Fixes#37846

In#37225 (a rebased version of#34990) the azure backend was updated to use the newbackendbase package instead of the legacy SDK. This was the last backend migrated over.

Now, the structs representing remote-state backend implementations embedbackendbase.Base (example inazure). If the remote-state backend doesn't implement methods likePrepareConfig then the implementation of that method inbackendbase.Base is used instead.

In the case of the original issue reported about the Azure backend, theazure backend doesn't implementPrepareConfig itself and instead uses the implementation inbackendbase.Base. In that method there is logic that didn't accurately mimic how the legacy SDK handled attributes that were explicitly set to an empty string in the configuration:

backend"foobar" {value=""}

Instead of using the empty string value like the legacy SDK, the newbackendbase package looks for any fallback values defined for that attribute in backend'sSDKLikeDefaults values; default values defined in the schema or names of environment variables to use. The PrepareConfig method returns data about how the backend should be configured, a combo of config, schema defaults, and ENV values, and then Terraform Core then uses that value to configure the backend.

This PR

• Updates thebackendbase package to detect non-null, string attributes that are set to"" and uses that value, reverting behaviour back to match the legacy SDK.
  • This means the data received by Terraform Core fromPrepareConfig still includes the empty string, and that'll be used to configure the backend.
• Adds a test that asserts neither fallback default values or ENVs are used when an attribute is set to an empty string.
• Updates existing test.

Target Release

1.15.x

Rollback Plan

• If a change needs to be reverted, we will roll out an update to the code within 7 days.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

CHANGELOG entry

• This change is user-facing and I added a changelog entry.
• This change is not user-facing.