tflocal generates iotanalytics and iotevents endpoints removed in AWS Provider v6.x

[ksemele-public]

Description

When running tflocal plan with AWS Provider v6.x, the auto-generated
localstack_providers_override.tf file includes iotanalytics and iotevents endpoint
arguments that were removed from the provider schema in v6.x, causing a hard error.

Error

TF_CMD=tofu tflocal plan

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: Unsupported argument
│
│   on localstack_providers_override.tf line 60, in provider "aws":
│   60:     iotanalytics = "http://localhost:4566"
│
│ An argument named "iotanalytics" is not expected here.
╵
╷
│ Error: Unsupported argument
│
│   on localstack_providers_override.tf line 61, in provider "aws":
│   61:     iotevents = "http://localhost:4566"
│
│ An argument named "iotevents" is not expected here.

Environment

TF_CMD=tofu tflocal --version
terraform-local v0.25.0

tofu --version
OpenTofu v1.11.5
on darwin_arm64
+ provider registry.opentofu.org/hashicorp/aws v6.40.0

Root Cause

tflocal dynamically generates localstack_providers_override.tf based on the internal
list of LocalStack services (via config.get_service_ports()), without checking whether
the generated endpoint names are valid for the currently installed AWS Provider version.

The endpoints.iotanalytics and endpoints.iotevents configuration arguments were
explicitly removed from the AWS Terraform Provider in v6.x as part of the major
version cleanup (PR hashicorp/terraform-provider-aws#42703,
tracked in the v6.0.0 milestone):

provider: The endpoints.iotanalytics and endpoints.iotevents configuration arguments have been removed (#42703)

See the CHANGELOG
for the full list of removed endpoints in v6.

This is the same class of issue as:

• #41 — scheduler is not expected here
• #55 — Endpoint deprecation warnings with AWS Provider > 5.36 (fixed by #57)

Steps to Reproduce

cat main.tf
provider "aws" {

  access_key = "test"
  secret_key = "test"
  region     = "us-east-1"


  # only required for non virtual hosted-style endpoint use case.
  # https://registry.terraform.io/providers/hashicorp/aws/latest/docs#s3_use_path_style
  s3_use_path_style           = true
  skip_credentials_validation = true
  skip_metadata_api_check     = true

  endpoints {
    s3 = "http://s3.localhost.localstack.cloud:4566"
  }
}


resource "aws_s3_bucket" "test-bucket" {
  bucket = "my-bucket"
}

1. Use AWS Provider ~> 6.40.0 in your versions.tf
2. Run TF_CMD=tofu tflocal plan
3. Observe the errors above in localstack_providers_override.tf

You can inspect the generated file without running a full plan:

DRY_RUN=1 TF_CMD=tofu tflocal plan
cat localstack_providers_override.tf | grep iot
    iot = "http://localhost:4566"
    iotanalytics = "http://localhost:4566"
    iotevents = "http://localhost:4566"

Expected Behavior

Plan and apply should work without any errors

[ksemele-public]

I used a workaround that worked for me, but I think someone should fix it on the LocalStack side.

cat $(which tflocal) | grep "SERVICE_EXCLUSIONS = \["
SERVICE_EXCLUSIONS = ["meteringmarketplace", "iotanalytics", "iotevents"]