feat: Ignore changes to *.aws_iam_role.*.role_last_used (#2628)

main.tf

@@ -318,6 +318,12 @@ resource "aws_iam_role" "this" {
   }
 
   tags = merge(var.tags, var.iam_role_tags)
+
+  lifecycle {
+    ignore_changes = [
+      role_last_used,
+    ]
+  }
 }
 
 # Policies attached ref https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html

modules/eks-managed-node-group/main.tf

@@ -427,6 +427,12 @@ resource "aws_iam_role" "this" {
   force_detach_policies = true
 
   tags = merge(var.tags, var.iam_role_tags)
+
+  lifecycle {
+    ignore_changes = [
+      role_last_used,
+    ]
+  }
 }
 
 # Policies attached ref https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_node_group

modules/karpenter/main.tf

@@ -61,6 +61,12 @@ resource "aws_iam_role" "irsa" {
   force_detach_policies = true
 
   tags = merge(var.tags, var.irsa_tags)
+
+  lifecycle {
+    ignore_changes = [
+      role_last_used,
+    ]
+  }
 }
 
 locals {