aws_cloudfront_monitoring_subscription failing on refresh

[mattrobinsonsre]

All resources of type aws_cloudfront_monitoring_subscription are failing on refresh

resource "aws_cloudfront_distribution" "this" {
...
}

resource "aws_cloudfront_monitoring_subscription" "this" {
  distribution_id = aws_cloudfront_distribution.this.id

  monitoring_subscription {
    realtime_metrics_subscription_config {
      realtime_metrics_subscription_status = var.realtime_metrics ? "Enabled" : "Disabled"
    }
  }
}

My best guess is that it's failing on internal/service/cloudfront/find.go:FindMonitoringSubscriptionByDistributionID

Errors along the lines of

Error: error reading CloudFront Monitoring Subscription (ABCD1EF2345GH): NoSuchMonitoringSubscription: The monitoring subscription does not exist.
│ 	status code: 404, request id: 43b80257-d749-4229-87bf-ea892ad921fd

I've attached a log.
log.txt

[dbourcet]

Has the investigation started? We have several workspaces which are stucked because no plan can be done, this blocks us to improve other resources in those workspaces.

[MahmoudAlyy]

@dbourcet We temp fixed this by having the condition in the count and removing aws_cloudfront_monitoring_subscription from state where realtime_metrics_subscription_status is disabled.

resource "aws_cloudfront_monitoring_subscription" "this" {
  count    =  var.realtime_metrics ? 1 : 0

  distribution_id = aws_cloudfront_distribution.this.id

  monitoring_subscription {
    realtime_metrics_subscription_config {
      realtime_metrics_subscription_status = "Enabled"
    }
  }
}

[dbourcet]

@MahmoudAlyy That does the trick to circumvent the issue. Thanks a lot!

[ewbankkit]

Relates #33058.