Skip to content

Conversation

stiliajohny
Copy link

Title

route53domains: make privacy fields optional/computed to avoid forced API calls

Description

Removes Default=true from admin_privacy, billing_privacy, registrant_privacy, and tech_privacy in the aws_route53domains_registered_domain resource.

Previously, these attributes always defaulted to true, which forced Terraform to call UpdateDomainContactPrivacy even when privacy is not supported by the TLD (e.g. .cz, .eu). This resulted in 400 InvalidInput errors during apply.

With this change, the privacy fields are now Optional+Computed. Terraform will:

  • Only manage privacy if a value is explicitly set in configuration.
  • Otherwise, treat AWS as the source of truth and skip unsupported API calls.

This prevents errors for unsupported TLDs while preserving full functionality for TLDs that allow privacy management.

Relations

Closes #44538

References

Rollback Plan

If needed, revert this commit and reintroduce Default=true for the privacy fields. This will restore prior behavior (always managing privacy), but may reintroduce errors for unsupported TLDs.

Changes to Security Controls

No changes to access controls, encryption, or logging. This change only affects how Terraform decides whether to call UpdateDomainContactPrivacy.

Output from Acceptance Testing

N/A

… API calls


Removes Default=true from admin/billing/registrant/tech_privacy so
Terraform no longer always calls UpdateDomainContactPrivacy, fixing
400 errors for TLDs like .cz and .eu.
@stiliajohny stiliajohny requested a review from a team as a code owner October 3, 2025 19:19
Copy link
Contributor

github-actions bot commented Oct 3, 2025

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

  • Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
  • Please see our prioritization guide for additional information on how the maintainers handle prioritization.
  • Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

  • Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
  • Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

Copy link
Contributor

github-actions bot commented Oct 3, 2025

⚠️ Our automation has detected the following potential issues with your pull request


❌ Changelog Entry Required (Click to expand)

The proposed change requires a changelog entry. Please see the Changelog Process section of the contributing guide for information on the changelog generation process.

Tip: This check is not triggered for draft pull requests, since the pull request number is not known until the pull request is opened and is required to create a changelog entry. Opening a pull request first as a draft, adding the requisite changelog entry file, and then marking the pull request as ready for review will prevent future warnings.

@github-actions github-actions bot added needs-triage Waiting for first response or review from a maintainer. service/route53domains Issues and PRs that pertain to the route53domains service. size/XS Managed by automation to categorize the size of a PR. labels Oct 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-triage Waiting for first response or review from a maintainer. service/route53domains Issues and PRs that pertain to the route53domains service. size/XS Managed by automation to categorize the size of a PR.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CZ TLD, domain privacy not supported by AWS R53
1 participant