---
title: Dozens of Cloudflare Terraform Provider resources now have proper drift
  detection · Changelog
description: Improper drift detection in the Cloudflare Terraform Provider
  resulted in dozens of resources always indicating they needed to be updated or
  replaced.
chatbotDeprioritize: true
source_url:
  html: https://developers.cloudflare.com/changelog/2025-03-21-resource-force-replacement-bug/
  md: https://developers.cloudflare.com/changelog/2025-03-21-resource-force-replacement-bug/index.md
---

# Changelog

New updates and improvements at Cloudflare.

[Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)\
[View all RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/)

![hero image](https://developers.cloudflare.com/_astro/hero.CVYJHPAd_ZEA2nF.svg)

[← Back to all posts](https://developers.cloudflare.com/changelog/)

## Dozens of Cloudflare Terraform Provider resources now have proper drift detection

Mar 21, 2025

[Cloudflare Fundamentals](https://developers.cloudflare.com/fundamentals/)

In [Cloudflare Terraform Provider](https://github.com/cloudflare/terraform-provider-cloudflare) versions 5.2.0 and above, dozens of resources now have proper drift detection. Before this fix, these resources would indicate they needed to be updated or replaced — even if there was no real change. Now, you can rely on your `terraform plan` to only show what resources are expected to change.

This issue affected [resources](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs) related to these products and features:

* API Shield
* Argo Smart Routing
* Argo Tiered Caching
* Bot Management
* BYOIP
* D1
* DNS
* Email Routing
* Hyperdrive
* Observatory
* Pages
* R2
* Rules
* SSL/TLS
* Waiting Room
* Workers
* Zero Trust
