diff --git a/website/source/docs/providers/aws/r/default_network_acl.html.markdown b/website/source/docs/providers/aws/r/default_network_acl.html.markdown index e50a786b79..092271d52e 100644 --- a/website/source/docs/providers/aws/r/default_network_acl.html.markdown +++ b/website/source/docs/providers/aws/r/default_network_acl.html.markdown @@ -25,6 +25,11 @@ rules in the ACL**. It then proceeds to create any rules specified in the configuration. This step is required so that only the rules specified in the configuration are created. +This resource treats it's inline rules as absolute; only the rules defined +inline are created, and any additions/removals external to this resource will +result in diff shown. For these reasons, this resource is incompatible with the +`aws_network_acl_rule` resource. + For more information about Network ACLs, see the AWS Documentation on [Network ACLs][aws-network-acls]. diff --git a/website/source/docs/providers/aws/r/default_security_group.html.markdown b/website/source/docs/providers/aws/r/default_security_group.html.markdown index 00a39cdb8a..3a8fe58c3f 100644 --- a/website/source/docs/providers/aws/r/default_security_group.html.markdown +++ b/website/source/docs/providers/aws/r/default_security_group.html.markdown @@ -22,10 +22,15 @@ into management. We can do this because these default security groups cannot be destroyed, and are created with a known set of default ingress/egress rules. When Terraform first adopts the Default Security Group, it **immediately removes all -ingress and egress rules in the ACL**. It then proceeds to create any rules specified in the +ingress and egress rules in the Security Group**. It then proceeds to create any rules specified in the configuration. This step is required so that only the rules specified in the configuration are created. +This resource treats it's inline rules as absolute; only the rules defined +inline are created, and any additions/removals external to this resource will +result in diff shown. For these reasons, this resource is incompatible with the +`aws_security_group_rule` resource. + For more information about Default Security Groups, see the AWS Documentation on [Default Security Groups][aws-default-security-groups].