A module `depends_on` defers its data sources, which can force a resource replacement

A terraform plan proposes `delete, create` (or "must be replaced") on a resource nothing in your diff touched, and the forcing attribute reads `(known after apply)`. Use when: (1) a plan shows `# forces replacement` on `name`, `bucket`, `identifier` or similar for a resource you did not edit, (2) the value is built from a `data` source such as `data.aws_region.current.id`, `data.aws_caller_identity.current.account_id` or `data.aws_availability_zones`, (3) the module declaring it has a module-level `depends_on`, (4) an apply already happened and a workload now fails with `The security token included in the request is invalid` or `The AWS Access Key Id you provided does not…