d4" -> "1p3sly"
id = "ags-vh9pgj78yc-stage"
 tags = {
"Environment" = "development"
"Terraform" = "true"
}
# (10 unchanged attributes hidden)
}

# module.frontend.module.vivi_cf_cache_policy.aws_cloudfront_cache_policy.policy
will be updated in-place
~ resource "aws_cloudfront_cache_policy" "policy" {
id = "5101beb4-19ba-439c-9058-7a472c00d365"
name = "vivi-web"
# (5 unchanged attributes hidden)

~ parameters_in_cache_key_and_forwarded_to_origin {
# (2 unchanged attributes hidden)

~ cookies_config {
# (1 unchanged attribute hidden)

+ cookies {}
}

~ query_strings_config {
# (1 unchanged attribute hidden)

+ query_strings {}
}

# (1 unchanged block hidden)

}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_ip_set.this[0] will be created

+ resource "aws_wafv2_ip_set" "this" {
+ addresses = [
+ "103.28.248.0/22",
+ "107.154.0.0/16",
+ "131.125.128.0/17",
+ "149.126.72.0/21",
+ "185.11.124.0/22",
+ "192.230.64.0/18",
+ "198.143.32.0/19",
+ "199.83.128.0/21",
+ "45.223.0.0/16",
+ "45.60.0.0/16",
+ "45.64.64.0/22",
]
+ arn = (known after apply)
+ description = "Ips of imperva"
+ id = (known after apply)
+ ip_address_version = "IPV4"
+ lock_token = (known after apply)
+ name = "Imperva-IPs"
+ scope = "CLOUDFRONT"
+ tags = {
+ "key" = "Imperva"
}
+ tags_all = {
 + "key" = "Imperva"
}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_web_acl.main[0] will be created

+ resource "aws_wafv2_web_acl" "main" {
+ arn = (known after apply)
+ capacity = (known after apply)
+ id = (known after apply)
+ lock_token = (known after apply)
+ name = "restrict_cloudfront"
+ scope = "CLOUDFRONT"
+ tags_all = (known after apply)

+ default_action {
+ block {
}
}

+ rule {
+ name = "restriction-web"
+ priority = 1

+ action {
+ allow {
}
}

+ statement {
+ and_statement {
+ statement {
}
}
}

+ visibility_config {
+ cloudwatch_metrics_enabled = false
+ metric_name = "restrict_cloudfront-default-rule-
metric-name"
+ sampled_requests_enabled = false
}
}

+ visibility_config {
+ cloudwatch_metrics_enabled = false
+ metric_name = "vivi-waf-metrics"
+ sampled_requests_enabled = false
}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_web_acl_association.main[0]
will be created
+ resource "aws_wafv2_web_acl_association" "main" {
+ id = (known after apply)
+ web_acl_arn = (known after apply)
}

#
module.frontend.module.wafv2_virginia.time_sleep.web_acl_assoc_after_1_minute[0]
will be created
+ resource "time_sleep" "web_acl_assoc_after_1_minute" {
+ create_duration = "1m"
+ id = (known after apply)
}

Plan: 4 to add, 2 to change, 0 to destroy.

Warnings:

- Argument is deprecated
on .terraform/modules/backend.ecs_cluster/main.tf line 7 (and 3 more)

To see the full warning notes, run Terraform without -compact-warnings.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:

terraform apply "tfplan"
2s
Run terraform show tfplan

Terraform used the selected providers to generate the following execution

plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

# module.backend.module.api_core_mngr.aws_api_gateway_stage.this[0] will be
updated in-place
~ resource "aws_api_gateway_stage" "this" {
~ deployment_id = "57k7d4" -> "1p3sly"
id = "ags-vh9pgj78yc-stage"
tags = {
"Environment" = "development"
"Terraform" = "true"
}
# (10 unchanged attributes hidden)
}

# module.frontend.module.vivi_cf_cache_policy.aws_cloudfront_cache_policy.policy
will be updated in-place
~ resource "aws_cloudfront_cache_policy" "policy" {
id = "5101beb4-19ba-439c-9058-7a472c00d365"
name = "vivi-web"
# (5 unchanged attributes hidden)

~ parameters_in_cache_key_and_forwarded_to_origin {
# (2 unchanged attributes hidden)

~ cookies_config {
# (1 unchanged attribute hidden)

+ cookies {}
}
 ~ query_strings_config {
# (1 unchanged attribute hidden)

+ query_strings {}
}

# (1 unchanged block hidden)

}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_ip_set.this[0] will be created

+ resource "aws_wafv2_ip_set" "this" {
+ addresses = [
+ "103.28.248.0/22",
+ "107.154.0.0/16",
+ "131.125.128.0/17",
+ "149.126.72.0/21",
+ "185.11.124.0/22",
+ "192.230.64.0/18",
+ "198.143.32.0/19",
+ "199.83.128.0/21",
+ "45.223.0.0/16",
+ "45.60.0.0/16",
+ "45.64.64.0/22",
]
+ arn = (known after apply)
+ description = "Ips of imperva"
+ id = (known after apply)
+ ip_address_version = "IPV4"
+ lock_token = (known after apply)
+ name = "Imperva-IPs"
+ scope = "CLOUDFRONT"
+ tags = {
+ "key" = "Imperva"
}
+ tags_all = {
+ "key" = "Imperva"
}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_web_acl.main[0] will be created

+ resource "aws_wafv2_web_acl" "main" {
+ arn = (known after apply)
+ capacity = (known after apply)
+ id = (known after apply)
+ lock_token = (known after apply)
+ name = "restrict_cloudfront"
+ scope = "CLOUDFRONT"
+ tags_all = (known after apply)

+ default_action {
+ block {
}
}

+ rule {
+ name = "restriction-web"
+ priority = 1
 + action {
+ allow {
}
}

+ statement {
+ and_statement {
+ statement {
}
}
}

+ visibility_config {
+ cloudwatch_metrics_enabled = false
+ metric_name = "restrict_cloudfront-default-rule-
metric-name"
+ sampled_requests_enabled = false
}
}

+ visibility_config {
+ cloudwatch_metrics_enabled = false
+ metric_name = "vivi-waf-metrics"
+ sampled_requests_enabled = false
}
}

# module.frontend.module.wafv2_virginia.aws_wafv2_web_acl_association.main[0]
will be created
+ resource "aws_wafv2_web_acl_association" "main" {
+ id = (known after apply)
+ web_acl_arn = (known after apply)
}

#
module.frontend.module.wafv2_virginia.time_sleep.web_acl_assoc_after_1_minute[0]
will be created
+ resource "time_sleep" "web_acl_assoc_after_1_minute" {
+ create_duration = "1m"
+ id = (known after apply)
}

Plan: 4 to add, 2 to change, 0 to destroy.

0s
Post job cleanup.
/usr/bin/git version
git version 2.41.0
Copying '/home/runner/.gitconfig' to '/home/runner/work/_temp/d7b84f21-a1fc-4114-
8416-c9486aa2d9de/.gitconfig'
Temporarily overriding HOME='/home/runner/work/_temp/d7b84f21-a1fc-4114-8416-
c9486aa2d9de' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
/usr/bin/git config --global --add safe.directory /home/runner/work/davi-vivi-
assistant-iac/davi-vivi-assistant-iac
/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --
get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand'
|| :"
/usr/bin/git config --local --name-only --get-regexp
http\.https\:\/\/github\.com\/\.extraheader
/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --
get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --
unset-all 'http.https://github.com/.extraheader' || :"
0s
Post job cleanup.
0s
Cleaning up orphan processes