Specifying Encryption type "KMS" with a custom KMS key specifies a destroy/create for each new plan

[jim-leary]

Found a bug? Maybe our Slack Community can help.

Describe the Bug

Specifying Encryption type "KMS" with a custom KMS key specifies a destroy/create of all defined registries for each new Terraform plan

Expected Behavior

No changes should be identified. Works as expected when not configuring a custom KMS key.

Steps to Reproduce

Steps to reproduce the behavior:
See above

Screenshots

Environment (please complete the following information):

• OSX: 11.5.2
• Terraform: v1.0.4
• This module: ~> 0.32
• AWS Provider hashicorp/aws: ~> 3.49

Additional Context

[achakote]

Workaround for this issue is using target_key_arn

data "aws_kms_alias" "ecr" {
  name = "alias/aws/ecr"
}

module "ecr" {
  source  = "cloudposse/ecr/aws"
  version = "0.32.3"
  image_names          = ["abc" "asdada"]

  encryption_configuration = ({
    encryption_type = "KMS"
    kms_key         = data.aws_kms_alias.ecr.target_key_arn
  })
}

[xcloudscript]

Use the key_id output instead ARN, here works fine.