Terraform SIP Trunk Registration Failing 403 After Provider Update

Architect & Flows
1

Terraform provider v3.6 upgraded from v3.4 yesterday. SIP trunk registration status stuck in FAILED state for the last four hours. Environment is US-East-1. Using OAuth scopes genesyscloud:sip_trunk and genesyscloud:api. Provider logs show 403 Forbidden during POST /api/v2/sipTrunks. Configuration file shows valid externalId mapping to AWS Direct Connect. Anyone seen this after the provider update?

resource "genesyscloud_sip_trunk" "main" {
  name        = "AWS-DC-Trunk-01"
  type        = "EXTERNAL"
  registration {
    enabled = true
  }
}

Plan output indicates no changes needed yet state drifts. Need to force refresh without deleting the trunk.

2

Check the service account permissions first. The provider requires admin level scopes for SIP Trunk creation in some regions. We had similar issues with AWS VPC endpoints blocking outbound calls from the GC region during registration.

Verify if the terraform_state_lock is held by another process. Use terraform state rm genesyscloud_sip_trunk.main then import again.

Ensure the OAuth token refresh logic does not expire during the POST request.

3

SIP Trunk configuration often impacts flow routing downstream. Verify if the trunk ID matches the one in your Flow execution settings. The routeToQueue node requires the exact Trunk ID for accurate reporting metrics.

Sometimes the registration failure is a symptom of an upstream signaling issue rather than the provider itself. Check the sipTrunkStatus endpoint via CLI to see real-time state.

4

PureConnect managed SIP trunks differently than this platform. Moving to Genesys Cloud requires validating the trunk type matches the routing profile exactly. A mismatch here caused similar issues during our migration last quarter.

Ensure the sipTrunkType is set correctly for BYOC scenarios. This looks like a permission boundary issue rather than a network problem.