Updated asg target group ARN

[jameslaneovermind]

Terraform plan only shows a "Update in-place"

[github-actions]

Expected Changes

No expected changes found.

Unmapped Changes

Note

These changes couldn't be mapped to a real cloud resource and therefore won't be included in the blast radius calculation.

autoscaling-auto-scaling-group › module.scenarios[0].aws_autoscaling_group.my_asg

--- current
+++ planned
@@ -37,7 +37,7 @@
 suspended_processes: []
 tag: []
 target_group_arns:
-    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-change-tg/f558dcbbd9e9b1f2
+    - arn:aws:elasticloadbalancing:eu-west-2:540044833068:targetgroup/asg-new-change-tg/93b7bc3e3ad8ed46
 termination_policies: []
 terraform_address: module.scenarios[0].aws_autoscaling_group.my_asg
 terraform_name: module.scenarios[0].aws_autoscaling_group.my_asg

Blast Radius

Items	Edges
0	0

Open in Overmind

Risks

Incorrect Target Group Configuration After Switchover [High]

Given that the current aws_autoscaling_group (my_asg) is configured with a target group (asg-change-tg) that is presumably working correctly, switching to a new target group (my_new_target_group) introduces the risk of misconfiguration. Potential issues include incorrect health check settings, port configurations, or protocol settings in the new target group that differ from the current working setup. This could lead to instances not being registered correctly or failing health checks, thereby affecting traffic distribution and service availability.

Possible Downtime During Transition to New Target Group [Medium]

With the current setup indicating a desire for minimal downtime (evident from the small default_cooldown and desired_capacity set to 1), changing the target group ARN might result in a brief period of traffic disruption. This risk arises when instances are deregistered from the current target group and registered with the new one, especially if the new target group is not immediately ready to handle incoming traffic at the moment of switchover.

IAM Permissions for ASG Interaction with New Target Group [Medium]

While not directly indicated by the current configuration details, there's an implicit risk that the aws_autoscaling_group lacks the necessary IAM permissions to interact with the new target group (my_new_target_group). If the IAM role (aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling) associated with the ASG does not include permissions for actions on the new target group, instances may not register or deregister properly, impacting service delivery.