BrandonALXEllisSS

CNAME data source fails if not resolvable to a host

1

### Affected Resource(s) dns_cname_record_set data source ### Terraform Configuration Files ```hcl data "dns_cname_record_set" "record" { host = "some.cname.entry.that.exists.but.doesnt.resolve" } ``` ### Output ```hcl Error: error looking up CNAME records for...

"Root resource was present, but now absent." Error when adding a default role to existing configuration

3

### Terraform Version v1.0.3 ### Affected Resource(s) boundary_role ### Terraform Configuration Files Added this block to the [boundary-reference-architecture aws](https://github.com/hashicorp/boundary-reference-architecture/tree/main/deployment/aws) deployment: ``` # Adds a global-level role granting administrative permissions within...

cyrus-sasl-gssapi dependency

3

While this should be obvious to the experienced user, it might help to specify that the cyrus-sasl-gssapi needs to be installed on the local machine if using gssapi. I.e. if...

AWS Deployment doesn't use HTTPS -- Provide warning in the documentation

5

There's AWS resources to create a self-signed ACM certificate, but given that there's no domain name system set up and the ACM certificate isn't used, any connections to the reference...

Why are the NAT gateways in private subnets...?

1

In the AWS example, [the NAT gateways are placed in private subnets](https://github.com/hashicorp/boundary-reference-architecture/blob/bc78ed45a6d9c6e8cb68eb9181530e9b13c10204/deployment/aws/aws/net.tf#L56), meaning none of the outbound traffic from the NAT gets routed to the IGW. I thought it's common...