Upgrade to aws provider 3.0.0 and terraform wants to recreate a security group

I’ve started updating things to use the v3 provider, and in some states where I create a VPC and associated things, it wants to recreate an aws_security_group resource. The plan shows an addition of a name_prefix but it has always had a name prefix and it is there in the state file. If it re-init to use v2.70 of the provider, a plan shows no changes. Has anyone else hit this? I’m going to open an issue on it.

https://github.com/terraform-providers/terraform-provider-aws/issues/14494 fyi