hashicorp/terraform-provider-aws
### [`v3.74.2`](https://togithub.com/hashicorp/terraform-provider-aws/releases/v3.74.2)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.1...v3.74.2)
BUG FIXES:
- resource/aws_rds_cluster: Fix crash when configured `engine_version` string is shorter than the `EngineVersion` string returned from the AWS API ([#23039](https://togithub.com/hashicorp/terraform-provider-aws/issues/23039))
- resource/aws_vpn_connection: Add support for `ipsec.1-aes256` connection type ([#23127](https://togithub.com/hashicorp/terraform-provider-aws/issues/23127))
### [`v3.74.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3741-February-7-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.0...v3.74.1)
BUG FIXES:
- resource/aws_backup_selection: Fix permanent diffs for `condition` and `not_resources` arguments causing resource recreation ([#22882](https://togithub.com/hashicorp/terraform-provider-aws/issues/22882))
### [`v3.74.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3740-January-28-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.73.0...v3.74.0)
FEATURES:
- **New Data Source:** `aws_api_gateway_export` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731))
- **New Data Source:** `aws_api_gateway_sdk` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731))
- **New Data Source:** `aws_apigatewayv2_export` ([#22732](https://togithub.com/hashicorp/terraform-provider-aws/issues/22732))
- **New Data Source:** `aws_connect_contact_flow_module` ([#22518](https://togithub.com/hashicorp/terraform-provider-aws/issues/22518))
- **New Data Source:** `aws_connect_prompt` ([#22636](https://togithub.com/hashicorp/terraform-provider-aws/issues/22636))
- **New Data Source:** `aws_connect_quick_connect` ([#22527](https://togithub.com/hashicorp/terraform-provider-aws/issues/22527))
- **New Data Source:** `aws_datapipeline_pipeline` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Data Source:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Data Source:** `aws_imagebuilder_components` ([#21881](https://togithub.com/hashicorp/terraform-provider-aws/issues/21881))
- **New Data Source:** `aws_imagebuilder_distribution_configurations` ([#22733](https://togithub.com/hashicorp/terraform-provider-aws/issues/22733))
- **New Data Source:** `aws_imagebuilder_infrastructure_configurations` ([#22723](https://togithub.com/hashicorp/terraform-provider-aws/issues/22723))
- **New Resource:** `aws_connect_queue` ([#22566](https://togithub.com/hashicorp/terraform-provider-aws/issues/22566))
- **New Resource:** `aws_connect_security_profile` ([#22369](https://togithub.com/hashicorp/terraform-provider-aws/issues/22369))
- **New Resource:** `aws_dataexchange_data_set` ([#22697](https://togithub.com/hashicorp/terraform-provider-aws/issues/22697))
- **New Resource:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597))
- **New Resource:** `aws_devicefarm_test_grid_project` ([#22688](https://togithub.com/hashicorp/terraform-provider-aws/issues/22688))
- **New Resource:** `aws_ecs_cluster_capacity_providers` ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672))
- **New Resource:** `aws_sagemaker_project` ([#21534](https://togithub.com/hashicorp/terraform-provider-aws/issues/21534))
ENHANCEMENTS:
- resource/aws_api_gateway_stage: Add `web_acl_arn` attribute ([#18561](https://togithub.com/hashicorp/terraform-provider-aws/issues/18561))
- resource/aws_elasticache_replication_group: Add `user_group_ids` to associate `aws_elasticache_user_group` with `aws_elasticache_replication_group` ([#20406](https://togithub.com/hashicorp/terraform-provider-aws/issues/20406))
- resource/aws_imagebuilder_distribution_configuration: Add `container_distribution_configuration` argument ([#22758](https://togithub.com/hashicorp/terraform-provider-aws/issues/22758))
- resource/aws_iot_role_alias: Increase the maximum allowed value of the `credential_duration` argument to `43200` (12 hours) ([#22757](https://togithub.com/hashicorp/terraform-provider-aws/issues/22757))
- resource/aws_network_interface: Add `private_ip_list`, `private_ip_list_enabled`, `ipv6_address_list`, and `ipv6_address_list_enabled` attributes ([#17846](https://togithub.com/hashicorp/terraform-provider-aws/issues/17846))
- resource/aws_s3\_bucket_notification: Add `eventbridge` argument ([#22045](https://togithub.com/hashicorp/terraform-provider-aws/issues/22045))
- resource/aws_vpc_endpoint_subnet_association: Fix resource importing ([#22796](https://togithub.com/hashicorp/terraform-provider-aws/issues/22796))
BUG FIXES:
- data-source/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- data-source/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- data-source/aws_vpc: Suppress errors if main route table cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724))
- resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632))
- resource/aws_cloudwatch_composite_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_event_bus: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_event_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_metric_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_cloudwatch_metric_stream: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_capacity_provider: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_cluster: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_cluster: Provide new resource `aws_ecs_cluster_capacity_providers` to avoid bugs using `capacity_providers` and `default_capacity_provider_strategy`, which arguments will be deprecated in a future version ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672))
- resource/aws_ecs_service: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_task_definition: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_ecs_task_set: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_instance: Prevent panic when reading the instance's block device mappings ([#22719](https://togithub.com/hashicorp/terraform-provider-aws/issues/22719))
- resource/aws_internet_gateway: No longer give up before the attachment timeout (4m) is exceeded (previously it was giving up after 20 not found checks). ([#22713](https://togithub.com/hashicorp/terraform-provider-aws/issues/22713))
- resource/aws_lambda_function: Prevent errors when attempting to configure code signing in the `ap-southeast-3` AWS Region ([#22693](https://togithub.com/hashicorp/terraform-provider-aws/issues/22693))
- resource/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_listener_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717))
- resource/aws_sns_topic: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780))
- resource/aws_vpc: Suppress errors if main route table, default NACL or default security group cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724))
- resource/aws_vpc_dhcp_options_association: Support `default` DHCP Options ID ([#22722](https://togithub.com/hashicorp/terraform-provider-aws/issues/22722))
### [`v3.73.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3730-January-21-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.72.0...v3.73.0)
FEATURES:
- **New Data Source:** `aws_cloudfront_origin_access_identity` ([#22572](https://togithub.com/hashicorp/terraform-provider-aws/issues/22572))
- **New Data Source:** `aws_vpc_ipam_preview_next_cidr` ([#22643](https://togithub.com/hashicorp/terraform-provider-aws/issues/22643))
- **New Resource:** `aws_appsync_api_cache` ([#22578](https://togithub.com/hashicorp/terraform-provider-aws/issues/22578))
- **New Resource:** `aws_appsync_domain_name` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487))
- **New Resource:** `aws_appsync_domain_name_api_association` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487))
- **New Resource:** `aws_cloudsearch_domain` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723))
- **New Resource:** `aws_cloudsearch_domain_service_access_policy` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723))
- **New Resource:** `aws_detective_invitation_accepter` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163))
- **New Resource:** `aws_detective_member` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163))
- **New Resource:** `aws_fsx_data_repository_association` ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291))
- **New Resource:** `aws_lambda_invocation` ([#19488](https://togithub.com/hashicorp/terraform-provider-aws/issues/19488))
ENHANCEMENTS:
- data-source/aws_cognito_user_pool_clients: Add `client_names` attribute ([#22615](https://togithub.com/hashicorp/terraform-provider-aws/issues/22615))
- data-source/aws_imagebuilder_image_recipe: Add `user_data_base64` attribute ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763))
- resource/aws_dynamodb_table: Add special case handling when switching `billing_mode` from `PAY_PER_REQUEST` to `PROVISIONED` and provisioned throughput is ignored. ([#22630](https://togithub.com/hashicorp/terraform-provider-aws/issues/22630))
- resource/aws_fsx_lustre_file_system: Add `file_system_type_version` argument ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291))
- resource/aws_imagebuilder_image_recipe: Add `user_data_base64` argument ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763))
- resource/aws_opsworks_custom_layer: Add plan time validation for `ebs_volume.type` and `custom_json`. ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433))
- resource/aws_opsworks_custom_layer: Add support for `cloudwatch_configuration` ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433))
- resource/aws_security_group: Ensure that the Security Group is found 3 times in a row before declaring that it has been created ([#22420](https://togithub.com/hashicorp/terraform-provider-aws/issues/22420))
BUG FIXES:
- resource/aws_apprunner_custom_domain_association: Add the status `binding_certificate` as a valid target when waiting for creation. ([#20222](https://togithub.com/hashicorp/terraform-provider-aws/issues/20222))
- resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632))
- resource/aws_ecr_lifecycle_policy: Fix diffs in `policy` when no changes are detected ([#22665](https://togithub.com/hashicorp/terraform-provider-aws/issues/22665))
- resource/aws_load_balancer_policy: Suppress `policy_attribute` differences ([#21776](https://togithub.com/hashicorp/terraform-provider-aws/issues/21776))
### [`v3.72.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3720-January-13-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.71.0...v3.72.0)
FEATURES:
- **New Data Source:** `aws_cognito_user_pool_client` ([#22477](https://togithub.com/hashicorp/terraform-provider-aws/issues/22477))
- **New Resource:** `aws_cognito_identity_pool_provider_principal_tag` ([#22514](https://togithub.com/hashicorp/terraform-provider-aws/issues/22514))
- **New Resource:** `aws_connect_contact_flow_module` ([#22349](https://togithub.com/hashicorp/terraform-provider-aws/issues/22349))
- **New Resource:** `aws_connect_quick_connect` ([#22250](https://togithub.com/hashicorp/terraform-provider-aws/issues/22250))
- **New Resource:** `aws_devicefarm_instance_profile` ([#22458](https://togithub.com/hashicorp/terraform-provider-aws/issues/22458))
- **New Resource:** `aws_memorydb_snapshot` ([#22486](https://togithub.com/hashicorp/terraform-provider-aws/issues/22486))
- **New Resource:** `aws_shield_protection_health_check_association` ([#21993](https://togithub.com/hashicorp/terraform-provider-aws/issues/21993))
ENHANCEMENTS:
- data-source/aws_cloudfront_distribution: Add `aliases` attribute ([#22552](https://togithub.com/hashicorp/terraform-provider-aws/issues/22552))
- data-source/aws_customer_gateway: Add `certificate_arn` attribute ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435))
- data-source/aws_ebs_snapshot: Add `storage_tier` and `outpost_arn` attributes. ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- data-source/aws_ecr_repository: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22535](https://togithub.com/hashicorp/terraform-provider-aws/issues/22535))
- data-source/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block ([#22485](https://togithub.com/hashicorp/terraform-provider-aws/issues/22485))
- data-source/aws_elb_service_account: Add account ID for `ap-southeast-3` AWS Region ([#22453](https://togithub.com/hashicorp/terraform-provider-aws/issues/22453))
- data-source/aws_iam_role: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- data-source/aws_iam_user: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- data-source/aws_instance: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- data-source/aws_launch_template: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- data-source/aws_lb: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_lb_listener: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_lb_target_group: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the BlazingText image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the DeepAR Forecasting image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Factorization Machines image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Spark ML Serving image in `af-south-1`, `ap-east-1`, `cn-north-1`, `cn-northwest-1`, `eu-north-1`, `eu-south-1`, `eu-west-3`, `me-south-1` and `sa-east-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the XGBoost image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455))
- data-source/aws_sqs_queue: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22516](https://togithub.com/hashicorp/terraform-provider-aws/issues/22516))
- resource/aws_appsync_datasource: Add `authorization_config` attribute to the `http_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add `delta_sync_config` and `versioned` to the `dynamodb_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add `relational_database_config` argument ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_datasource: Add plan time validation for `service_role_arn` and `lambda_config.function_arn` ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411))
- resource/aws_appsync_function: Add `max_batch_size` and `sync_config` arguments. ([#22484](https://togithub.com/hashicorp/terraform-provider-aws/issues/22484))
- resource/aws_appsync_resolver: Add `max_batch_size` and `sync_config` arguments. ([#22510](https://togithub.com/hashicorp/terraform-provider-aws/issues/22510))
- resource/aws_backup_selection: Add `condition` configuration block and `not_resources` argument in support of fine-grained backup plan [resource assignment](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html) ([#22074](https://togithub.com/hashicorp/terraform-provider-aws/issues/22074))
- resource/aws_cloudwatch_composite_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_cloudwatch_event_bus: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550))
- resource/aws_cloudwatch_event_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550))
- resource/aws_cloudwatch_log_destination_policy: Add `force_update` argument. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460))
- resource/aws_cloudwatch_log_destination_policy: Add plan time validation for `access_policy`. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460))
- resource/aws_cloudwatch_metric_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_cloudwatch_metric_stream: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556))
- resource/aws_connect_contact_flow: add delete function ([#22303](https://togithub.com/hashicorp/terraform-provider-aws/issues/22303))
- resource/aws_customer_gateway: Add `certificate_arn` argument ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435))
- resource/aws_ebs_snapshot: Add `outpost_arn`, `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ebs_snapshot_copy: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ebs_snapshot_import: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342))
- resource/aws_ecr_repository: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22535](https://togithub.com/hashicorp/terraform-provider-aws/issues/22535))
- resource/aws_ecs_capacity_provider: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529))
- resource/aws_ecs_cluster: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529))
- resource/aws_ecs_service: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529))
- resource/aws_ecs_task_definition: Add `skip_destroy` argument to optionally prevent overwriting previous revision ([#22269](https://togithub.com/hashicorp/terraform-provider-aws/issues/22269))
- resource/aws_ecs_task_definition: Add plan time validation for `family` ([#18610](https://togithub.com/hashicorp/terraform-provider-aws/issues/18610))
- resource/aws_ecs_task_definition: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529))
- resource/aws_ecs_task_set: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529))
- resource/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block ([#22485](https://togithub.com/hashicorp/terraform-provider-aws/issues/22485))
- resource/aws_glue_crawler: add `delta_target` argument. ([#22472](https://togithub.com/hashicorp/terraform-provider-aws/issues/22472))
- resource/aws_iam_role: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- resource/aws_iam_user: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544))
- resource/aws_instance: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- resource/aws_launch_template: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463))
- resource/aws_lb: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- resource/aws_lb_listener: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- resource/aws_lb_listener_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- resource/aws_lb_target_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551))
- resource/aws_s3\_bucket: Add additional protection against `object_lock_configuration` causing errors in partitions (e.g., ISO) where not supported ([#22575](https://togithub.com/hashicorp/terraform-provider-aws/issues/22575))
- resource/aws_sns_topic: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22511](https://togithub.com/hashicorp/terraform-provider-aws/issues/22511))
- resource/aws_sqs_queue: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22516](https://togithub.com/hashicorp/terraform-provider-aws/issues/22516))
- resource/aws_vpc: Add `ipv6_cidr_block_network_border_group` argument ([#22211](https://togithub.com/hashicorp/terraform-provider-aws/issues/22211))
- resource/aws_vpc_ipam_pool_cidr_allocation: Add `disallowed_cidrs` argument ([#22470](https://togithub.com/hashicorp/terraform-provider-aws/issues/22470))
- resource/aws_vpc_ipam_preview_next_cidr: Add `disallowed_cidrs` argument ([#22501](https://togithub.com/hashicorp/terraform-provider-aws/issues/22501))
- resource/aws_vpn_connection: Add `vgw_telemetry.certificate_arn` attribute ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311))
- resource/aws_vpn_connection: `customer_gateway_id`, `transit_gateway_id` and `vpn_gateway_id` can be updated without recreating the resource ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311))
- resource/aws_vpn_connection: `tunnel1_preshared_key` and `tunnel2_preshared_key` can be updated without recreating the resource ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311))
BUG FIXES:
- data-source/aws_vpc_ipam_pool: Return an error if more than 1 IPAM Pool matches ([#22438](https://togithub.com/hashicorp/terraform-provider-aws/issues/22438))
- data-source/aws_vpc_ipam_pool: Set `address_family`, `allocation_default_netmask_length`, `allocation_max_netmask_length`, `allocation_min_netmask_length` and `tags` attributes ([#22438](https://togithub.com/hashicorp/terraform-provider-aws/issues/22438))
- resource/aws_cloudfront_distribution: Increase the maximum valid `origin_read_timeout` value to `180` ([#22461](https://togithub.com/hashicorp/terraform-provider-aws/issues/22461))
- resource/aws_fsx_lustre_file_system: Add missing values to `per_unit_storage_throughput` validation ([#22462](https://togithub.com/hashicorp/terraform-provider-aws/issues/22462))
- resource/aws_fsx_openzfs_file_system: Change `root_volume_configuration.copy_tags_to_snapshots` to ForceNew ([#22480](https://togithub.com/hashicorp/terraform-provider-aws/issues/22480))
- resource/aws_fsx_openzfs_file_system: Fix crash with nil `root_volume_configuration.nfs_exports` value ([#22480](https://togithub.com/hashicorp/terraform-provider-aws/issues/22480))
- resource/aws_memorydb_cluster: Correctly propagate configurable timeouts to waiters. ([#22489](https://togithub.com/hashicorp/terraform-provider-aws/issues/22489))
- resource/aws_route53\_record: Fix import with underscores in names ([#21556](https://togithub.com/hashicorp/terraform-provider-aws/issues/21556))
- resource/aws_sqs_queue: Don't timeout when a queue policy `Condition` value contains an empty array ([#22547](https://togithub.com/hashicorp/terraform-provider-aws/issues/22547))
- resource/aws_ssm_parameter: Mark `version` as Computed when `value` changes ([#22522](https://togithub.com/hashicorp/terraform-provider-aws/issues/22522))
- resource/aws_subnet: Protect against errors when `availability_zone_id` is not supported in a partition (e.g., ISO) ([#22580](https://togithub.com/hashicorp/terraform-provider-aws/issues/22580))
- resource/aws_subnet: Resource-based naming is not available in the `ap-southeast-3` region ([#22531](https://togithub.com/hashicorp/terraform-provider-aws/issues/22531))
### [`v3.71.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3710-January-06-2022)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.70.0...v3.71.0)
FEATURES:
- **New Data Source:** `aws_batch_scheduling_policy` ([#22335](https://togithub.com/hashicorp/terraform-provider-aws/issues/22335))
- **New Data Source:** `aws_cognito_user_pool_clients` ([#22289](https://togithub.com/hashicorp/terraform-provider-aws/issues/22289))
- **New Data Source:** `aws_cognito_user_pool_signing_certificate` ([#22285](https://togithub.com/hashicorp/terraform-provider-aws/issues/22285))
- **New Data Source:** `aws_mskconnect_custom_plugin` ([#22333](https://togithub.com/hashicorp/terraform-provider-aws/issues/22333))
- **New Data Source:** `aws_mskconnect_worker_configuration` ([#22414](https://togithub.com/hashicorp/terraform-provider-aws/issues/22414))
- **New Data Source:** `aws_organizations_resource_tags` ([#22371](https://togithub.com/hashicorp/terraform-provider-aws/issues/22371))
- **New Data Source:** `aws_ses_active_receipt_rule_set` ([#22310](https://togithub.com/hashicorp/terraform-provider-aws/issues/22310))
- **New Data Source:** `aws_ses_domain_identity` ([#22321](https://togithub.com/hashicorp/terraform-provider-aws/issues/22321))
- **New Data Source:** `aws_ses_email_identity` ([#22321](https://togithub.com/hashicorp/terraform-provider-aws/issues/22321))
- **New Resource:** `aws_batch_scheduling_policy` ([#22262](https://togithub.com/hashicorp/terraform-provider-aws/issues/22262))
- **New Resource:** `aws_cloud9_environment_membership` ([#11857](https://togithub.com/hashicorp/terraform-provider-aws/issues/11857))
- **New Resource:** `aws_codebuild_resource_policy` ([#22196](https://togithub.com/hashicorp/terraform-provider-aws/issues/22196))
- **New Resource:** `aws_datasync_location_fsx_lustre_file_system` ([#22346](https://togithub.com/hashicorp/terraform-provider-aws/issues/22346))
- **New Resource:** `aws_datasync_location_hdfs` ([#22347](https://togithub.com/hashicorp/terraform-provider-aws/issues/22347))
- **New Resource:** `aws_devicefarm_device_pool` ([#21025](https://togithub.com/hashicorp/terraform-provider-aws/issues/21025))
- **New Resource:** `aws_devicefarm_network_profile` ([#22448](https://togithub.com/hashicorp/terraform-provider-aws/issues/22448))
- **New Resource:** `aws_devicefarm_upload` ([#22443](https://togithub.com/hashicorp/terraform-provider-aws/issues/22443))
- **New Resource:** `aws_fsx_openzfs_file_system` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234))
- **New Resource:** `aws_fsx_openzfs_snapshot` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234))
- **New Resource:** `aws_fsx_openzfs_volume` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234))
- **New Resource:** `aws_memorydb_cluster` ([#22388](https://togithub.com/hashicorp/terraform-provider-aws/issues/22388))
- **New Resource:** `aws_memorydb_parameter_group` ([#22304](https://togithub.com/hashicorp/terraform-provider-aws/issues/22304))
- **New Resource:** `aws_memorydb_subnet_group` ([#22256](https://togithub.com/hashicorp/terraform-provider-aws/issues/22256))
- **New Resource:** `aws_memorydb_user` ([#22261](https://togithub.com/hashicorp/terraform-provider-aws/issues/22261))
- **New Resource:** `aws_mskconnect_custom_plugin` ([#22333](https://togithub.com/hashicorp/terraform-provider-aws/issues/22333))
- **New Resource:** `aws_mskconnect_worker_configuration` ([#22414](https://togithub.com/hashicorp/terraform-provider-aws/issues/22414))
- **New Resource:** `aws_sagemaker_device` ([#22427](https://togithub.com/hashicorp/terraform-provider-aws/issues/22427))
- **New Resource:** `aws_vpc_endpoint_connection_accepter` ([#19083](https://togithub.com/hashicorp/terraform-provider-aws/issues/19083))
- **New Resource:** `aws_vpc_ipam_organization_admin_account` ([#22394](https://togithub.com/hashicorp/terraform-provider-aws/issues/22394))
ENHANCEMENTS:
- data-source/aws_batch_job_queue: Add `scheduling_policy_arn` attribute ([#22348](https://togithub.com/hashicorp/terraform-provider-aws/issues/22348))
- data-source/aws_cloudtrail_service_account: Add service account ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295))
- data-source/aws_ecs_task_definition: Add `arn` attribute. ([#21856](https://togithub.com/hashicorp/terraform-provider-aws/issues/21856))
- data-source/aws_elb_hosted_zone_id: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295))
- data-source/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295))
- data-source/aws_ssm_parameters_by_path: Add `recursive` argument ([#22222](https://togithub.com/hashicorp/terraform-provider-aws/issues/22222))
- data-source/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dns_aaaa_record_on_launch`, `enable_resource_name_dns_a_record_on_launch` and `private_dns_hostname_type_on_launch` attributes ([#22339](https://togithub.com/hashicorp/terraform-provider-aws/issues/22339))
- provider: Add validation for the `duration`, `external_id` and `session_name` arguments in the `assume_role` configuration block ([#18085](https://togithub.com/hashicorp/terraform-provider-aws/issues/18085))
- resource/aws_batch_job_queue: Add `scheduling_policy_arn` attribute ([#22298](https://togithub.com/hashicorp/terraform-provider-aws/issues/22298))
- resource/aws_cloud9\_environment_ec2: Add plan time validations for `name`, `automatic_stop_time_minutes`, `description`. ([#18560](https://togithub.com/hashicorp/terraform-provider-aws/issues/18560))
- resource/aws_cloudfront_distribution: Add plan time validation to `ordered_cache_behavior.forwarded_values.cookies`, `ordered_cache_behavior.lambda_function_association.event_type`, `ordered_cache_behavior.lambda_function_association.lambda_arn`, `ordered_cache_behavior.function_association.lambda_arn`, `ordered_cache_behavior.function_association.event_type`, `ordered_cache_behavior.viewer_protocol_policy`, `comment`, `default_cache_behavior.forwarded_values.cookies`, `default_cache_behavior.lambda_function_association.event_type`, `ordered_cache_behavior.lambda_function_association.lambda_arn`, `default_cache_behavior.function_association.lambda_arn`, `default_cache_behavior.function_association.event_type`, `default_cache_behavior.viewer_protocol_policy`, `origin.custom_origin_config.origin_keepalive_timeout`, `origin.custom_origin_config.origin_read_timeout`, `origin.custom_origin_config.origin_protocol_policy`, `origin.custom_origin_config.origin_ssl_protocols`, `price_class`, `viewer_certificate.acm_certificate_arn`, `viewer_certificate.minimum_protocol_version`, `viewer_certificate.ssl_support_method`. ([#21034](https://togithub.com/hashicorp/terraform-provider-aws/issues/21034))
- resource/aws_codebuild_project: Add `artifacts.bucket_owner_access`, `secondary_artifacts.bucket_owner_access`, `logs_config.s3_logs.bucket_owner_access`, `project_visibility`, `resource_access_role` arguments. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189))
- resource/aws_codebuild_project: Add `public_project_alias` attribute. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189))
- resource/aws_codebuild_project: Add `secondary_source_version` argument ([#22345](https://togithub.com/hashicorp/terraform-provider-aws/issues/22345))
- resource/aws_codebuild_project: Add plan time validation for `cache.modes` and `service_role`. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189))
- resource/aws_codepipeline: Add plan time validation to `name`, `role_arn`, `stage.name`, `stage.action.name`, `stage.action.name`, `stage.action.run_order`, `stage.action.namespace`, `action.configuration`, and `action.version` ([#18451](https://togithub.com/hashicorp/terraform-provider-aws/issues/18451))
- resource/aws_codepipeline_webhook: Add `arn` attribute. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406))
- resource/aws_codepipeline_webhook: Add plan time validation for `authentication_configuration.secret_token`, `filter.json_path`, `filter.match_equals`, `name`. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406))
- resource/aws_codepipeline_webhook: Allow updating `filter` in place. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406))
- resource/aws_dax_cluster: Add `cluster_endpoint_encryption_type` argument ([#22396](https://togithub.com/hashicorp/terraform-provider-aws/issues/22396))
- resource/aws_dx_private_virtual_interface: Add `sitelink_enabled` argument ([#22350](https://togithub.com/hashicorp/terraform-provider-aws/issues/22350))
- resource/aws_dx_transit_virtual_interface: Add `sitelink_enabled` argument ([#22350](https://togithub.com/hashicorp/terraform-provider-aws/issues/22350))
- resource/aws_ecr_replication_configuration: Add `repository_filter` to `replication_configuration` block ([#21231](https://togithub.com/hashicorp/terraform-provider-aws/issues/21231))
- resource/aws_ecr_replication_configuration: Increase `MaxItems` for `rule` to `10` and for `destination` to `25` ([#22281](https://togithub.com/hashicorp/terraform-provider-aws/issues/22281))
- resource/aws_elasticsearch_domain: Tag on create ([#18082](https://togithub.com/hashicorp/terraform-provider-aws/issues/18082))
- resource/aws_glue_trigger: Add `start_on_creation` argument ([#22439](https://togithub.com/hashicorp/terraform-provider-aws/issues/22439))
- resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `extended_s3_configuration` `s3_backup_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229))
- resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `redshift_configuration` `s3_backup_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229))
- resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `s3_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229))
- resource/aws_networkfirewall_resource_policy: Handle delete-after-create eventual consistency ([#22402](https://togithub.com/hashicorp/terraform-provider-aws/issues/22402))
- resource/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295))
- resource/aws_s3\_bucket_object: Support objects greater than 5GB in size by using the [Amazon S3 upload manager](https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/sdk-utilities.html#upload-manager) ([#21727](https://togithub.com/hashicorp/terraform-provider-aws/issues/21727))
- resource/aws_sagemaker_app: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508))
- resource/aws_sagemaker_domain: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `default_resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508))
- resource/aws_sagemaker_user_profile: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `default_resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508))
- resource/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dns_aaaa_record_on_launch`, `enable_resource_name_dns_a_record_on_launch` and `private_dns_hostname_type_on_launch` arguments ([#22339](https://togithub.com/hashicorp/terraform-provider-aws/issues/22339))
- resource/aws_timestreamwrite_table: Add `magnetic_store_write_properties` argument. ([#22363](https://togithub.com/hashicorp/terraform-provider-aws/issues/22363))
BUG FIXES:
- resource/aws_appstream_fleet: Correctly create resource with `stream_view` argument ([#22395](https://togithub.com/hashicorp/terraform-provider-aws/issues/22395))
- resource/aws_codebuild_project: Fix plan validation to take into account computed values for `cache.location` ([#21458](https://togithub.com/hashicorp/terraform-provider-aws/issues/21458))
- resource/aws_dynamodb_table: Remove extraneous `kms_key_arn` attribute from the `ttl` configuration block ([#21334](https://togithub.com/hashicorp/terraform-provider-aws/issues/21334))
- resource/aws_ec2\_traffic_mirror_filter_rule: Prevent crash during resource read ([#22315](https://togithub.com/hashicorp/terraform-provider-aws/issues/22315))
- resource/aws_launch_template: Correctly set `default_version` and `latest_version` as Computed when `name`, `name_prefix` or `description` change ([#22277](https://togithub.com/hashicorp/terraform-provider-aws/issues/22277))
- resource/aws_networkfirewall_rule_group: Allow any character in `ip_set` `definition` as per the AWS API docs ([#22284](https://togithub.com/hashicorp/terraform-provider-aws/issues/22284))
- resource/aws_ses_event_destination: Allow `.` and `@` characters in `cloudwatch_destination.default_value` argument ([#22359](https://togithub.com/hashicorp/terraform-provider-aws/issues/22359))
- resource/aws_ssoadmin_managed_policy_attachment: Fix missing call to `ProvisionPermissionSet` after detaching the managed policy ([#21773](https://togithub.com/hashicorp/terraform-provider-aws/issues/21773))
- resource/aws_vpc_ipam_pool_cidr_allocation: update `cidr` and `netmask_length` attributes netmask to a minimum of 0 and maximum of 32 ([#22418](https://togithub.com/hashicorp/terraform-provider-aws/issues/22418))
### [`v3.70.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3700-December-16-2021)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.69.0...v3.70.0)
NOTES:
- resource/aws_fsx_ontap_storage_virtual_machine: The `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguidshed_name` attribute has been deprecated. All configurations using `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguidshed_name` should be updated to use the new `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguished_name` attribute instead ([#22246](https://togithub.com/hashicorp/terraform-provider-aws/issues/22246))
FEATURES:
- **New Data Source:** `aws_connect_bot_association` ([#21097](https://togithub.com/hashicorp/terraform-provider-aws/issues/21097))
- **New Data Source:** `aws_connect_hours_of_operation` ([#22207](https://togithub.com/hashicorp/terraform-provider-aws/issues/22207))
- **New Data Source:** `aws_connect_lambda_function_association` ([#21276](https://togithub.com/hashicorp/terraform-provider-aws/issues/21276))
- **New Resource:** `aws_connect_bot_association` ([#21097](https://togithub.com/hashicorp/terraform-provider-aws/issues/21097))
- **New Resource:** `aws_connect_hours_of_operation` ([#21934](https://togithub.com/hashicorp/terraform-provider-aws/issues/21934))
- **New Resource:** `aws_connect_lambda_function_association` ([#21276](https://togithub.com/hashicorp/terraform-provider-aws/issues/21276))
- **New Resource:** `aws_ecr_pull_through_cache_rule` ([#22172](https://togithub.com/hashicorp/terraform-provider-aws/issues/22172))
- **New Resource:** `aws_ecr_registry_scanning_configuration` ([#22179](https://togithub.com/hashicorp/terraform-provider-aws/issues/22179))
- **New Resource:** `aws_ecrpublic_repository_policy` ([#16901](https://togithub.com/hashicorp/terraform-provider-aws/issues/16901))
ENHANCEMENTS:
- data-source/aws_sagemaker_prebuilt_ecr_image: Add Hugging Face DLCs ([#21983](https://togithub.com/hashicorp/terraform-provider-aws/issues/21983))
- resource/aws_appsync_graphql_api: Add `lambda_authorizer_config` argument ([#20857](https://togithub.com/hashicorp/terraform-provider-aws/issues/20857))
- resource/aws_dynamodb_table: Allows restoring to point-in-time ([#19292](https://togithub.com/hashicorp/terraform-provider-aws/issues/19292))
- resource/aws_fsx_backup: Add `volume_id` argument to support Amazon FSx for NetApp ONTAP backup ([#21960](https://togithub.com/hashicorp/terraform-provider-aws/issues/21960))
- resource/aws_networkfirewall_firewall_policy: Add `stateful_default_actions` and `stateful_engine_options` configuration blocks. Add `priority` attribute to `stateful_rule_group_reference` block ([#21955](https://togithub.com/hashicorp/terraform-provider-aws/issues/21955))
- resource/aws_networkfirewall_firewall_rule_group: Add `stateful_rule_options` configuration block ([#21955](https://togithub.com/hashicorp/terraform-provider-aws/issues/21955))
- resource/aws_route: Extend creation timeout to 5 minutes ([#21531](https://togithub.com/hashicorp/terraform-provider-aws/issues/21531))
- resource/aws_route_table: Extend creation timeout to 5 minutes ([#21531](https://togithub.com/hashicorp/terraform-provider-aws/issues/21531))
- resource/iam_service_linked_role: Add `tags` argument ([#22185](https://togithub.com/hashicorp/terraform-provider-aws/issues/22185))
BUG FIXES:
- data-source/aws_s3\_bucket: Correct Route 53 hosted zone ID for S3 websites in the `eu-south-1`, `af-south-1` and `us-gov-east-1` AWS Regions ([#22227](https://togithub.com/hashicorp/terraform-provider-aws/issues/22227))
- resource/aws_cloudwatch_event_bus_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22165](https://togithub.com/hashicorp/terraform-provider-aws/issues/22165))
- resource/aws_ecr_lifecycle_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22142](https://togithub.com/hashicorp/terraform-provider-aws/issues/22142))
- resource/aws_elasticsearch_domain: Fix erroneous diffs in `access_policies` when no changes made or policies are equivalent ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157))
- resource/aws_elasticsearch_domain: Fix erroneous diffs in `advanced_options` due to AWS defaults being returned ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157))
- resource/aws_elasticsearch_domain_policy: Fix erroneous diffs in `access_policies` when no changes made or policies are equivalent ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157))
- resource/aws_emr_cluster: Wait for the cluster to reach a terminated state on deletion ([#12578](https://togithub.com/hashicorp/terraform-provider-aws/issues/12578))
- resource/aws_glacier_vault: Fix erroneous diffs in `access_policy` when no changes made or policies are equivalent ([#22166](https://togithub.com/hashicorp/terraform-provider-aws/issues/22166))
- resource/aws_glacier_vault_lock: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22166](https://togithub.com/hashicorp/terraform-provider-aws/issues/22166))
- resource/aws_glue_resource_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22167](https://togithub.com/hashicorp/terraform-provider-aws/issues/22167))
- resource/aws_iam_role: Fix eventual consistency problem with `arn` sometimes being a unique ID instead of the role ARN ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217))
- resource/aws_iot_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22169](https://togithub.com/hashicorp/terraform-provider-aws/issues/22169))
- resource/aws_media_store_container_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22170](https://togithub.com/hashicorp/terraform-provider-aws/issues/22170))
- resource/aws_networkfirewall_resource_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22171](https://togithub.com/hashicorp/terraform-provider-aws/issues/22171))
- resource/aws_s3\_access_point: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255))
- resource/aws_s3\_bucket: Correct Route 53 hosted zone ID for S3 websites in the `eu-south-1`, `af-south-1` and `us-gov-east-1` AWS Regions ([#22227](https://togithub.com/hashicorp/terraform-provider-aws/issues/22227))
- resource/aws_s3\_bucket: Ensure `versioning` is set correctly when nested values are explicitly set to `false`. ([#22221](https://togithub.com/hashicorp/terraform-provider-aws/issues/22221))
- resource/aws_s3control_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255))
- resource/aws_s3control_bucket_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255))
- resource/aws_s3control_multi_region_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255))
- resource/aws_s3control_object_lambda_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255))
- resource/aws_sagemaker_model_package_group_policy: Fix erroneous diffs in `resource_policy` when no changes made or policies are equivalent ([#22259](https://togithub.com/hashicorp/terraform-provider-aws/issues/22259))
- resource/aws_secretsmanager_secret: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217))
- resource/aws_secretsmanager_secret_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217))
- resource/aws_ses_identity_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22214](https://togithub.com/hashicorp/terraform-provider-aws/issues/22214))
- resource/aws_sns_topic: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22213](https://togithub.com/hashicorp/terraform-provider-aws/issues/22213))
- resource/aws_sns_topic_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22213](https://togithub.com/hashicorp/terraform-provider-aws/issues/22213))
- resource/aws_sqs_queue: Fix "error reading, empty result" and various eventual consistency errors ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194))
- resource/aws_sqs_queue: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194))
- resource/aws_sqs_queue_policy: Fix "error reading, empty result" and various eventual consistency errors ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194))
- resource/aws_sqs_queue_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194))
- resource/aws_ssoadmin_permission_set_inline_policy: Fix erroneous diffs in `inline_policy` when no changes made or policies are equivalent ([#22192](https://togithub.com/hashicorp/terraform-provider-aws/issues/22192))
- resource/aws_transfer_access: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22193](https://togithub.com/hashicorp/terraform-provider-aws/issues/22193))
- resource/aws_transfer_user: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22193](https://togithub.com/hashicorp/terraform-provider-aws/issues/22193))
### [`v3.69.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3690-December-09-2021)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.68.0...v3.69.0)
FEATURES:
- **New Resource:** `aws_codecommit_approval_rule_template_association` ([#13467](https://togithub.com/hashicorp/terraform-provider-aws/issues/13467))
- **New Resource:** `aws_detective_graph` ([#22042](https://togithub.com/hashicorp/terraform-provider-aws/issues/22042))
- **New Resource:** `aws_ec2_subnet_cidr_reservation` ([#22051](https://togithub.com/hashicorp/terraform-provider-aws/issues/22051))
- **New Resource:** `aws_ecs_task_set` ([#22096](https:/
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
3.74.1
->3.74.2
Release Notes
hashicorp/terraform-provider-aws
### [`v3.74.2`](https://togithub.com/hashicorp/terraform-provider-aws/releases/v3.74.2) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.1...v3.74.2) BUG FIXES: - resource/aws_rds_cluster: Fix crash when configured `engine_version` string is shorter than the `EngineVersion` string returned from the AWS API ([#23039](https://togithub.com/hashicorp/terraform-provider-aws/issues/23039)) - resource/aws_vpn_connection: Add support for `ipsec.1-aes256` connection type ([#23127](https://togithub.com/hashicorp/terraform-provider-aws/issues/23127)) ### [`v3.74.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3741-February-7-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.74.0...v3.74.1) BUG FIXES: - resource/aws_backup_selection: Fix permanent diffs for `condition` and `not_resources` arguments causing resource recreation ([#22882](https://togithub.com/hashicorp/terraform-provider-aws/issues/22882)) ### [`v3.74.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3740-January-28-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.73.0...v3.74.0) FEATURES: - **New Data Source:** `aws_api_gateway_export` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731)) - **New Data Source:** `aws_api_gateway_sdk` ([#22731](https://togithub.com/hashicorp/terraform-provider-aws/issues/22731)) - **New Data Source:** `aws_apigatewayv2_export` ([#22732](https://togithub.com/hashicorp/terraform-provider-aws/issues/22732)) - **New Data Source:** `aws_connect_contact_flow_module` ([#22518](https://togithub.com/hashicorp/terraform-provider-aws/issues/22518)) - **New Data Source:** `aws_connect_prompt` ([#22636](https://togithub.com/hashicorp/terraform-provider-aws/issues/22636)) - **New Data Source:** `aws_connect_quick_connect` ([#22527](https://togithub.com/hashicorp/terraform-provider-aws/issues/22527)) - **New Data Source:** `aws_datapipeline_pipeline` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597)) - **New Data Source:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597)) - **New Data Source:** `aws_imagebuilder_components` ([#21881](https://togithub.com/hashicorp/terraform-provider-aws/issues/21881)) - **New Data Source:** `aws_imagebuilder_distribution_configurations` ([#22733](https://togithub.com/hashicorp/terraform-provider-aws/issues/22733)) - **New Data Source:** `aws_imagebuilder_infrastructure_configurations` ([#22723](https://togithub.com/hashicorp/terraform-provider-aws/issues/22723)) - **New Resource:** `aws_connect_queue` ([#22566](https://togithub.com/hashicorp/terraform-provider-aws/issues/22566)) - **New Resource:** `aws_connect_security_profile` ([#22369](https://togithub.com/hashicorp/terraform-provider-aws/issues/22369)) - **New Resource:** `aws_dataexchange_data_set` ([#22697](https://togithub.com/hashicorp/terraform-provider-aws/issues/22697)) - **New Resource:** `aws_datapipeline_pipeline_definition` ([#22597](https://togithub.com/hashicorp/terraform-provider-aws/issues/22597)) - **New Resource:** `aws_devicefarm_test_grid_project` ([#22688](https://togithub.com/hashicorp/terraform-provider-aws/issues/22688)) - **New Resource:** `aws_ecs_cluster_capacity_providers` ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672)) - **New Resource:** `aws_sagemaker_project` ([#21534](https://togithub.com/hashicorp/terraform-provider-aws/issues/21534)) ENHANCEMENTS: - resource/aws_api_gateway_stage: Add `web_acl_arn` attribute ([#18561](https://togithub.com/hashicorp/terraform-provider-aws/issues/18561)) - resource/aws_elasticache_replication_group: Add `user_group_ids` to associate `aws_elasticache_user_group` with `aws_elasticache_replication_group` ([#20406](https://togithub.com/hashicorp/terraform-provider-aws/issues/20406)) - resource/aws_imagebuilder_distribution_configuration: Add `container_distribution_configuration` argument ([#22758](https://togithub.com/hashicorp/terraform-provider-aws/issues/22758)) - resource/aws_iot_role_alias: Increase the maximum allowed value of the `credential_duration` argument to `43200` (12 hours) ([#22757](https://togithub.com/hashicorp/terraform-provider-aws/issues/22757)) - resource/aws_network_interface: Add `private_ip_list`, `private_ip_list_enabled`, `ipv6_address_list`, and `ipv6_address_list_enabled` attributes ([#17846](https://togithub.com/hashicorp/terraform-provider-aws/issues/17846)) - resource/aws_s3\_bucket_notification: Add `eventbridge` argument ([#22045](https://togithub.com/hashicorp/terraform-provider-aws/issues/22045)) - resource/aws_vpc_endpoint_subnet_association: Fix resource importing ([#22796](https://togithub.com/hashicorp/terraform-provider-aws/issues/22796)) BUG FIXES: - data-source/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - data-source/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - data-source/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - data-source/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - data-source/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - data-source/aws_vpc: Suppress errors if main route table cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724)) - resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632)) - resource/aws_cloudwatch_composite_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_cloudwatch_event_bus: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_cloudwatch_event_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_cloudwatch_metric_alarm: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_cloudwatch_metric_stream: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_ecr_repository: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_ecs_capacity_provider: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_ecs_cluster: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_ecs_cluster: Provide new resource `aws_ecs_cluster_capacity_providers` to avoid bugs using `capacity_providers` and `default_capacity_provider_strategy`, which arguments will be deprecated in a future version ([#22672](https://togithub.com/hashicorp/terraform-provider-aws/issues/22672)) - resource/aws_ecs_service: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_ecs_task_definition: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_ecs_task_set: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_instance: Prevent panic when reading the instance's block device mappings ([#22719](https://togithub.com/hashicorp/terraform-provider-aws/issues/22719)) - resource/aws_internet_gateway: No longer give up before the attachment timeout (4m) is exceeded (previously it was giving up after 20 not found checks). ([#22713](https://togithub.com/hashicorp/terraform-provider-aws/issues/22713)) - resource/aws_lambda_function: Prevent errors when attempting to configure code signing in the `ap-southeast-3` AWS Region ([#22693](https://togithub.com/hashicorp/terraform-provider-aws/issues/22693)) - resource/aws_lb: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_lb_listener: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_lb_listener_rule: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_lb_target_group: Further refine tag error handling for ISO regions ([#22717](https://togithub.com/hashicorp/terraform-provider-aws/issues/22717)) - resource/aws_sns_topic: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_sqs_queue: Further refine tag error handling in ISO partitions ([#22780](https://togithub.com/hashicorp/terraform-provider-aws/issues/22780)) - resource/aws_vpc: Suppress errors if main route table, default NACL or default security group cannot be found ([#22724](https://togithub.com/hashicorp/terraform-provider-aws/issues/22724)) - resource/aws_vpc_dhcp_options_association: Support `default` DHCP Options ID ([#22722](https://togithub.com/hashicorp/terraform-provider-aws/issues/22722)) ### [`v3.73.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3730-January-21-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.72.0...v3.73.0) FEATURES: - **New Data Source:** `aws_cloudfront_origin_access_identity` ([#22572](https://togithub.com/hashicorp/terraform-provider-aws/issues/22572)) - **New Data Source:** `aws_vpc_ipam_preview_next_cidr` ([#22643](https://togithub.com/hashicorp/terraform-provider-aws/issues/22643)) - **New Resource:** `aws_appsync_api_cache` ([#22578](https://togithub.com/hashicorp/terraform-provider-aws/issues/22578)) - **New Resource:** `aws_appsync_domain_name` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487)) - **New Resource:** `aws_appsync_domain_name_api_association` ([#22487](https://togithub.com/hashicorp/terraform-provider-aws/issues/22487)) - **New Resource:** `aws_cloudsearch_domain` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723)) - **New Resource:** `aws_cloudsearch_domain_service_access_policy` ([#17723](https://togithub.com/hashicorp/terraform-provider-aws/issues/17723)) - **New Resource:** `aws_detective_invitation_accepter` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163)) - **New Resource:** `aws_detective_member` ([#22163](https://togithub.com/hashicorp/terraform-provider-aws/issues/22163)) - **New Resource:** `aws_fsx_data_repository_association` ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291)) - **New Resource:** `aws_lambda_invocation` ([#19488](https://togithub.com/hashicorp/terraform-provider-aws/issues/19488)) ENHANCEMENTS: - data-source/aws_cognito_user_pool_clients: Add `client_names` attribute ([#22615](https://togithub.com/hashicorp/terraform-provider-aws/issues/22615)) - data-source/aws_imagebuilder_image_recipe: Add `user_data_base64` attribute ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763)) - resource/aws_dynamodb_table: Add special case handling when switching `billing_mode` from `PAY_PER_REQUEST` to `PROVISIONED` and provisioned throughput is ignored. ([#22630](https://togithub.com/hashicorp/terraform-provider-aws/issues/22630)) - resource/aws_fsx_lustre_file_system: Add `file_system_type_version` argument ([#22291](https://togithub.com/hashicorp/terraform-provider-aws/issues/22291)) - resource/aws_imagebuilder_image_recipe: Add `user_data_base64` argument ([#21763](https://togithub.com/hashicorp/terraform-provider-aws/issues/21763)) - resource/aws_opsworks_custom_layer: Add plan time validation for `ebs_volume.type` and `custom_json`. ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433)) - resource/aws_opsworks_custom_layer: Add support for `cloudwatch_configuration` ([#12433](https://togithub.com/hashicorp/terraform-provider-aws/issues/12433)) - resource/aws_security_group: Ensure that the Security Group is found 3 times in a row before declaring that it has been created ([#22420](https://togithub.com/hashicorp/terraform-provider-aws/issues/22420)) BUG FIXES: - resource/aws_apprunner_custom_domain_association: Add the status `binding_certificate` as a valid target when waiting for creation. ([#20222](https://togithub.com/hashicorp/terraform-provider-aws/issues/20222)) - resource/aws_cloudfront_distribution: Increase the maximum valid `origin_keepalive_timeout` value to `180` ([#22632](https://togithub.com/hashicorp/terraform-provider-aws/issues/22632)) - resource/aws_ecr_lifecycle_policy: Fix diffs in `policy` when no changes are detected ([#22665](https://togithub.com/hashicorp/terraform-provider-aws/issues/22665)) - resource/aws_load_balancer_policy: Suppress `policy_attribute` differences ([#21776](https://togithub.com/hashicorp/terraform-provider-aws/issues/21776)) ### [`v3.72.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3720-January-13-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.71.0...v3.72.0) FEATURES: - **New Data Source:** `aws_cognito_user_pool_client` ([#22477](https://togithub.com/hashicorp/terraform-provider-aws/issues/22477)) - **New Resource:** `aws_cognito_identity_pool_provider_principal_tag` ([#22514](https://togithub.com/hashicorp/terraform-provider-aws/issues/22514)) - **New Resource:** `aws_connect_contact_flow_module` ([#22349](https://togithub.com/hashicorp/terraform-provider-aws/issues/22349)) - **New Resource:** `aws_connect_quick_connect` ([#22250](https://togithub.com/hashicorp/terraform-provider-aws/issues/22250)) - **New Resource:** `aws_devicefarm_instance_profile` ([#22458](https://togithub.com/hashicorp/terraform-provider-aws/issues/22458)) - **New Resource:** `aws_memorydb_snapshot` ([#22486](https://togithub.com/hashicorp/terraform-provider-aws/issues/22486)) - **New Resource:** `aws_shield_protection_health_check_association` ([#21993](https://togithub.com/hashicorp/terraform-provider-aws/issues/21993)) ENHANCEMENTS: - data-source/aws_cloudfront_distribution: Add `aliases` attribute ([#22552](https://togithub.com/hashicorp/terraform-provider-aws/issues/22552)) - data-source/aws_customer_gateway: Add `certificate_arn` attribute ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435)) - data-source/aws_ebs_snapshot: Add `storage_tier` and `outpost_arn` attributes. ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342)) - data-source/aws_ecr_repository: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22535](https://togithub.com/hashicorp/terraform-provider-aws/issues/22535)) - data-source/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block ([#22485](https://togithub.com/hashicorp/terraform-provider-aws/issues/22485)) - data-source/aws_elb_service_account: Add account ID for `ap-southeast-3` AWS Region ([#22453](https://togithub.com/hashicorp/terraform-provider-aws/issues/22453)) - data-source/aws_iam_role: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544)) - data-source/aws_iam_user: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544)) - data-source/aws_instance: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463)) - data-source/aws_launch_template: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463)) - data-source/aws_lb: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - data-source/aws_lb_listener: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - data-source/aws_lb_target_group: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the BlazingText image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455)) - data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the DeepAR Forecasting image in `af-south-1` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455)) - data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Factorization Machines image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455)) - data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Spark ML Serving image in `af-south-1`, `ap-east-1`, `cn-north-1`, `cn-northwest-1`, `eu-north-1`, `eu-south-1`, `eu-west-3`, `me-south-1` and `sa-east-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455)) - data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the XGBoost image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions ([#22455](https://togithub.com/hashicorp/terraform-provider-aws/issues/22455)) - data-source/aws_sqs_queue: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22516](https://togithub.com/hashicorp/terraform-provider-aws/issues/22516)) - resource/aws_appsync_datasource: Add `authorization_config` attribute to the `http_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411)) - resource/aws_appsync_datasource: Add `delta_sync_config` and `versioned` to the `dynamodb_config` configuration block ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411)) - resource/aws_appsync_datasource: Add `relational_database_config` argument ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411)) - resource/aws_appsync_datasource: Add plan time validation for `service_role_arn` and `lambda_config.function_arn` ([#22411](https://togithub.com/hashicorp/terraform-provider-aws/issues/22411)) - resource/aws_appsync_function: Add `max_batch_size` and `sync_config` arguments. ([#22484](https://togithub.com/hashicorp/terraform-provider-aws/issues/22484)) - resource/aws_appsync_resolver: Add `max_batch_size` and `sync_config` arguments. ([#22510](https://togithub.com/hashicorp/terraform-provider-aws/issues/22510)) - resource/aws_backup_selection: Add `condition` configuration block and `not_resources` argument in support of fine-grained backup plan [resource assignment](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html) ([#22074](https://togithub.com/hashicorp/terraform-provider-aws/issues/22074)) - resource/aws_cloudwatch_composite_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556)) - resource/aws_cloudwatch_event_bus: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550)) - resource/aws_cloudwatch_event_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22550](https://togithub.com/hashicorp/terraform-provider-aws/issues/22550)) - resource/aws_cloudwatch_log_destination_policy: Add `force_update` argument. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460)) - resource/aws_cloudwatch_log_destination_policy: Add plan time validation for `access_policy`. ([#22460](https://togithub.com/hashicorp/terraform-provider-aws/issues/22460)) - resource/aws_cloudwatch_metric_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556)) - resource/aws_cloudwatch_metric_stream: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22556](https://togithub.com/hashicorp/terraform-provider-aws/issues/22556)) - resource/aws_connect_contact_flow: add delete function ([#22303](https://togithub.com/hashicorp/terraform-provider-aws/issues/22303)) - resource/aws_customer_gateway: Add `certificate_arn` argument ([#22435](https://togithub.com/hashicorp/terraform-provider-aws/issues/22435)) - resource/aws_ebs_snapshot: Add `outpost_arn`, `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342)) - resource/aws_ebs_snapshot_copy: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342)) - resource/aws_ebs_snapshot_import: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments ([#22342](https://togithub.com/hashicorp/terraform-provider-aws/issues/22342)) - resource/aws_ecr_repository: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22535](https://togithub.com/hashicorp/terraform-provider-aws/issues/22535)) - resource/aws_ecs_capacity_provider: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529)) - resource/aws_ecs_cluster: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529)) - resource/aws_ecs_service: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529)) - resource/aws_ecs_task_definition: Add `skip_destroy` argument to optionally prevent overwriting previous revision ([#22269](https://togithub.com/hashicorp/terraform-provider-aws/issues/22269)) - resource/aws_ecs_task_definition: Add plan time validation for `family` ([#18610](https://togithub.com/hashicorp/terraform-provider-aws/issues/18610)) - resource/aws_ecs_task_definition: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529)) - resource/aws_ecs_task_set: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22529](https://togithub.com/hashicorp/terraform-provider-aws/issues/22529)) - resource/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block ([#22485](https://togithub.com/hashicorp/terraform-provider-aws/issues/22485)) - resource/aws_glue_crawler: add `delta_target` argument. ([#22472](https://togithub.com/hashicorp/terraform-provider-aws/issues/22472)) - resource/aws_iam_role: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544)) - resource/aws_iam_user: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22544](https://togithub.com/hashicorp/terraform-provider-aws/issues/22544)) - resource/aws_instance: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463)) - resource/aws_launch_template: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block ([#22463](https://togithub.com/hashicorp/terraform-provider-aws/issues/22463)) - resource/aws_lb: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - resource/aws_lb_listener: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - resource/aws_lb_listener_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - resource/aws_lb_target_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22551](https://togithub.com/hashicorp/terraform-provider-aws/issues/22551)) - resource/aws_s3\_bucket: Add additional protection against `object_lock_configuration` causing errors in partitions (e.g., ISO) where not supported ([#22575](https://togithub.com/hashicorp/terraform-provider-aws/issues/22575)) - resource/aws_sns_topic: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22511](https://togithub.com/hashicorp/terraform-provider-aws/issues/22511)) - resource/aws_sqs_queue: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) ([#22516](https://togithub.com/hashicorp/terraform-provider-aws/issues/22516)) - resource/aws_vpc: Add `ipv6_cidr_block_network_border_group` argument ([#22211](https://togithub.com/hashicorp/terraform-provider-aws/issues/22211)) - resource/aws_vpc_ipam_pool_cidr_allocation: Add `disallowed_cidrs` argument ([#22470](https://togithub.com/hashicorp/terraform-provider-aws/issues/22470)) - resource/aws_vpc_ipam_preview_next_cidr: Add `disallowed_cidrs` argument ([#22501](https://togithub.com/hashicorp/terraform-provider-aws/issues/22501)) - resource/aws_vpn_connection: Add `vgw_telemetry.certificate_arn` attribute ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311)) - resource/aws_vpn_connection: `customer_gateway_id`, `transit_gateway_id` and `vpn_gateway_id` can be updated without recreating the resource ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311)) - resource/aws_vpn_connection: `tunnel1_preshared_key` and `tunnel2_preshared_key` can be updated without recreating the resource ([#19311](https://togithub.com/hashicorp/terraform-provider-aws/issues/19311)) BUG FIXES: - data-source/aws_vpc_ipam_pool: Return an error if more than 1 IPAM Pool matches ([#22438](https://togithub.com/hashicorp/terraform-provider-aws/issues/22438)) - data-source/aws_vpc_ipam_pool: Set `address_family`, `allocation_default_netmask_length`, `allocation_max_netmask_length`, `allocation_min_netmask_length` and `tags` attributes ([#22438](https://togithub.com/hashicorp/terraform-provider-aws/issues/22438)) - resource/aws_cloudfront_distribution: Increase the maximum valid `origin_read_timeout` value to `180` ([#22461](https://togithub.com/hashicorp/terraform-provider-aws/issues/22461)) - resource/aws_fsx_lustre_file_system: Add missing values to `per_unit_storage_throughput` validation ([#22462](https://togithub.com/hashicorp/terraform-provider-aws/issues/22462)) - resource/aws_fsx_openzfs_file_system: Change `root_volume_configuration.copy_tags_to_snapshots` to ForceNew ([#22480](https://togithub.com/hashicorp/terraform-provider-aws/issues/22480)) - resource/aws_fsx_openzfs_file_system: Fix crash with nil `root_volume_configuration.nfs_exports` value ([#22480](https://togithub.com/hashicorp/terraform-provider-aws/issues/22480)) - resource/aws_memorydb_cluster: Correctly propagate configurable timeouts to waiters. ([#22489](https://togithub.com/hashicorp/terraform-provider-aws/issues/22489)) - resource/aws_route53\_record: Fix import with underscores in names ([#21556](https://togithub.com/hashicorp/terraform-provider-aws/issues/21556)) - resource/aws_sqs_queue: Don't timeout when a queue policy `Condition` value contains an empty array ([#22547](https://togithub.com/hashicorp/terraform-provider-aws/issues/22547)) - resource/aws_ssm_parameter: Mark `version` as Computed when `value` changes ([#22522](https://togithub.com/hashicorp/terraform-provider-aws/issues/22522)) - resource/aws_subnet: Protect against errors when `availability_zone_id` is not supported in a partition (e.g., ISO) ([#22580](https://togithub.com/hashicorp/terraform-provider-aws/issues/22580)) - resource/aws_subnet: Resource-based naming is not available in the `ap-southeast-3` region ([#22531](https://togithub.com/hashicorp/terraform-provider-aws/issues/22531)) ### [`v3.71.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3710-January-06-2022) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.70.0...v3.71.0) FEATURES: - **New Data Source:** `aws_batch_scheduling_policy` ([#22335](https://togithub.com/hashicorp/terraform-provider-aws/issues/22335)) - **New Data Source:** `aws_cognito_user_pool_clients` ([#22289](https://togithub.com/hashicorp/terraform-provider-aws/issues/22289)) - **New Data Source:** `aws_cognito_user_pool_signing_certificate` ([#22285](https://togithub.com/hashicorp/terraform-provider-aws/issues/22285)) - **New Data Source:** `aws_mskconnect_custom_plugin` ([#22333](https://togithub.com/hashicorp/terraform-provider-aws/issues/22333)) - **New Data Source:** `aws_mskconnect_worker_configuration` ([#22414](https://togithub.com/hashicorp/terraform-provider-aws/issues/22414)) - **New Data Source:** `aws_organizations_resource_tags` ([#22371](https://togithub.com/hashicorp/terraform-provider-aws/issues/22371)) - **New Data Source:** `aws_ses_active_receipt_rule_set` ([#22310](https://togithub.com/hashicorp/terraform-provider-aws/issues/22310)) - **New Data Source:** `aws_ses_domain_identity` ([#22321](https://togithub.com/hashicorp/terraform-provider-aws/issues/22321)) - **New Data Source:** `aws_ses_email_identity` ([#22321](https://togithub.com/hashicorp/terraform-provider-aws/issues/22321)) - **New Resource:** `aws_batch_scheduling_policy` ([#22262](https://togithub.com/hashicorp/terraform-provider-aws/issues/22262)) - **New Resource:** `aws_cloud9_environment_membership` ([#11857](https://togithub.com/hashicorp/terraform-provider-aws/issues/11857)) - **New Resource:** `aws_codebuild_resource_policy` ([#22196](https://togithub.com/hashicorp/terraform-provider-aws/issues/22196)) - **New Resource:** `aws_datasync_location_fsx_lustre_file_system` ([#22346](https://togithub.com/hashicorp/terraform-provider-aws/issues/22346)) - **New Resource:** `aws_datasync_location_hdfs` ([#22347](https://togithub.com/hashicorp/terraform-provider-aws/issues/22347)) - **New Resource:** `aws_devicefarm_device_pool` ([#21025](https://togithub.com/hashicorp/terraform-provider-aws/issues/21025)) - **New Resource:** `aws_devicefarm_network_profile` ([#22448](https://togithub.com/hashicorp/terraform-provider-aws/issues/22448)) - **New Resource:** `aws_devicefarm_upload` ([#22443](https://togithub.com/hashicorp/terraform-provider-aws/issues/22443)) - **New Resource:** `aws_fsx_openzfs_file_system` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234)) - **New Resource:** `aws_fsx_openzfs_snapshot` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234)) - **New Resource:** `aws_fsx_openzfs_volume` ([#22234](https://togithub.com/hashicorp/terraform-provider-aws/issues/22234)) - **New Resource:** `aws_memorydb_cluster` ([#22388](https://togithub.com/hashicorp/terraform-provider-aws/issues/22388)) - **New Resource:** `aws_memorydb_parameter_group` ([#22304](https://togithub.com/hashicorp/terraform-provider-aws/issues/22304)) - **New Resource:** `aws_memorydb_subnet_group` ([#22256](https://togithub.com/hashicorp/terraform-provider-aws/issues/22256)) - **New Resource:** `aws_memorydb_user` ([#22261](https://togithub.com/hashicorp/terraform-provider-aws/issues/22261)) - **New Resource:** `aws_mskconnect_custom_plugin` ([#22333](https://togithub.com/hashicorp/terraform-provider-aws/issues/22333)) - **New Resource:** `aws_mskconnect_worker_configuration` ([#22414](https://togithub.com/hashicorp/terraform-provider-aws/issues/22414)) - **New Resource:** `aws_sagemaker_device` ([#22427](https://togithub.com/hashicorp/terraform-provider-aws/issues/22427)) - **New Resource:** `aws_vpc_endpoint_connection_accepter` ([#19083](https://togithub.com/hashicorp/terraform-provider-aws/issues/19083)) - **New Resource:** `aws_vpc_ipam_organization_admin_account` ([#22394](https://togithub.com/hashicorp/terraform-provider-aws/issues/22394)) ENHANCEMENTS: - data-source/aws_batch_job_queue: Add `scheduling_policy_arn` attribute ([#22348](https://togithub.com/hashicorp/terraform-provider-aws/issues/22348)) - data-source/aws_cloudtrail_service_account: Add service account ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295)) - data-source/aws_ecs_task_definition: Add `arn` attribute. ([#21856](https://togithub.com/hashicorp/terraform-provider-aws/issues/21856)) - data-source/aws_elb_hosted_zone_id: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295)) - data-source/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295)) - data-source/aws_ssm_parameters_by_path: Add `recursive` argument ([#22222](https://togithub.com/hashicorp/terraform-provider-aws/issues/22222)) - data-source/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dns_aaaa_record_on_launch`, `enable_resource_name_dns_a_record_on_launch` and `private_dns_hostname_type_on_launch` attributes ([#22339](https://togithub.com/hashicorp/terraform-provider-aws/issues/22339)) - provider: Add validation for the `duration`, `external_id` and `session_name` arguments in the `assume_role` configuration block ([#18085](https://togithub.com/hashicorp/terraform-provider-aws/issues/18085)) - resource/aws_batch_job_queue: Add `scheduling_policy_arn` attribute ([#22298](https://togithub.com/hashicorp/terraform-provider-aws/issues/22298)) - resource/aws_cloud9\_environment_ec2: Add plan time validations for `name`, `automatic_stop_time_minutes`, `description`. ([#18560](https://togithub.com/hashicorp/terraform-provider-aws/issues/18560)) - resource/aws_cloudfront_distribution: Add plan time validation to `ordered_cache_behavior.forwarded_values.cookies`, `ordered_cache_behavior.lambda_function_association.event_type`, `ordered_cache_behavior.lambda_function_association.lambda_arn`, `ordered_cache_behavior.function_association.lambda_arn`, `ordered_cache_behavior.function_association.event_type`, `ordered_cache_behavior.viewer_protocol_policy`, `comment`, `default_cache_behavior.forwarded_values.cookies`, `default_cache_behavior.lambda_function_association.event_type`, `ordered_cache_behavior.lambda_function_association.lambda_arn`, `default_cache_behavior.function_association.lambda_arn`, `default_cache_behavior.function_association.event_type`, `default_cache_behavior.viewer_protocol_policy`, `origin.custom_origin_config.origin_keepalive_timeout`, `origin.custom_origin_config.origin_read_timeout`, `origin.custom_origin_config.origin_protocol_policy`, `origin.custom_origin_config.origin_ssl_protocols`, `price_class`, `viewer_certificate.acm_certificate_arn`, `viewer_certificate.minimum_protocol_version`, `viewer_certificate.ssl_support_method`. ([#21034](https://togithub.com/hashicorp/terraform-provider-aws/issues/21034)) - resource/aws_codebuild_project: Add `artifacts.bucket_owner_access`, `secondary_artifacts.bucket_owner_access`, `logs_config.s3_logs.bucket_owner_access`, `project_visibility`, `resource_access_role` arguments. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189)) - resource/aws_codebuild_project: Add `public_project_alias` attribute. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189)) - resource/aws_codebuild_project: Add `secondary_source_version` argument ([#22345](https://togithub.com/hashicorp/terraform-provider-aws/issues/22345)) - resource/aws_codebuild_project: Add plan time validation for `cache.modes` and `service_role`. ([#22189](https://togithub.com/hashicorp/terraform-provider-aws/issues/22189)) - resource/aws_codepipeline: Add plan time validation to `name`, `role_arn`, `stage.name`, `stage.action.name`, `stage.action.name`, `stage.action.run_order`, `stage.action.namespace`, `action.configuration`, and `action.version` ([#18451](https://togithub.com/hashicorp/terraform-provider-aws/issues/18451)) - resource/aws_codepipeline_webhook: Add `arn` attribute. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406)) - resource/aws_codepipeline_webhook: Add plan time validation for `authentication_configuration.secret_token`, `filter.json_path`, `filter.match_equals`, `name`. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406)) - resource/aws_codepipeline_webhook: Allow updating `filter` in place. ([#22406](https://togithub.com/hashicorp/terraform-provider-aws/issues/22406)) - resource/aws_dax_cluster: Add `cluster_endpoint_encryption_type` argument ([#22396](https://togithub.com/hashicorp/terraform-provider-aws/issues/22396)) - resource/aws_dx_private_virtual_interface: Add `sitelink_enabled` argument ([#22350](https://togithub.com/hashicorp/terraform-provider-aws/issues/22350)) - resource/aws_dx_transit_virtual_interface: Add `sitelink_enabled` argument ([#22350](https://togithub.com/hashicorp/terraform-provider-aws/issues/22350)) - resource/aws_ecr_replication_configuration: Add `repository_filter` to `replication_configuration` block ([#21231](https://togithub.com/hashicorp/terraform-provider-aws/issues/21231)) - resource/aws_ecr_replication_configuration: Increase `MaxItems` for `rule` to `10` and for `destination` to `25` ([#22281](https://togithub.com/hashicorp/terraform-provider-aws/issues/22281)) - resource/aws_elasticsearch_domain: Tag on create ([#18082](https://togithub.com/hashicorp/terraform-provider-aws/issues/18082)) - resource/aws_glue_trigger: Add `start_on_creation` argument ([#22439](https://togithub.com/hashicorp/terraform-provider-aws/issues/22439)) - resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `extended_s3_configuration` `s3_backup_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229)) - resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `redshift_configuration` `s3_backup_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229)) - resource/aws_kinesis_firehose_delivery_stream: Add `error_output_prefix` argument to `s3_configuration` configuration block ([#11229](https://togithub.com/hashicorp/terraform-provider-aws/issues/11229)) - resource/aws_networkfirewall_resource_policy: Handle delete-after-create eventual consistency ([#22402](https://togithub.com/hashicorp/terraform-provider-aws/issues/22402)) - resource/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-3` AWS Region ([#22295](https://togithub.com/hashicorp/terraform-provider-aws/issues/22295)) - resource/aws_s3\_bucket_object: Support objects greater than 5GB in size by using the [Amazon S3 upload manager](https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/sdk-utilities.html#upload-manager) ([#21727](https://togithub.com/hashicorp/terraform-provider-aws/issues/21727)) - resource/aws_sagemaker_app: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508)) - resource/aws_sagemaker_domain: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `default_resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508)) - resource/aws_sagemaker_user_profile: Add `lifecycle_config_arn` and `sagemaker_image_version_arn` arguments to `default_resource_spec` configuration block ([#21508](https://togithub.com/hashicorp/terraform-provider-aws/issues/21508)) - resource/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dns_aaaa_record_on_launch`, `enable_resource_name_dns_a_record_on_launch` and `private_dns_hostname_type_on_launch` arguments ([#22339](https://togithub.com/hashicorp/terraform-provider-aws/issues/22339)) - resource/aws_timestreamwrite_table: Add `magnetic_store_write_properties` argument. ([#22363](https://togithub.com/hashicorp/terraform-provider-aws/issues/22363)) BUG FIXES: - resource/aws_appstream_fleet: Correctly create resource with `stream_view` argument ([#22395](https://togithub.com/hashicorp/terraform-provider-aws/issues/22395)) - resource/aws_codebuild_project: Fix plan validation to take into account computed values for `cache.location` ([#21458](https://togithub.com/hashicorp/terraform-provider-aws/issues/21458)) - resource/aws_dynamodb_table: Remove extraneous `kms_key_arn` attribute from the `ttl` configuration block ([#21334](https://togithub.com/hashicorp/terraform-provider-aws/issues/21334)) - resource/aws_ec2\_traffic_mirror_filter_rule: Prevent crash during resource read ([#22315](https://togithub.com/hashicorp/terraform-provider-aws/issues/22315)) - resource/aws_launch_template: Correctly set `default_version` and `latest_version` as Computed when `name`, `name_prefix` or `description` change ([#22277](https://togithub.com/hashicorp/terraform-provider-aws/issues/22277)) - resource/aws_networkfirewall_rule_group: Allow any character in `ip_set` `definition` as per the AWS API docs ([#22284](https://togithub.com/hashicorp/terraform-provider-aws/issues/22284)) - resource/aws_ses_event_destination: Allow `.` and `@` characters in `cloudwatch_destination.default_value` argument ([#22359](https://togithub.com/hashicorp/terraform-provider-aws/issues/22359)) - resource/aws_ssoadmin_managed_policy_attachment: Fix missing call to `ProvisionPermissionSet` after detaching the managed policy ([#21773](https://togithub.com/hashicorp/terraform-provider-aws/issues/21773)) - resource/aws_vpc_ipam_pool_cidr_allocation: update `cidr` and `netmask_length` attributes netmask to a minimum of 0 and maximum of 32 ([#22418](https://togithub.com/hashicorp/terraform-provider-aws/issues/22418)) ### [`v3.70.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3700-December-16-2021) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.69.0...v3.70.0) NOTES: - resource/aws_fsx_ontap_storage_virtual_machine: The `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguidshed_name` attribute has been deprecated. All configurations using `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguidshed_name` should be updated to use the new `active_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguished_name` attribute instead ([#22246](https://togithub.com/hashicorp/terraform-provider-aws/issues/22246)) FEATURES: - **New Data Source:** `aws_connect_bot_association` ([#21097](https://togithub.com/hashicorp/terraform-provider-aws/issues/21097)) - **New Data Source:** `aws_connect_hours_of_operation` ([#22207](https://togithub.com/hashicorp/terraform-provider-aws/issues/22207)) - **New Data Source:** `aws_connect_lambda_function_association` ([#21276](https://togithub.com/hashicorp/terraform-provider-aws/issues/21276)) - **New Resource:** `aws_connect_bot_association` ([#21097](https://togithub.com/hashicorp/terraform-provider-aws/issues/21097)) - **New Resource:** `aws_connect_hours_of_operation` ([#21934](https://togithub.com/hashicorp/terraform-provider-aws/issues/21934)) - **New Resource:** `aws_connect_lambda_function_association` ([#21276](https://togithub.com/hashicorp/terraform-provider-aws/issues/21276)) - **New Resource:** `aws_ecr_pull_through_cache_rule` ([#22172](https://togithub.com/hashicorp/terraform-provider-aws/issues/22172)) - **New Resource:** `aws_ecr_registry_scanning_configuration` ([#22179](https://togithub.com/hashicorp/terraform-provider-aws/issues/22179)) - **New Resource:** `aws_ecrpublic_repository_policy` ([#16901](https://togithub.com/hashicorp/terraform-provider-aws/issues/16901)) ENHANCEMENTS: - data-source/aws_sagemaker_prebuilt_ecr_image: Add Hugging Face DLCs ([#21983](https://togithub.com/hashicorp/terraform-provider-aws/issues/21983)) - resource/aws_appsync_graphql_api: Add `lambda_authorizer_config` argument ([#20857](https://togithub.com/hashicorp/terraform-provider-aws/issues/20857)) - resource/aws_dynamodb_table: Allows restoring to point-in-time ([#19292](https://togithub.com/hashicorp/terraform-provider-aws/issues/19292)) - resource/aws_fsx_backup: Add `volume_id` argument to support Amazon FSx for NetApp ONTAP backup ([#21960](https://togithub.com/hashicorp/terraform-provider-aws/issues/21960)) - resource/aws_networkfirewall_firewall_policy: Add `stateful_default_actions` and `stateful_engine_options` configuration blocks. Add `priority` attribute to `stateful_rule_group_reference` block ([#21955](https://togithub.com/hashicorp/terraform-provider-aws/issues/21955)) - resource/aws_networkfirewall_firewall_rule_group: Add `stateful_rule_options` configuration block ([#21955](https://togithub.com/hashicorp/terraform-provider-aws/issues/21955)) - resource/aws_route: Extend creation timeout to 5 minutes ([#21531](https://togithub.com/hashicorp/terraform-provider-aws/issues/21531)) - resource/aws_route_table: Extend creation timeout to 5 minutes ([#21531](https://togithub.com/hashicorp/terraform-provider-aws/issues/21531)) - resource/iam_service_linked_role: Add `tags` argument ([#22185](https://togithub.com/hashicorp/terraform-provider-aws/issues/22185)) BUG FIXES: - data-source/aws_s3\_bucket: Correct Route 53 hosted zone ID for S3 websites in the `eu-south-1`, `af-south-1` and `us-gov-east-1` AWS Regions ([#22227](https://togithub.com/hashicorp/terraform-provider-aws/issues/22227)) - resource/aws_cloudwatch_event_bus_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22165](https://togithub.com/hashicorp/terraform-provider-aws/issues/22165)) - resource/aws_ecr_lifecycle_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22142](https://togithub.com/hashicorp/terraform-provider-aws/issues/22142)) - resource/aws_elasticsearch_domain: Fix erroneous diffs in `access_policies` when no changes made or policies are equivalent ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157)) - resource/aws_elasticsearch_domain: Fix erroneous diffs in `advanced_options` due to AWS defaults being returned ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157)) - resource/aws_elasticsearch_domain_policy: Fix erroneous diffs in `access_policies` when no changes made or policies are equivalent ([#22157](https://togithub.com/hashicorp/terraform-provider-aws/issues/22157)) - resource/aws_emr_cluster: Wait for the cluster to reach a terminated state on deletion ([#12578](https://togithub.com/hashicorp/terraform-provider-aws/issues/12578)) - resource/aws_glacier_vault: Fix erroneous diffs in `access_policy` when no changes made or policies are equivalent ([#22166](https://togithub.com/hashicorp/terraform-provider-aws/issues/22166)) - resource/aws_glacier_vault_lock: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22166](https://togithub.com/hashicorp/terraform-provider-aws/issues/22166)) - resource/aws_glue_resource_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22167](https://togithub.com/hashicorp/terraform-provider-aws/issues/22167)) - resource/aws_iam_role: Fix eventual consistency problem with `arn` sometimes being a unique ID instead of the role ARN ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217)) - resource/aws_iot_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22169](https://togithub.com/hashicorp/terraform-provider-aws/issues/22169)) - resource/aws_media_store_container_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22170](https://togithub.com/hashicorp/terraform-provider-aws/issues/22170)) - resource/aws_networkfirewall_resource_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22171](https://togithub.com/hashicorp/terraform-provider-aws/issues/22171)) - resource/aws_s3\_access_point: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255)) - resource/aws_s3\_bucket: Correct Route 53 hosted zone ID for S3 websites in the `eu-south-1`, `af-south-1` and `us-gov-east-1` AWS Regions ([#22227](https://togithub.com/hashicorp/terraform-provider-aws/issues/22227)) - resource/aws_s3\_bucket: Ensure `versioning` is set correctly when nested values are explicitly set to `false`. ([#22221](https://togithub.com/hashicorp/terraform-provider-aws/issues/22221)) - resource/aws_s3control_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255)) - resource/aws_s3control_bucket_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255)) - resource/aws_s3control_multi_region_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255)) - resource/aws_s3control_object_lambda_access_point_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22255](https://togithub.com/hashicorp/terraform-provider-aws/issues/22255)) - resource/aws_sagemaker_model_package_group_policy: Fix erroneous diffs in `resource_policy` when no changes made or policies are equivalent ([#22259](https://togithub.com/hashicorp/terraform-provider-aws/issues/22259)) - resource/aws_secretsmanager_secret: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217)) - resource/aws_secretsmanager_secret_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22217](https://togithub.com/hashicorp/terraform-provider-aws/issues/22217)) - resource/aws_ses_identity_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22214](https://togithub.com/hashicorp/terraform-provider-aws/issues/22214)) - resource/aws_sns_topic: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22213](https://togithub.com/hashicorp/terraform-provider-aws/issues/22213)) - resource/aws_sns_topic_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22213](https://togithub.com/hashicorp/terraform-provider-aws/issues/22213)) - resource/aws_sqs_queue: Fix "error reading, empty result" and various eventual consistency errors ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194)) - resource/aws_sqs_queue: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194)) - resource/aws_sqs_queue_policy: Fix "error reading, empty result" and various eventual consistency errors ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194)) - resource/aws_sqs_queue_policy: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22194](https://togithub.com/hashicorp/terraform-provider-aws/issues/22194)) - resource/aws_ssoadmin_permission_set_inline_policy: Fix erroneous diffs in `inline_policy` when no changes made or policies are equivalent ([#22192](https://togithub.com/hashicorp/terraform-provider-aws/issues/22192)) - resource/aws_transfer_access: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22193](https://togithub.com/hashicorp/terraform-provider-aws/issues/22193)) - resource/aws_transfer_user: Fix erroneous diffs in `policy` when no changes made or policies are equivalent ([#22193](https://togithub.com/hashicorp/terraform-provider-aws/issues/22193)) ### [`v3.69.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#3690-December-09-2021) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v3.68.0...v3.69.0) FEATURES: - **New Resource:** `aws_codecommit_approval_rule_template_association` ([#13467](https://togithub.com/hashicorp/terraform-provider-aws/issues/13467)) - **New Resource:** `aws_detective_graph` ([#22042](https://togithub.com/hashicorp/terraform-provider-aws/issues/22042)) - **New Resource:** `aws_ec2_subnet_cidr_reservation` ([#22051](https://togithub.com/hashicorp/terraform-provider-aws/issues/22051)) - **New Resource:** `aws_ecs_task_set` ([#22096](https:/Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.