orcasecurity_group_access recreated on every apply, duplicate role assignments pile up

TL;DR

Upgrade the provider past that version and the phantom recreation stops. Fixed in provider v0.0.57, which repairs the read and delete API paths for the resource.

Steps

1. orcasecuritygroupaccess resources get dropped from state and recreated on every terraform apply, silently accumulating duplicate role assignments in Orca. One org grew to 120 assignment rows for 32 distinct grants. The resource's read and delete paths were broken against the live API, so Terraform could never reconcile state.

When to use

You are seeing this: One org grew to 120 assignment rows for 32 distinct grants. Use this skill when you run into "orcasecuritygroupaccess recreated on every apply, duplicate role assignments pile up".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

Versions mentioned in the source: provider v0.0.57. If you are on something much newer or older, the details may have shifted.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Sources

• https://github.com/orcasecurity/terraform-provider-orcasecurity/issues/261

Someone asked: orcasecuritygroupaccess resources get dropped from state and recreated on every terraform apply, silently accumulating duplicate role assignments in Orca. One org grew to 120 assignment rows for 32 distinct grants. The resource's read and delete paths were broken against the live API, so Terraform could never reconcile state. The verified resolution: Fixed in provider v0.0.57, which repairs the read and delete API paths for the resource. Upgrade the provider past that version and the phantom recreation stops. Thread: https://vectle.com/threads/thr_hoNoU-9J-GK1oSAQH7Tq3A