source              = "terraform-aws-modules/redshift/aws"

  iam_role_arns       = [
    aws_iam_role.redshift_service.arn
  ]
  database_name       = var.redshift_cluster_database_name
  cluster_identifier  = var.name
  node_type           = local.config_tier["redshift_cluster_node_type"][var.config_tier]
  master_password     = local.admin_password_selector
  master_username     = var.redshift_cluster_master_username
  number_of_nodes     = local.config_tier["redshift_cluster_number_of_nodes"][var.config_tier]
  cluster_version     = var.redshift_cluster_version
  create_random_password = false
  logging             = {
    enable            = local.config_tier["enable_logging"][var.config_tier]
    bucket_name       = local.config_tier["enable_logging"][var.config_tier] == "true" ? aws_s3_bucket.logs.bucket : null
  }

  enhanced_vpc_routing = true

  # KMS Key
  encrypted            = local.config_tier["encrypted"][var.config_tier]
  kms_key_arn          = local.config_tier["encrypted"][var.config_tier] == "true" ? data.aws_kms_key.default_redshift.arn : ""

  # maintenance window
  preferred_maintenance_window = var.redshift_maintenance_window

  # snapshot
  automated_snapshot_retention_period = 7
  final_snapshot_identifier = "final-snapshot-${var.name}"

  # restore from snapshot
  snapshot_identifier         = var.redshift_snapshot_identifier
  snapshot_cluster_identifier = var.redshift_snapshot_cluster_identifier
  owner_account               = var.redshift_snapshot_owner

  subnet_ids           = var.redshift_subnets
  tags                 = local.tags
  vpc_security_group_ids  = [
    aws_security_group.redshift.id
  ]
  parameter_group_name = "batch-pipeline-${terraform.workspace}-redshift-1-0-custom-params"
  parameter_group_parameters = {
    wlm_json_configuration = {
      name = "wlm_json_configuration"
      value  = jsonencode([
        {
          query_concurrency: 5
        }
      ])
    }
    require_ssl = {
      name  = "require_ssl"
      value = false
    }
    use_fips_ssl = {
      name  = "use_fips_ssl"
      value = false
    }
    enable_user_activity_logging = {
      name  = "enable_user_activity_logging"
      value = false
    }
    max_concurrency_scaling_clusters = {
      name  = "max_concurrency_scaling_clusters"
      value = 1
    }
    enable_case_sensitive_identifier = {
      name  = "enable_case_sensitive_identifier"
      value = false
    }
  }
}```

### Steps to Reproduce

restore a cluster from a snapshot, then attempt to change the master_password.

### Debug Output

_No response_

### Panic Output

_No response_

### Important Factoids

The original restore happened over a year ago, so I Can not really tell when what version of TF or the provider it was restored under.

I also tried removing the resource from the state and importing again, with the same result.

### References

_No response_

### Would you like to implement a fix?

_No response_