Terraform  sandbox 

Command line options

-target

Use this to deploy the configs conditionally if terraform is unable to generate a plan due to dynamic values.

When using the docker alias, wrap additional options in '' quotes

terraform plan '-target=module.management_account_permissions.aws_ssoadmin_permission_set.this["MgmtSsoOperator"]'

Errors

MessageFix/Workaround
error deleting SSO Permission Set (arn:aws:sso:::permissionSet/ssoins-xxxxxxxxxxxxxxxx/ps-xxxxxxxxxxxxxxxx): ConflictException: Could not delete because PermissionSet has ApplicationProfile associated with it.Delete permission set from account assignment via console

https://github.com/hashicorp/terraform-provider-aws/issues/26757

docker run --rm -it -v $(pwd):/opt/app -w /opt/app --entrypoint /bin/sh public.ecr.aws/hashicorp/terraform:1.6