{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/terraform/issues/670","labels_url":"https://api.github.com/repos/hashicorp/terraform/issues/670/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/terraform/issues/670/comments","events_url":"https://api.github.com/repos/hashicorp/terraform/issues/670/events","html_url":"https://github.com/hashicorp/terraform/issues/670","id":51962025,"number":670,"title":"Dependency ordering issue when aws security groups has multiple ingress CIDR blocks","user":{"login":"spyrospph","id":714938,"avatar_url":"https://avatars.githubusercontent.com/u/714938?v=3","gravatar_id":"","url":"https://api.github.com/users/spyrospph","html_url":"https://github.com/spyrospph","followers_url":"https://api.github.com/users/spyrospph/followers","following_url":"https://api.github.com/users/spyrospph/following{/other_user}","gists_url":"https://api.github.com/users/spyrospph/gists{/gist_id}","starred_url":"https://api.github.com/users/spyrospph/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spyrospph/subscriptions","organizations_url":"https://api.github.com/users/spyrospph/orgs","repos_url":"https://api.github.com/users/spyrospph/repos","events_url":"https://api.github.com/users/spyrospph/events{/privacy}","received_events_url":"https://api.github.com/users/spyrospph/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/hashicorp/terraform/labels/bug","name":"bug","color":"f7c6c7"},{"url":"https://api.github.com/repos/hashicorp/terraform/labels/provider/aws","name":"provider/aws","color":"bfdadc"},{"url":"https://api.github.com/repos/hashicorp/terraform/labels/waiting-response","name":"waiting-response","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":30,"created_at":"2014-12-15T08:56:38Z","updated_at":"2015-11-03T10:23:16Z","closed_at":null,"body":"Hi,\r\n\r\nThe below code causes terraform plan to always switch the order of the cidr_blocks\r\n\r\n```\r\nresource \"aws_security_group\" \"admins\" {\r\n    name        = \"admins\"\r\n    vpc_id      = \"${aws_vpc.some.id}\"\r\n\r\n    ingress {\r\n        from_port   = 0\r\n        to_port     = 65535\r\n        protocol    = \"tcp\"\r\n        cidr_blocks = [\"10.0.0.1/32\", \"10.0.0.2/32\", \"10.0.0.3/32\"]\r\n    }\r\n\r\n    ingress {\r\n        from_port   = 0\r\n        to_port     = 65535\r\n        protocol    = \"tcp\"\r\n        cidr_blocks = [\"10.0.0.4/32\", \"10.0.0.5/32\"]\r\n    }\r\n}\r\n```\r\n\r\n-S."},"comment":{"url":"https://api.github.com/repos/hashicorp/terraform/issues/comments/153308328","html_url":"https://github.com/hashicorp/terraform/issues/670#issuecomment-153308328","issue_url":"https://api.github.com/repos/hashicorp/terraform/issues/670","id":153308328,"user":{"login":"brikis98","id":711908,"avatar_url":"https://avatars.githubusercontent.com/u/711908?v=3","gravatar_id":"","url":"https://api.github.com/users/brikis98","html_url":"https://github.com/brikis98","followers_url":"https://api.github.com/users/brikis98/followers","following_url":"https://api.github.com/users/brikis98/following{/other_user}","gists_url":"https://api.github.com/users/brikis98/gists{/gist_id}","starred_url":"https://api.github.com/users/brikis98/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brikis98/subscriptions","organizations_url":"https://api.github.com/users/brikis98/orgs","repos_url":"https://api.github.com/users/brikis98/repos","events_url":"https://api.github.com/users/brikis98/events{/privacy}","received_events_url":"https://api.github.com/users/brikis98/received_events","type":"User","site_admin":false},"created_at":"2015-11-03T10:23:16Z","updated_at":"2015-11-03T10:23:16Z","body":"@josh-padnick: No, I don't think that's the issue. The  `aws_security_group.web_server_security_group` I'm defining doesn't use any lists itself, and when I reference `web_server_security_group` in other places, I refer directly to its id, so there is no list to split:\r\n\r\n```\r\nresource \"aws_launch_configuration\" \"ecs_launch_configuration\" {\r\n  name = \"ecs_launch_configuration\"\r\n  security_groups = [\"${aws_security_group.web_server_security_group.id}\"]\r\n  # ...\r\n}\r\n```"}}