Ignore root_directory if authorization_config is used

aws/resource_aws_ecs_task_definition.go

@@ -195,6 +195,7 @@ func resourceAwsEcsTaskDefinition() *schema.Resource {
 										Type:     schema.TypeString,
 										ForceNew: true,
 										Optional: true,
+										Default:  "/",
 									},
 									"transit_encryption": {
 										Type:     schema.TypeString,

aws/structure.go

@@ -160,7 +160,6 @@ func expandEcsVolumes(configured []interface{}) ([]*ecs.Volume, error) {
 			if v, ok := config["root_directory"].(string); ok && v != "" {
 				l.EfsVolumeConfiguration.RootDirectory = aws.String(v)
 			}
-
 			if v, ok := config["transit_encryption"].(string); ok && v != "" {
 				l.EfsVolumeConfiguration.TransitEncryption = aws.String(v)
 			}
@@ -171,6 +170,7 @@ func expandEcsVolumes(configured []interface{}) ([]*ecs.Volume, error) {
 			authConfig, ok := config["authorization_config"].([]interface{})
 			if ok && len(authConfig) > 0 {
 				authconfig := authConfig[0].(map[string]interface{})
+				l.EfsVolumeConfiguration.RootDirectory = nil
 				l.EfsVolumeConfiguration.AuthorizationConfig = &ecs.EFSAuthorizationConfig{}
 
 				if v, ok := authconfig["access_point_id"].(string); ok && v != "" {
@@ -766,10 +766,9 @@ func flattenEFSVolumeConfiguration(config *ecs.EFSVolumeConfiguration) []interfa
 			m["file_system_id"] = aws.StringValue(v)
 		}
 
-		if v := config.RootDirectory; v != nil && aws.StringValue(v) != "/" {
+		if v := config.RootDirectory; v != nil {
 			m["root_directory"] = aws.StringValue(v)
 		}
-
 		if v := config.TransitEncryption; v != nil {
 			m["transit_encryption"] = aws.StringValue(v)
 		}

website/docs/r/ecs_task_definition.html.markdown

@@ -162,7 +162,7 @@ resource "aws_ecs_task_definition" "service" {
 For more information, see [Specifying an EFS volume in your Task Definition Developer Guide](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/efs-volumes.html#specify-efs-config)
 
 * `file_system_id` - (Required) The ID of the EFS File System.
-* `root_directory` - (Optional) The directory within the Amazon EFS file system to mount as the root directory inside the host. If this parameter is omitted, the root of the Amazon EFS volume will be used. Specifying / will have the same effect as omitting this parameter.
+* `root_directory` - (Optional) The directory within the Amazon EFS file system to mount as the root directory inside the host. If this parameter is omitted, the root of the Amazon EFS volume will be used. Specifying / will have the same effect as omitting this parameter. This argument is ignored when using `authorization_config`.
 * `transit_encryption` - (Optional) Whether or not to enable encryption for Amazon EFS data in transit between the Amazon ECS host and the Amazon EFS server. Transit encryption must be enabled if Amazon EFS IAM authorization is used. Valid values: `ENABLED`, `DISABLED`. If this parameter is omitted, the default value of `DISABLED` is used.
 * `transit_encryption_port` - (Optional) The port to use for transit encryption. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon EFS mount helper uses.
 * `authorization_config` - (Optional) The authorization configuration details for the Amazon EFS file system.