hashicorp/terraform-provider-aws
### [`v5.1.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#510-June-1-2023)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.0.1...v5.1.0)
BREAKING CHANGES:
- resource/aws_iam_role: The `role_last_used` attribute has been removed. Use the `aws_iam_role` data source instead. ([#31656](https://togithub.com/hashicorp/terraform-provider-aws/issues/31656))
NOTES:
- resource/aws_autoscaling_group: The `load_balancers` and `target_group_arns` attributes have been changed to `Computed`. This means that omitting this argument is interpreted as ignoring any existing load balancer or target group attachments. To remove all load balancer or target group attachments an empty list should be specified. ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527))
- resource/aws_iam_role: The `role_last_used` attribute has been removed. Use the `aws_iam_role` data source instead. See the community feedback provided in the [linked issue](https://togithub.com/hashicorp/terraform-provider-aws/issues/30861) for additional justification on this change. As the attribute is read-only, unlikely to be used as an input to another resource, and available in the corresponding data source, a breaking change in a minor version was deemed preferable to a long deprecation/removal cycle in this circumstance. ([#31656](https://togithub.com/hashicorp/terraform-provider-aws/issues/31656))
- resource/aws_redshift_cluster: Ignores the parameter `aqua_configuration_status`, since the AWS API ignores it. Now always returns `auto`. ([#31612](https://togithub.com/hashicorp/terraform-provider-aws/issues/31612))
FEATURES:
- **New Data Source:** `aws_vpclattice_resource_policy` ([#31372](https://togithub.com/hashicorp/terraform-provider-aws/issues/31372))
- **New Resource:** `aws_autoscaling_traffic_source_attachment` ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527))
- **New Resource:** `aws_emrcontainers_job_template` ([#31399](https://togithub.com/hashicorp/terraform-provider-aws/issues/31399))
- **New Resource:** `aws_glue_data_quality_ruleset` ([#31604](https://togithub.com/hashicorp/terraform-provider-aws/issues/31604))
- **New Resource:** `aws_quicksight_analysis` ([#31542](https://togithub.com/hashicorp/terraform-provider-aws/issues/31542))
- **New Resource:** `aws_quicksight_dashboard` ([#31448](https://togithub.com/hashicorp/terraform-provider-aws/issues/31448))
- **New Resource:** `aws_resourcegroups_resource` ([#31430](https://togithub.com/hashicorp/terraform-provider-aws/issues/31430))
ENHANCEMENTS:
- data-source/aws_autoscaling_group: Add `traffic_source` attribute ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527))
- data-source/aws_opensearch_domain: Add `off_peak_window_options` attribute ([#35970](https://togithub.com/hashicorp/terraform-provider-aws/issues/35970))
- provider: Increases size of HTTP request bodies in logs to 1 KB ([#31718](https://togithub.com/hashicorp/terraform-provider-aws/issues/31718))
- resource/aws_appsync_graphql_api: Add `visibility` argument ([#31369](https://togithub.com/hashicorp/terraform-provider-aws/issues/31369))
- resource/aws_appsync_graphql_api: Add plan time validation for `log_config.cloudwatch_logs_role_arn` ([#31369](https://togithub.com/hashicorp/terraform-provider-aws/issues/31369))
- resource/aws_autoscaling_group: Add `traffic_source` configuration block ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527))
- resource/aws_cloudformation_stack_set: Add `managed_execution` argument ([#25210](https://togithub.com/hashicorp/terraform-provider-aws/issues/25210))
- resource/aws_fsx_ontap_volume: Add `skip_final_backup` argument ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_fsx_ontap_volume: Remove default value for `security_style` argument and mark as Computed ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_fsx_ontap_volume: Update `ontap_volume_type` attribute to be configurable ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_fsx_ontap_volume: `junction_path` is Optional ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_fsx_ontap_volume: `storage_efficiency_enabled` is Optional ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_grafana_workspace: Increase default Create and Update timeouts to 30 minutes ([#31422](https://togithub.com/hashicorp/terraform-provider-aws/issues/31422))
- resource/aws_lambda_invocation: Add lifecycle_scope CRUD to invoke on each resource state transition ([#29367](https://togithub.com/hashicorp/terraform-provider-aws/issues/29367))
- resource/aws_lambda_layer_version_permission: Add `skip_destroy` attribute ([#29571](https://togithub.com/hashicorp/terraform-provider-aws/issues/29571))
- resource/aws_lambda_provisioned_concurrency_configuration: Add `skip_destroy` argument ([#31646](https://togithub.com/hashicorp/terraform-provider-aws/issues/31646))
- resource/aws_opensearch_domain: Add `off_peak_window_options` configuration block ([#35970](https://togithub.com/hashicorp/terraform-provider-aws/issues/35970))
- resource/aws_sagemaker_endpoint_configuration: Add and `shadow_production_variants.serverless_config.provisioned_concurrency` arguments ([#31398](https://togithub.com/hashicorp/terraform-provider-aws/issues/31398))
- resource/aws_transfer_server: Add support for `TransferSecurityPolicy-2023-05` `security_policy_name` value ([#31536](https://togithub.com/hashicorp/terraform-provider-aws/issues/31536))
BUG FIXES:
- data-source/aws_dx_connection: Fix the `vlan_id` being returned as null ([#31480](https://togithub.com/hashicorp/terraform-provider-aws/issues/31480))
- provider/tags: Fix crash when some `tags` are `null` and others are `computed` ([#31687](https://togithub.com/hashicorp/terraform-provider-aws/issues/31687))
- provider: Limits size of HTTP response bodies in logs to 4 KB ([#31718](https://togithub.com/hashicorp/terraform-provider-aws/issues/31718))
- resource/aws_autoscaling_group: Fix `The AutoRollback parameter cannot be set to true when the DesiredConfiguration parameter is empty` errors when refreshing instances ([#31715](https://togithub.com/hashicorp/terraform-provider-aws/issues/31715))
- resource/aws_autoscaling_group: Now ignores previous failed scaling activities ([#31551](https://togithub.com/hashicorp/terraform-provider-aws/issues/31551))
- resource/aws_cloudfront_distribution: Remove the upper limit on `origin_keepalive_timeout` ([#31608](https://togithub.com/hashicorp/terraform-provider-aws/issues/31608))
- resource/aws_connect_instance: Fix crash when reading instances with `CREATION_FAILED` status ([#31689](https://togithub.com/hashicorp/terraform-provider-aws/issues/31689))
- resource/aws_connect_security_profile: Set correct `tags` in state ([#31716](https://togithub.com/hashicorp/terraform-provider-aws/issues/31716))
- resource/aws_dx_connection: Fix the `vlan_id` being returned as null ([#31480](https://togithub.com/hashicorp/terraform-provider-aws/issues/31480))
- resource/aws_ecs_service: Fix crash when just `alarms` is updated ([#31683](https://togithub.com/hashicorp/terraform-provider-aws/issues/31683))
- resource/aws_fsx_ontap_volume: Change `storage_virtual_machine_id` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_fsx_ontap_volume: Change `volume_type` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544))
- resource/aws_kendra_index: Persist `user_group_resolution_mode` value to state after creation ([#31669](https://togithub.com/hashicorp/terraform-provider-aws/issues/31669))
- resource/aws_medialive_channel: Fix attribute spelling in `hls_cdn_settings` expand ([#31647](https://togithub.com/hashicorp/terraform-provider-aws/issues/31647))
- resource/aws_quicksight_data_set: Fix join_instruction not applied when creating dataset ([#31424](https://togithub.com/hashicorp/terraform-provider-aws/issues/31424))
- resource/aws_quicksight_data_set: Ignore failure to read refresh properties for non-SPICE datasets ([#31488](https://togithub.com/hashicorp/terraform-provider-aws/issues/31488))
- resource/aws_rbin_rule: Fix crash when multiple `resource_tags` blocks are configured ([#31393](https://togithub.com/hashicorp/terraform-provider-aws/issues/31393))
- resource/aws_rds_cluster: Correctly update `db_cluster_instance_class` ([#31709](https://togithub.com/hashicorp/terraform-provider-aws/issues/31709))
- resource/aws_redshift_cluster: No longer errors on deletion when status is `Maintenance` ([#31612](https://togithub.com/hashicorp/terraform-provider-aws/issues/31612))
- resource/aws_route53\_vpc_association_authorization: Fix `ConcurrentModification` error ([#31588](https://togithub.com/hashicorp/terraform-provider-aws/issues/31588))
- resource/aws_s3\_bucket_replication_configuration: Replication configs sometimes need more than a second or two. This resolves a race condition and adds retry logic when reading them. ([#30995](https://togithub.com/hashicorp/terraform-provider-aws/issues/30995))
### [`v5.0.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#501-May-26-2023)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.0.0...v5.0.1)
BUG FIXES:
- provider/tags: Fix crash when tags are `null` ([#31587](https://togithub.com/hashicorp/terraform-provider-aws/issues/31587))
### [`v5.0.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#500-May-25-2023)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v4.67.0...v5.0.0)
BREAKING CHANGES:
- data-source/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969))
- data-source/aws_connect_hours_of_operation: The `hours_of_operation_arn` attribute has been removed ([#31484](https://togithub.com/hashicorp/terraform-provider-aws/issues/31484))
- data-source/aws_db_instance: With the retirement of EC2-Classic the `db_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- data-source/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- data-source/aws_elasticache_replication_group: Remove `number_cache_clusters`, `replication_group_description` arguments -- use `num_cache_clusters`, and `description`, respectively, instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- data-source/aws_iam_policy_document: Don't add empty `statement.sid` values to `json` attribute value ([#28539](https://togithub.com/hashicorp/terraform-provider-aws/issues/28539))
- data-source/aws_iam_policy_document: `source_json` and `override_json` have been removed -- use `source_policy_documents` and `override_policy_documents`, respectively, instead ([#30829](https://togithub.com/hashicorp/terraform-provider-aws/issues/30829))
- data-source/aws_identitystore_group: The `filter` argument has been removed ([#31312](https://togithub.com/hashicorp/terraform-provider-aws/issues/31312))
- data-source/aws_identitystore_user: The `filter` argument has been removed ([#31312](https://togithub.com/hashicorp/terraform-provider-aws/issues/31312))
- data-source/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- data-source/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- data-source/aws_secretsmanager_secret: The `rotation_enabled`, `rotation_lambda_arn` and `rotation_rules` attributes have been removed ([#31487](https://togithub.com/hashicorp/terraform-provider-aws/issues/31487))
- data-source/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- provider: The `assume_role.duration_seconds`, `assume_role_with_web_identity.duration_seconds`, `s3_force_path_style`, `shared_credentials_file` and `skip_get_ec2_platforms` attributes have been removed ([#31155](https://togithub.com/hashicorp/terraform-provider-aws/issues/31155))
- provider: The `aws_subnet_ids` data source has been removed ([#31140](https://togithub.com/hashicorp/terraform-provider-aws/issues/31140))
- provider: With the retirement of EC2-Classic the `aws_db_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- provider: With the retirement of EC2-Classic the `aws_elasticache_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- provider: With the retirement of EC2-Classic the `aws_redshift_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- provider: With the retirement of Macie Classic the `aws_macie_member_account_association` resource has been removed ([#31058](https://togithub.com/hashicorp/terraform-provider-aws/issues/31058))
- provider: With the retirement of Macie Classic the `aws_macie_s3_bucket_association` resource has been removed ([#31058](https://togithub.com/hashicorp/terraform-provider-aws/issues/31058))
- resource/aws_acmpca_certificate_authority: The `status` attribute has been removed ([#31084](https://togithub.com/hashicorp/terraform-provider-aws/issues/31084))
- resource/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969))
- resource/aws_autoscaling_attachment: `alb_target_group_arn` has been removed -- use `lb_target_group_arn` instead ([#30828](https://togithub.com/hashicorp/terraform-provider-aws/issues/30828))
- resource/aws_autoscaling_group: Remove deprecated `tags` attribute ([#30842](https://togithub.com/hashicorp/terraform-provider-aws/issues/30842))
- resource/aws_budgets_budget: The `cost_filters` attribute has been removed ([#31395](https://togithub.com/hashicorp/terraform-provider-aws/issues/31395))
- resource/aws_ce_anomaly_subscription: The `threshold` attribute has been removed ([#30374](https://togithub.com/hashicorp/terraform-provider-aws/issues/30374))
- resource/aws_cloudwatch_event_target: The `ecs_target.propagate_tags` attribute now has no default value ([#25233](https://togithub.com/hashicorp/terraform-provider-aws/issues/25233))
- resource/aws_codebuild_project: The `secondary_sources.auth` and `source.auth` attributes have been removed ([#31483](https://togithub.com/hashicorp/terraform-provider-aws/issues/31483))
- resource/aws_connect_hours_of_operation: The `hours_of_operation_arn` attribute has been removed ([#31484](https://togithub.com/hashicorp/terraform-provider-aws/issues/31484))
- resource/aws_connect_queue: The `quick_connect_ids_associated` attribute has been removed ([#31376](https://togithub.com/hashicorp/terraform-provider-aws/issues/31376))
- resource/aws_connect_routing_profile: The `queue_configs_associated` attribute has been removed ([#31376](https://togithub.com/hashicorp/terraform-provider-aws/issues/31376))
- resource/aws_db_instance: Remove `name` - use `db_name` instead ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_instance: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_db_instance: `id` is no longer the AWS database `identifier` - `id` is now the `dbi-resource-id`. Refer to `identifier` instead of `id` to use the database's identifier ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_default_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_dms_endpoint: `s3_settings.ignore_headers_row` has been removed ([#30452](https://togithub.com/hashicorp/terraform-provider-aws/issues/30452))
- resource/aws_docdb_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_ec2\_client_vpn_endpoint: The `status` attribute has been removed ([#31223](https://togithub.com/hashicorp/terraform-provider-aws/issues/31223))
- resource/aws_ec2\_client_vpn_network_association: The `security_groups` attribute has been removed ([#31396](https://togithub.com/hashicorp/terraform-provider-aws/issues/31396))
- resource/aws_ec2\_client_vpn_network_association: The `status` attribute has been removed ([#31223](https://togithub.com/hashicorp/terraform-provider-aws/issues/31223))
- resource/aws_ecs_cluster: The `capacity_providers` and `default_capacity_provider_strategy` attributes have been removed ([#31346](https://togithub.com/hashicorp/terraform-provider-aws/issues/31346))
- resource/aws_eip: With the retirement of EC2-Classic the `standard` domain is no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_eip_association: With the retirement of EC2-Classic the `standard` domain is no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_elasticache_replication_group: Remove `availability_zones`, `number_cache_clusters`, `replication_group_description` arguments -- use `preferred_cache_cluster_azs`, `num_cache_clusters`, and `description`, respectively, instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_elasticache_replication_group: Remove `cluster_mode` configuration block -- use top-level `num_node_groups` and `replicas_per_node_group` instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_kinesis_firehose_delivery_stream: Remove `s3_configuration` attribute from the root of the resource. `s3_configuration` is now a part of the following blocks: `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration` ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138))
- resource/aws_kinesis_firehose_delivery_stream: Remove `s3` as an option for `destination`. Use `extended_s3` instead ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138))
- resource/aws_kinesis_firehose_delivery_stream: Rename `extended_s3_configuration.0.s3_backup_configuration.0.buffer_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffer_interval` to `extended_s3_configuration.0.s3_backup_configuration.0.buffering_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141))
- resource/aws_kinesis_firehose_delivery_stream: Rename `redshift_configuration.0.s3_backup_configuration.0.buffer_size` and `redshift_configuration.0.s3_backup_configuration.0.buffer_interval` to `redshift_configuration.0.s3_backup_configuration.0.buffering_size` and `redshift_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141))
- resource/aws_kinesis_firehose_delivery_stream: Rename `s3_configuration.0.buffer_size` and `s3_configuration.0.buffer_internval` to `s3_configuration.0.buffering_size` and `s3_configuration.0.buffering_internval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141))
- resource/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_lightsail_instance: The `ipv6_address` attribute has been removed ([#31489](https://togithub.com/hashicorp/terraform-provider-aws/issues/31489))
- resource/aws_medialive_multiplex_program: The `statemux_settings` attribute has been removed. Use `statmux_settings` argument instead ([#31034](https://togithub.com/hashicorp/terraform-provider-aws/issues/31034))
- resource/aws_msk_cluster: The `broker_node_group_info.ebs_volume_size` attribute has been removed ([#31324](https://togithub.com/hashicorp/terraform-provider-aws/issues/31324))
- resource/aws_neptune_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_networkmanager_core_network: Removed `policy_document` argument -- use `aws_networkmanager_core_network_policy_attachment` resource instead ([#30875](https://togithub.com/hashicorp/terraform-provider-aws/issues/30875))
- resource/aws_rds_cluster: The `engine` argument is now required and has no default ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112))
- resource/aws_rds_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_rds_cluster_instance: The `engine` argument is now required and has no default ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112))
- resource/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_route: `instance_id` can no longer be set in configurations. Use `network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804))
- resource/aws_route_table: `route.*.instance_id` can no longer be set in configurations. Use `route.*.network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804))
- resource/aws_secretsmanager_secret: The `rotation_enabled`, `rotation_lambda_arn` and `rotation_rules` attributes have been removed ([#31487](https://togithub.com/hashicorp/terraform-provider-aws/issues/31487))
- resource/aws_security_group: With the retirement of EC2-Classic non-VPC security groups are no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_security_group_rule: With the retirement of EC2-Classic non-VPC security groups are no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_servicecatalog_product: Changes to any `provisioning_artifact_parameters` arguments now properly trigger a replacement. This fixes incorrect behavior, but may technically be breaking for configurations expecting non-functional in-place updates. ([#31061](https://togithub.com/hashicorp/terraform-provider-aws/issues/31061))
- resource/aws_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_vpc_peering_connection_accepter: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_vpc_peering_connection_options: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
- resource/aws_wafv2\_web_acl: The `statement.managed_rule_group_statement.excluded_rule` and `statement.rule_group_reference_statement.excluded_rule` attributes have been removed ([#31374](https://togithub.com/hashicorp/terraform-provider-aws/issues/31374))
- resource/aws_wafv2\_web_acl_logging_configuration: The `redacted_fields.all_query_arguments`, `redacted_fields.body` and `redacted_fields.single_query_argument` attributes have been removed ([#31486](https://togithub.com/hashicorp/terraform-provider-aws/issues/31486))
NOTES:
- data-source/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- data-source/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- data-source/aws_opensearch_domain: The `kibana_endpoint` attribute has been deprecated. All configurations using `kibana_endpoint` should be updated to use the `dashboard_endpoint` attribute instead ([#31490](https://togithub.com/hashicorp/terraform-provider-aws/issues/31490))
- data-source/aws_quicksight_data_set: The `tags_all` attribute has been deprecated and will be removed in a future version ([#31162](https://togithub.com/hashicorp/terraform-provider-aws/issues/31162))
- data-source/aws_redshift_service_account: The `aws_redshift_service_account` data source has been deprecated and will be removed in a future version. AWS documentation [states that](https://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-bucket-permissions) a [service principal name](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) should be used instead of an AWS account ID in any relevant IAM policy ([#31006](https://togithub.com/hashicorp/terraform-provider-aws/issues/31006))
- data-source/aws_service_discovery_service: The `tags_all` attribute has been deprecated and will be removed in a future version ([#31162](https://togithub.com/hashicorp/terraform-provider-aws/issues/31162))
- resource/aws_api_gateway_rest_api: Update configurations with `minimum_compression_size` set to pass the value as a string. Valid values remain the same. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969))
- resource/aws_autoscaling_attachment: Update configurations to use `lb_target_group_arn` instead of `alb_target_group_arn` which has been removed ([#30828](https://togithub.com/hashicorp/terraform-provider-aws/issues/30828))
- resource/aws_db_event_subscription: Configurations that define `source_ids` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `source_ids = [aws_db_instance.example.id]` must be updated to `source_ids = [aws_db_instance.example.identifier]` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_instance: Configurations that define `replicate_source_db` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `replicate_source_db = aws_db_instance.example.id` must be updated to `replicate_source_db = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_instance: The change of what `id` is, namely, a DBI Resource ID now versus DB Identifier previously, has far-reaching consequences. Configurations that refer to, for example, `aws_db_instance.example.id` will now have errors and must be changed to use `identifier` instead, for example, `aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_instance_role_association: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_proxy_target: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_db_snapshot: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_docdb_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_dx_gateway_association: The `vpn_gateway_id` attribute has been deprecated. All configurations using `vpn_gateway_id` should be updated to use the `associated_gateway_id` attribute instead ([#31384](https://togithub.com/hashicorp/terraform-provider-aws/issues/31384))
- resource/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_elasticache_replication_group: Update configurations to use `preferred_cache_cluster_azs` instead of the `availability_zones` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_elasticache_replication_group: Update configurations to use top-level `num_node_groups` and `replicas_per_node_group` instead of `cluster_mode.0.num_node_groups` and `cluster_mode.0.replicas_per_node_group`, respectively ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008))
- resource/aws_flow_log: The `log_group_name` attribute has been deprecated. All configurations using `log_group_name` should be updated to use the `log_destination` attribute instead ([#31382](https://togithub.com/hashicorp/terraform-provider-aws/issues/31382))
- resource/aws_guardduty_organization_configuration: The `auto_enable` argument has been deprecated. Use the `auto_enable_organization_members` argument instead. ([#30736](https://togithub.com/hashicorp/terraform-provider-aws/issues/30736))
- resource/aws_neptune_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_networkmanager_core_network: Update configurations to use the `aws_networkmanager_core_network_policy_attachment` resource instead of the `policy_document` argument ([#30875](https://togithub.com/hashicorp/terraform-provider-aws/issues/30875))
- resource/aws_opensearch_domain: The `engine_version` attribute no longer has a default value. When omitted, the underlying AWS API will use the latest OpenSearch engine version. ([#31568](https://togithub.com/hashicorp/terraform-provider-aws/issues/31568))
- resource/aws_opensearch_domain: The `kibana_endpoint` attribute has been deprecated. All configurations using `kibana_endpoint` should be updated to use the `dashboard_endpoint` attribute instead ([#31490](https://togithub.com/hashicorp/terraform-provider-aws/issues/31490))
- resource/aws_rds_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409))
- resource/aws_rds_cluster: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112))
- resource/aws_rds_cluster_instance: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster instance ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112))
- resource/aws_route: Since `instance_id` can no longer be set in configurations, use `network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804))
- resource/aws_route_table: Since `route.*.instance_id` can no longer be set in configurations, use `route.*.network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804))
- resource/aws_ssm_association: The `instance_id` attribute has been deprecated. All configurations using `instance_id` should be updated to use the `targets` attribute instead ([#31380](https://togithub.com/hashicorp/terraform-provider-aws/issues/31380))
ENHANCEMENTS:
- provider: Allow `computed` `tags` on resources ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793))
- provider: Allow `default_tags` and resource `tags` to include zero values `""` ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793))
- provider: Duplicate `default_tags` can now be included and will be overwritten by resource `tags` ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793))
- resource/aws_db_instance: Updates to `identifier` and `identifier_prefix` will no longer cause the database instance to be destroyed and recreated ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232))
- resource/aws_eip: Deprecate `vpc` attribute. Use `domain` instead ([#31567](https://togithub.com/hashicorp/terraform-provider-aws/issues/31567))
- resource/aws_guardduty_organization_configuration: Add `auto_enable_organization_members` attribute ([#30736](https://togithub.com/hashicorp/terraform-provider-aws/issues/30736))
- resource/aws_kinesis_firehose_delivery_stream: Add `s3_configuration` to `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration` ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138))
- resource/aws_opensearch_domain: Removed `engine_version` default value ([#31568](https://togithub.com/hashicorp/terraform-provider-aws/issues/31568))
- resource/aws_wafv2\_web_acl: Support `rule_action_override` on `rule_group_reference_statement` ([#31374](https://togithub.com/hashicorp/terraform-provider-aws/issues/31374))
BUG FIXES:
- resource/aws_ecs_capacity_provider: Allow an `instance_warmup_period` of `0` in the `auto_scaling_group_provider.managed_scaling` configuration block ([#24005](https://togithub.com/hashicorp/terraform-provider-aws/issues/24005))
- resource/aws_launch_template: Remove default values in `metadata_options` to allow default condition ([#30545](https://togithub.com/hashicorp/terraform-provider-aws/issues/30545))
- resource/aws_s3\_bucket: Fix bucket_regional_domain_name not including region for buckets in us-east-1 ([#25724](https://togithub.com/hashicorp/terraform-provider-aws/issues/25724))
- resource/aws_s3\_object: Remove `acl` default in order to work with S3 buckets that have ACL disabled ([#27197](https://togithub.com/hashicorp/terraform-provider-aws/issues/27197))
- resource/aws_s3\_object_copy: Remove `acl` default in order to work with S3 buckets that have ACL disabled ([#27197](https://togithub.com/hashicorp/terraform-provider-aws/issues/27197))
- resource/aws_servicecatalog_product: Changes to `provisioning_artifact_parameters` arguments now properly trigger a replacement ([#31061](https://togithub.com/hashicorp/terraform-provider-aws/issues/31061))
- resource/aws_vpc_peering_connection: Fix crash in `vpcPeeringConnectionOptionsEqual` ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966))
### [`v4.67.0`](https://togithub.com/hashicorp/terraform-provider-aws/releases/tag/v4.67.0)
[Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v4.66.1...v4.67.0)
NOTES:
- resource/aws_lightsail_domain_entry: The `id` attribute is now comma-delimited ([#30820](https://togithub.com/hashicorp/terraform-provider-aws/issues/30820))
FEATURES:
- **New Data Source:** `aws_connect_user` ([#26156](https://togithub.com/hashicorp/terraform-provider-aws/issues/26156))
- **New Data Source:** `aws_connect_vocabulary` ([#26158](https://togithub.com/hashicorp/terraform-provider-aws/issues/26158))
- **New Data Source:** `aws_organizations_policy` ([#30920](https://togithub.com/hashicorp/terraform-provider-aws/issues/30920))
- **New Data Source:** `aws_redshiftserverless_namespace` ([#31250](https://togithub.com/hashicorp/terraform-provider-aws/issues/31250))
- **New Resource:** `aws_quicksight_template` ([#30453](https://togithub.com/hashicorp/terraform-provider-aws/issues/30453))
- **New Resource:** `aws_quicksight_template_alias` ([#31310](https://togithub.com/hashicorp/terraform-provider-aws/issues/31310))
- **New Resource:** `aws_quicksight_vpc_connection` ([#31309](https://togithub.com/hashicorp/terraform-provider-aws/issues/31309))
ENHANCEMENTS:
- aws_quicksight_data_set: Add support for configuring refresh properties ([#30744](https://togithub.com/hashicorp/terraform-provider-aws/issues/30744))
- data-source/aws_acmpca_certificate_authority: Add `key_storage_security_standard` attribute ([#31280](https://togithub.com/hashicorp/terraform-provider-aws/issues/31280))
- data-source/aws_elastic_beanstalk_hosted_zone: Add hosted zone ID for `ap-southeast-3` AWS Region ([#31248](https://togithub.com/hashicorp/terraform-provider-aws/issues/31248))
- data-source/aws_s3\_bucket: Set `hosted_zone_id` for `cn-north-1` AWS China Region ([#31247](https://togithub.com/hashicorp/terraform-provider-aws/issues/31247))
- resource/aws_acmpca_certificate_authority: Add `key_storage_security_standard` argument ([#31280](https://togithub.com/hashicorp/terraform-provider-aws/issues/31280))
- resource/aws_cloudwatch_metric_stream: Add `metric_names` to `include_filter` and `exclude_filter` configuration blocks ([#31288](https://togithub.com/hashicorp/terraform-provider-aws/issues/31288))
- resource/aws_dms_endpoint: Add ability to use the `db2-zos` IBM DB2 for z/OS engine ([#31291](https://togithub.com/hashicorp/terraform-provider-aws/issues/31291))
- resource/aws_fsx_ontap_file_system: Allow in-place update of `route_table_ids` ([#31251](https://togithub.com/hashicorp/terraform-provider-aws/issues/31251))
- resource/aws_fsx_ontap_file_system: Support setting `throughput_capacity` to `4096` ([#31251](https://togithub.com/hashicorp/terraform-provider-aws/issues/31251))
- resource/aws_rds_cluster: Add ability to specify Aurora IO Optimized `storage_type` ([#31336](https://togithub.com/hashicorp/terraform-provider-aws/issues/31336))
- resource/aws_s3\_bucket: Set `hosted_zone_id` for `cn-north-1` AWS China Region ([#31247](https://togithub.com/hashicorp/terraform-provider-aws/issues/31247))
BUG FIXES:
- resource/aws_appintegrations_data_integration: Correctly read `tags` into state ([#31241](https://togithub.com/hashicorp/terraform-provider-aws/issues/31241))
- resource/aws_config_remediation_configuration: Change `parameter` attribute to `TypeList` for better diff calculation ([#31315](https://togithub.com/hashicorp/terraform-provider-aws/issues/31315))
- resource/aws_iam_openid_connect_provider: Change `client_id_list` from `TypeList` to `TypeSet` as order is not significant ([#31253](https://togithub.com/hashicorp/terraform-provider-aws/issues/31253))
- resource/aws_servicecatalog_provisioned_product: Fix to properly send `stack_set_provisioned_preferences.0.accounts` on create and update ([#31293](https://togithub.com/hashicorp/terraform-provider-aws/issues/31293))
- resource/aws_servicecatalog_provisioned_product: Fix to properly set `stack_set_provisioned_preferences` integer types `failure_tolerance_count`, `failure_tolerance_percentage`, `max_concurrency_count`, `max_concurrency_percentage` ([#31289](https://togithub.com/hashicorp/terraform-provider-aws/issues/31289))
- resource/aws_ssm_activation: Fix various `ValidationException` errors on resource Create ([#31340](https://togithub.com/hashicorp/terraform-provider-aws/issues/31340))
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
4.66.1
->5.1.0
Release Notes
hashicorp/terraform-provider-aws
### [`v5.1.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#510-June-1-2023) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.0.1...v5.1.0) BREAKING CHANGES: - resource/aws_iam_role: The `role_last_used` attribute has been removed. Use the `aws_iam_role` data source instead. ([#31656](https://togithub.com/hashicorp/terraform-provider-aws/issues/31656)) NOTES: - resource/aws_autoscaling_group: The `load_balancers` and `target_group_arns` attributes have been changed to `Computed`. This means that omitting this argument is interpreted as ignoring any existing load balancer or target group attachments. To remove all load balancer or target group attachments an empty list should be specified. ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527)) - resource/aws_iam_role: The `role_last_used` attribute has been removed. Use the `aws_iam_role` data source instead. See the community feedback provided in the [linked issue](https://togithub.com/hashicorp/terraform-provider-aws/issues/30861) for additional justification on this change. As the attribute is read-only, unlikely to be used as an input to another resource, and available in the corresponding data source, a breaking change in a minor version was deemed preferable to a long deprecation/removal cycle in this circumstance. ([#31656](https://togithub.com/hashicorp/terraform-provider-aws/issues/31656)) - resource/aws_redshift_cluster: Ignores the parameter `aqua_configuration_status`, since the AWS API ignores it. Now always returns `auto`. ([#31612](https://togithub.com/hashicorp/terraform-provider-aws/issues/31612)) FEATURES: - **New Data Source:** `aws_vpclattice_resource_policy` ([#31372](https://togithub.com/hashicorp/terraform-provider-aws/issues/31372)) - **New Resource:** `aws_autoscaling_traffic_source_attachment` ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527)) - **New Resource:** `aws_emrcontainers_job_template` ([#31399](https://togithub.com/hashicorp/terraform-provider-aws/issues/31399)) - **New Resource:** `aws_glue_data_quality_ruleset` ([#31604](https://togithub.com/hashicorp/terraform-provider-aws/issues/31604)) - **New Resource:** `aws_quicksight_analysis` ([#31542](https://togithub.com/hashicorp/terraform-provider-aws/issues/31542)) - **New Resource:** `aws_quicksight_dashboard` ([#31448](https://togithub.com/hashicorp/terraform-provider-aws/issues/31448)) - **New Resource:** `aws_resourcegroups_resource` ([#31430](https://togithub.com/hashicorp/terraform-provider-aws/issues/31430)) ENHANCEMENTS: - data-source/aws_autoscaling_group: Add `traffic_source` attribute ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527)) - data-source/aws_opensearch_domain: Add `off_peak_window_options` attribute ([#35970](https://togithub.com/hashicorp/terraform-provider-aws/issues/35970)) - provider: Increases size of HTTP request bodies in logs to 1 KB ([#31718](https://togithub.com/hashicorp/terraform-provider-aws/issues/31718)) - resource/aws_appsync_graphql_api: Add `visibility` argument ([#31369](https://togithub.com/hashicorp/terraform-provider-aws/issues/31369)) - resource/aws_appsync_graphql_api: Add plan time validation for `log_config.cloudwatch_logs_role_arn` ([#31369](https://togithub.com/hashicorp/terraform-provider-aws/issues/31369)) - resource/aws_autoscaling_group: Add `traffic_source` configuration block ([#31527](https://togithub.com/hashicorp/terraform-provider-aws/issues/31527)) - resource/aws_cloudformation_stack_set: Add `managed_execution` argument ([#25210](https://togithub.com/hashicorp/terraform-provider-aws/issues/25210)) - resource/aws_fsx_ontap_volume: Add `skip_final_backup` argument ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_fsx_ontap_volume: Remove default value for `security_style` argument and mark as Computed ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_fsx_ontap_volume: Update `ontap_volume_type` attribute to be configurable ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_fsx_ontap_volume: `junction_path` is Optional ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_fsx_ontap_volume: `storage_efficiency_enabled` is Optional ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_grafana_workspace: Increase default Create and Update timeouts to 30 minutes ([#31422](https://togithub.com/hashicorp/terraform-provider-aws/issues/31422)) - resource/aws_lambda_invocation: Add lifecycle_scope CRUD to invoke on each resource state transition ([#29367](https://togithub.com/hashicorp/terraform-provider-aws/issues/29367)) - resource/aws_lambda_layer_version_permission: Add `skip_destroy` attribute ([#29571](https://togithub.com/hashicorp/terraform-provider-aws/issues/29571)) - resource/aws_lambda_provisioned_concurrency_configuration: Add `skip_destroy` argument ([#31646](https://togithub.com/hashicorp/terraform-provider-aws/issues/31646)) - resource/aws_opensearch_domain: Add `off_peak_window_options` configuration block ([#35970](https://togithub.com/hashicorp/terraform-provider-aws/issues/35970)) - resource/aws_sagemaker_endpoint_configuration: Add and `shadow_production_variants.serverless_config.provisioned_concurrency` arguments ([#31398](https://togithub.com/hashicorp/terraform-provider-aws/issues/31398)) - resource/aws_transfer_server: Add support for `TransferSecurityPolicy-2023-05` `security_policy_name` value ([#31536](https://togithub.com/hashicorp/terraform-provider-aws/issues/31536)) BUG FIXES: - data-source/aws_dx_connection: Fix the `vlan_id` being returned as null ([#31480](https://togithub.com/hashicorp/terraform-provider-aws/issues/31480)) - provider/tags: Fix crash when some `tags` are `null` and others are `computed` ([#31687](https://togithub.com/hashicorp/terraform-provider-aws/issues/31687)) - provider: Limits size of HTTP response bodies in logs to 4 KB ([#31718](https://togithub.com/hashicorp/terraform-provider-aws/issues/31718)) - resource/aws_autoscaling_group: Fix `The AutoRollback parameter cannot be set to true when the DesiredConfiguration parameter is empty` errors when refreshing instances ([#31715](https://togithub.com/hashicorp/terraform-provider-aws/issues/31715)) - resource/aws_autoscaling_group: Now ignores previous failed scaling activities ([#31551](https://togithub.com/hashicorp/terraform-provider-aws/issues/31551)) - resource/aws_cloudfront_distribution: Remove the upper limit on `origin_keepalive_timeout` ([#31608](https://togithub.com/hashicorp/terraform-provider-aws/issues/31608)) - resource/aws_connect_instance: Fix crash when reading instances with `CREATION_FAILED` status ([#31689](https://togithub.com/hashicorp/terraform-provider-aws/issues/31689)) - resource/aws_connect_security_profile: Set correct `tags` in state ([#31716](https://togithub.com/hashicorp/terraform-provider-aws/issues/31716)) - resource/aws_dx_connection: Fix the `vlan_id` being returned as null ([#31480](https://togithub.com/hashicorp/terraform-provider-aws/issues/31480)) - resource/aws_ecs_service: Fix crash when just `alarms` is updated ([#31683](https://togithub.com/hashicorp/terraform-provider-aws/issues/31683)) - resource/aws_fsx_ontap_volume: Change `storage_virtual_machine_id` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_fsx_ontap_volume: Change `volume_type` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#31544](https://togithub.com/hashicorp/terraform-provider-aws/issues/31544)) - resource/aws_kendra_index: Persist `user_group_resolution_mode` value to state after creation ([#31669](https://togithub.com/hashicorp/terraform-provider-aws/issues/31669)) - resource/aws_medialive_channel: Fix attribute spelling in `hls_cdn_settings` expand ([#31647](https://togithub.com/hashicorp/terraform-provider-aws/issues/31647)) - resource/aws_quicksight_data_set: Fix join_instruction not applied when creating dataset ([#31424](https://togithub.com/hashicorp/terraform-provider-aws/issues/31424)) - resource/aws_quicksight_data_set: Ignore failure to read refresh properties for non-SPICE datasets ([#31488](https://togithub.com/hashicorp/terraform-provider-aws/issues/31488)) - resource/aws_rbin_rule: Fix crash when multiple `resource_tags` blocks are configured ([#31393](https://togithub.com/hashicorp/terraform-provider-aws/issues/31393)) - resource/aws_rds_cluster: Correctly update `db_cluster_instance_class` ([#31709](https://togithub.com/hashicorp/terraform-provider-aws/issues/31709)) - resource/aws_redshift_cluster: No longer errors on deletion when status is `Maintenance` ([#31612](https://togithub.com/hashicorp/terraform-provider-aws/issues/31612)) - resource/aws_route53\_vpc_association_authorization: Fix `ConcurrentModification` error ([#31588](https://togithub.com/hashicorp/terraform-provider-aws/issues/31588)) - resource/aws_s3\_bucket_replication_configuration: Replication configs sometimes need more than a second or two. This resolves a race condition and adds retry logic when reading them. ([#30995](https://togithub.com/hashicorp/terraform-provider-aws/issues/30995)) ### [`v5.0.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#501-May-26-2023) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.0.0...v5.0.1) BUG FIXES: - provider/tags: Fix crash when tags are `null` ([#31587](https://togithub.com/hashicorp/terraform-provider-aws/issues/31587)) ### [`v5.0.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#500-May-25-2023) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v4.67.0...v5.0.0) BREAKING CHANGES: - data-source/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969)) - data-source/aws_connect_hours_of_operation: The `hours_of_operation_arn` attribute has been removed ([#31484](https://togithub.com/hashicorp/terraform-provider-aws/issues/31484)) - data-source/aws_db_instance: With the retirement of EC2-Classic the `db_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - data-source/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - data-source/aws_elasticache_replication_group: Remove `number_cache_clusters`, `replication_group_description` arguments -- use `num_cache_clusters`, and `description`, respectively, instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - data-source/aws_iam_policy_document: Don't add empty `statement.sid` values to `json` attribute value ([#28539](https://togithub.com/hashicorp/terraform-provider-aws/issues/28539)) - data-source/aws_iam_policy_document: `source_json` and `override_json` have been removed -- use `source_policy_documents` and `override_policy_documents`, respectively, instead ([#30829](https://togithub.com/hashicorp/terraform-provider-aws/issues/30829)) - data-source/aws_identitystore_group: The `filter` argument has been removed ([#31312](https://togithub.com/hashicorp/terraform-provider-aws/issues/31312)) - data-source/aws_identitystore_user: The `filter` argument has been removed ([#31312](https://togithub.com/hashicorp/terraform-provider-aws/issues/31312)) - data-source/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - data-source/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - data-source/aws_secretsmanager_secret: The `rotation_enabled`, `rotation_lambda_arn` and `rotation_rules` attributes have been removed ([#31487](https://togithub.com/hashicorp/terraform-provider-aws/issues/31487)) - data-source/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - provider: The `assume_role.duration_seconds`, `assume_role_with_web_identity.duration_seconds`, `s3_force_path_style`, `shared_credentials_file` and `skip_get_ec2_platforms` attributes have been removed ([#31155](https://togithub.com/hashicorp/terraform-provider-aws/issues/31155)) - provider: The `aws_subnet_ids` data source has been removed ([#31140](https://togithub.com/hashicorp/terraform-provider-aws/issues/31140)) - provider: With the retirement of EC2-Classic the `aws_db_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - provider: With the retirement of EC2-Classic the `aws_elasticache_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - provider: With the retirement of EC2-Classic the `aws_redshift_security_group` resource has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - provider: With the retirement of Macie Classic the `aws_macie_member_account_association` resource has been removed ([#31058](https://togithub.com/hashicorp/terraform-provider-aws/issues/31058)) - provider: With the retirement of Macie Classic the `aws_macie_s3_bucket_association` resource has been removed ([#31058](https://togithub.com/hashicorp/terraform-provider-aws/issues/31058)) - resource/aws_acmpca_certificate_authority: The `status` attribute has been removed ([#31084](https://togithub.com/hashicorp/terraform-provider-aws/issues/31084)) - resource/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969)) - resource/aws_autoscaling_attachment: `alb_target_group_arn` has been removed -- use `lb_target_group_arn` instead ([#30828](https://togithub.com/hashicorp/terraform-provider-aws/issues/30828)) - resource/aws_autoscaling_group: Remove deprecated `tags` attribute ([#30842](https://togithub.com/hashicorp/terraform-provider-aws/issues/30842)) - resource/aws_budgets_budget: The `cost_filters` attribute has been removed ([#31395](https://togithub.com/hashicorp/terraform-provider-aws/issues/31395)) - resource/aws_ce_anomaly_subscription: The `threshold` attribute has been removed ([#30374](https://togithub.com/hashicorp/terraform-provider-aws/issues/30374)) - resource/aws_cloudwatch_event_target: The `ecs_target.propagate_tags` attribute now has no default value ([#25233](https://togithub.com/hashicorp/terraform-provider-aws/issues/25233)) - resource/aws_codebuild_project: The `secondary_sources.auth` and `source.auth` attributes have been removed ([#31483](https://togithub.com/hashicorp/terraform-provider-aws/issues/31483)) - resource/aws_connect_hours_of_operation: The `hours_of_operation_arn` attribute has been removed ([#31484](https://togithub.com/hashicorp/terraform-provider-aws/issues/31484)) - resource/aws_connect_queue: The `quick_connect_ids_associated` attribute has been removed ([#31376](https://togithub.com/hashicorp/terraform-provider-aws/issues/31376)) - resource/aws_connect_routing_profile: The `queue_configs_associated` attribute has been removed ([#31376](https://togithub.com/hashicorp/terraform-provider-aws/issues/31376)) - resource/aws_db_instance: Remove `name` - use `db_name` instead ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_instance: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_db_instance: `id` is no longer the AWS database `identifier` - `id` is now the `dbi-resource-id`. Refer to `identifier` instead of `id` to use the database's identifier ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_default_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_dms_endpoint: `s3_settings.ignore_headers_row` has been removed ([#30452](https://togithub.com/hashicorp/terraform-provider-aws/issues/30452)) - resource/aws_docdb_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_ec2\_client_vpn_endpoint: The `status` attribute has been removed ([#31223](https://togithub.com/hashicorp/terraform-provider-aws/issues/31223)) - resource/aws_ec2\_client_vpn_network_association: The `security_groups` attribute has been removed ([#31396](https://togithub.com/hashicorp/terraform-provider-aws/issues/31396)) - resource/aws_ec2\_client_vpn_network_association: The `status` attribute has been removed ([#31223](https://togithub.com/hashicorp/terraform-provider-aws/issues/31223)) - resource/aws_ecs_cluster: The `capacity_providers` and `default_capacity_provider_strategy` attributes have been removed ([#31346](https://togithub.com/hashicorp/terraform-provider-aws/issues/31346)) - resource/aws_eip: With the retirement of EC2-Classic the `standard` domain is no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_eip_association: With the retirement of EC2-Classic the `standard` domain is no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_elasticache_replication_group: Remove `availability_zones`, `number_cache_clusters`, `replication_group_description` arguments -- use `preferred_cache_cluster_azs`, `num_cache_clusters`, and `description`, respectively, instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_elasticache_replication_group: Remove `cluster_mode` configuration block -- use top-level `num_node_groups` and `replicas_per_node_group` instead ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_kinesis_firehose_delivery_stream: Remove `s3_configuration` attribute from the root of the resource. `s3_configuration` is now a part of the following blocks: `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration` ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138)) - resource/aws_kinesis_firehose_delivery_stream: Remove `s3` as an option for `destination`. Use `extended_s3` instead ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138)) - resource/aws_kinesis_firehose_delivery_stream: Rename `extended_s3_configuration.0.s3_backup_configuration.0.buffer_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffer_interval` to `extended_s3_configuration.0.s3_backup_configuration.0.buffering_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141)) - resource/aws_kinesis_firehose_delivery_stream: Rename `redshift_configuration.0.s3_backup_configuration.0.buffer_size` and `redshift_configuration.0.s3_backup_configuration.0.buffer_interval` to `redshift_configuration.0.s3_backup_configuration.0.buffering_size` and `redshift_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141)) - resource/aws_kinesis_firehose_delivery_stream: Rename `s3_configuration.0.buffer_size` and `s3_configuration.0.buffer_internval` to `s3_configuration.0.buffering_size` and `s3_configuration.0.buffering_internval`, respectively ([#31141](https://togithub.com/hashicorp/terraform-provider-aws/issues/31141)) - resource/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_lightsail_instance: The `ipv6_address` attribute has been removed ([#31489](https://togithub.com/hashicorp/terraform-provider-aws/issues/31489)) - resource/aws_medialive_multiplex_program: The `statemux_settings` attribute has been removed. Use `statmux_settings` argument instead ([#31034](https://togithub.com/hashicorp/terraform-provider-aws/issues/31034)) - resource/aws_msk_cluster: The `broker_node_group_info.ebs_volume_size` attribute has been removed ([#31324](https://togithub.com/hashicorp/terraform-provider-aws/issues/31324)) - resource/aws_neptune_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_networkmanager_core_network: Removed `policy_document` argument -- use `aws_networkmanager_core_network_policy_attachment` resource instead ([#30875](https://togithub.com/hashicorp/terraform-provider-aws/issues/30875)) - resource/aws_rds_cluster: The `engine` argument is now required and has no default ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112)) - resource/aws_rds_cluster: `snapshot_identifier` change now properly forces replacement ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_rds_cluster_instance: The `engine` argument is now required and has no default ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112)) - resource/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_route: `instance_id` can no longer be set in configurations. Use `network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804)) - resource/aws_route_table: `route.*.instance_id` can no longer be set in configurations. Use `route.*.network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804)) - resource/aws_secretsmanager_secret: The `rotation_enabled`, `rotation_lambda_arn` and `rotation_rules` attributes have been removed ([#31487](https://togithub.com/hashicorp/terraform-provider-aws/issues/31487)) - resource/aws_security_group: With the retirement of EC2-Classic non-VPC security groups are no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_security_group_rule: With the retirement of EC2-Classic non-VPC security groups are no longer supported ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_servicecatalog_product: Changes to any `provisioning_artifact_parameters` arguments now properly trigger a replacement. This fixes incorrect behavior, but may technically be breaking for configurations expecting non-functional in-place updates. ([#31061](https://togithub.com/hashicorp/terraform-provider-aws/issues/31061)) - resource/aws_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_vpc_peering_connection_accepter: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_vpc_peering_connection_options: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) - resource/aws_wafv2\_web_acl: The `statement.managed_rule_group_statement.excluded_rule` and `statement.rule_group_reference_statement.excluded_rule` attributes have been removed ([#31374](https://togithub.com/hashicorp/terraform-provider-aws/issues/31374)) - resource/aws_wafv2\_web_acl_logging_configuration: The `redacted_fields.all_query_arguments`, `redacted_fields.body` and `redacted_fields.single_query_argument` attributes have been removed ([#31486](https://togithub.com/hashicorp/terraform-provider-aws/issues/31486)) NOTES: - data-source/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - data-source/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - data-source/aws_opensearch_domain: The `kibana_endpoint` attribute has been deprecated. All configurations using `kibana_endpoint` should be updated to use the `dashboard_endpoint` attribute instead ([#31490](https://togithub.com/hashicorp/terraform-provider-aws/issues/31490)) - data-source/aws_quicksight_data_set: The `tags_all` attribute has been deprecated and will be removed in a future version ([#31162](https://togithub.com/hashicorp/terraform-provider-aws/issues/31162)) - data-source/aws_redshift_service_account: The `aws_redshift_service_account` data source has been deprecated and will be removed in a future version. AWS documentation [states that](https://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-bucket-permissions) a [service principal name](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) should be used instead of an AWS account ID in any relevant IAM policy ([#31006](https://togithub.com/hashicorp/terraform-provider-aws/issues/31006)) - data-source/aws_service_discovery_service: The `tags_all` attribute has been deprecated and will be removed in a future version ([#31162](https://togithub.com/hashicorp/terraform-provider-aws/issues/31162)) - resource/aws_api_gateway_rest_api: Update configurations with `minimum_compression_size` set to pass the value as a string. Valid values remain the same. ([#30969](https://togithub.com/hashicorp/terraform-provider-aws/issues/30969)) - resource/aws_autoscaling_attachment: Update configurations to use `lb_target_group_arn` instead of `alb_target_group_arn` which has been removed ([#30828](https://togithub.com/hashicorp/terraform-provider-aws/issues/30828)) - resource/aws_db_event_subscription: Configurations that define `source_ids` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `source_ids = [aws_db_instance.example.id]` must be updated to `source_ids = [aws_db_instance.example.identifier]` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_instance: Configurations that define `replicate_source_db` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `replicate_source_db = aws_db_instance.example.id` must be updated to `replicate_source_db = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_instance: The change of what `id` is, namely, a DBI Resource ID now versus DB Identifier previously, has far-reaching consequences. Configurations that refer to, for example, `aws_db_instance.example.id` will now have errors and must be changed to use `identifier` instead, for example, `aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_instance_role_association: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_proxy_target: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_db_snapshot: Configurations that define `db_instance_identifier` using the `id` attribute of `aws_db_instance` must be updated to use `identifier` instead - for example, `db_instance_identifier = aws_db_instance.example.id` must be updated to `db_instance_identifier = aws_db_instance.example.identifier` ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_docdb_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_dx_gateway_association: The `vpn_gateway_id` attribute has been deprecated. All configurations using `vpn_gateway_id` should be updated to use the `associated_gateway_id` attribute instead ([#31384](https://togithub.com/hashicorp/terraform-provider-aws/issues/31384)) - resource/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_elasticache_replication_group: Update configurations to use `preferred_cache_cluster_azs` instead of the `availability_zones` argument ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_elasticache_replication_group: Update configurations to use top-level `num_node_groups` and `replicas_per_node_group` instead of `cluster_mode.0.num_node_groups` and `cluster_mode.0.replicas_per_node_group`, respectively ([#31008](https://togithub.com/hashicorp/terraform-provider-aws/issues/31008)) - resource/aws_flow_log: The `log_group_name` attribute has been deprecated. All configurations using `log_group_name` should be updated to use the `log_destination` attribute instead ([#31382](https://togithub.com/hashicorp/terraform-provider-aws/issues/31382)) - resource/aws_guardduty_organization_configuration: The `auto_enable` argument has been deprecated. Use the `auto_enable_organization_members` argument instead. ([#30736](https://togithub.com/hashicorp/terraform-provider-aws/issues/30736)) - resource/aws_neptune_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_networkmanager_core_network: Update configurations to use the `aws_networkmanager_core_network_policy_attachment` resource instead of the `policy_document` argument ([#30875](https://togithub.com/hashicorp/terraform-provider-aws/issues/30875)) - resource/aws_opensearch_domain: The `engine_version` attribute no longer has a default value. When omitted, the underlying AWS API will use the latest OpenSearch engine version. ([#31568](https://togithub.com/hashicorp/terraform-provider-aws/issues/31568)) - resource/aws_opensearch_domain: The `kibana_endpoint` attribute has been deprecated. All configurations using `kibana_endpoint` should be updated to use the `dashboard_endpoint` attribute instead ([#31490](https://togithub.com/hashicorp/terraform-provider-aws/issues/31490)) - resource/aws_rds_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. ([#29409](https://togithub.com/hashicorp/terraform-provider-aws/issues/29409)) - resource/aws_rds_cluster: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112)) - resource/aws_rds_cluster_instance: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster instance ([#31112](https://togithub.com/hashicorp/terraform-provider-aws/issues/31112)) - resource/aws_route: Since `instance_id` can no longer be set in configurations, use `network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804)) - resource/aws_route_table: Since `route.*.instance_id` can no longer be set in configurations, use `route.*.network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`. ([#30804](https://togithub.com/hashicorp/terraform-provider-aws/issues/30804)) - resource/aws_ssm_association: The `instance_id` attribute has been deprecated. All configurations using `instance_id` should be updated to use the `targets` attribute instead ([#31380](https://togithub.com/hashicorp/terraform-provider-aws/issues/31380)) ENHANCEMENTS: - provider: Allow `computed` `tags` on resources ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793)) - provider: Allow `default_tags` and resource `tags` to include zero values `""` ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793)) - provider: Duplicate `default_tags` can now be included and will be overwritten by resource `tags` ([#30793](https://togithub.com/hashicorp/terraform-provider-aws/issues/30793)) - resource/aws_db_instance: Updates to `identifier` and `identifier_prefix` will no longer cause the database instance to be destroyed and recreated ([#31232](https://togithub.com/hashicorp/terraform-provider-aws/issues/31232)) - resource/aws_eip: Deprecate `vpc` attribute. Use `domain` instead ([#31567](https://togithub.com/hashicorp/terraform-provider-aws/issues/31567)) - resource/aws_guardduty_organization_configuration: Add `auto_enable_organization_members` attribute ([#30736](https://togithub.com/hashicorp/terraform-provider-aws/issues/30736)) - resource/aws_kinesis_firehose_delivery_stream: Add `s3_configuration` to `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration` ([#31138](https://togithub.com/hashicorp/terraform-provider-aws/issues/31138)) - resource/aws_opensearch_domain: Removed `engine_version` default value ([#31568](https://togithub.com/hashicorp/terraform-provider-aws/issues/31568)) - resource/aws_wafv2\_web_acl: Support `rule_action_override` on `rule_group_reference_statement` ([#31374](https://togithub.com/hashicorp/terraform-provider-aws/issues/31374)) BUG FIXES: - resource/aws_ecs_capacity_provider: Allow an `instance_warmup_period` of `0` in the `auto_scaling_group_provider.managed_scaling` configuration block ([#24005](https://togithub.com/hashicorp/terraform-provider-aws/issues/24005)) - resource/aws_launch_template: Remove default values in `metadata_options` to allow default condition ([#30545](https://togithub.com/hashicorp/terraform-provider-aws/issues/30545)) - resource/aws_s3\_bucket: Fix bucket_regional_domain_name not including region for buckets in us-east-1 ([#25724](https://togithub.com/hashicorp/terraform-provider-aws/issues/25724)) - resource/aws_s3\_object: Remove `acl` default in order to work with S3 buckets that have ACL disabled ([#27197](https://togithub.com/hashicorp/terraform-provider-aws/issues/27197)) - resource/aws_s3\_object_copy: Remove `acl` default in order to work with S3 buckets that have ACL disabled ([#27197](https://togithub.com/hashicorp/terraform-provider-aws/issues/27197)) - resource/aws_servicecatalog_product: Changes to `provisioning_artifact_parameters` arguments now properly trigger a replacement ([#31061](https://togithub.com/hashicorp/terraform-provider-aws/issues/31061)) - resource/aws_vpc_peering_connection: Fix crash in `vpcPeeringConnectionOptionsEqual` ([#30966](https://togithub.com/hashicorp/terraform-provider-aws/issues/30966)) ### [`v4.67.0`](https://togithub.com/hashicorp/terraform-provider-aws/releases/tag/v4.67.0) [Compare Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v4.66.1...v4.67.0) NOTES: - resource/aws_lightsail_domain_entry: The `id` attribute is now comma-delimited ([#30820](https://togithub.com/hashicorp/terraform-provider-aws/issues/30820)) FEATURES: - **New Data Source:** `aws_connect_user` ([#26156](https://togithub.com/hashicorp/terraform-provider-aws/issues/26156)) - **New Data Source:** `aws_connect_vocabulary` ([#26158](https://togithub.com/hashicorp/terraform-provider-aws/issues/26158)) - **New Data Source:** `aws_organizations_policy` ([#30920](https://togithub.com/hashicorp/terraform-provider-aws/issues/30920)) - **New Data Source:** `aws_redshiftserverless_namespace` ([#31250](https://togithub.com/hashicorp/terraform-provider-aws/issues/31250)) - **New Resource:** `aws_quicksight_template` ([#30453](https://togithub.com/hashicorp/terraform-provider-aws/issues/30453)) - **New Resource:** `aws_quicksight_template_alias` ([#31310](https://togithub.com/hashicorp/terraform-provider-aws/issues/31310)) - **New Resource:** `aws_quicksight_vpc_connection` ([#31309](https://togithub.com/hashicorp/terraform-provider-aws/issues/31309)) ENHANCEMENTS: - aws_quicksight_data_set: Add support for configuring refresh properties ([#30744](https://togithub.com/hashicorp/terraform-provider-aws/issues/30744)) - data-source/aws_acmpca_certificate_authority: Add `key_storage_security_standard` attribute ([#31280](https://togithub.com/hashicorp/terraform-provider-aws/issues/31280)) - data-source/aws_elastic_beanstalk_hosted_zone: Add hosted zone ID for `ap-southeast-3` AWS Region ([#31248](https://togithub.com/hashicorp/terraform-provider-aws/issues/31248)) - data-source/aws_s3\_bucket: Set `hosted_zone_id` for `cn-north-1` AWS China Region ([#31247](https://togithub.com/hashicorp/terraform-provider-aws/issues/31247)) - resource/aws_acmpca_certificate_authority: Add `key_storage_security_standard` argument ([#31280](https://togithub.com/hashicorp/terraform-provider-aws/issues/31280)) - resource/aws_cloudwatch_metric_stream: Add `metric_names` to `include_filter` and `exclude_filter` configuration blocks ([#31288](https://togithub.com/hashicorp/terraform-provider-aws/issues/31288)) - resource/aws_dms_endpoint: Add ability to use the `db2-zos` IBM DB2 for z/OS engine ([#31291](https://togithub.com/hashicorp/terraform-provider-aws/issues/31291)) - resource/aws_fsx_ontap_file_system: Allow in-place update of `route_table_ids` ([#31251](https://togithub.com/hashicorp/terraform-provider-aws/issues/31251)) - resource/aws_fsx_ontap_file_system: Support setting `throughput_capacity` to `4096` ([#31251](https://togithub.com/hashicorp/terraform-provider-aws/issues/31251)) - resource/aws_rds_cluster: Add ability to specify Aurora IO Optimized `storage_type` ([#31336](https://togithub.com/hashicorp/terraform-provider-aws/issues/31336)) - resource/aws_s3\_bucket: Set `hosted_zone_id` for `cn-north-1` AWS China Region ([#31247](https://togithub.com/hashicorp/terraform-provider-aws/issues/31247)) BUG FIXES: - resource/aws_appintegrations_data_integration: Correctly read `tags` into state ([#31241](https://togithub.com/hashicorp/terraform-provider-aws/issues/31241)) - resource/aws_config_remediation_configuration: Change `parameter` attribute to `TypeList` for better diff calculation ([#31315](https://togithub.com/hashicorp/terraform-provider-aws/issues/31315)) - resource/aws_iam_openid_connect_provider: Change `client_id_list` from `TypeList` to `TypeSet` as order is not significant ([#31253](https://togithub.com/hashicorp/terraform-provider-aws/issues/31253)) - resource/aws_servicecatalog_provisioned_product: Fix to properly send `stack_set_provisioned_preferences.0.accounts` on create and update ([#31293](https://togithub.com/hashicorp/terraform-provider-aws/issues/31293)) - resource/aws_servicecatalog_provisioned_product: Fix to properly set `stack_set_provisioned_preferences` integer types `failure_tolerance_count`, `failure_tolerance_percentage`, `max_concurrency_count`, `max_concurrency_percentage` ([#31289](https://togithub.com/hashicorp/terraform-provider-aws/issues/31289)) - resource/aws_ssm_activation: Fix various `ValidationException` errors on resource Create ([#31340](https://togithub.com/hashicorp/terraform-provider-aws/issues/31340))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.