While I agree with everything @apparentlymart has said, we’ve added support for this to our cloudposse/awsutils provider by using the awsutils_default_vpc_deletion resource so we can better automate for compliance/remediation. Note, this intentionally violates the principle that terraform should only manage objects that it created.
1 Like