resource/aws_default_security_group: Ensure description attribute is …

…written into Terraform state (#11650) Output from acceptance testing: ``` --- PASS: TestAccAWSDefaultSecurityGroup_basic (9.33s) --- PASS: TestAccAWSDefaultSecurityGroup_classic (12.37s) ```
hashicorp · Feb 6, 2020 · 91d75b3 · 91d75b3
1 parent d0d4464
commit 91d75b3
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/aws/resource_aws_default_security_group.go b/aws/resource_aws_default_security_group.go
@@ -15,8 +15,11 @@ func resourceAwsDefaultSecurityGroup() *schema.Resource {
 	dsg.Create = resourceAwsDefaultSecurityGroupCreate
 	dsg.Delete = resourceAwsDefaultSecurityGroupDelete
 
-	// Descriptions cannot be updated
-	delete(dsg.Schema, "description")
+	// description is a computed value for Default Security Groups and cannot be changed
+	dsg.Schema["description"] = &schema.Schema{
+		Type:     schema.TypeString,
+		Computed: true,
+	}
 
 	// name is a computed value for Default Security Groups and cannot be changed
 	delete(dsg.Schema, "name_prefix")

diff --git a/aws/resource_aws_default_security_group_test.go b/aws/resource_aws_default_security_group_test.go
@@ -27,6 +27,8 @@ func TestAccAWSDefaultSecurityGroup_basic(t *testing.T) {
 					testAccCheckAWSDefaultSecurityGroupAttributes(&group),
 					resource.TestCheckResourceAttr(
 						"aws_default_security_group.web", "name", "default"),
+					resource.TestCheckResourceAttr(
+						"aws_default_security_group.web", "description", "default VPC security group"),
 					resource.TestCheckResourceAttr(
 						"aws_default_security_group.web", "ingress.3629188364.protocol", "tcp"),
 					resource.TestCheckResourceAttr(