tls_private_key.server_key: Refreshing state... (ID: 1170cc1ec1059ecb08031f93874089997106da1f)
tls_private_key.ca_key: Refreshing state... (ID: 08193750a9feadf6ed0ba75522700af7a29b2563)
tls_private_key.client_key: Refreshing state... (ID: 250b339be2f9a90f7e38afb4e5b1c263bf2908f6)
tls_cert_request.server_request: Refreshing state... (ID: b237c2d34fc58f2d41ef93c04f1f4fab0f48a91c)
tls_self_signed_cert.ca_cert: Refreshing state... (ID: 238339413798801610637832361195906945972)
tls_cert_request.client_request: Refreshing state... (ID: 29691472c7aa4b55c6f581e71b657d1433e4a75d)
tls_locally_signed_cert.server_cert: Refreshing state... (ID: 247756921308847258052162823670931645700)
tls_locally_signed_cert.client_cert: Refreshing state... (ID: 95743037529996364803302390382282454562)
aws_acm_certificate.server_acm: Refreshing state... (ID: arn:aws:acm:us-east-2:994939393317:cert...e/961576a1-54f9-4d20-af2e-e2538ed87414)
aws_ecs_cluster.main: Refreshing state... (ID: arn:aws:ecs:us-east-2:994939393317:cluster/tf-ecs-cluster)
aws_cloudwatch_log_group.vpn_lg: Refreshing state... (ID: vpn)
aws_acm_certificate.client_acm: Refreshing state... (ID: arn:aws:acm:us-east-2:994939393317:cert...e/cf546dfe-3d9c-4b96-85ff-74ca61466720)
data.aws_availability_zones.available: Refreshing state...
aws_vpc.main: Refreshing state... (ID: vpc-00cf226e213343e78)
data.aws_iam_role.ecs_task_execution_role: Refreshing state...
aws_ecs_task_definition.app: Refreshing state... (ID: app)
aws_cloudwatch_log_stream.vpn_ls: Refreshing state... (ID: vpn-usage)
aws_ec2_client_vpn_endpoint.CVPN_endpoint: Refreshing state... (ID: cvpn-endpoint-08e5ac26696d23ff4)
aws_alb_target_group.app: Refreshing state... (ID: arn:aws:elasticloadbalancing:us-east-2:...rgetgroup/tf-ecs-chat/7b0e286d05420b32)
aws_security_group.lb: Refreshing state... (ID: sg-0b1e46c260fe90390)
aws_subnet.public[1]: Refreshing state... (ID: subnet-07734e4c0d4c7b300)
aws_subnet.public[0]: Refreshing state... (ID: subnet-01f3d8faa38c37ee5)
aws_internet_gateway.gw: Refreshing state... (ID: igw-0ad9e806b26236f99)
aws_subnet.private[0]: Refreshing state... (ID: subnet-0becc15ec80232bbb)
aws_subnet.private[1]: Refreshing state... (ID: subnet-05182f608dc088ea6)
aws_security_group.ecs_tasks: Refreshing state... (ID: sg-045bf967998090399)
aws_route.internet_access: Refreshing state... (ID: r-rtb-079d7823ddb8eb7571080289494)
aws_eip.gw[0]: Refreshing state... (ID: eipalloc-0783fae99d78903c7)
aws_eip.gw[1]: Refreshing state... (ID: eipalloc-0486f621a02dcf8e1)
aws_alb.main: Refreshing state... (ID: arn:aws:elasticloadbalancing:us-east-2:...ancer/app/tf-ecs-chat/6e8f412bc1cb91b7)
aws_ec2_client_vpn_network_association.pub_assoc[1]: Refreshing state... (ID: cvpn-assoc-0f57580ee8abebbbe)
aws_ec2_client_vpn_network_association.pub_assoc[0]: Refreshing state... (ID: cvpn-assoc-0c814321de9b7a487)
aws_nat_gateway.gw[1]: Refreshing state... (ID: nat-025097fe5fdd1f053)
aws_nat_gateway.gw[0]: Refreshing state... (ID: nat-06f6364c438e7a631)
aws_route_table.private[1]: Refreshing state... (ID: rtb-026c1e142a6e57656)
aws_route_table.private[0]: Refreshing state... (ID: rtb-0ff4cd76bea6f0c3d)
aws_alb_listener.front_end: Refreshing state... (ID: arn:aws:elasticloadbalancing:us-east-2:...chat/6e8f412bc1cb91b7/7dd1be0a3d30ccec)
aws_route_table_association.private[1]: Refreshing state... (ID: rtbassoc-012a26910f4962bd4)
aws_route_table_association.private[0]: Refreshing state... (ID: rtbassoc-0147be648d75afdc1)
aws_ecs_service.main: Refreshing state... (ID: arn:aws:ecs:us-east-2:994939393317:service/tf-ecs-cluster/tf-ecs-service)

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
-/+ destroy and then create replacement

Terraform will perform the following actions:

-/+ aws_ec2_client_vpn_network_association.pub_assoc[1] (new resource required)
      id:                     "cvpn-assoc-0f57580ee8abebbbe" => <computed> (forces new resource)
      client_vpn_endpoint_id: "cvpn-endpoint-08e5ac26696d23ff4" => "cvpn-endpoint-08e5ac26696d23ff4"
      security_groups.#:      "1" => <computed>
      status:                 "associated" => <computed>
      subnet_id:              "subnet-01f3d8faa38c37ee5" => "subnet-07734e4c0d4c7b300" (forces new resource)
      vpc_id:                 "vpc-00cf226e213343e78" => <computed>


Plan: 1 to add, 0 to change, 1 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

aws_ec2_client_vpn_network_association.pub_assoc[1]: Destroying... (ID: cvpn-assoc-0f57580ee8abebbbe)

Error: Error applying plan:

1 error(s) occurred:

* aws_ec2_client_vpn_network_association.pub_assoc[1] (destroy): 1 error(s) occurred:

* aws_ec2_client_vpn_network_association.pub_assoc.1: Error waiting for Client VPN endpoint to disassociate with target network: unexpected state 'associated', wanted target 'disassociated'. last error: %!s(<nil>)

Terraform does not automatically rollback in the face of errors.
Instead, your Terraform state file has been partially updated with
any resources that successfully completed. Please address the error
above and apply again to incrementally change your infrastructure.