hashicorp/terraform-provider-aws
### [`v4.0.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#400-February-10-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.2...v4.0.0)
BREAKING CHANGES:
- data-source/aws_connect_hours_of_operation: The hours_of_operation_arn attribute is renamed to arn ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375))
- resource/aws_batch_compute_environment: No `compute_resources` configuration block can be specified when `type` is `UNMANAGED` ([#22805](https://togithub.com/hashicorp/terraform-provider-aws/issues/22805))
- resource/aws_cloudwatch_event_target: The `ecs_target` `launch_type` argument no longer has a default value (previously was `EC2`) ([#22803](https://togithub.com/hashicorp/terraform-provider-aws/issues/22803))
- resource/aws_cloudwatch_event_target: `ecs_target.0.launch_type` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954))
- resource/aws_connect_hours_of_operation: The hours_of_operation_arn attribute is renamed to arn ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375))
- resource/aws_default_network_acl: These arguments can no longer be set to `""`: `egress.*.cidr_block`, `egress.*.ipv6_cidr_block`, `ingress.*.cidr_block`, or `ingress.*.ipv6_cidr_block` ([#22928](https://togithub.com/hashicorp/terraform-provider-aws/issues/22928))
- resource/aws_default_route_table: These arguments can no longer be set to `""`: `route.*.cidr_block`, `route.*.ipv6_cidr_block` ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931))
- resource/aws_default_vpc: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948))
- resource/aws_efs_mount_target: `ip_address` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954))
- resource/aws_elasticache_cluster: Either `engine` or `replication_group_id` must be specified ([#20482](https://togithub.com/hashicorp/terraform-provider-aws/issues/20482))
- resource/aws_elasticsearch_domain: `ebs_options.0.volume_type` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954))
- resource/aws_fsx_ontap_storage_virtual_machine: Remove deprecated `active_directory_configuration.0.self_managed_active_directory_configuration.0.organizational_unit_distinguidshed_name`, migrating value to `active_directory_configuration.0.self_managed_active_directory_configuration.0.organizational_unit_distinguished_name` ([#22915](https://togithub.com/hashicorp/terraform-provider-aws/issues/22915))
- resource/aws_instance: `private_ip` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948))
- resource/aws_lb_target_group: For `protocol = "TCP"`, `stickiness` can no longer be type set to `lb_cookie` even when `enabled = false`; instead use type `source_ip` ([#22996](https://togithub.com/hashicorp/terraform-provider-aws/issues/22996))
- resource/aws_network_acl: These arguments can no longer be set to `""`: `egress.*.cidr_block`, `egress.*.ipv6_cidr_block`, `ingress.*.cidr_block`, or `ingress.*.ipv6_cidr_block` ([#22928](https://togithub.com/hashicorp/terraform-provider-aws/issues/22928))
- resource/aws_route: Exactly one of these can be set: `destination_cidr_block`, `destination_ipv6_cidr_block`, `destination_prefix_list_id`. These arguments can no longer be set to `""`: `destination_cidr_block`, `destination_ipv6_cidr_block`. ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931))
- resource/aws_route_table: These arguments can no longer be set to `""`: `route.*.cidr_block`, `route.*.ipv6_cidr_block` ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931))
- resource/aws_s3\_bucket: The `acceleration_status` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_accelerate_configuration` resource instead. ([#22610](https://togithub.com/hashicorp/terraform-provider-aws/issues/22610))
- resource/aws_s3\_bucket: The `acl` and `grant` arguments have been deprecated and are now read-only. Use the `aws_s3_bucket_acl` resource instead. ([#22537](https://togithub.com/hashicorp/terraform-provider-aws/issues/22537))
- resource/aws_s3\_bucket: The `cors_rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_cors_configuration` resource instead. ([#22611](https://togithub.com/hashicorp/terraform-provider-aws/issues/22611))
- resource/aws_s3\_bucket: The `lifecycle_rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_lifecycle_configuration` resource instead. ([#22581](https://togithub.com/hashicorp/terraform-provider-aws/issues/22581))
- resource/aws_s3\_bucket: The `logging` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_logging` resource instead. ([#22599](https://togithub.com/hashicorp/terraform-provider-aws/issues/22599))
- resource/aws_s3\_bucket: The `object_lock_configuration` `rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_object_lock_configuration` resource instead. ([#22612](https://togithub.com/hashicorp/terraform-provider-aws/issues/22612))
- resource/aws_s3\_bucket: The `policy` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_policy` resource instead. ([#22538](https://togithub.com/hashicorp/terraform-provider-aws/issues/22538))
- resource/aws_s3\_bucket: The `replication_configuration` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_replication_configuration` resource instead. ([#22604](https://togithub.com/hashicorp/terraform-provider-aws/issues/22604))
- resource/aws_s3\_bucket: The `request_payer` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_request_payment_configuration` resource instead. ([#22613](https://togithub.com/hashicorp/terraform-provider-aws/issues/22613))
- resource/aws_s3\_bucket: The `server_side_encryption_configuration` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_server_side_encryption_configuration` resource instead. ([#22605](https://togithub.com/hashicorp/terraform-provider-aws/issues/22605))
- resource/aws_s3\_bucket: The `versioning` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_versioning` resource instead. ([#22606](https://togithub.com/hashicorp/terraform-provider-aws/issues/22606))
- resource/aws_s3\_bucket: The `website`, `website_domain`, and `website_endpoint` arguments have been deprecated and are now read-only. Use the `aws_s3_bucket_website_configuration` resource instead. ([#22614](https://togithub.com/hashicorp/terraform-provider-aws/issues/22614))
- resource/aws_vpc: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948))
- resource/aws_vpc_ipv6\_cidr_block_association: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948))
NOTES:
- data-source/aws_cognito_user_pools: The type of the `ids` and `arns` attributes has changed from Set to List. If no volumes match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_db_event_categories: The type of the `ids` attribute has changed from Set to List. If no event categories match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ebs_volumes: The type of the `ids` attribute has changed from Set to List. If no volumes match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ec2\_coip_pools: The type of the `pool_ids` attribute has changed from Set to List. If no COIP pools match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ec2\_local_gateway_route_tables: The type of the `ids` attribute has changed from Set to List. If no local gateway route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ec2\_local_gateway_virtual_interface_groups: The type of the `ids` and `local_gateway_virtual_interface_ids` attributes has changed from Set to List. If no local gateway virtual interface groups match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ec2\_local_gateways: The type of the `ids` attribute has changed from Set to List. If no local gateways match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ec2\_transit_gateway_route_tables: The type of the `ids` attribute has changed from Set to List. If no transit gateway route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_efs_access_points: The type of the `ids` and `arns` attributes has changed from Set to List. If no access points match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_elasticache_replication_group: The `number_cache_clusters` attribute has been deprecated. All configurations using `number_cache_clusters` should be updated to use the `num_cache_clusters` attribute instead ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667))
- data-source/aws_elasticache_replication_group: The `replication_group_description` attribute has been deprecated. All configurations using `replication_group_description` should be updated to use the `description` attribute instead ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667))
- data-source/aws_emr_release_labels: The type of the `ids` attribute has changed from Set to List. If no release labels match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_iam_policy_document: The `source_json` and `override_json` attributes have been deprecated. Use the `source_policy_documents` and `override_policy_documents` attributes respectively instead. ([#22890](https://togithub.com/hashicorp/terraform-provider-aws/issues/22890))
- data-source/aws_inspector_rules_packages: If no rules packages match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_instances: If no instances match the specified criteria an empty list is returned (previously an error was raised) ([#5055](https://togithub.com/hashicorp/terraform-provider-aws/issues/5055))
- data-source/aws_ip_ranges: If no ranges match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_network_acls: The type of the `ids` attribute has changed from Set to List. If no NACLs match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_network_interfaces: The type of the `ids` attribute has changed from Set to List. If no network interfaces match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_route_tables: The type of the `ids` attribute has changed from Set to List. If no route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_s3\_bucket_object: The data source is deprecated; use `aws_s3_object` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877))
- data-source/aws_s3\_bucket_objects: The data source is deprecated; use `aws_s3_objects` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877))
- data-source/aws_security_groups: If no security groups match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_ssoadmin_instances: The type of the `identity_store_ids` and `arns` attributes has changed from Set to List. If no instances match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219))
- data-source/aws_subnet_ids: The `aws_subnet_ids` data source has been deprecated and will be removed in a future version. Use the `aws_subnets` data source instead ([#22743](https://togithub.com/hashicorp/terraform-provider-aws/issues/22743))
- data-source/aws_vpcs: The type of the `ids` attributes has changed from Set to List. If no VPCs match the specified criteria an empty list is returned (previously an error was raised) ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253))
- provider: The `assume_role.duration_seconds` argument has been deprecated. All configurations using `assume_role.duration_seconds` should be updated to use the new `assume_role.duration` argument instead. ([#23077](https://togithub.com/hashicorp/terraform-provider-aws/issues/23077))
- resource/aws_acmpca_certificate_authority: The `status` attribute has been deprecated. Use the `enabled` attribute instead. ([#22878](https://togithub.com/hashicorp/terraform-provider-aws/issues/22878))
- resource/aws_autoscaling_attachment: The `alb_target_group_arn` argument has been deprecated. All configurations using `alb_target_group_arn` should be updated to use the new `lb_target_group_arn` argument instead ([#22662](https://togithub.com/hashicorp/terraform-provider-aws/issues/22662))
- resource/aws_autoscaling_group: The `tags` argument has been deprecated. All configurations using `tags` should be updated to use the `tag` argument instead ([#22663](https://togithub.com/hashicorp/terraform-provider-aws/issues/22663))
- resource/aws_budgets_budget: The `cost_filters` attribute has been deprecated. Use the `cost_filter` attribute instead. ([#22888](https://togithub.com/hashicorp/terraform-provider-aws/issues/22888))
- resource/aws_connect_hours_of_operation: Timeout support has been removed as it is not needed for this resource ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375))
- resource/aws_customer_gateway: `ip_address` can no longer be set to `""` ([#22926](https://togithub.com/hashicorp/terraform-provider-aws/issues/22926))
- resource/aws_db_instance The `name` argument has been deprecated. All configurations using `name` should be updated to use the `db_name` argument instead ([#22668](https://togithub.com/hashicorp/terraform-provider-aws/issues/22668))
- resource/aws_default_subnet: If no default subnet exists in the specified Availability Zone one is now created. The `force_destroy` destroy argument has been added (defaults to `false`). Setting this argument to `true` deletes the default subnet on `terraform destroy` ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253))
- resource/aws_default_vpc: If no default VPC exists in the current AWS Region one is now created. The `force_destroy` destroy argument has been added (defaults to `false`). Setting this argument to `true` deletes the default VPC on `terraform destroy` ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253))
- resource/aws_ec2\_client_vpn_endpoint: The `status` attribute has been deprecated ([#22887](https://togithub.com/hashicorp/terraform-provider-aws/issues/22887))
- resource/aws_ec2\_client_vpn_endpoint: The type of the `dns_servers` argument has changed from Set to List ([#22889](https://togithub.com/hashicorp/terraform-provider-aws/issues/22889))
- resource/aws_ec2\_client_vpn_network_association: The `security_groups` argument has been deprecated. Use the `security_group_ids` argument of the `aws_ec2_client_vpn_endpoint` resource instead ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911))
- resource/aws_ec2\_client_vpn_network_association: The `status` attribute has been deprecated ([#22887](https://togithub.com/hashicorp/terraform-provider-aws/issues/22887))
- resource/aws_ec2\_client_vpn_route: Add [custom `timeouts`](https://www.terraform.io/docs/language/resources/syntax.html#operation-timeouts) block ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911))
- resource/aws_ecs_cluster: The `capacity_providers` and `default_capacity_provider_strategy` arguments have been deprecated. Use the `aws_ecs_cluster_capacity_providers` resource instead. ([#22783](https://togithub.com/hashicorp/terraform-provider-aws/issues/22783))
- resource/aws_elasticache_replication_group: The `cluster_mode` argument has been deprecated. All configurations using `cluster_mode` should be updated to use the root-level `num_node_groups` and `replicas_per_node_group` arguments instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_elasticache_replication_group: The `number_cache_clusters` argument has been deprecated. All configurations using `number_cache_clusters` should be updated to use the `num_cache_clusters` argument instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_elasticache_replication_group: The `replication_group_description` argument has been deprecated. All configurations using `replication_group_description` should be updated to use the `description` argument instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_route: The `instance_id` argument has been deprecated. All configurations using `instance_id` should be updated to use the `network_interface_id` argument instead ([#22664](https://togithub.com/hashicorp/terraform-provider-aws/issues/22664))
- resource/aws_route_table: The `instance_id` argument of the `route` configuration block has been deprecated. All configurations using `route` `instance_id` should be updated to use the `route` `network_interface_id` argument instead ([#22664](https://togithub.com/hashicorp/terraform-provider-aws/issues/22664))
- resource/aws_s3\_bucket_object: The resource is deprecated; use `aws_s3_object` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877))
FEATURES:
- **New Data Source:** `aws_cloudfront_realtime_log_config` ([#22620](https://togithub.com/hashicorp/terraform-provider-aws/issues/22620))
- **New Data Source:** `aws_ec2_client_vpn_endpoint` ([#14218](https://togithub.com/hashicorp/terraform-provider-aws/issues/14218))
- **New Data Source:** `aws_eips` ([#7537](https://togithub.com/hashicorp/terraform-provider-aws/issues/7537))
- **New Data Source:** `aws_s3_object` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850))
- **New Data Source:** `aws_s3_objects` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850))
- **New Resource:** `aws_cognito_user` ([#19919](https://togithub.com/hashicorp/terraform-provider-aws/issues/19919))
- **New Resource:** `aws_dataexchange_revision` ([#22933](https://togithub.com/hashicorp/terraform-provider-aws/issues/22933))
- **New Resource:** `aws_network_acl_association` ([#18807](https://togithub.com/hashicorp/terraform-provider-aws/issues/18807))
- **New Resource:** `aws_s3_bucket_accelerate_configuration` ([#22617](https://togithub.com/hashicorp/terraform-provider-aws/issues/22617))
- **New Resource:** `aws_s3_bucket_acl` ([#22853](https://togithub.com/hashicorp/terraform-provider-aws/issues/22853))
- **New Resource:** `aws_s3_bucket_cors_configuration` ([#12141](https://togithub.com/hashicorp/terraform-provider-aws/issues/12141))
- **New Resource:** `aws_s3_bucket_lifecycle_configuration` ([#22579](https://togithub.com/hashicorp/terraform-provider-aws/issues/22579))
- **New Resource:** `aws_s3_bucket_logging` ([#22608](https://togithub.com/hashicorp/terraform-provider-aws/issues/22608))
- **New Resource:** `aws_s3_bucket_object_lock_configuration` ([#22644](https://togithub.com/hashicorp/terraform-provider-aws/issues/22644))
- **New Resource:** `aws_s3_bucket_request_payment_configuration` ([#22649](https://togithub.com/hashicorp/terraform-provider-aws/issues/22649))
- **New Resource:** `aws_s3_bucket_server_side_encryption_configuration` ([#22609](https://togithub.com/hashicorp/terraform-provider-aws/issues/22609))
- **New Resource:** `aws_s3_bucket_versioning` ([#5132](https://togithub.com/hashicorp/terraform-provider-aws/issues/5132))
- **New Resource:** `aws_s3_bucket_website_configuration` ([#22648](https://togithub.com/hashicorp/terraform-provider-aws/issues/22648))
- **New Resource:** `aws_s3_object` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850))
ENHANCEMENTS:
- data-source/aws_ami: Add `boot_mode` attribute. ([#22939](https://togithub.com/hashicorp/terraform-provider-aws/issues/22939))
- data-source/aws_cloudwatch_log_group: Automatically trim `:*` suffix from `arn` attribute ([#22043](https://togithub.com/hashicorp/terraform-provider-aws/issues/22043))
- data-source/aws_ec2\_client_vpn_endpoint: Add `security_group_ids` and `vpc_id` attributes ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911))
- data-source/aws_elasticache_replication_group: Add `description`, `num_cache_clusters`, `num_node_groups`, and `replicas_per_node_group` attributes ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667))
- data-source/aws_imagebuilder_distribution_configuration: Add `container_distribution_configuration` attribute to the `distribution` configuration block ([#22838](https://togithub.com/hashicorp/terraform-provider-aws/issues/22838))
- data-source/aws_imagebuilder_distribution_configuration: Add `launch_template_configuration` attribute to the `distribution` configuration block ([#22884](https://togithub.com/hashicorp/terraform-provider-aws/issues/22884))
- data-source/aws_imagebuilder_image_recipe: Add `parameter` attribute to the `component` configuration block ([#22856](https://togithub.com/hashicorp/terraform-provider-aws/issues/22856))
- provider: Add `duration` argument to the `assume_role` configuration block ([#23077](https://togithub.com/hashicorp/terraform-provider-aws/issues/23077))
- provider: Add `ec2_metadata_service_endpoint`, `ec2_metadata_service_endpoint_mode`, `use_dualstack_endpoint`, `use_fips_endpoint` arguments ([#22804](https://togithub.com/hashicorp/terraform-provider-aws/issues/22804))
- provider: Add environment variables `TF_AWS_DYNAMODB_ENDPOINT`, `TF_AWS_IAM_ENDPOINT`, `TF_AWS_S3_ENDPOINT`, and `TF_AWS_STS_ENDPOINT`. ([#23052](https://togithub.com/hashicorp/terraform-provider-aws/issues/23052))
- provider: Add support for `shared_config_file` parameter ([#20587](https://togithub.com/hashicorp/terraform-provider-aws/issues/20587))
- provider: Add support for `shared_credentials_files` parameter and deprecates `shared_credentials_file` ([#23080](https://togithub.com/hashicorp/terraform-provider-aws/issues/23080))
- provider: Adds `s3_use_path_style` parameter and deprecates `s3_force_path_style`. ([#23055](https://togithub.com/hashicorp/terraform-provider-aws/issues/23055))
- provider: Changes `shared_config_file` parameter to `shared_config_files` ([#23080](https://togithub.com/hashicorp/terraform-provider-aws/issues/23080))
- provider: Updates AWS authentication to use AWS SDK for Go v2 ([#20587](https://togithub.com/hashicorp/terraform-provider-aws/issues/20587))
- resource/aws_ami: Add `boot_mode` and `ebs_block_device.outpost_arn` arguments. ([#22939](https://togithub.com/hashicorp/terraform-provider-aws/issues/22939))
- resource/aws_ami_copy: Add `boot_mode` and `ebs_block_device.outpost_arn` attributes ([#22972](https://togithub.com/hashicorp/terraform-provider-aws/issues/22972))
- resource/aws_ami_from_instance: Add `boot_mode` and `ebs_block_device.outpost_arn` attributes ([#22972](https://togithub.com/hashicorp/terraform-provider-aws/issues/22972))
- resource/aws_api_gateway_domain_name: Add `ownership_verification_certificate_arn` argument. ([#21076](https://togithub.com/hashicorp/terraform-provider-aws/issues/21076))
- resource/aws_apigatewayv2\_domain_name: Add `domain_name_configuration.ownership_verification_certificate_arn` argument. ([#21076](https://togithub.com/hashicorp/terraform-provider-aws/issues/21076))
- resource/aws_autoscaling_attachment: Add `lb_target_group_arn` argument ([#22662](https://togithub.com/hashicorp/terraform-provider-aws/issues/22662))
- resource/aws_cloudwatch_event_target: Add plan time validation for `input`, `input_path`, `run_command_targets.values`, `http_target.header_parameters`, `http_target.query_string_parameters`, `redshift_target.database`, `redshift_target.db_user`, `redshift_target.secrets_manager_arn`, `redshift_target.sql`, `redshift_target.statement_name`, `retry_policy.maximum_event_age_in_seconds`, `retry_policy.maximum_retry_attempts`. ([#22946](https://togithub.com/hashicorp/terraform-provider-aws/issues/22946))
- resource/aws_db_instance: Add `db_name` argument ([#22668](https://togithub.com/hashicorp/terraform-provider-aws/issues/22668))
- resource/aws_ec2\_client_vpn_authorization_rule: Configurable Create and Delete timeouts ([#20688](https://togithub.com/hashicorp/terraform-provider-aws/issues/20688))
- resource/aws_ec2\_client_vpn_endpoint: Add `client_connect_options` argument ([#22793](https://togithub.com/hashicorp/terraform-provider-aws/issues/22793))
- resource/aws_ec2\_client_vpn_endpoint: Add `client_login_banner_options` argument ([#22793](https://togithub.com/hashicorp/terraform-provider-aws/issues/22793))
- resource/aws_ec2\_client_vpn_endpoint: Add `security_group_ids` and `vpc_id` arguments ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911))
- resource/aws_ec2\_client_vpn_endpoint: Add `session_timeout_hours` argument ([#22793](https://togithub.com/hashicorp/terraform-provider-aws/issues/22793))
- resource/aws_ec2\_client_vpn_endpoint: Add `vpn_port` argument ([#22793](https://togithub.com/hashicorp/terraform-provider-aws/issues/22793))
- resource/aws_ec2\_client_vpn_network_association: Configurable Create and Delete timeouts ([#20689](https://togithub.com/hashicorp/terraform-provider-aws/issues/20689))
- resource/aws_elasticache_replication_group: Add `description` argument ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_elasticache_replication_group: Add `num_cache_clusters` argument ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_elasticache_replication_group: Add `num_node_groups` and `replicas_per_node_group` arguments ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666))
- resource/aws_fsx_lustre_file_system: Add `log_configuration` argument. ([#22935](https://togithub.com/hashicorp/terraform-provider-aws/issues/22935))
- resource/aws_fsx_ontap_file_system: Reduce the minimum valid value of the `throughput_capacity` argument to `128` (128 MB/s) ([#22898](https://togithub.com/hashicorp/terraform-provider-aws/issues/22898))
- resource/aws_glue_partition_index: Add support for custom timeouts. ([#22941](https://togithub.com/hashicorp/terraform-provider-aws/issues/22941))
- resource/aws_imagebuilder_distribution_configuration: Add `launch_template_configuration` argument to the `distribution` configuration block ([#22842](https://togithub.com/hashicorp/terraform-provider-aws/issues/22842))
- resource/aws_imagebuilder_image_recipe: Add `parameter` argument to the `component` configuration block ([#22837](https://togithub.com/hashicorp/terraform-provider-aws/issues/22837))
- resource/aws_mq_broker: `auto_minor_version_upgrade` and `host_instance_type` can be changed without recreating broker ([#20661](https://togithub.com/hashicorp/terraform-provider-aws/issues/20661))
- resource/aws_s3\_bucket_cors_configuration: Retry when `NoSuchCORSConfiguration` errors are returned from the AWS API ([#22977](https://togithub.com/hashicorp/terraform-provider-aws/issues/22977))
- resource/aws_s3\_bucket_versioning: Add eventual consistency handling to help ensure bucket versioning is stabilized. ([#21076](https://togithub.com/hashicorp/terraform-provider-aws/issues/21076))
- resource/aws_vpn_connection: Add the ability to revert changes to unconfigured tunnel options made outside of Terraform to their [documented default values](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPNTunnels.html) ([#17031](https://togithub.com/hashicorp/terraform-provider-aws/issues/17031))
- resource/aws_vpn_connection: Mark `customer_gateway_configuration` as [`Sensitive`](https://www.terraform.io/plugin/sdkv2/best-practices/sensitive-state#using-the-sensitive-flag) ([#15806](https://togithub.com/hashicorp/terraform-provider-aws/issues/15806))
- resource/aws_wafv2\_web_acl: Support `version` on `managed_rule_group_statement` ([#21732](https://togithub.com/hashicorp/terraform-provider-aws/issues/21732))
BUG FIXES:
- data-source/aws_vpc_peering_connections: Return empty array instead of error when no connections found. ([#17382](https://togithub.com/hashicorp/terraform-provider-aws/issues/17382))
- resource/aws_cloudformation_stack: Retry resource Create and Update for IAM eventual consistency ([#22840](https://togithub.com/hashicorp/terraform-provider-aws/issues/22840))
- resource/aws_cloudwatch_event_target: Preserve order of `http_target.path_parameter_values`. ([#22946](https://togithub.com/hashicorp/terraform-provider-aws/issues/22946))
- resource/aws_db_instance: Fix error with reboot of replica ([#22178](https://togithub.com/hashicorp/terraform-provider-aws/issues/22178))
- resource/aws_ec2\_client_vpn_authorization_rule: Don't raise an error when `InvalidClientVpnEndpointId.NotFound` is returned during refresh ([#20688](https://togithub.com/hashicorp/terraform-provider-aws/issues/20688))
- resource/aws_ec2\_client_vpn_endpoint: `connection_log_options.cloudwatch_log_stream` argument is Computed, preventing spurious resource diffs ([#22891](https://togithub.com/hashicorp/terraform-provider-aws/issues/22891))
- resource/aws_ecs_capacity_provider: Fix tagging error preventing use in ISO partitions ([#23030](https://togithub.com/hashicorp/terraform-provider-aws/issues/23030))
- resource/aws_ecs_cluster: Fix tagging error preventing use in ISO partitions ([#23030](https://togithub.com/hashicorp/terraform-provider-aws/issues/23030))
- resource/aws_ecs_service: Fix tagging error preventing use in ISO partitions ([#23030](https://togithub.com/hashicorp/terraform-provider-aws/issues/23030))
- resource/aws_ecs_task_definition: Fix tagging error preventing use in ISO partitions ([#23030](https://togithub.com/hashicorp/terraform-provider-aws/issues/23030))
- resource/aws_ecs_task_set: Fix tagging error preventing use in ISO partitions ([#23030](https://togithub.com/hashicorp/terraform-provider-aws/issues/23030))
- resource/aws_route_table_association: Handle nil 'AssociationState' in ISO regions ([#22806](https://togithub.com/hashicorp/terraform-provider-aws/issues/22806))
- resource/aws_route_table_association: Retry resource Read for EC2 eventual consistency ([#22927](https://togithub.com/hashicorp/terraform-provider-aws/issues/22927))
- resource/aws_vpc_ipam: Correct update of `description` ([#22863](https://togithub.com/hashicorp/terraform-provider-aws/issues/22863))
- resource/aws_waf_rule_group: Prevent panic when expanding the rule group's set of `activated_rule` ([#22978](https://togithub.com/hashicorp/terraform-provider-aws/issues/22978))
- resource/aws_wafregional_rule_group: Prevent panic when expanding the rule group's set of `activated_rule` ([#22978](https://togithub.com/hashicorp/terraform-provider-aws/issues/22978))
### [`v3.74.2`](https://togithub.com/hashicorp/terraform-provider-aws/releases/v3.74.2)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.1...v3.74.2)
BUG FIXES:
- resource/aws_rds_cluster: Fix crash when configured `engine_version` string is shorter than the `EngineVersion` string returned from the AWS API ([#23039](https://togithub.com/hashicorp/terraform-provider-aws/issues/23039))
- resource/aws_vpn_connection: Add support for `ipsec.1-aes256` connection type ([#23127](https://togithub.com/hashicorp/terraform-provider-aws/issues/23127))
### [`v3.74.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3741-February-7-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.0...v3.74.1)
BUG FIXES:
- resource/aws_backup_selection: Fix permanent diffs for `condition` and `not_resources` arguments causing resource recreation ([#22882](https://togithub.com/hashicorp/terraform-provider-aws/issues/22882))
### [`v3.74.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3740-January-28-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.73.0...v3.74.0)
FEATURES:
- **New Data Source:** `aws_api_gateway_export` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731))
- **New Data Source:** `aws_api_gateway_sdk` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731))
- **New Data Source:** `aws_apigatewayv2_export` ([#22732](https://togithub.com/hashicorp/terraform-provider-aws/issues/22732))
- **New Data Source:** `aws_connect_contact_flow_module` ([#22518](https://togithub.com/hashicorp/terraform-provider-aws/issues/22518))
- **New Data Source:** `aws_connect_prompt` ([#22636](https://togithub.com/hashicorp/terraform-provider-aws/issues/22636))
- **New Data Source:** `aws_connect_quick_connect` ([#22527](https://togithub.com/hashicorp/terraform-provider-aws/issues/22527))
- **New Data Source:** `aws_datapipeline_pipeline` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Data Source:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Data Source:** `aws_imagebuilder_components` ([#21881](https://togithub.com/hashicorp/terraform-provider-aws/issues/21881))
- **New Data Source:** `aws_imagebuilder_distribution_configurations` ([#22733](https://togithub.com/hashicorp/terraform-provider-aws/issues/22733))
- **New Data Source:** `aws_imagebuilder_infrastructure_configurations` ([#22723](https://togithub.com/hashicorp/terraform-provider-aws/issues/22723))
- **New Resource:** `aws_connect_queue` ([#22566](https://togithub.com/hashicorp/terraform-provider-aws/issues/22566))
- **New Resource:** `aws_connect_security_profile` ([#22369](https://togithub.com/hashicorp/terraform-provider-aws/issues/22369))
- **New Resource:** `aws_dataexchange_data_set` ([#22697](https://togithub.com/hashicorp/terraform-provider-aws/issues/22697))
- **New Resource:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Resource:** `aws_devicefarm_test_grid_project` ([#22688](https://togithub.com/hashicorp/terraform-provider-aws/issues/22688))
- **New Resource:** `aws_ecs_cluster_capacity_providers` ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672))
- **New Resource:** `aws_sagemaker_project` ([#21534](https://togithub.com/hashicorp/terraform-provider-aws/issues/21534))
ENHANCEMENTS:
- resource/aws_api_gateway_stage: Add `web_acl_arn` attribute ([#18561](https://togithub.com/hashicorp/terraform-provider-aws/issues/18561))
- resource/aws_elasticache_replication_group: Add `user_group_ids` to associate `aws_elasticache_user_group` with `aws_elasticache_replication_group` ([#20406](https://togithub.com/hashicorp/terraform-provider-aws/issues/20406))
- resource/aws_imagebuilder_distribution_configuration: Add `container_distribution_configuration` argument ([#22758](https://togithub.com/hashicorp/terraform-provider-aws/issues/22758))
- resource/aws_iot_role_alias: Increase the maximum allowed value of the `credential_duration` argument to `43200` (12 hours) ([#22757](https://togithub.com/hashicorp/terraform-provider-aws/issues/22757))
- resource/aws_network_interface: Add `private_ip_list`, `private_ip_list_enabled`, `ipv6_address_list`, and `ipv6_address_list_enabled` attributes ([#17846](https://togithub.com/hashicorp/terraform-provider-aws/issues/17846))
- resource/aws_s3\_bucket_notification: Add `eventbridge` argument ([#22045](https://togithub.com/hashicorp/terraform-provider-aws/issues/22045))
- resource/aws_vpc_endpoint_subnet_association: Fix resource importing ([#22796](https://togithub.com/hashicorp/terraform-provider-aws/issues/22796))
BUG FIXES:
- data-source/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- data-source/aws_vpc: Suppress errors if main route table cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724))
- resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632))
- resource/aws_cloudwatch_composite_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_event_bus: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_event_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_metric_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_metric_stream: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_capacity_provider: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_cluster: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_cluster: Provide new resource `aws_ecs_cluster_capacity_providers` to avoid bugs using `capacity_providers` and `default_capacity_provider_strategy`, which arguments will be deprecated in a future version ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672))
- resource/aws_ecs_service: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_task_definition: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_task_set: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_instance: Prevent panic when reading the instance's block device mappings ([#22719](https://togithub.com/hashicorp/terraform-provider-aws/issues/22719))
- resource/aws_internet_gateway: No longer give up before the attachment timeout (4m) is exceeded (previously it was giving up after 20 not found checks). ([#22713](https://togithub.com/hashicorp/terraform-provider-aws/issues/22713))
- resource/aws_lambda_function: Prevent errors when attempting to configure code signing in the `ap-southeast-3` AWS Region ([#22693](https://togithub.com/hashicorp/terraform-provider-aws/issues/22693))
- resource/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_listener_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_sns_topic: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_vpc: Suppress errors if main route table, default NACL or default security group cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724))
- resource/aws_vpc_dhcp_options_association: Support `default` DHCP Options ID ([#22722](https://togithub.com/hashicorp/terraform-provider-aws/issues/22722))
### [`v3.73.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3730-January-21-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.72.0...v3.73.0)
FEATURES:
- **New Data Source:** `aws_cloudfront_origin_access_identity` ([#22572](https://togithub.com/hashicorp/terraform-provider-aws/issues/22572))
- **New Data Source:** `aws_vpc_ipam_preview_next_cidr` ([#22643](https://togithub.com/hashicorp/terraform-provider-aws/issues/22643))
- **New Resource:** `aws_appsync_api_cache` ([#22578](https://togithub.com/hashicorp/terraform-provider-aws/issues/22578))
- **New Resource:** `aws_appsync_domain_name` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487))
- **New Resource:** `aws_appsync_domain_name_api_association` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487))
- **New Resource:** `aws_cloudsearch_domain` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723))
- **New Resource:** `aws_cloudsearch_domain_service_access_policy` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723))
- **New Resource:** `aws_detective_invitation_accepter` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163))
- **New Resource:** `aws_detective_member` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163))
- **New Resource:** `aws_fsx_data_repository_association` ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291))
- **New Resource:** `aws_lambda_invocation` ([#19488](https://togithub.com/hashicorp/terraform-provider-aws/issues/19488))
ENHANCEMENTS:
- data-source/aws_cognito_user_pool_clients: Add `client_names` attribute ([#22615](https://togithub.com/hashicorp/terraform-provider-aws/issues/22615))
- data-source/aws_imagebuilder_image_recipe: Add `user_data_base64` attribute ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763))
- resource/aws_dynamodb_table: Add special case handling when switching `billing_mode` from `PAY_PER_REQUEST` to `PROVISIONED` and provisioned throughput is ignored. ([#22630](https://togithub.com/hashicorp/terraform-provider-aws/issues/22630))
- resource/aws_fsx_lustre_file_system: Add `file_system_type_version` argument ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291))
- resource/aws_imagebuilder_image_recipe: Add `user_data_base64` argument ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763))
- resource/aws_opsworks_custom_layer: Add plan time validation for `ebs_volume.type` and `custom_json`. ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433))
- resource/aws_opsworks_custom_layer: Add support for `cloudwatch_configuration` ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433))
- resource/aws_security_group: Ensure that the Security Group is found 3 times in a row before declaring that it has been created ([#22420](https://togithub.com/hashicorp/terraform-provider-aws/issues/22420))
BUG FIXES:
- resource/aws_apprunner_custom_domain_association: Add the status `binding_certificate` as a valid target when waiting for creation. ([#20222](https://togithub.com/hashicorp/terraform-provider-aws/issues/20222))
- resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632))
- resource/aws_ecr_lifecycle_policy: Fix diffs in `policy` when no changes are detected ([#22665](https://togithub.com/hashicorp/terraform-provider-aws/issues/22665))
- resource/aws_load_balancer_policy: Suppress `policy_attribute` differences ([#21776](https://togithub.com/hashicorp/terraform-provider-aws/issues/21776))
### [`v3.72.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3720-January-13-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.71.0...v3.72.0)
FEATURES:
- **New Data Source:** `aws_cognito_user_pool_client` ([#22477](https://togithub.com/hashicorp/terraform-provider-aws/issues/22477))
- **New Resource:** `aws_cognito_identity_pool_provider_principal_tag` ([#22514](https://togithub.com/hashicorp/terraform-provider-aws/issues/22514))
- **New Resource:** `aws_connect_contact_flow_module` ([#22349](https://togithub.com/hashicorp/terraform-provider-aws/issues/22349))
- **New Resource:** `aws_connect_quick_connect` ([#22250](https://togithub.com/hashicorp/terraform-provider-aws/issues/22250))
- **New Resource:** `aws_devicefarm_instance_profile` ([#22458](https://togithub.com/hashicorp/terraform-provider-aws/issues/22458))
- **New Resource:** `aws_memorydb_snapshot` ([#22486](https://togithub.com/hashicorp/terraform-provider-aws/issues/22486))
- **New Resource:** `aws_shield_protection_health_check_association` ([#21993](https://togithub.com/hashicorp/terraform-provider-aws/issues/21993))
ENHANCEMENTS:
- data-source/aws_cloudfront_distribution: Add `aliases` attribute ([#22552](https://togithub.com/hashicorp/terraform-provider-aws/issues/22552))
- data-source/aws_customer_gateway: Add `certificate_arn` attribute ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435))
- data-source/aws_ebs_snapshot: Add `storage_tier` and `outpost_arn` attributes. ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- data-source/aws_ecr_repository: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22535](https://togithub.com/hashicorp/terraform-provider-aws/issues/22535))
- data-source/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block ([#22485](https://togithub.com/hashicorp/terraform-provider-aws/issues/22485))
- data-source/aws_elb_service_account: Add account ID for `ap-southeast-3` AWS Region ([#22453](https://togithub.com/hashicorp/terraform-provider-aws/issues/22453))
- data-source/aws_iam_role: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- data-source/aws_iam_user: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- data-source/aws_instance: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- data-source/aws_launch_template: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- data-source/aws_lb: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_lb_listener: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_lb_target_group: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the BlazingText image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the DeepAR Forecasting image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Factorization Machines image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Spark ML Serving image in `af-south-1`, `ap-east-1`, `cn-north-1`, `cn-northwest-1`, `eu-north-1`, `eu-south-1`, `eu-west-3`, `me-south-1` and `sa-east-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the XGBoost image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sqs_queue: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22516](https://togithub.com/hashicorp/terraform-provider-aws/issues/22516))
- resource/aws_appsync_datasource: Add `authorization_config` attribute to the `http_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add `delta_sync_config` and `versioned` to the `dynamodb_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add `relational_database_config` argument ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add plan time validation for `service_role_arn` and `lambda_config.function_arn` ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_function: Add `max_batch_size` and `sync_config` arguments. ([#22484](https://togithub.com/hashicorp/terraform-provider-aws/issues/22484))
- resource/aws_appsync_resolver: Add `max_batch_size` and `sync_config` arguments. ([#22510](https://togithub.com/hashicorp/terraform-provider-aws/issues/22510))
- resource/aws_backup_selection: Add `condition` configuration block and `not_resources` argument in support of fine-grained backup plan [resource assignment](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html) ([#22074](https://togithub.com/hashicorp/terraform-provider-aws/issues/22074))
- resource/aws_cloudwatch_composite_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_cloudwatch_event_bus: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550))
- resource/aws_cloudwatch_event_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550))
- resource/aws_cloudwatch_log_destination_policy: Add `force_update` argument. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460))
- resource/aws_cloudwatch_log_destination_policy: Add plan time validation for `access_policy`. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460))
- resource/aws_cloudwatch_metric_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_cloudwatch_metric_stream: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_connect_contact_flow: add delete function ([#22303](https://togithub.com/hashicorp/terraform-provider-aws/issues/22303))
- resource/aws_customer_gateway: Add `certificate_arn` argument ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435))
- resource/aws_ebs_snapshot: Add `outpost_arn`, `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ebs_snapshot_copy: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ebs_snapshot_import: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ecr_repository: Attempt `tags`-on-create, fallba
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
3.74.1
->4.0.0
Release Notes
hashicorp/terraform-provider-aws
### [`v4.0.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#400-February-10-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.2...v4.0.0) BREAKING CHANGES: - data-source/aws_connect_hours_of_operation: The hours_of_operation_arn attribute is renamed to arn ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375)) - resource/aws_batch_compute_environment: No `compute_resources` configuration block can be specified when `type` is `UNMANAGED` ([#22805](https://togithub.com/hashicorp/terraform-provider-aws/issues/22805)) - resource/aws_cloudwatch_event_target: The `ecs_target` `launch_type` argument no longer has a default value (previously was `EC2`) ([#22803](https://togithub.com/hashicorp/terraform-provider-aws/issues/22803)) - resource/aws_cloudwatch_event_target: `ecs_target.0.launch_type` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954)) - resource/aws_connect_hours_of_operation: The hours_of_operation_arn attribute is renamed to arn ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375)) - resource/aws_default_network_acl: These arguments can no longer be set to `""`: `egress.*.cidr_block`, `egress.*.ipv6_cidr_block`, `ingress.*.cidr_block`, or `ingress.*.ipv6_cidr_block` ([#22928](https://togithub.com/hashicorp/terraform-provider-aws/issues/22928)) - resource/aws_default_route_table: These arguments can no longer be set to `""`: `route.*.cidr_block`, `route.*.ipv6_cidr_block` ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931)) - resource/aws_default_vpc: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948)) - resource/aws_efs_mount_target: `ip_address` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954)) - resource/aws_elasticache_cluster: Either `engine` or `replication_group_id` must be specified ([#20482](https://togithub.com/hashicorp/terraform-provider-aws/issues/20482)) - resource/aws_elasticsearch_domain: `ebs_options.0.volume_type` can no longer be set to `""`; instead, remove or set to `null` ([#22954](https://togithub.com/hashicorp/terraform-provider-aws/issues/22954)) - resource/aws_fsx_ontap_storage_virtual_machine: Remove deprecated `active_directory_configuration.0.self_managed_active_directory_configuration.0.organizational_unit_distinguidshed_name`, migrating value to `active_directory_configuration.0.self_managed_active_directory_configuration.0.organizational_unit_distinguished_name` ([#22915](https://togithub.com/hashicorp/terraform-provider-aws/issues/22915)) - resource/aws_instance: `private_ip` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948)) - resource/aws_lb_target_group: For `protocol = "TCP"`, `stickiness` can no longer be type set to `lb_cookie` even when `enabled = false`; instead use type `source_ip` ([#22996](https://togithub.com/hashicorp/terraform-provider-aws/issues/22996)) - resource/aws_network_acl: These arguments can no longer be set to `""`: `egress.*.cidr_block`, `egress.*.ipv6_cidr_block`, `ingress.*.cidr_block`, or `ingress.*.ipv6_cidr_block` ([#22928](https://togithub.com/hashicorp/terraform-provider-aws/issues/22928)) - resource/aws_route: Exactly one of these can be set: `destination_cidr_block`, `destination_ipv6_cidr_block`, `destination_prefix_list_id`. These arguments can no longer be set to `""`: `destination_cidr_block`, `destination_ipv6_cidr_block`. ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931)) - resource/aws_route_table: These arguments can no longer be set to `""`: `route.*.cidr_block`, `route.*.ipv6_cidr_block` ([#22931](https://togithub.com/hashicorp/terraform-provider-aws/issues/22931)) - resource/aws_s3\_bucket: The `acceleration_status` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_accelerate_configuration` resource instead. ([#22610](https://togithub.com/hashicorp/terraform-provider-aws/issues/22610)) - resource/aws_s3\_bucket: The `acl` and `grant` arguments have been deprecated and are now read-only. Use the `aws_s3_bucket_acl` resource instead. ([#22537](https://togithub.com/hashicorp/terraform-provider-aws/issues/22537)) - resource/aws_s3\_bucket: The `cors_rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_cors_configuration` resource instead. ([#22611](https://togithub.com/hashicorp/terraform-provider-aws/issues/22611)) - resource/aws_s3\_bucket: The `lifecycle_rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_lifecycle_configuration` resource instead. ([#22581](https://togithub.com/hashicorp/terraform-provider-aws/issues/22581)) - resource/aws_s3\_bucket: The `logging` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_logging` resource instead. ([#22599](https://togithub.com/hashicorp/terraform-provider-aws/issues/22599)) - resource/aws_s3\_bucket: The `object_lock_configuration` `rule` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_object_lock_configuration` resource instead. ([#22612](https://togithub.com/hashicorp/terraform-provider-aws/issues/22612)) - resource/aws_s3\_bucket: The `policy` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_policy` resource instead. ([#22538](https://togithub.com/hashicorp/terraform-provider-aws/issues/22538)) - resource/aws_s3\_bucket: The `replication_configuration` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_replication_configuration` resource instead. ([#22604](https://togithub.com/hashicorp/terraform-provider-aws/issues/22604)) - resource/aws_s3\_bucket: The `request_payer` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_request_payment_configuration` resource instead. ([#22613](https://togithub.com/hashicorp/terraform-provider-aws/issues/22613)) - resource/aws_s3\_bucket: The `server_side_encryption_configuration` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_server_side_encryption_configuration` resource instead. ([#22605](https://togithub.com/hashicorp/terraform-provider-aws/issues/22605)) - resource/aws_s3\_bucket: The `versioning` argument has been deprecated and is now read-only. Use the `aws_s3_bucket_versioning` resource instead. ([#22606](https://togithub.com/hashicorp/terraform-provider-aws/issues/22606)) - resource/aws_s3\_bucket: The `website`, `website_domain`, and `website_endpoint` arguments have been deprecated and are now read-only. Use the `aws_s3_bucket_website_configuration` resource instead. ([#22614](https://togithub.com/hashicorp/terraform-provider-aws/issues/22614)) - resource/aws_vpc: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948)) - resource/aws_vpc_ipv6\_cidr_block_association: `ipv6_cidr_block` can no longer be set to `""`; remove or set to `null` ([#22948](https://togithub.com/hashicorp/terraform-provider-aws/issues/22948)) NOTES: - data-source/aws_cognito_user_pools: The type of the `ids` and `arns` attributes has changed from Set to List. If no volumes match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_db_event_categories: The type of the `ids` attribute has changed from Set to List. If no event categories match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ebs_volumes: The type of the `ids` attribute has changed from Set to List. If no volumes match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ec2\_coip_pools: The type of the `pool_ids` attribute has changed from Set to List. If no COIP pools match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ec2\_local_gateway_route_tables: The type of the `ids` attribute has changed from Set to List. If no local gateway route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ec2\_local_gateway_virtual_interface_groups: The type of the `ids` and `local_gateway_virtual_interface_ids` attributes has changed from Set to List. If no local gateway virtual interface groups match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ec2\_local_gateways: The type of the `ids` attribute has changed from Set to List. If no local gateways match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ec2\_transit_gateway_route_tables: The type of the `ids` attribute has changed from Set to List. If no transit gateway route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_efs_access_points: The type of the `ids` and `arns` attributes has changed from Set to List. If no access points match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_elasticache_replication_group: The `number_cache_clusters` attribute has been deprecated. All configurations using `number_cache_clusters` should be updated to use the `num_cache_clusters` attribute instead ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667)) - data-source/aws_elasticache_replication_group: The `replication_group_description` attribute has been deprecated. All configurations using `replication_group_description` should be updated to use the `description` attribute instead ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667)) - data-source/aws_emr_release_labels: The type of the `ids` attribute has changed from Set to List. If no release labels match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_iam_policy_document: The `source_json` and `override_json` attributes have been deprecated. Use the `source_policy_documents` and `override_policy_documents` attributes respectively instead. ([#22890](https://togithub.com/hashicorp/terraform-provider-aws/issues/22890)) - data-source/aws_inspector_rules_packages: If no rules packages match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_instances: If no instances match the specified criteria an empty list is returned (previously an error was raised) ([#5055](https://togithub.com/hashicorp/terraform-provider-aws/issues/5055)) - data-source/aws_ip_ranges: If no ranges match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_network_acls: The type of the `ids` attribute has changed from Set to List. If no NACLs match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_network_interfaces: The type of the `ids` attribute has changed from Set to List. If no network interfaces match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_route_tables: The type of the `ids` attribute has changed from Set to List. If no route tables match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_s3\_bucket_object: The data source is deprecated; use `aws_s3_object` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877)) - data-source/aws_s3\_bucket_objects: The data source is deprecated; use `aws_s3_objects` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877)) - data-source/aws_security_groups: If no security groups match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_ssoadmin_instances: The type of the `identity_store_ids` and `arns` attributes has changed from Set to List. If no instances match the specified criteria an empty list is returned (previously an error was raised) ([#21219](https://togithub.com/hashicorp/terraform-provider-aws/issues/21219)) - data-source/aws_subnet_ids: The `aws_subnet_ids` data source has been deprecated and will be removed in a future version. Use the `aws_subnets` data source instead ([#22743](https://togithub.com/hashicorp/terraform-provider-aws/issues/22743)) - data-source/aws_vpcs: The type of the `ids` attributes has changed from Set to List. If no VPCs match the specified criteria an empty list is returned (previously an error was raised) ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253)) - provider: The `assume_role.duration_seconds` argument has been deprecated. All configurations using `assume_role.duration_seconds` should be updated to use the new `assume_role.duration` argument instead. ([#23077](https://togithub.com/hashicorp/terraform-provider-aws/issues/23077)) - resource/aws_acmpca_certificate_authority: The `status` attribute has been deprecated. Use the `enabled` attribute instead. ([#22878](https://togithub.com/hashicorp/terraform-provider-aws/issues/22878)) - resource/aws_autoscaling_attachment: The `alb_target_group_arn` argument has been deprecated. All configurations using `alb_target_group_arn` should be updated to use the new `lb_target_group_arn` argument instead ([#22662](https://togithub.com/hashicorp/terraform-provider-aws/issues/22662)) - resource/aws_autoscaling_group: The `tags` argument has been deprecated. All configurations using `tags` should be updated to use the `tag` argument instead ([#22663](https://togithub.com/hashicorp/terraform-provider-aws/issues/22663)) - resource/aws_budgets_budget: The `cost_filters` attribute has been deprecated. Use the `cost_filter` attribute instead. ([#22888](https://togithub.com/hashicorp/terraform-provider-aws/issues/22888)) - resource/aws_connect_hours_of_operation: Timeout support has been removed as it is not needed for this resource ([#22375](https://togithub.com/hashicorp/terraform-provider-aws/issues/22375)) - resource/aws_customer_gateway: `ip_address` can no longer be set to `""` ([#22926](https://togithub.com/hashicorp/terraform-provider-aws/issues/22926)) - resource/aws_db_instance The `name` argument has been deprecated. All configurations using `name` should be updated to use the `db_name` argument instead ([#22668](https://togithub.com/hashicorp/terraform-provider-aws/issues/22668)) - resource/aws_default_subnet: If no default subnet exists in the specified Availability Zone one is now created. The `force_destroy` destroy argument has been added (defaults to `false`). Setting this argument to `true` deletes the default subnet on `terraform destroy` ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253)) - resource/aws_default_vpc: If no default VPC exists in the current AWS Region one is now created. The `force_destroy` destroy argument has been added (defaults to `false`). Setting this argument to `true` deletes the default VPC on `terraform destroy` ([#22253](https://togithub.com/hashicorp/terraform-provider-aws/issues/22253)) - resource/aws_ec2\_client_vpn_endpoint: The `status` attribute has been deprecated ([#22887](https://togithub.com/hashicorp/terraform-provider-aws/issues/22887)) - resource/aws_ec2\_client_vpn_endpoint: The type of the `dns_servers` argument has changed from Set to List ([#22889](https://togithub.com/hashicorp/terraform-provider-aws/issues/22889)) - resource/aws_ec2\_client_vpn_network_association: The `security_groups` argument has been deprecated. Use the `security_group_ids` argument of the `aws_ec2_client_vpn_endpoint` resource instead ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911)) - resource/aws_ec2\_client_vpn_network_association: The `status` attribute has been deprecated ([#22887](https://togithub.com/hashicorp/terraform-provider-aws/issues/22887)) - resource/aws_ec2\_client_vpn_route: Add [custom `timeouts`](https://www.terraform.io/docs/language/resources/syntax.html#operation-timeouts) block ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911)) - resource/aws_ecs_cluster: The `capacity_providers` and `default_capacity_provider_strategy` arguments have been deprecated. Use the `aws_ecs_cluster_capacity_providers` resource instead. ([#22783](https://togithub.com/hashicorp/terraform-provider-aws/issues/22783)) - resource/aws_elasticache_replication_group: The `cluster_mode` argument has been deprecated. All configurations using `cluster_mode` should be updated to use the root-level `num_node_groups` and `replicas_per_node_group` arguments instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666)) - resource/aws_elasticache_replication_group: The `number_cache_clusters` argument has been deprecated. All configurations using `number_cache_clusters` should be updated to use the `num_cache_clusters` argument instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666)) - resource/aws_elasticache_replication_group: The `replication_group_description` argument has been deprecated. All configurations using `replication_group_description` should be updated to use the `description` argument instead ([#22666](https://togithub.com/hashicorp/terraform-provider-aws/issues/22666)) - resource/aws_route: The `instance_id` argument has been deprecated. All configurations using `instance_id` should be updated to use the `network_interface_id` argument instead ([#22664](https://togithub.com/hashicorp/terraform-provider-aws/issues/22664)) - resource/aws_route_table: The `instance_id` argument of the `route` configuration block has been deprecated. All configurations using `route` `instance_id` should be updated to use the `route` `network_interface_id` argument instead ([#22664](https://togithub.com/hashicorp/terraform-provider-aws/issues/22664)) - resource/aws_s3\_bucket_object: The resource is deprecated; use `aws_s3_object` instead ([#22877](https://togithub.com/hashicorp/terraform-provider-aws/issues/22877)) FEATURES: - **New Data Source:** `aws_cloudfront_realtime_log_config` ([#22620](https://togithub.com/hashicorp/terraform-provider-aws/issues/22620)) - **New Data Source:** `aws_ec2_client_vpn_endpoint` ([#14218](https://togithub.com/hashicorp/terraform-provider-aws/issues/14218)) - **New Data Source:** `aws_eips` ([#7537](https://togithub.com/hashicorp/terraform-provider-aws/issues/7537)) - **New Data Source:** `aws_s3_object` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850)) - **New Data Source:** `aws_s3_objects` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850)) - **New Resource:** `aws_cognito_user` ([#19919](https://togithub.com/hashicorp/terraform-provider-aws/issues/19919)) - **New Resource:** `aws_dataexchange_revision` ([#22933](https://togithub.com/hashicorp/terraform-provider-aws/issues/22933)) - **New Resource:** `aws_network_acl_association` ([#18807](https://togithub.com/hashicorp/terraform-provider-aws/issues/18807)) - **New Resource:** `aws_s3_bucket_accelerate_configuration` ([#22617](https://togithub.com/hashicorp/terraform-provider-aws/issues/22617)) - **New Resource:** `aws_s3_bucket_acl` ([#22853](https://togithub.com/hashicorp/terraform-provider-aws/issues/22853)) - **New Resource:** `aws_s3_bucket_cors_configuration` ([#12141](https://togithub.com/hashicorp/terraform-provider-aws/issues/12141)) - **New Resource:** `aws_s3_bucket_lifecycle_configuration` ([#22579](https://togithub.com/hashicorp/terraform-provider-aws/issues/22579)) - **New Resource:** `aws_s3_bucket_logging` ([#22608](https://togithub.com/hashicorp/terraform-provider-aws/issues/22608)) - **New Resource:** `aws_s3_bucket_object_lock_configuration` ([#22644](https://togithub.com/hashicorp/terraform-provider-aws/issues/22644)) - **New Resource:** `aws_s3_bucket_request_payment_configuration` ([#22649](https://togithub.com/hashicorp/terraform-provider-aws/issues/22649)) - **New Resource:** `aws_s3_bucket_server_side_encryption_configuration` ([#22609](https://togithub.com/hashicorp/terraform-provider-aws/issues/22609)) - **New Resource:** `aws_s3_bucket_versioning` ([#5132](https://togithub.com/hashicorp/terraform-provider-aws/issues/5132)) - **New Resource:** `aws_s3_bucket_website_configuration` ([#22648](https://togithub.com/hashicorp/terraform-provider-aws/issues/22648)) - **New Resource:** `aws_s3_object` ([#22850](https://togithub.com/hashicorp/terraform-provider-aws/issues/22850)) ENHANCEMENTS: - data-source/aws_ami: Add `boot_mode` attribute. ([#22939](https://togithub.com/hashicorp/terraform-provider-aws/issues/22939)) - data-source/aws_cloudwatch_log_group: Automatically trim `:*` suffix from `arn` attribute ([#22043](https://togithub.com/hashicorp/terraform-provider-aws/issues/22043)) - data-source/aws_ec2\_client_vpn_endpoint: Add `security_group_ids` and `vpc_id` attributes ([#22911](https://togithub.com/hashicorp/terraform-provider-aws/issues/22911)) - data-source/aws_elasticache_replication_group: Add `description`, `num_cache_clusters`, `num_node_groups`, and `replicas_per_node_group` attributes ([#22667](https://togithub.com/hashicorp/terraform-provider-aws/issues/22667)) - data-source/aws_imagebuilder_distribution_configuration: Add `container_distribution_configuration` attribute to the `distribution` configuration block ([#22838](https://togithub.com/hashicorp/terraform-provider-aws/issues/22838)) - data-source/aws_imagebuilder_distribution_configuration: Add `launch_template_configuration` attribute to the `distribution` configuration block ([#22884](https://togithub.com/hashicorp/terraform-provider-aws/issues/22884)) - data-source/aws_imagebuilder_image_recipe: Add `parameter` attribute to the `component` configuration block ([#22856](https://togithub.com/hashicorp/terraform-provider-aws/issues/22856)) - provider: Add `duration` argument to the `assume_role` configuration block ([#23077](https://togithub.com/hashicorp/terraform-provider-aws/issues/23077)) - provider: Add `ec2_metadata_service_endpoint`, `ec2_metadata_service_endpoint_mode`, `use_dualstack_endpoint`, `use_fips_endpoint` arguments ([#22804](https://togithub.com/hashicorp/terraform-provider-aws/issues/22804)) - provider: Add environment variables `TF_AWS_DYNAMODB_ENDPOINT`, `TF_AWS_IAM_ENDPOINT`, `TF_AWS_S3_ENDPOINT`, and `TF_AWS_STS_ENDPOINT`. ([#23052](https://togithub.com/hashicorp/terraform-provider-aws/issues/23052)) - provider: Add support for `shared_config_file` parameter ([#20587](https://togithub.com/hashicorp/terraform-provider-aws/issues/20587)) - provider: Add support for `shared_credentials_files` parameter and deprecates `shared_credentials_file` ([#23080](https://togithub.com/hashicorp/terraform-provider-aws/issues/23080)) - provider: Adds `s3_use_path_style` parameter and deprecates `s3_force_path_style`. ([#23055](https://togithub.com/hashicorp/terraform-provider-aws/issues/23055)) - provider: Changes `shared_config_file` parameter to `shared_config_files` ([#23080](https://togithub.com/hashicorp/terraform-provider-aws/issues/23080)) - provider: Updates AWS authentication to use AWS SDK for Go v2Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.