[PRM-667] Reverted PRM-227 commit to reintroduce EOT Service (84fa3a9)

[AndyFlintAnswerDigital]

WE DON'T WANT TO MERGE THIS PR

It exists purely to view the terraform plan.

This reverts (most of) commit 84fa3a9. In particular, the parts that reference the End of Transfer Service. We have not reintroduced the gp2gp-adaptor or the mi-forwarder.

The reasoning for this PR is that the End of Transfer Service Terraform components were removed as part of PRM-227, however the components were not destroyed. We're reverting the Terraform in this commit to see what the state file does.

[github-actions]

Report for deductions

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- deductions-core in modules/deductions-core
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 5.5.2 for deductions-core.vpc...
- deductions-core.vpc in .terraform/modules/deductions-core.vpc
- deductions-private in modules/deductions-private
- deductions-private.mq-admin in modules/deductions-private/mq-admin
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 5.5.2 for deductions-private.vpc...
- deductions-private.vpc in .terraform/modules/deductions-private.vpc
Downloading registry.terraform.io/terraform-aws-modules/dynamodb-table/aws 4.0.0 for ehr_transfer_tracker_dynamodb_table...
- ehr_transfer_tracker_dynamodb_table in .terraform/modules/ehr_transfer_tracker_dynamodb_table
- repo in modules/mhs
- repo.cluster in modules/mhs/cluster-network
- test-harness in modules/mhs
- test-harness.cluster in modules/mhs/cluster-network
- utils in modules/utils
Initializing provider plugins...
- Finding latest version of hashicorp/archive...
- Finding hashicorp/aws versions matching ">= 5.20.0, >= 5.21.0, 5.37.0"...
- Installing hashicorp/archive v2.7.1...
- Installed hashicorp/archive v2.7.1 (signed by HashiCorp)
- Installing hashicorp/aws v5.37.0...
- Installed hashicorp/aws v5.37.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_lambda_function.generate_cost_report_lambda will be updated in-place
  ~ resource "aws_lambda_function" "generate_cost_report_lambda" {
        id                             = "dev-generate-cost-report-lambda"
      ~ last_modified                  = "2026-02-16T17:05:35.000+0000" -> (known after apply)
      ~ source_code_hash               = "lJlsgSZ8s/iGvr0gdlhTyVV7baobY7wZs+NypoxsTKE=" -> "Td4YArIB1wL5lbC8dzeZ1DDN2cPb8ZLd2IDKjZCtkUE="
        tags                           = {
            "CreatedBy"   = "orphaned-record-continuity-infrastructure"
            "Environment" = "dev"
        }
        # (26 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for deductions-cross-account

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- ci_roles in iam-ci
- environment_roles in iam-environment
- environment_strict_roles in iam-strict-environment
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 3.0"...
- Installing hashicorp/aws v3.76.1...
- Installed hashicorp/aws v3.76.1 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for deductions-dashboard

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- error_count_widgets in widgets/error_count_widget
- health_lb_widgets in widgets/health_lb_widget
- health_widgets in widgets/health_widget
- queue_metrics_widgets in widgets/queue_metrics_widget
- repo_error_count_widgets in widgets/error_count_widget
- repo_health_lb_widgets in widgets/health_lb_widget
- repo_health_network_lb_widgets in widgets/health_network_lb_widget
- repo_health_widgets in widgets/health_widget
- repo_mq_metrics_widgets in widgets/mq_metrics_widget
- repo_queue_metrics_widgets in widgets/queue_metrics_widget
- repo_task_widgets in widgets/task_widget
- task_widgets in widgets/task_widget
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 3.0"...
- Installing hashicorp/aws v3.76.1...
- Installed hashicorp/aws v3.76.1 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_cloudwatch_dashboard.repository_dashboard will be updated in-place
  ~ resource "aws_cloudwatch_dashboard" "repository_dashboard" {
      ~ dashboard_body = jsonencode(
          ~ {
              ~ widgets = [
                    # (3 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/SQS",
                                    "NumberOfMessagesReceived",
                                    "QueueName",
                                    "dev-ehr-transfer-service-ehr-complete-observability",
                                ],
                                [
                                    ".",
                                    "NumberOfMessagesSent",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateAgeOfOldestMessage",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateNumberOfMessagesVisible",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "SentMessageSize",
                                    ".",
                                    ".",
                                    {
                                        yAxis = "right"
                                    },
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "EHR Complete Observability Queue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "NumberOfMessagesReceived",
                                  + "QueueName",
                                  + "dev-end-of-transfer-service-transfer-complete",
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesSent",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateAgeOfOldestMessage",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateNumberOfMessagesVisible",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "SentMessageSize",
                                  + ".",
                                  + ".",
                                  + {
                                      + yAxis = "right"
                                    },
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "Transfer Complete Queue"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + right = {
                                  + label = "Size"
                                }
                            }
                        }
                      + type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "NumberOfMessagesReceived",
                                  + "QueueName",
                                  + "dev-end-of-transfer-service-transfer-complete-observability",
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesSent",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateAgeOfOldestMessage",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateNumberOfMessagesVisible",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "SentMessageSize",
                                  + ".",
                                  + ".",
                                  + {
                                      + yAxis = "right"
                                    },
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "Transfer Complete Observability Queue"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + right = {
                                  + label = "Size"
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/SQS",
                                    "NumberOfMessagesReceived",
                                    "QueueName",
                                    "dev-ehr-transfer-service-negative-acknowledgments-observability",
                                ],
                                [
                                    ".",
                                    "NumberOfMessagesSent",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateAgeOfOldestMessage",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateNumberOfMessagesVisible",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "SentMessageSize",
                                    ".",
                                    ".",
                                    {
                                        yAxis = "right"
                                    },
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Negative Acknowledgements Observability Queue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (8 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "EhrTransferService",
                                    "ErrorCountInLogs",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Sum"
                            title   = "EHR Transfer Service Error Count"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "EndOfTransferService",
                                  + "ErrorCountInLogs",
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Sum"
                          + title   = "End of Transfer Service Error Count"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "Gp2gpMessenger",
                                    "ErrorCountInLogs",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Sum"
                            title   = "GP2GP Messenger Service Error Count"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (3 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "EhrTransferService",
                                    "Health",
                                    "Environment",
                                    "dev",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "EHR Transfer Service Health"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "EndOfTransferService",
                                  + "Health",
                                  + "Environment",
                                  + "dev",
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "End of Transfer Service Health"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "ReRegistrationService",
                                    "Health",
                                    "Environment",
                                    "dev",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Re-registration Service Health"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (4 unchanged elements hidden)
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-transfer-service-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Transfer Service CPU %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "EHR Repository Service Memory %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-gp2gp-messenger-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "GP2GP Messenger Service Memory %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-mhs-inbound-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "MHS Inbound Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-mhs-outbound-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "MHS Outbound Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-end-of-transfer-service-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "End of Transfer Service CPU %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Repository Service CPU %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                    # (4 unchanged elements hidden)
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-transfer-service-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Transfer Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  ~ {
                      ~ properties = {
                          ~ query  = <<-EOT
                              - SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                              + SOURCE '/aws/ecs/containerinsights/dev-end-of-transfer-service-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          ~ title  = "EHR Repository Service Memory %" -> "End of Transfer Service Memory %"
                            # (3 unchanged attributes hidden)
                        }
                        # (1 unchanged attribute hidden)
                    },
                  - {
                      - properties = {
                          - query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-gp2gp-messenger-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          - region = "eu-west-2"
                          - title  = "GP2GP Messenger Service Memory %"
                          - view   = "timeSeries"
                          - yAxis  = {
                              - left  = {
                                  - showUnits = false
                                }
                              - right = {
                                  - showUnits = false
                                }
                            }
                        }
                      - type       = "log"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/AmazonMQ",
                                    "EnqueueCount",
                                    "Broker",
                                    "deductor-amq-broker-dev-1",
                                    "Queue",
                                    "inbound",
                                ],
                                [
                                    ".",
                                    "InFlightCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "DequeueCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ConsumerCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "MemoryUsage",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "CpuUtilization",
                                    ".",
                                    ".",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Inbound MQueue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (4 unchanged elements hidden)
                ]
            }
        )
        id             = "RepositoryDashboardDev"
        # (2 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for suspension-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- end-of-transfer-service in modules/end-of-transfer-service
- suspension-service in modules/suspension-service
Initializing provider plugins...
- Finding latest version of hashicorp/archive...
- Finding hashicorp/aws versions matching "5.59.0"...
- Installing hashicorp/archive v2.7.1...
- Installed hashicorp/archive v2.7.1 (signed by HashiCorp)
- Installing hashicorp/aws v5.59.0...
- Installed hashicorp/aws v5.59.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖failure

Validation Output

Terraform Plan 📖skipped

Show Plan ()

[github-actions]

Report for nems-event-processor

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-nems-event-processor-ecs-cluster"
        name               = "dev-nems-event-processor-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-deductions-nems-event-processor"
            "Environment" = "dev"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for mesh-forwarder

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.mesh-forwarder-ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mesh-forwarder-ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-mesh-forwarder-ecs-cluster"
        name               = "dev-mesh-forwarder-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-deductions-mesh-forwarder"
            "Environment" = "dev"
            "Name"        = "dev-mesh-forwarder"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for re-registration-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 2 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-re-registration-service-ecs-cluster"
        name               = "dev-re-registration-service-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-repo-re-registration-service"
            "Environment" = "dev"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_sqs_queue_policy.active_suspensions_queue_policy will be updated in-place
  ~ resource "aws_sqs_queue_policy" "active_suspensions_queue_policy" {
        id        = "https://sqs.eu-west-2.amazonaws.com/[REDACTED_AWS_ACCOUNT_ID]/dev-re-registration-service-active-suspensions"
      ~ policy    = jsonencode(
          ~ {
              ~ Statement = [
                  ~ {
                      ~ Condition = {
                          ~ ArnEquals = {
                              ~ "aws:SourceArn" = "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-suspension-service-active-suspensions-sns-topic" -> [
                                  + "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-suspension-service-active-suspensions-sns-topic",
                                  + "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-end-of-transfer-service-active-suspensions-sns-topic",
                                ]
                            }
                        }
                        # (5 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

[github-actions]

Report for ehr-out-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "5.60.0"...
- Installing hashicorp/aws v5.60.0...
- Installed hashicorp/aws v5.60.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for mhs

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 3 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_cloudwatch_metric_alarm.inbound_nlb_down_errors will be updated in-place
  ~ resource "aws_cloudwatch_metric_alarm" "inbound_nlb_down_errors" {
      ~ dimensions                            = {
          ~ "LoadBalancer" = "app/dev-repo-mhs-out-alb/95f01e1ef1c15d88" -> "net/dev-repo-mhs-inbound/c5668e5303a26407"
          ~ "TargetGroup"  = "targetgroup/dev-repo-mhs-outbound/2965b97cc88ed832" -> "targetgroup/dev-repo-mhs-in-https/3e333c669edf7b00"
        }
        id                                    = "prm-mhs-infra service down"
      ~ namespace                             = "AWS/ApplicationELB" -> "AWS/NetworkELB"
        tags                                  = {}
        # (20 unchanged attributes hidden)
    }

  # aws_ecs_cluster.mhs_inbound_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mhs_inbound_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-repo-mhs-inbound-cluster"
        name               = "dev-repo-mhs-inbound-cluster"
        tags               = {
            "CreatedBy"   = "prm-mhs-infra"
            "Environment" = "dev"
            "Name"        = "dev-repo-mhs-cluster"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_ecs_cluster.mhs_outbound_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mhs_outbound_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-repo-mhs-outbound-cluster"
        name               = "dev-repo-mhs-outbound-cluster"
        tags               = {
            "CreatedBy"   = "prm-mhs-infra"
            "Environment" = "dev"
            "Name"        = "dev-repo-mhs-outbound"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 3 to change, 0 to destroy.

[github-actions]

Report for gp2gp-messenger

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 5.0"...
- Installing hashicorp/aws v5.100.0...
- Installed hashicorp/aws v5.100.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for pds-adaptor

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "4.48.0"...
- Installing hashicorp/aws v4.48.0...
- Installed hashicorp/aws v4.48.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for ehr-repo

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 4.0"...
- Installing hashicorp/aws v4.67.0...
- Installed hashicorp/aws v4.67.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_s3_bucket_policy.ehr-repo-bucket_policy will be updated in-place
  ~ resource "aws_s3_bucket_policy" "ehr-repo-bucket_policy" {
        id     = "dev-ehr-repo-bucket"
      ~ policy = jsonencode(
          ~ {
              ~ Statement = [
                    {
                        Action    = "s3:*"
                        Condition = {
                            Bool = {
                                "aws:SecureTransport" = "false"
                            }
                        }
                        Effect    = "Deny"
                        Principal = "*"
                        Resource  = "arn:aws:s3:::dev-ehr-repo-bucket/*"
                    },
                  ~ {
                      ~ Principal = {
                          ~ AWS = "AROAWCD5NRKJASATK6W6V" -> "[REDACTED_IAM_ROLE_ARN]"
                        }
                        # (3 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for ehr-transfer-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (1 to add, 3 to change, 1 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # aws_ecs_cluster.ehr_transfer_service_ecs_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ehr_transfer_service_ecs_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-ehr-transfer-service-ecs-cluster"
        name               = "dev-ehr-transfer-service-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-repo-ehr-transfer-service"
            "Environment" = "dev"
            "Name"        = "dev-ehr-transfer-service"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_ecs_service.ecs-service will be updated in-place
  ~ resource "aws_ecs_service" "ecs-service" {
        id                                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:service/dev-ehr-transfer-service-ecs-cluster/dev-ehr-transfer-service"
        name                               = "dev-ehr-transfer-service"
        tags                               = {}
      ~ task_definition                    = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:task-definition/ehr-transfer-service:752" -> (known after apply)
        # (14 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # aws_ecs_task_definition.task must be replaced
-/+ resource "aws_ecs_task_definition" "task" {
      ~ arn                      = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:task-definition/ehr-transfer-service:752" -> (known after apply)
      ~ container_definitions    = (sensitive value) # forces replacement
      ~ id                       = "ehr-transfer-service" -> (known after apply)
      ~ revision                 = 752 -> (known after apply)
        tags                     = {
            "CreatedBy"   = "prm-repo-ehr-transfer-service"
            "Environment" = "dev"
        }
        # (10 unchanged attributes hidden)
    }

  # aws_s3_bucket_policy.ehr-repo-sqs_large_message_bucket_policy will be updated in-place
  ~ resource "aws_s3_bucket_policy" "ehr-repo-sqs_large_message_bucket_policy" {
        id     = "dev-ehr-transfer-service-sqs-large-messages"
      ~ policy = jsonencode(
          ~ {
              ~ Statement = [
                    {
                        Action    = "s3:*"
                        Condition = {
                            Bool = {
                                "aws:SecureTransport" = "false"
                            }
                        }
                        Effect    = "Deny"
                        Principal = "*"
                        Resource  = "arn:aws:s3:::dev-ehr-transfer-service-sqs-large-messages/*"
                    },
                  ~ {
                      ~ Principal = {
                          ~ AWS = "AROAWCD5NRKJASATK6W6V" -> "[REDACTED_IAM_ROLE_ARN]"
                        }
                        # (3 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 1 to add, 3 to change, 1 to destroy.

[github-actions]

Report for ehr-repo-db-roles

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for nems-event-processor

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-nems-event-processor-ecs-cluster"
        name               = "dev-nems-event-processor-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-deductions-nems-event-processor"
            "Environment" = "dev"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for deductions

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- deductions-core in modules/deductions-core
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 5.5.2 for deductions-core.vpc...
- deductions-core.vpc in .terraform/modules/deductions-core.vpc
- deductions-private in modules/deductions-private
- deductions-private.mq-admin in modules/deductions-private/mq-admin
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 5.5.2 for deductions-private.vpc...
- deductions-private.vpc in .terraform/modules/deductions-private.vpc
Downloading registry.terraform.io/terraform-aws-modules/dynamodb-table/aws 4.0.0 for ehr_transfer_tracker_dynamodb_table...
- ehr_transfer_tracker_dynamodb_table in .terraform/modules/ehr_transfer_tracker_dynamodb_table
- repo in modules/mhs
- repo.cluster in modules/mhs/cluster-network
- test-harness in modules/mhs
- test-harness.cluster in modules/mhs/cluster-network
- utils in modules/utils
Initializing provider plugins...
- Finding hashicorp/aws versions matching ">= 5.20.0, >= 5.21.0, 5.37.0"...
- Finding latest version of hashicorp/archive...
- Installing hashicorp/archive v2.7.1...
- Installed hashicorp/archive v2.7.1 (signed by HashiCorp)
- Installing hashicorp/aws v5.37.0...
- Installed hashicorp/aws v5.37.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_lambda_function.generate_cost_report_lambda will be updated in-place
  ~ resource "aws_lambda_function" "generate_cost_report_lambda" {
        id                             = "dev-generate-cost-report-lambda"
      ~ last_modified                  = "2026-02-16T17:05:35.000+0000" -> (known after apply)
      ~ source_code_hash               = "lJlsgSZ8s/iGvr0gdlhTyVV7baobY7wZs+NypoxsTKE=" -> "/m/r34t7TN26h86TXCkJxp0sh0Ne48qrXLae+CvANnk="
        tags                           = {
            "CreatedBy"   = "orphaned-record-continuity-infrastructure"
            "Environment" = "dev"
        }
        # (26 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for deductions-dashboard

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- error_count_widgets in widgets/error_count_widget
- health_lb_widgets in widgets/health_lb_widget
- health_widgets in widgets/health_widget
- queue_metrics_widgets in widgets/queue_metrics_widget
- repo_error_count_widgets in widgets/error_count_widget
- repo_health_lb_widgets in widgets/health_lb_widget
- repo_health_network_lb_widgets in widgets/health_network_lb_widget
- repo_health_widgets in widgets/health_widget
- repo_mq_metrics_widgets in widgets/mq_metrics_widget
- repo_queue_metrics_widgets in widgets/queue_metrics_widget
- repo_task_widgets in widgets/task_widget
- task_widgets in widgets/task_widget
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 3.0"...
- Installing hashicorp/aws v3.76.1...
- Installed hashicorp/aws v3.76.1 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_cloudwatch_dashboard.repository_dashboard will be updated in-place
  ~ resource "aws_cloudwatch_dashboard" "repository_dashboard" {
      ~ dashboard_body = jsonencode(
          ~ {
              ~ widgets = [
                    # (3 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/SQS",
                                    "NumberOfMessagesReceived",
                                    "QueueName",
                                    "dev-ehr-transfer-service-ehr-complete-observability",
                                ],
                                [
                                    ".",
                                    "NumberOfMessagesSent",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateAgeOfOldestMessage",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateNumberOfMessagesVisible",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "SentMessageSize",
                                    ".",
                                    ".",
                                    {
                                        yAxis = "right"
                                    },
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "EHR Complete Observability Queue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "NumberOfMessagesReceived",
                                  + "QueueName",
                                  + "dev-end-of-transfer-service-transfer-complete",
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesSent",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateAgeOfOldestMessage",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateNumberOfMessagesVisible",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "SentMessageSize",
                                  + ".",
                                  + ".",
                                  + {
                                      + yAxis = "right"
                                    },
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "Transfer Complete Queue"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + right = {
                                  + label = "Size"
                                }
                            }
                        }
                      + type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "AWS/SQS",
                                  + "NumberOfMessagesReceived",
                                  + "QueueName",
                                  + "dev-end-of-transfer-service-transfer-complete-observability",
                                ],
                              + [
                                  + ".",
                                  + "NumberOfMessagesSent",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateAgeOfOldestMessage",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "ApproximateNumberOfMessagesVisible",
                                  + ".",
                                  + ".",
                                ],
                              + [
                                  + ".",
                                  + "SentMessageSize",
                                  + ".",
                                  + ".",
                                  + {
                                      + yAxis = "right"
                                    },
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "Transfer Complete Observability Queue"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + right = {
                                  + label = "Size"
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/SQS",
                                    "NumberOfMessagesReceived",
                                    "QueueName",
                                    "dev-ehr-transfer-service-negative-acknowledgments-observability",
                                ],
                                [
                                    ".",
                                    "NumberOfMessagesSent",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateAgeOfOldestMessage",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ApproximateNumberOfMessagesVisible",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "SentMessageSize",
                                    ".",
                                    ".",
                                    {
                                        yAxis = "right"
                                    },
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Negative Acknowledgements Observability Queue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (8 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "EhrTransferService",
                                    "ErrorCountInLogs",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Sum"
                            title   = "EHR Transfer Service Error Count"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "EndOfTransferService",
                                  + "ErrorCountInLogs",
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Sum"
                          + title   = "End of Transfer Service Error Count"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "Gp2gpMessenger",
                                    "ErrorCountInLogs",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Sum"
                            title   = "GP2GP Messenger Service Error Count"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (3 unchanged elements hidden)
                    {
                        properties = {
                            metrics = [
                                [
                                    "EhrTransferService",
                                    "Health",
                                    "Environment",
                                    "dev",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "EHR Transfer Service Health"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                  + {
                      + properties = {
                          + metrics = [
                              + [
                                  + "EndOfTransferService",
                                  + "Health",
                                  + "Environment",
                                  + "dev",
                                ],
                            ]
                          + region  = "eu-west-2"
                          + stat    = "Average"
                          + title   = "End of Transfer Service Health"
                          + view    = "timeSeries"
                          + yAxis   = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "metric"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "ReRegistrationService",
                                    "Health",
                                    "Environment",
                                    "dev",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Re-registration Service Health"
                            view    = "timeSeries"
                            yAxis   = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (4 unchanged elements hidden)
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-transfer-service-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Transfer Service CPU %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "EHR Repository Service Memory %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-gp2gp-messenger-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "GP2GP Messenger Service Memory %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-mhs-inbound-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "MHS Inbound Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-mhs-outbound-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "MHS Outbound Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  + {
                      + properties = {
                          + query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-end-of-transfer-service-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          + region = "eu-west-2"
                          + title  = "End of Transfer Service CPU %"
                          + view   = "timeSeries"
                          + yAxis  = {
                              + left  = {
                                  + showUnits = false
                                }
                              + right = {
                                  + showUnits = false
                                }
                            }
                        }
                      + type       = "log"
                    },
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                                  CpuUtilized / CpuReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Repository Service CPU %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                    # (4 unchanged elements hidden)
                    {
                        properties = {
                            query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-ehr-transfer-service-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                            region = "eu-west-2"
                            title  = "EHR Transfer Service Memory %"
                            view   = "timeSeries"
                            yAxis  = {
                                left  = {
                                    showUnits = false
                                }
                                right = {
                                    showUnits = false
                                }
                            }
                        }
                        type       = "log"
                    },
                  ~ {
                      ~ properties = {
                          ~ query  = <<-EOT
                              - SOURCE '/aws/ecs/containerinsights/dev-ehr-repo-ecs-cluster/performance' | fields
                              + SOURCE '/aws/ecs/containerinsights/dev-end-of-transfer-service-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          ~ title  = "EHR Repository Service Memory %" -> "End of Transfer Service Memory %"
                            # (3 unchanged attributes hidden)
                        }
                        # (1 unchanged attribute hidden)
                    },
                  - {
                      - properties = {
                          - query  = <<-EOT
                                SOURCE '/aws/ecs/containerinsights/dev-gp2gp-messenger-ecs-cluster/performance' | fields
                                  MemoryUtilized / MemoryReserved * 100 as Percent,
                                  (AvailabilityZone like "eu-west-2a") as is_A,
                                  (AvailabilityZone like "eu-west-2b") as is_B,
                                  (AvailabilityZone like "eu-west-2c") as is_C
                                | filter
                                    (Type = "Task")
                                | stats
                                    max(Percent * is_A) as A,
                                    max(Percent * is_B) as B,
                                    max(Percent * is_C) as C
                                    by bin(2m) as period
                                | sort
                                    period desc
                            EOT
                          - region = "eu-west-2"
                          - title  = "GP2GP Messenger Service Memory %"
                          - view   = "timeSeries"
                          - yAxis  = {
                              - left  = {
                                  - showUnits = false
                                }
                              - right = {
                                  - showUnits = false
                                }
                            }
                        }
                      - type       = "log"
                    },
                    {
                        properties = {
                            metrics = [
                                [
                                    "AWS/AmazonMQ",
                                    "EnqueueCount",
                                    "Broker",
                                    "deductor-amq-broker-dev-1",
                                    "Queue",
                                    "inbound",
                                ],
                                [
                                    ".",
                                    "InFlightCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "DequeueCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "ConsumerCount",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "MemoryUsage",
                                    ".",
                                    ".",
                                    ".",
                                    ".",
                                ],
                                [
                                    ".",
                                    "CpuUtilization",
                                    ".",
                                    ".",
                                ],
                            ]
                            region  = "eu-west-2"
                            stat    = "Average"
                            title   = "Inbound MQueue"
                            view    = "timeSeries"
                            yAxis   = {
                                right = {
                                    label = "Size"
                                }
                            }
                        }
                        type       = "metric"
                    },
                    # (4 unchanged elements hidden)
                ]
            }
        )
        id             = "RepositoryDashboardDev"
        # (2 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for deductions-cross-account

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- ci_roles in iam-ci
- environment_roles in iam-environment
- environment_strict_roles in iam-strict-environment
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 3.0"...
- Installing hashicorp/aws v3.76.1...
- Installed hashicorp/aws v3.76.1 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for mesh-forwarder

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.mesh-forwarder-ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mesh-forwarder-ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-mesh-forwarder-ecs-cluster"
        name               = "dev-mesh-forwarder-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-deductions-mesh-forwarder"
            "Environment" = "dev"
            "Name"        = "dev-mesh-forwarder"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for mhs

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 3 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_cloudwatch_metric_alarm.inbound_nlb_down_errors will be updated in-place
  ~ resource "aws_cloudwatch_metric_alarm" "inbound_nlb_down_errors" {
      ~ dimensions                            = {
          ~ "LoadBalancer" = "app/dev-repo-mhs-out-alb/95f01e1ef1c15d88" -> "net/dev-repo-mhs-inbound/c5668e5303a26407"
          ~ "TargetGroup"  = "targetgroup/dev-repo-mhs-outbound/2965b97cc88ed832" -> "targetgroup/dev-repo-mhs-in-https/3e333c669edf7b00"
        }
        id                                    = "prm-mhs-infra service down"
      ~ namespace                             = "AWS/ApplicationELB" -> "AWS/NetworkELB"
        tags                                  = {}
        # (20 unchanged attributes hidden)
    }

  # aws_ecs_cluster.mhs_inbound_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mhs_inbound_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-repo-mhs-inbound-cluster"
        name               = "dev-repo-mhs-inbound-cluster"
        tags               = {
            "CreatedBy"   = "prm-mhs-infra"
            "Environment" = "dev"
            "Name"        = "dev-repo-mhs-cluster"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_ecs_cluster.mhs_outbound_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "mhs_outbound_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-repo-mhs-outbound-cluster"
        name               = "dev-repo-mhs-outbound-cluster"
        tags               = {
            "CreatedBy"   = "prm-mhs-infra"
            "Environment" = "dev"
            "Name"        = "dev-repo-mhs-outbound"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 3 to change, 0 to destroy.

[github-actions]

Report for re-registration-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 2 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-re-registration-service-ecs-cluster"
        name               = "dev-re-registration-service-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-repo-re-registration-service"
            "Environment" = "dev"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_sqs_queue_policy.active_suspensions_queue_policy will be updated in-place
  ~ resource "aws_sqs_queue_policy" "active_suspensions_queue_policy" {
        id        = "https://sqs.eu-west-2.amazonaws.com/[REDACTED_AWS_ACCOUNT_ID]/dev-re-registration-service-active-suspensions"
      ~ policy    = jsonencode(
          ~ {
              ~ Statement = [
                  ~ {
                      ~ Condition = {
                          ~ ArnEquals = {
                              ~ "aws:SourceArn" = "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-suspension-service-active-suspensions-sns-topic" -> [
                                  + "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-suspension-service-active-suspensions-sns-topic",
                                  + "arn:aws:sns:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:dev-end-of-transfer-service-active-suspensions-sns-topic",
                                ]
                            }
                        }
                        # (5 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

[github-actions]

Report for pds-adaptor

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "4.48.0"...
- Installing hashicorp/aws v4.48.0...
- Installed hashicorp/aws v4.48.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for nems-event-processor

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_ecs_cluster.ecs-cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ecs-cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-nems-event-processor-ecs-cluster"
        name               = "dev-nems-event-processor-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-deductions-nems-event-processor"
            "Environment" = "dev"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for ehr-out-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "5.60.0"...
- Installing hashicorp/aws v5.60.0...
- Installed hashicorp/aws v5.60.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for suspension-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing modules...
- end-of-transfer-service in modules/end-of-transfer-service
- suspension-service in modules/suspension-service
Initializing provider plugins...
- Finding hashicorp/aws versions matching "5.59.0"...
- Finding latest version of hashicorp/archive...
- Installing hashicorp/aws v5.59.0...
- Installed hashicorp/aws v5.59.0 (signed by HashiCorp)
- Installing hashicorp/archive v2.7.1...
- Installed hashicorp/archive v2.7.1 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for gp2gp-messenger

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 5.0"...
- Installing hashicorp/aws v5.100.0...
- Installed hashicorp/aws v5.100.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Report for ehr-repo

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "~> 4.0"...
- Installing hashicorp/aws v4.67.0...
- Installed hashicorp/aws v4.67.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (0 to add, 1 to change, 0 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_s3_bucket_policy.ehr-repo-bucket_policy will be updated in-place
  ~ resource "aws_s3_bucket_policy" "ehr-repo-bucket_policy" {
        id     = "dev-ehr-repo-bucket"
      ~ policy = jsonencode(
          ~ {
              ~ Statement = [
                    {
                        Action    = "s3:*"
                        Condition = {
                            Bool = {
                                "aws:SecureTransport" = "false"
                            }
                        }
                        Effect    = "Deny"
                        Principal = "*"
                        Resource  = "arn:aws:s3:::dev-ehr-repo-bucket/*"
                    },
                  ~ {
                      ~ Principal = {
                          ~ AWS = "AROAWCD5NRKJASATK6W6V" -> "[REDACTED_IAM_ROLE_ARN]"
                        }
                        # (3 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

Report for ehr-transfer-service

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (1 to add, 3 to change, 1 to destroy)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # aws_ecs_cluster.ehr_transfer_service_ecs_cluster will be updated in-place
  ~ resource "aws_ecs_cluster" "ehr_transfer_service_ecs_cluster" {
        id                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:cluster/dev-ehr-transfer-service-ecs-cluster"
        name               = "dev-ehr-transfer-service-ecs-cluster"
        tags               = {
            "CreatedBy"   = "prm-repo-ehr-transfer-service"
            "Environment" = "dev"
            "Name"        = "dev-ehr-transfer-service"
        }
        # (3 unchanged attributes hidden)

      + setting {
          + name  = "containerInsights"
          + value = "enabled"
        }
    }

  # aws_ecs_service.ecs-service will be updated in-place
  ~ resource "aws_ecs_service" "ecs-service" {
        id                                 = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:service/dev-ehr-transfer-service-ecs-cluster/dev-ehr-transfer-service"
        name                               = "dev-ehr-transfer-service"
        tags                               = {}
      ~ task_definition                    = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:task-definition/ehr-transfer-service:752" -> (known after apply)
        # (14 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # aws_ecs_task_definition.task must be replaced
-/+ resource "aws_ecs_task_definition" "task" {
      ~ arn                      = "arn:aws:ecs:eu-west-2:[REDACTED_AWS_ACCOUNT_ID]:task-definition/ehr-transfer-service:752" -> (known after apply)
      ~ container_definitions    = (sensitive value) # forces replacement
      ~ id                       = "ehr-transfer-service" -> (known after apply)
      ~ revision                 = 752 -> (known after apply)
        tags                     = {
            "CreatedBy"   = "prm-repo-ehr-transfer-service"
            "Environment" = "dev"
        }
        # (10 unchanged attributes hidden)
    }

  # aws_s3_bucket_policy.ehr-repo-sqs_large_message_bucket_policy will be updated in-place
  ~ resource "aws_s3_bucket_policy" "ehr-repo-sqs_large_message_bucket_policy" {
        id     = "dev-ehr-transfer-service-sqs-large-messages"
      ~ policy = jsonencode(
          ~ {
              ~ Statement = [
                    {
                        Action    = "s3:*"
                        Condition = {
                            Bool = {
                                "aws:SecureTransport" = "false"
                            }
                        }
                        Effect    = "Deny"
                        Principal = "*"
                        Resource  = "arn:aws:s3:::dev-ehr-transfer-service-sqs-large-messages/*"
                    },
                  ~ {
                      ~ Principal = {
                          ~ AWS = "AROAWCD5NRKJASATK6W6V" -> "[REDACTED_IAM_ROLE_ARN]"
                        }
                        # (3 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        # (1 unchanged attribute hidden)
    }

Plan: 1 to add, 3 to change, 1 to destroy.

[github-actions]

Report for ehr-repo-db-roles

Terraform Initialization ⚙️success

Initialization Output

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Finding hashicorp/aws versions matching "3.44.0"...
- Installing hashicorp/aws v3.44.0...
- Installed hashicorp/aws v3.44.0 (signed by HashiCorp)
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Terraform Validation 🤖success

Validation Output

Success! The configuration is valid.

Terraform Plan 📖success

Show Plan (no changes)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.