hashicorp/terraform-provider-aws (aws)
### [`v5.71.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5710-October-11-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.70.0...v5.71.0)
FEATURES:
- **New Data Source:** `aws_bedrock_inference_profile` ([#39342](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39342))
- **New Data Source:** `aws_bedrock_inference_profiles` ([#39342](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39342))
- **New Data Source:** `aws_elasticache_serverless_cache` ([#39590](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39590))
- **New Data Source:** `aws_prometheus_default_scraper_configuration` ([#35280](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35280))
- **New Data Source:** `aws_route53profiles_profiles` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172))
- **New Resource:** `aws_backup_restore_testing_plan` ([#37039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37039))
- **New Resource:** `aws_backup_restore_testing_selection` ([#37039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37039))
- **New Resource:** `aws_datazone_user_profile` ([#38810](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38810))
- **New Resource:** `aws_pinpointsmsvoicev2_configuration_set` ([#39620](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39620))
- **New Resource:** `aws_route53profiles_association` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172))
- **New Resource:** `aws_route53profiles_profile` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172))
- **New Resource:** `aws_route53profiles_resource_association` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172))
ENHANCEMENTS:
- data-source/aws_backup_plan: Add `rule.schedule_expression_timezone` attribute ([#33653](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33653))
- data-source/aws_eip: Add `ipam_pool_id` attribute ([#39604](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39604))
- data-source/aws_vpc_endpoint_service: Add `private_dns_names` attribute ([#39659](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39659))
- resource/aws_backup_plan: Add `rule.schedule_expression_timezone` argument ([#33653](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33653))
- resource/aws_batch_compute_environment: Add plan-time validation of `update_policy.job_execution_timeout_minutes` ([#39583](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39583))
- resource/aws_batch_job_definition: Suppress unnecessary differences in `container_properties.environment` ([#21834](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/21834))
- resource/aws_eip: Add `ipam_pool_id` argument in support of [public IPAM pools](https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-eip-pool.html) ([#39604](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39604))
- resource/aws_route53\_resolver_endpoint: Add `resolver_endpoint_type` argument
resource/aws_route53\_resolver_rule: Add `ipv6` optional argument to the `target_ip` object ([#30167](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/30167))
- resource/aws_vpc_ipam: Add `enable_private_gua` argument ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600))
- resource/aws_vpc_ipv6\_cidr_block_association: Add `ip_source` and `ipv6_address_attribute` attributes ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600))
BUG FIXES:
- resource/aws_backup_vault: Fix `empty result` errors reading vaults in certain Regions ([#39670](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39670))
- resource/aws_elasticache_replication_group: Fix `security_group_names` causing resource replacement after import ([#39591](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39591))
- resource/aws_instance: Fixed issues with `volume_tags`, `root_block_device.*.tags`, and `ebs_block_device.*.tags` where tags overlapped with default tags. These are now handled consistently with top-level tags throughout the provider. Specifically, tags defined in both locations are no longer removed, preventing erroneous differences. ([#37441](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37441))
- resource/aws_sagemaker_workteam: Mark `workforce_name` as Optional ([#39630](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39630))
- resource/aws_securityhub_automation_rule: Increase `criteria.aws_account_id`, `criteria.generator_id`, `criteria.resource_id`, and `criteria.title` max length from `20` to `100` ([#39616](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39616))
- resource/aws_vpc_ipam_pool: Change `publicly_advertisable` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600))
- resource/aws_vpc_ipam_pool: Fix `InvalidParameterCombination: The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip` errors ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600))
### [`v5.70.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5700-October-4-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.69.0...v5.70.0)
NOTES:
- resource/aws_s3\_bucket_lifecycle_configuration: Amazon S3 now applies a default minimum object size of 128 KB for S3 Lifecycle transition rules to any S3 storage class. This new default behavior will be applied to any new or modified S3 Lifecycle configuration. You can override this new default and customize the minimum object size for S3 Lifecycle transition rules to any value ([#39578](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39578))
- resource/aws_simpledb_domain: The `aws_simpledb_domain` resource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead ([#39536](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39536))
- resource/aws_worklink_fleet: The `aws_worklink_fleet` resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead ([#39538](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39538))
- resource/aws_worklink_website_certificate_authority_association: The `aws_worklink_website_certificate_authority_association` resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead ([#39538](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39538))
FEATURES:
- **New Resource:** `aws_backup_logically_air_gapped_vault` ([#39098](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39098))
- **New Resource:** `aws_ec2_transit_gateway_default_route_table_association` ([#39496](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39496))
- **New Resource:** `aws_ec2_transit_gateway_default_route_table_propagation` ([#39517](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39517))
- **New Resource:** `aws_iam_group_policies_exclusive` ([#39554](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39554))
- **New Resource:** `aws_iam_user_policies_exclusive` ([#39544](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39544))
- **New Resource:** `aws_securityhub_standards_control_association` ([#39511](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39511))
ENHANCEMENTS:
- data-source/aws_ebs_snapshot: Add `start_time` attribute ([#39557](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39557))
- resource/aws_bedrockagent_agent_action_group: Add `prepare_agent` argument ([#39486](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39486))
- resource/aws_bedrockagent_data_source: Add `vector_ingestion_configuration.custom_transformation_configuration` argument ([#39556](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39556))
- resource/aws_globalaccelerator_endpoint_group: Add `endpoint_configuration.attachment_arn` argument ([#39507](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39507))
- resource/aws_lambda_code_signing_config: Add `tags` argument and `tags_all` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535))
- resource/aws_lambda_event_source_mapping: Add `arn` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535))
- resource/aws_lambda_event_source_mapping: Add `tags` argument and `tags_all` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535))
- resource/aws_s3\_bucket_lifecycle_configuration: Add `transition_default_minimum_object_size` argument ([#39578](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39578))
BUG FIXES:
- resource/aws_bedrockagent_agent: Fix "Provider produced inconsistent result after apply" error on update due to `customer_encryption_key_arn` not being passed during update ([#39565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39565))
- resource/aws_bedrockagent_agent: Fix "Provider produced inconsistent result after apply" error on update due to `prompt_override_configuration` not being passed when not modified ([#39565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39565))
- resource/aws_bedrockagent_knowledge_base: Change `knowledge_base_configuration` and `storage_configuration` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39567))
- resource/aws_ec2\_transit_gateway_vpc_attachment: Remove default value for `security_group_referencing_support` argument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) ([#39519](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39519))
- resource/aws_opensearchserverless_lifecycle_policy: Fix "Provider produced inconsistent result after apply" error on update due to `policy_version` computed attribute changing ([#39528](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39528))
- resource/aws_opensearchserverless_security_policy: Fix "Provider produced inconsistent result after apply" error on update due to `policy_version` computed attribute changing ([#39528](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39528))
- resource/aws_quicksight_dashboard: Fix mapping of `sheets.filter_controls.list.cascading_control_configuration` and `sheets.parameter_controls.list.cascading_control_configuration` attributes ([#39453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39453))
### [`v5.69.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5690-September-26-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.68.0...v5.69.0)
NOTES:
- provider: This release contains an upstream AWS SDK for Go v2 [change](https://redirect.github.com/aws/aws-sdk-go-v2/issues/2807) to DynamoDB service endpoints. The Terraform AWS Provider will now connect to a DynamoDB endpoint in the format [`(account-id).ddb.(region).amazonaws.com`](https://docs.aws.amazon.com/sdkref/latest/guide/feature-account-endpoints.html) instead of `dynamodb.(region).amazonaws.com`. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by setting `account_id_endpoint_mode = disabled` in a [shared config file](https://docs.aws.amazon.com/sdkref/latest/guide/settings-reference.html#ConfigFileSettings) or setting the `AWS_ACCOUNT_ID_ENDPOINT_MODE` [environment variable](https://docs.aws.amazon.com/sdkref/latest/guide/settings-reference.html#EVarSettings) to `disabled` ([#39505](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39505))
- provider: Updates to Go `1.23.1`. The issue with AWS Network Firewall dropping TLS handshake `ClientHello` messages after the **v5.65.0** upgrade to Go `1.23.0`, temporarily resolved by the **v5.67.0** downgrade to Go `1.22.7`, has been addressed by removing the `X25519Kyber768Draft00` key exchange mechanism from the HTTP client used to make AWS API calls ([#39432](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39432))
- resource/aws_alb_listener: When importing a listener that has either a default action top-level target group ARN or a default action defining a forward action defining a target group with an ARN, include both in the configuration to avoid import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_lb_listener: When importing a listener that has either a default action top-level target group ARN or a default action defining a forward action defining a target group with an ARN, include both in the configuration to avoid import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
ENHANCEMENTS:
- data-source/aws_connect_instance: Add `tags` attribute ([#39402](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39402))
- data-source/aws_ec2\_transit_gateway: Add `security_group_referencing_support` attribute ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542))
- data-source/aws_ec2\_transit_gateway_vpc_attachment: Add `security_group_referencing_support` attribute ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542))
- data-source/aws_opensearchserverless_collection: Add `failure_code` and `failure_reason` attributes ([#38995](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38995))
- resource/aws_bedrockagent_agent: Add `guardrail_configuration` argument ([#39440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39440))
- resource/aws_connect_instance: Add `tags` argument and `tags_all` attribute ([#39402](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39402))
- resource/aws_ec2\_transit_gateway: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542))
- resource/aws_ec2\_transit_gateway_vpc_attachment: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542))
- resource/aws_ec2\_transit_gateway_vpc_attachment_accepter: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542))
- resource/aws_ecs_service: Add `volume_configuration.managed_ebs_volume.tag_specifications` attribute ([#38662](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38662))
- resource/aws_identitystore_group: Allow `display_name` to be updated in-place ([#39416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39416))
- resource/aws_kinesis_stream: Tag on Create to support attribute-based access control (ABAC) ([#39504](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39504))
- resource/aws_quicksight_data_source: Add `credentials.secret_arn` argument ([#29034](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29034))
BUG FIXES:
- data-source/aws_opensearchserverless_vpc_endpoint: Correctly set `security_group_ids`. This requires a call to the EC2 `DescribeVpcEndpoints` API ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454))
- data-source/aws_region: Fix lookups for the `ap-southeast-5` Region ([#39389](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39389))
- resource/aws_alb_listener: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_alb_listener: Remove the limitation preventing setting both default_action.0.target_group_arn and default_action.0.forward to align with the AWS API which allows you to specify both a target group list and a top-level target group ARN if the ARNs match ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_db_instance: Allow replica database to be added to domain on create ([#39448](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39448))
- resource/aws_db_instance_role_association: Fix intermittent failure when instance is not in an available state ([#39457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39457))
- resource/aws_dynamodb_tag: Fix propagation timeout when multiple tags exist ([#39491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39491))
- resource/aws_ecs_cluster: Fix validation error with `name` attribute. ([#38993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38993))
- resource/aws_ecs_cluster_capacity_providers: Fix validation error with `name` attribute. ([#38993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38993))
- resource/aws_iam_role: Retry `ConcurrentModificationException`s during role creation ([#39429](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39429))
- resource/aws_inspector2\_enabler: Fix `AccessDeniedException: Lambda code scanning is not supported in ...` errors ([#38254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38254))
- resource/aws_inspector2\_member_association: Improve handling of `AccessDeniedException` errors during creation ([#38254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38254))
- resource/aws_lb_listener: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_lb_listener: Remove the limitation preventing setting both default_action.0.target_group_arn and default_action.0.forward to align with the AWS API which allows you to specify both a target group list and a top-level target group ARN if the ARNs match ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_lb_listener_rule: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_lb_target_group: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413))
- resource/aws_medialive_multiplex: Fix to properly handle read failures during delete operations which were previously ignored ([#39498](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39498))
- resource/aws_opensearchserverless_vpc_endpoint: Change `name` and `vpc_id` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454))
- resource/aws_opensearchserverless_vpc_endpoint: Correctly set `security_group_ids`. This requires a call to the EC2 `DescribeVpcEndpoints` API ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454))
- resource/aws_rds_cluster_role_association: Fix intermittent failure when cluster is not in an available state ([#39457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39457))
- resource/aws_vpc_dhcp_options: Fix a bug causing a panic crash when an option is absent ([#39427](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39427))
### [`v5.68.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5680-September-19-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.67.0...v5.68.0)
NOTES:
- resource/aws_iam_role: The `inline_policy` argument is deprecated. Use the `aws_iam_role_policy` resource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use the `aws_iam_role_policies_exclusive` resource as well. ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203))
- resource/aws_lexv2models_slot_type: Within the `composite_slot_type_setting` block, the `subslots` argument has been renamed `sub_slots`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39353) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39353))
FEATURES:
- **New Data Source:** `aws_elasticache_reserved_cache_node_offering` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832))
- **New Data Source:** `aws_securityhub_standards_control_associations` ([#39334](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39334))
- **New Data Source:** `aws_synthetics_runtime_version` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180))
- **New Data Source:** `aws_synthetics_runtime_versions` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180))
- **New Resource:** `aws_appsync_source_api_association` ([#39323](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39323))
- **New Resource:** `aws_elasticache_reserved_cache_node` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832))
- **New Resource:** `aws_iam_role_policies_exclusive` ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203))
- **New Resource:** `aws_pinpointsmsvoicev2_opt_out_list` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036))
- **New Resource:** `aws_pinpointsmsvoicev2_phone_number` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036))
- **New Resource:** `aws_sesv2_account_suppression_attributes` ([#39325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39325))
ENHANCEMENTS:
- resource/aws_s3\_bucket_server_side_encryption_configuration: S3 directory buckets now support SSE-KMS ([#39366](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39366))
- resource/aws_ses_receipt_rule: Add `iam_role_arn` argument to `s3_action` configuration block ([#39364](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39364))
- resource/aws_synthetics_canary: Increase maximum `name` length to 255 characters ([#39315](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39315))
BUG FIXES:
- provider: Allows `assume_role.role_arn` to be an empty string when there is a single `assume_role` entry. ([#39328](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39328))
- resource/aws_amplify_app: Fix failure when unsetting the `environment_variables` argument ([#39397](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39397))
- resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting ([#31284](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31284))
- resource/aws_dynamodb_table: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_dynamodb_table_replica: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_dynamodb_tag: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_mq_broker: Fix `engine_version` mismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above ([#39024](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39024))
- resource/aws_mwaa_environment: Fix creating environments with `endpoint_management = "CUSTOMER"` ([#39394](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39394))
- resource/aws_opensearchserverless_access_policy: Fix incompatible type error when setting `policy` ([#39322](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39322))
### [`v5.67.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5670-September-12-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.66.0...v5.67.0)
BREAKING CHANGES:
- resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy` ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254))
NOTES:
- provider: Downgrades to Go `1.22.6`. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go `1.23.0` (`v5.65.0`). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go `1.22.6` for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. ([#39256](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39256))
- resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39254) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254))
FEATURES:
- **New Data Source:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- **New Resource:** `aws_cloudformation_stack_instances` ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794))
- **New Resource:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- **New Resource:** `aws_computeoptimizer_enrollment_status` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349))
- **New Resource:** `aws_computeoptimizer_recommendation_preferences` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349))
- **New Resource:** `aws_costoptimizationhub_enrollment_status` ([#36440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36440))
- **New Resource:** `aws_costoptimizationhub_preferences` ([#36526](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36526))
- **New Resource:** `aws_datazone_asset_type` ([#38812](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38812))
- **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581))
- **New Resource:** `aws_lambda_function_recursion_config` ([#39153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39153))
ENHANCEMENTS:
- data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags ([#31453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31453))
- data-source/aws_kinesis_stream: Add `encryption_type` and `kms_key_id` attributes ([#39212](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39212))
- datasource/aws_cognito_user_pool: Deprecates `user_pool_tags` in favor of standard `tags`. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- provider: Adds support for IAM role chaining. The provider attribute `assume_role` now accepts multiple elements. ([#39255](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39255))
- resource/aws_amplify_app: Add `cache_config` argument ([#39215](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39215))
- resource/aws_cloudhsm_v2\_cluster: Add `mode` argument ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206))
- resource/aws_cloudhsm_v2\_cluster: Support `hsm2m.medium` as a valid value for `hsm_type` ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206))
- resource/aws_codebuild_project: Add `fleet` attribute in `environment` configuration block ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- resource/aws_kinesis_firehose_delivery_stream: Add `snowflake_configuration.buffering_internal` and `snowflake_configuration.buffering_size` arguments ([#39214](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39214))
- resource/aws_quicksight_user: Add `READER_PRO`, `AUTHOR_PRO`, and `ADMIN_PRO` as valid values for the `user_role` argument ([#39220](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39220))
- resource/aws_sagemaker_domain: Add `default_user_settings.domain_settings.docker_settings` configuration block ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416))
- resource/aws_sagemaker_domain: Add `default_user_settings.studio_web_portal_settings`, `default_space_settings.jupyter_lab_app_settings`, `default_space_settings.space_storage_settings`, `default_space_settings.custom_posix_user_config`, and `default_space_settings.custom_file_system_config` configuration blocks ([#38457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38457))
- resource/aws_sagemaker_endpoint_configuration: Add `production_variants.managed_instance_scaling` and `shadow_production_variants.managed_instance_scaling` configuration blocks ([#35479](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35479))
- resource/aws_sagemaker_model: Add `primary_container.inference_specification_name` and `container.inference_specification_name` arguments ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873))
- resource/aws_sagemaker_model: Add `primary_container.model_data_source.s3_data_source.model_access_config`, `primary_container.multi_model_config`, `container.model_data_source.s3_data_source.model_access_config`, and `container.multi_model_config` configuration blocks ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873))
- resource/aws_sagemaker_user_profile: Add `user_settings.studio_web_portal_settings` configuration block ([#38567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38567))
- resource/aws_sfn_state_machine: Add plan-time validation of `definition` using the AWS Step Functions [Validation API](https://docs.aws.amazon.com/step-functions/latest/apireference/API_ValidateStateMachineDefinition.html) ([#39229](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39229))
BUG FIXES:
- data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183))
- datasource/aws_cognito_user_pool: Fixes value conversion error. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- provider: Fix empty tags drift on fwprovider resources ([#38636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38636))
- resource/aws_batch_job_queue: Fixes error in schema migration function. ([#39257](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39257))
- resource/aws_cognito_user_pool: Correctly unsets tags. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- resource/aws_ecr_repository_policy: Fix retry logic handling eventual consistency of newly created IAM roles ([#39190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39190))
- resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183))
- resource/aws_iam_role: Fix to reduce Terraform reporting differences when a role's ARN temporarily appears as the role's unique ID ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794))
- resource/aws_networkfirewall_tls_inspection_configuration: Fix issue where `check_certificate_revovation_status` is ignored due to bad autoflex field mapping ([#39211](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39211))
- resource/aws_networkmonitor_monitor: Fixes error when optional attribute `aggregation_period` not set. ([#39279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39279))
- resource/aws_quicksight_data_set: Change `permissions.actions` `MaxItems` from `16` to `20`. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39226](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39226))
- resource/aws_quicksight_vpc_connection: Remove `vpc_connection_id` regular expression validator. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39231](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39231))
- resource/aws_sagemaker_domain: Fix update for `default_user_settings.domain_settings` to include missing `security_group_ids` and `r_studio_server_pro_domain_settings` values ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416))
- resource/aws_sesv2\_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list ([#29671](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29671))
- resource/aws_sesv2\_configuration_set_event_destination: Change `event_destination.matching_event_types` from `TypeList` to `TypeSet` as order is not significant ([#36897](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36897))
- resource/aws_verifiedaccess_endpoint: fix crash when updating `load_balancer_options.subnet_ids` ([#39196](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39196))
### [`v5.66.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5660-September-5-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.65.0...v5.66.0)
FEATURES:
- **New Data Source:** `aws_glue_registry` ([#37953](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37953))
- **New Data Source:** `aws_organizations_organizational_unit_descendant_organizational_units` ([#39120](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39120))
- **New Data Source:** `aws_quicksight_analysis` ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737))
- **New Resource:** `aws_datazone_environment` ([#38811](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38811))
ENHANCEMENTS:
- data-source/aws_sns_topic: Add `tags` attribute ([#38959](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38959))
- data-source/aws_transfer_server: Add `tags` attribute ([#39092](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39092))
- resource/aws_appsync_graphql_api: Add `api_type` and `merged_api_execution_role_arn` arguments ([#39159](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39159))
- resource/aws_bedrockagent_data_source: Add `vector_ingestion_configuration.chunking_configuration.semantic_chunking_configuration`, `vector_ingestion_configuration.chunking_configuration.hierarchical_chunking_configuration`, and `vector_ingestion_configuration.parsing_configuration` configuration blocks ([#39138](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39138))
- resource/aws_datazone_domain: Add `skip_deletion_protection` attribute ([#38811](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38811))
- resource/aws_docdbelastic_cluster: Add `backup_retention_period` and `preferred_backup_window` attributes ([#38452](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38452))
- resource/aws_quicksight_data_source: Add `parameters.databricks` argument ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737))
- resource/aws_rolesanywhere_trust_anchor: Add `notification_settings` argument ([#39108](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39108))
- resource/aws_sagemaker_endpoint: Increase Create and Update `InService` timeouts to 60 minutes ([#39090](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39090))
- resource/aws_wafv2\_rule_group: Reduce `rate_based_statement.limit` minimum from `100` to `10` ([#39107](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39107))
- resource/aws_wafv2\_web_acl: Reduce `rate_based_statement.limit` minimum from `100` to `10` ([#39107](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39107))
BUG FIXES:
- data-source/aws_networkmanager_core_network_policy_document: Change `segment_actions.via.with_edge_override.use_edge` to be nested set of edges, matching JSON ([#39142](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39142))
- data-source/aws_networkmanager_core_network_policy_document: Deprecate `segment_actions.via.with_edge_override.use_edge`. Use `segment_actions.via.with_edge_override.use_edge_location` instead ([#39142](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39142))
- many resources: Fixes perpetual diff when tag has a `null` value. ([#38869](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38869))
- resource/aws_appconfig_extension: Mark `role_arn` as Optional ([#38900](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38900))
- resource/aws_lexv2models_slot_type: Fix `slot_type_values` validator which limited configurations to 1 element ([#39126](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39126))
- resource/aws_quicksight_analysis: Properly send `theme_arn` argument on create and update when configured ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737))
- resource/aws_rolesanywhere_profile: Mark `role_arns` as Optional and send an empty list if unconfigured ([#39108](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39108))
- resource/aws_synthetics_canary: Remove `run_config.timeout_in_seconds` default value to allow creation of resources with a frequency less than 14 minutes ([#35177](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35177))
### [`v5.65.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5650-August-29-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.64.0...v5.65.0)
NOTES:
- provider: Updates to Go 1.23. We do not expect this change to impact most users. For macOS, Go 1.23 requires macOS 11 Big Sur or later; support for previous versions has been discontinued. ([#38999](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38999))
FEATURES:
- **New Data Source:** `aws_shield_protection` ([#37524](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37524))
- **New Resource:** `aws_glue_catalog_table_optimizer` ([#38052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38052))
ENHANCEMENTS:
- data-source/aws_elb_hosted_zone_id: Add hosted zone ID for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052))
- data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052))
- data-source/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052))
- provider: Support `ap-southeast-5` as a valid AWS Region ([#39049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39049))
- resource/aws_cognito_user_pool: Add `password_policy.password_history_size` argument ([#39043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39043))
- resource/aws_elastic_beanstalk_application_version: Add `process` argument ([#25468](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25468))
- resource/aws_elasticsearch_domain: Treat `SUCCEEDED_WITH_ISSUES` status as success when upgrading cluster ([#38086](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38086))
- resource/aws_emr_cluster: Support `io2` as a valid value for `ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740))
- resource/aws_emr_instance_fleet: Support `io2` as a valid value for `instance_type_configs.ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740))
- resource/aws_emr_instance_group: Support `io2` as a valid value for `instance_type_configs.ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740))
- resource/aws_glue_job: Add `job_run_queuing_enabled` argument ([#39027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39027))
- resource/aws_lambda_event_source_mapping: Add `kms_key_arn` argument ([#39055](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39055))
- resource/aws_verifiedaccess_endpoint: Set PolicyEnabled flag to `false` on update if `policy_document` is empty ([#38675](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38675))
BUG FIXES:
- resource/aws_amplify_app: Fix crash updating `auto_branch_creation_config` ([#39041](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39041))
- resource/aws_elasticsearch_domain_policy: Change `domain_name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#38086](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38086))
- resource/aws_elbv2\_listener: Fix crash when reading forward actions not configured in state ([#39039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39039))
- resource/aws_emr_instance_group: Properly send an `instance_count` value of `0` on create when configured ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740))
- resource/aws_gamelift_game_server_group: Fix crash while reading server group with a nil auto scaling group ARN ([#39022](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39022))
- resource/aws_guardduty_invite_accepter: Fix `BadRequestException: The request is rejected because an invalid or out-of-range value is specified as an input parameter` errors on resource Create ([#39084](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39084))
- resource/aws_lakeformation_permissions: Fix error when revoking `data_cells_filter` permissions ([#39026](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39026))
- resource/aws_neptune_cluster: Mark `neptune_cluster_parameter_group_name` as Computed ([#38980](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38980))
- resource/aws_neptune_cluster_instance: Mark `neptune_parameter_group_name` as Computed ([#38980](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38980))
- resource/aws_ssm_parameter: Fix `ValidationException: Parameter ARN is not supported for this operation` errors when deleting resources imported by ARN ([#39067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39067))
### [`v5.64.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5640-August-22-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.63.1...v5.64.0)
ENHANCEMENTS:
- data-source/aws_opensearch_domain: Add `dashboard_endpoint_v2`, `domain_endpoint_v2_hosted_zone_id`, and `endpoint_v2` attributes ([#38456](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38456))
- resource/aws_appautoscaling_target: Add `suspended_state` configuration block ([#38942](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38942))
- resource/aws_dynamodb_table: Add `restore_source_table_arn` attribute ([#38953](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38953))
- resource/aws_opensearch_domain: Add `dashboard_endpoint_v2`, `domain_endpoint_v2_hosted_zone_id`, and `endpoint_v2` attributes ([#38456](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38456))
BUG FIXES:
- resource/aws_bedrockagent_agent: Fixes consistency issues where only some prompts are overridden ([#38944](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38944))
- resource/aws_cloudformation_stack_set_instance: Fix crash during construction of the `id` attribute when `deployment_targets` does not include organizational unit IDs. ([#38969](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38969))
- resource/aws_glue_trigger: Fix crash when null `action` is configured ([#38994](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38994))
- resource/aws_rds_cluster: Allow Web Service Data API (`enabled_http_endpoint`) to be enabled and disabled for `provisioned` engine mode and serverlessv2 ([#38997](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38997))
### [`v5.63.1`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5631-August-20-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.63.0...v5.63.1)
FEATURES:
- **New Data Source:** `aws_route53_zones` ([#17457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/17457))
- **New Data Source:** `aws_ssoadmin_permission_sets` ([#38741](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38741))
ENHANCEMENTS:
- data-source/aws_batch_job_queue: Add `job_state_time_limit_action` attribute ([#38784](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38784))
- resource/aws_batch_job_definition: Add `ecs_properties` argument ([#37871](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37871))
- resource/aws_batch_job_queue: Add `job_state_time_limit_action` argument ([#38784](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38784))
BUG FIXES:
- provider: Fix crash when flattening string pointer slices with nil items ([#38886](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38886))
- resource/aws_datazone_project: Properly surface import `id` parsing errors ([#38924](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38924))
- resource/aws_quicksight_data_set: Fix crash when setting `logical_table_map.data_transforms.project_operation.projected_columns` with null list elements ([#38886](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38886))
- resource/aws_ses_configuration_set: Fix crash when `reputation_metrics_enabled` is set to `true` ([#38921](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38921))
### [`v5.63.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5630-August-15-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.62.0...v5.63.0)
FEATURES:
- **New Data Source:** `aws_bedrockagent_agent_versions` ([#38792](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38792))
- **New Resource:** `aws_bedrock_guardrail` ([#38757](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38757))
- **New Resource:** `aws_cloudtrail_organization_delegated_admin_account` ([#38817](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38817))
- **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581))
- **New Resource:** `aws_datazone_form_type` ([#38746](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38746))
- **New Resource:** `aws_datazone_glossary_term` ([#38706](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38706))
- **New Resource:** `aws_pinpoint_email_template` ([#33266](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33266))
ENHANCEMENTS:
- resource/aws_networkfirewall_logging_configuration: Change `logging_configuration.log_destination_config` `MaxItems` from `2` to `3` ([#38824](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38824))
BUG FIXES:
- data-source/aws_acm_certificate: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_appstream_stack: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_bedrockagent_agent_knowledge_base_association: Prepare agent when associating a knowledge base so it can be used ([#38799](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38799))
- resource/aws_cloudwatch_event_connection: Fix various expander type assertions to prevent crashes ([#38800](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38800))
- resource/aws_controltower_landing_zone: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_db_event_subscription: Fix plan-time validation of `name` and `name_prefix` ([#38194](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38194))
- resource/aws_ecs_cluster_capacity_providers: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_ecs_service: Fix crash from nil `service_registries` item ([#38883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38883))
- resource/aws_ecs_task_definition: Fix perpetual `container_definitions` diffs on `healthCheck`'s default values ([#38872](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38872))
- resource/aws_ecs_task_definition: Prevent lowercasing of the first character of JSON keys in `container_definitions.dockerLabels` ([#38804](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38804))
- resource/aws_ecs_task_definition: Remove `null`s from `container_definition` array fields ([#38870](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38870))
- resource/aws_elasticache_replication_group: Fix crash when setting `replicas_per_node_group` if node groups are empty ([#38797](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38797))
- resource/aws_fms_policy: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_grafana_workspace: Fix crash when empty `network_access_control` block is configured ([#38775](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38775))
- resource/aws_grafana_workspace: Fix crash when empty `vpc_configuration` block is configured ([#38775](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38775))
- resource/aws_iot_thing_group: Fix crash when empty `attribute_payload` block is configured ([#38776](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38776))
- resource/aws_lexv2models_slot_type: Fix slot_type_values to have sample_value attribute ([#38856](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38856))
- resource/aws_networkmanager_connect_peer: Set all `configuration.bgp_configurations` on Read ([#38798](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38798))
- resource/aws_redshift_cluster: Set `encrypted` on snapshot restore, when enabled ([#38828](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38828))
- resource/aws_rolesanywhere_profile: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_rolesanywhere_trust_anchor: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
- resource/aws_s3\_bucket_lifecycle_configuration: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854))
### [`v5.62.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5620-August-8-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.61.0...v5.62.0)
FEATURES:
- **New Data Source:** `aws_rds_cluster_parameter_group` ([#38416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38416))
- **New Data Source:** `aws_secretsmanager_secret_versions` ([#35411](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35411))
- **New Resource:** `aws_ebs_snapshot_block_public_access` ([#38641](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38641))
- **New Resource:** `aws_rds_integration` ([#35199](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35199))
ENHANCEMENTS:
- data-source/aws_s3\_bucket_object: Expand content types that can be read from S3 to include include `application/x-sql` ([#38737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38737))
- data-source/aws_s3\_object: Expand content types that can be read from S3 to include `application/x-sql` ([#38737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38737))
- provider: Allow `default_tags` to be set by environment variables ([#33339](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33339))
- provider: Allow `ignore_tags.keys` and `ignore_tags.key_prefixes` to be set by environment
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
5.43.0
->5.71.0
Release Notes
hashicorp/terraform-provider-aws (aws)
### [`v5.71.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5710-October-11-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.70.0...v5.71.0) FEATURES: - **New Data Source:** `aws_bedrock_inference_profile` ([#39342](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39342)) - **New Data Source:** `aws_bedrock_inference_profiles` ([#39342](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39342)) - **New Data Source:** `aws_elasticache_serverless_cache` ([#39590](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39590)) - **New Data Source:** `aws_prometheus_default_scraper_configuration` ([#35280](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35280)) - **New Data Source:** `aws_route53profiles_profiles` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172)) - **New Resource:** `aws_backup_restore_testing_plan` ([#37039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37039)) - **New Resource:** `aws_backup_restore_testing_selection` ([#37039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37039)) - **New Resource:** `aws_datazone_user_profile` ([#38810](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38810)) - **New Resource:** `aws_pinpointsmsvoicev2_configuration_set` ([#39620](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39620)) - **New Resource:** `aws_route53profiles_association` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172)) - **New Resource:** `aws_route53profiles_profile` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172)) - **New Resource:** `aws_route53profiles_resource_association` ([#38172](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38172)) ENHANCEMENTS: - data-source/aws_backup_plan: Add `rule.schedule_expression_timezone` attribute ([#33653](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33653)) - data-source/aws_eip: Add `ipam_pool_id` attribute ([#39604](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39604)) - data-source/aws_vpc_endpoint_service: Add `private_dns_names` attribute ([#39659](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39659)) - resource/aws_backup_plan: Add `rule.schedule_expression_timezone` argument ([#33653](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33653)) - resource/aws_batch_compute_environment: Add plan-time validation of `update_policy.job_execution_timeout_minutes` ([#39583](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39583)) - resource/aws_batch_job_definition: Suppress unnecessary differences in `container_properties.environment` ([#21834](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/21834)) - resource/aws_eip: Add `ipam_pool_id` argument in support of [public IPAM pools](https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-eip-pool.html) ([#39604](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39604)) - resource/aws_route53\_resolver_endpoint: Add `resolver_endpoint_type` argument resource/aws_route53\_resolver_rule: Add `ipv6` optional argument to the `target_ip` object ([#30167](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/30167)) - resource/aws_vpc_ipam: Add `enable_private_gua` argument ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600)) - resource/aws_vpc_ipv6\_cidr_block_association: Add `ip_source` and `ipv6_address_attribute` attributes ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600)) BUG FIXES: - resource/aws_backup_vault: Fix `empty result` errors reading vaults in certain Regions ([#39670](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39670)) - resource/aws_elasticache_replication_group: Fix `security_group_names` causing resource replacement after import ([#39591](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39591)) - resource/aws_instance: Fixed issues with `volume_tags`, `root_block_device.*.tags`, and `ebs_block_device.*.tags` where tags overlapped with default tags. These are now handled consistently with top-level tags throughout the provider. Specifically, tags defined in both locations are no longer removed, preventing erroneous differences. ([#37441](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37441)) - resource/aws_sagemaker_workteam: Mark `workforce_name` as Optional ([#39630](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39630)) - resource/aws_securityhub_automation_rule: Increase `criteria.aws_account_id`, `criteria.generator_id`, `criteria.resource_id`, and `criteria.title` max length from `20` to `100` ([#39616](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39616)) - resource/aws_vpc_ipam_pool: Change `publicly_advertisable` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600)) - resource/aws_vpc_ipam_pool: Fix `InvalidParameterCombination: The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip` errors ([#39600](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39600)) ### [`v5.70.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5700-October-4-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.69.0...v5.70.0) NOTES: - resource/aws_s3\_bucket_lifecycle_configuration: Amazon S3 now applies a default minimum object size of 128 KB for S3 Lifecycle transition rules to any S3 storage class. This new default behavior will be applied to any new or modified S3 Lifecycle configuration. You can override this new default and customize the minimum object size for S3 Lifecycle transition rules to any value ([#39578](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39578)) - resource/aws_simpledb_domain: The `aws_simpledb_domain` resource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead ([#39536](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39536)) - resource/aws_worklink_fleet: The `aws_worklink_fleet` resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead ([#39538](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39538)) - resource/aws_worklink_website_certificate_authority_association: The `aws_worklink_website_certificate_authority_association` resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead ([#39538](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39538)) FEATURES: - **New Resource:** `aws_backup_logically_air_gapped_vault` ([#39098](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39098)) - **New Resource:** `aws_ec2_transit_gateway_default_route_table_association` ([#39496](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39496)) - **New Resource:** `aws_ec2_transit_gateway_default_route_table_propagation` ([#39517](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39517)) - **New Resource:** `aws_iam_group_policies_exclusive` ([#39554](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39554)) - **New Resource:** `aws_iam_user_policies_exclusive` ([#39544](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39544)) - **New Resource:** `aws_securityhub_standards_control_association` ([#39511](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39511)) ENHANCEMENTS: - data-source/aws_ebs_snapshot: Add `start_time` attribute ([#39557](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39557)) - resource/aws_bedrockagent_agent_action_group: Add `prepare_agent` argument ([#39486](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39486)) - resource/aws_bedrockagent_data_source: Add `vector_ingestion_configuration.custom_transformation_configuration` argument ([#39556](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39556)) - resource/aws_globalaccelerator_endpoint_group: Add `endpoint_configuration.attachment_arn` argument ([#39507](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39507)) - resource/aws_lambda_code_signing_config: Add `tags` argument and `tags_all` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535)) - resource/aws_lambda_event_source_mapping: Add `arn` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535)) - resource/aws_lambda_event_source_mapping: Add `tags` argument and `tags_all` attribute ([#39535](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39535)) - resource/aws_s3\_bucket_lifecycle_configuration: Add `transition_default_minimum_object_size` argument ([#39578](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39578)) BUG FIXES: - resource/aws_bedrockagent_agent: Fix "Provider produced inconsistent result after apply" error on update due to `customer_encryption_key_arn` not being passed during update ([#39565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39565)) - resource/aws_bedrockagent_agent: Fix "Provider produced inconsistent result after apply" error on update due to `prompt_override_configuration` not being passed when not modified ([#39565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39565)) - resource/aws_bedrockagent_knowledge_base: Change `knowledge_base_configuration` and `storage_configuration` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39567)) - resource/aws_ec2\_transit_gateway_vpc_attachment: Remove default value for `security_group_referencing_support` argument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) ([#39519](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39519)) - resource/aws_opensearchserverless_lifecycle_policy: Fix "Provider produced inconsistent result after apply" error on update due to `policy_version` computed attribute changing ([#39528](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39528)) - resource/aws_opensearchserverless_security_policy: Fix "Provider produced inconsistent result after apply" error on update due to `policy_version` computed attribute changing ([#39528](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39528)) - resource/aws_quicksight_dashboard: Fix mapping of `sheets.filter_controls.list.cascading_control_configuration` and `sheets.parameter_controls.list.cascading_control_configuration` attributes ([#39453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39453)) ### [`v5.69.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5690-September-26-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.68.0...v5.69.0) NOTES: - provider: This release contains an upstream AWS SDK for Go v2 [change](https://redirect.github.com/aws/aws-sdk-go-v2/issues/2807) to DynamoDB service endpoints. The Terraform AWS Provider will now connect to a DynamoDB endpoint in the format [`(account-id).ddb.(region).amazonaws.com`](https://docs.aws.amazon.com/sdkref/latest/guide/feature-account-endpoints.html) instead of `dynamodb.(region).amazonaws.com`. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by setting `account_id_endpoint_mode = disabled` in a [shared config file](https://docs.aws.amazon.com/sdkref/latest/guide/settings-reference.html#ConfigFileSettings) or setting the `AWS_ACCOUNT_ID_ENDPOINT_MODE` [environment variable](https://docs.aws.amazon.com/sdkref/latest/guide/settings-reference.html#EVarSettings) to `disabled` ([#39505](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39505)) - provider: Updates to Go `1.23.1`. The issue with AWS Network Firewall dropping TLS handshake `ClientHello` messages after the **v5.65.0** upgrade to Go `1.23.0`, temporarily resolved by the **v5.67.0** downgrade to Go `1.22.7`, has been addressed by removing the `X25519Kyber768Draft00` key exchange mechanism from the HTTP client used to make AWS API calls ([#39432](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39432)) - resource/aws_alb_listener: When importing a listener that has either a default action top-level target group ARN or a default action defining a forward action defining a target group with an ARN, include both in the configuration to avoid import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_lb_listener: When importing a listener that has either a default action top-level target group ARN or a default action defining a forward action defining a target group with an ARN, include both in the configuration to avoid import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) ENHANCEMENTS: - data-source/aws_connect_instance: Add `tags` attribute ([#39402](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39402)) - data-source/aws_ec2\_transit_gateway: Add `security_group_referencing_support` attribute ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542)) - data-source/aws_ec2\_transit_gateway_vpc_attachment: Add `security_group_referencing_support` attribute ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542)) - data-source/aws_opensearchserverless_collection: Add `failure_code` and `failure_reason` attributes ([#38995](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38995)) - resource/aws_bedrockagent_agent: Add `guardrail_configuration` argument ([#39440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39440)) - resource/aws_connect_instance: Add `tags` argument and `tags_all` attribute ([#39402](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39402)) - resource/aws_ec2\_transit_gateway: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542)) - resource/aws_ec2\_transit_gateway_vpc_attachment: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542)) - resource/aws_ec2\_transit_gateway_vpc_attachment_accepter: Add `security_group_referencing_support` argument ([#34542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/34542)) - resource/aws_ecs_service: Add `volume_configuration.managed_ebs_volume.tag_specifications` attribute ([#38662](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38662)) - resource/aws_identitystore_group: Allow `display_name` to be updated in-place ([#39416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39416)) - resource/aws_kinesis_stream: Tag on Create to support attribute-based access control (ABAC) ([#39504](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39504)) - resource/aws_quicksight_data_source: Add `credentials.secret_arn` argument ([#29034](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29034)) BUG FIXES: - data-source/aws_opensearchserverless_vpc_endpoint: Correctly set `security_group_ids`. This requires a call to the EC2 `DescribeVpcEndpoints` API ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454)) - data-source/aws_region: Fix lookups for the `ap-southeast-5` Region ([#39389](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39389)) - resource/aws_alb_listener: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_alb_listener: Remove the limitation preventing setting both default_action.0.target_group_arn and default_action.0.forward to align with the AWS API which allows you to specify both a target group list and a top-level target group ARN if the ARNs match ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_db_instance: Allow replica database to be added to domain on create ([#39448](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39448)) - resource/aws_db_instance_role_association: Fix intermittent failure when instance is not in an available state ([#39457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39457)) - resource/aws_dynamodb_tag: Fix propagation timeout when multiple tags exist ([#39491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39491)) - resource/aws_ecs_cluster: Fix validation error with `name` attribute. ([#38993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38993)) - resource/aws_ecs_cluster_capacity_providers: Fix validation error with `name` attribute. ([#38993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38993)) - resource/aws_iam_role: Retry `ConcurrentModificationException`s during role creation ([#39429](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39429)) - resource/aws_inspector2\_enabler: Fix `AccessDeniedException: Lambda code scanning is not supported in ...` errors ([#38254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38254)) - resource/aws_inspector2\_member_association: Improve handling of `AccessDeniedException` errors during creation ([#38254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38254)) - resource/aws_lb_listener: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_lb_listener: Remove the limitation preventing setting both default_action.0.target_group_arn and default_action.0.forward to align with the AWS API which allows you to specify both a target group list and a top-level target group ARN if the ARNs match ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_lb_listener_rule: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_lb_target_group: Fix several of the arguments to avoiding setting zero-values in situations where they shouldn't causing warnings and import differences ([#39413](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39413)) - resource/aws_medialive_multiplex: Fix to properly handle read failures during delete operations which were previously ignored ([#39498](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39498)) - resource/aws_opensearchserverless_vpc_endpoint: Change `name` and `vpc_id` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454)) - resource/aws_opensearchserverless_vpc_endpoint: Correctly set `security_group_ids`. This requires a call to the EC2 `DescribeVpcEndpoints` API ([#39454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39454)) - resource/aws_rds_cluster_role_association: Fix intermittent failure when cluster is not in an available state ([#39457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39457)) - resource/aws_vpc_dhcp_options: Fix a bug causing a panic crash when an option is absent ([#39427](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39427)) ### [`v5.68.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5680-September-19-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.67.0...v5.68.0) NOTES: - resource/aws_iam_role: The `inline_policy` argument is deprecated. Use the `aws_iam_role_policy` resource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use the `aws_iam_role_policies_exclusive` resource as well. ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203)) - resource/aws_lexv2models_slot_type: Within the `composite_slot_type_setting` block, the `subslots` argument has been renamed `sub_slots`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39353) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39353)) FEATURES: - **New Data Source:** `aws_elasticache_reserved_cache_node_offering` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832)) - **New Data Source:** `aws_securityhub_standards_control_associations` ([#39334](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39334)) - **New Data Source:** `aws_synthetics_runtime_version` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180)) - **New Data Source:** `aws_synthetics_runtime_versions` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180)) - **New Resource:** `aws_appsync_source_api_association` ([#39323](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39323)) - **New Resource:** `aws_elasticache_reserved_cache_node` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832)) - **New Resource:** `aws_iam_role_policies_exclusive` ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203)) - **New Resource:** `aws_pinpointsmsvoicev2_opt_out_list` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036)) - **New Resource:** `aws_pinpointsmsvoicev2_phone_number` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036)) - **New Resource:** `aws_sesv2_account_suppression_attributes` ([#39325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39325)) ENHANCEMENTS: - resource/aws_s3\_bucket_server_side_encryption_configuration: S3 directory buckets now support SSE-KMS ([#39366](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39366)) - resource/aws_ses_receipt_rule: Add `iam_role_arn` argument to `s3_action` configuration block ([#39364](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39364)) - resource/aws_synthetics_canary: Increase maximum `name` length to 255 characters ([#39315](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39315)) BUG FIXES: - provider: Allows `assume_role.role_arn` to be an empty string when there is a single `assume_role` entry. ([#39328](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39328)) - resource/aws_amplify_app: Fix failure when unsetting the `environment_variables` argument ([#39397](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39397)) - resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting ([#31284](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31284)) - resource/aws_dynamodb_table: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_dynamodb_table_replica: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_dynamodb_tag: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_mq_broker: Fix `engine_version` mismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above ([#39024](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39024)) - resource/aws_mwaa_environment: Fix creating environments with `endpoint_management = "CUSTOMER"` ([#39394](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39394)) - resource/aws_opensearchserverless_access_policy: Fix incompatible type error when setting `policy` ([#39322](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39322)) ### [`v5.67.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5670-September-12-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.66.0...v5.67.0) BREAKING CHANGES: - resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy` ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254)) NOTES: - provider: Downgrades to Go `1.22.6`. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go `1.23.0` (`v5.65.0`). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go `1.22.6` for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. ([#39256](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39256)) - resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39254) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254)) FEATURES: - **New Data Source:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - **New Resource:** `aws_cloudformation_stack_instances` ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794)) - **New Resource:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - **New Resource:** `aws_computeoptimizer_enrollment_status` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349)) - **New Resource:** `aws_computeoptimizer_recommendation_preferences` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349)) - **New Resource:** `aws_costoptimizationhub_enrollment_status` ([#36440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36440)) - **New Resource:** `aws_costoptimizationhub_preferences` ([#36526](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36526)) - **New Resource:** `aws_datazone_asset_type` ([#38812](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38812)) - **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581)) - **New Resource:** `aws_lambda_function_recursion_config` ([#39153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39153)) ENHANCEMENTS: - data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags ([#31453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31453)) - data-source/aws_kinesis_stream: Add `encryption_type` and `kms_key_id` attributes ([#39212](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39212)) - datasource/aws_cognito_user_pool: Deprecates `user_pool_tags` in favor of standard `tags`. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - provider: Adds support for IAM role chaining. The provider attribute `assume_role` now accepts multiple elements. ([#39255](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39255)) - resource/aws_amplify_app: Add `cache_config` argument ([#39215](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39215)) - resource/aws_cloudhsm_v2\_cluster: Add `mode` argument ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206)) - resource/aws_cloudhsm_v2\_cluster: Support `hsm2m.medium` as a valid value for `hsm_type` ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206)) - resource/aws_codebuild_project: Add `fleet` attribute in `environment` configuration block ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - resource/aws_kinesis_firehose_delivery_stream: Add `snowflake_configuration.buffering_internal` and `snowflake_configuration.buffering_size` arguments ([#39214](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39214)) - resource/aws_quicksight_user: Add `READER_PRO`, `AUTHOR_PRO`, and `ADMIN_PRO` as valid values for the `user_role` argument ([#39220](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39220)) - resource/aws_sagemaker_domain: Add `default_user_settings.domain_settings.docker_settings` configuration block ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416)) - resource/aws_sagemaker_domain: Add `default_user_settings.studio_web_portal_settings`, `default_space_settings.jupyter_lab_app_settings`, `default_space_settings.space_storage_settings`, `default_space_settings.custom_posix_user_config`, and `default_space_settings.custom_file_system_config` configuration blocks ([#38457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38457)) - resource/aws_sagemaker_endpoint_configuration: Add `production_variants.managed_instance_scaling` and `shadow_production_variants.managed_instance_scaling` configuration blocks ([#35479](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35479)) - resource/aws_sagemaker_model: Add `primary_container.inference_specification_name` and `container.inference_specification_name` arguments ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873)) - resource/aws_sagemaker_model: Add `primary_container.model_data_source.s3_data_source.model_access_config`, `primary_container.multi_model_config`, `container.model_data_source.s3_data_source.model_access_config`, and `container.multi_model_config` configuration blocks ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873)) - resource/aws_sagemaker_user_profile: Add `user_settings.studio_web_portal_settings` configuration block ([#38567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38567)) - resource/aws_sfn_state_machine: Add plan-time validation of `definition` using the AWS Step Functions [Validation API](https://docs.aws.amazon.com/step-functions/latest/apireference/API_ValidateStateMachineDefinition.html) ([#39229](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39229)) BUG FIXES: - data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183)) - datasource/aws_cognito_user_pool: Fixes value conversion error. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - provider: Fix empty tags drift on fwprovider resources ([#38636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38636)) - resource/aws_batch_job_queue: Fixes error in schema migration function. ([#39257](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39257)) - resource/aws_cognito_user_pool: Correctly unsets tags. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - resource/aws_ecr_repository_policy: Fix retry logic handling eventual consistency of newly created IAM roles ([#39190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39190)) - resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183)) - resource/aws_iam_role: Fix to reduce Terraform reporting differences when a role's ARN temporarily appears as the role's unique ID ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794)) - resource/aws_networkfirewall_tls_inspection_configuration: Fix issue where `check_certificate_revovation_status` is ignored due to bad autoflex field mapping ([#39211](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39211)) - resource/aws_networkmonitor_monitor: Fixes error when optional attribute `aggregation_period` not set. ([#39279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39279)) - resource/aws_quicksight_data_set: Change `permissions.actions` `MaxItems` from `16` to `20`. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39226](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39226)) - resource/aws_quicksight_vpc_connection: Remove `vpc_connection_id` regular expression validator. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39231](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39231)) - resource/aws_sagemaker_domain: Fix update for `default_user_settings.domain_settings` to include missing `security_group_ids` and `r_studio_server_pro_domain_settings` values ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416)) - resource/aws_sesv2\_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list ([#29671](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29671)) - resource/aws_sesv2\_configuration_set_event_destination: Change `event_destination.matching_event_types` from `TypeList` to `TypeSet` as order is not significant ([#36897](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36897)) - resource/aws_verifiedaccess_endpoint: fix crash when updating `load_balancer_options.subnet_ids` ([#39196](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39196)) ### [`v5.66.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5660-September-5-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.65.0...v5.66.0) FEATURES: - **New Data Source:** `aws_glue_registry` ([#37953](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37953)) - **New Data Source:** `aws_organizations_organizational_unit_descendant_organizational_units` ([#39120](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39120)) - **New Data Source:** `aws_quicksight_analysis` ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737)) - **New Resource:** `aws_datazone_environment` ([#38811](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38811)) ENHANCEMENTS: - data-source/aws_sns_topic: Add `tags` attribute ([#38959](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38959)) - data-source/aws_transfer_server: Add `tags` attribute ([#39092](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39092)) - resource/aws_appsync_graphql_api: Add `api_type` and `merged_api_execution_role_arn` arguments ([#39159](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39159)) - resource/aws_bedrockagent_data_source: Add `vector_ingestion_configuration.chunking_configuration.semantic_chunking_configuration`, `vector_ingestion_configuration.chunking_configuration.hierarchical_chunking_configuration`, and `vector_ingestion_configuration.parsing_configuration` configuration blocks ([#39138](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39138)) - resource/aws_datazone_domain: Add `skip_deletion_protection` attribute ([#38811](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38811)) - resource/aws_docdbelastic_cluster: Add `backup_retention_period` and `preferred_backup_window` attributes ([#38452](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38452)) - resource/aws_quicksight_data_source: Add `parameters.databricks` argument ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737)) - resource/aws_rolesanywhere_trust_anchor: Add `notification_settings` argument ([#39108](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39108)) - resource/aws_sagemaker_endpoint: Increase Create and Update `InService` timeouts to 60 minutes ([#39090](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39090)) - resource/aws_wafv2\_rule_group: Reduce `rate_based_statement.limit` minimum from `100` to `10` ([#39107](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39107)) - resource/aws_wafv2\_web_acl: Reduce `rate_based_statement.limit` minimum from `100` to `10` ([#39107](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39107)) BUG FIXES: - data-source/aws_networkmanager_core_network_policy_document: Change `segment_actions.via.with_edge_override.use_edge` to be nested set of edges, matching JSON ([#39142](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39142)) - data-source/aws_networkmanager_core_network_policy_document: Deprecate `segment_actions.via.with_edge_override.use_edge`. Use `segment_actions.via.with_edge_override.use_edge_location` instead ([#39142](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39142)) - many resources: Fixes perpetual diff when tag has a `null` value. ([#38869](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38869)) - resource/aws_appconfig_extension: Mark `role_arn` as Optional ([#38900](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38900)) - resource/aws_lexv2models_slot_type: Fix `slot_type_values` validator which limited configurations to 1 element ([#39126](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39126)) - resource/aws_quicksight_analysis: Properly send `theme_arn` argument on create and update when configured ([#31737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31737)) - resource/aws_rolesanywhere_profile: Mark `role_arns` as Optional and send an empty list if unconfigured ([#39108](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39108)) - resource/aws_synthetics_canary: Remove `run_config.timeout_in_seconds` default value to allow creation of resources with a frequency less than 14 minutes ([#35177](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35177)) ### [`v5.65.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5650-August-29-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.64.0...v5.65.0) NOTES: - provider: Updates to Go 1.23. We do not expect this change to impact most users. For macOS, Go 1.23 requires macOS 11 Big Sur or later; support for previous versions has been discontinued. ([#38999](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38999)) FEATURES: - **New Data Source:** `aws_shield_protection` ([#37524](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37524)) - **New Resource:** `aws_glue_catalog_table_optimizer` ([#38052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38052)) ENHANCEMENTS: - data-source/aws_elb_hosted_zone_id: Add hosted zone ID for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052)) - data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052)) - data-source/aws_s3\_bucket: Add hosted zone ID for `ap-southeast-5` AWS Region ([#39052](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39052)) - provider: Support `ap-southeast-5` as a valid AWS Region ([#39049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39049)) - resource/aws_cognito_user_pool: Add `password_policy.password_history_size` argument ([#39043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39043)) - resource/aws_elastic_beanstalk_application_version: Add `process` argument ([#25468](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25468)) - resource/aws_elasticsearch_domain: Treat `SUCCEEDED_WITH_ISSUES` status as success when upgrading cluster ([#38086](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38086)) - resource/aws_emr_cluster: Support `io2` as a valid value for `ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740)) - resource/aws_emr_instance_fleet: Support `io2` as a valid value for `instance_type_configs.ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740)) - resource/aws_emr_instance_group: Support `io2` as a valid value for `instance_type_configs.ebs_config.type` ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740)) - resource/aws_glue_job: Add `job_run_queuing_enabled` argument ([#39027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39027)) - resource/aws_lambda_event_source_mapping: Add `kms_key_arn` argument ([#39055](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39055)) - resource/aws_verifiedaccess_endpoint: Set PolicyEnabled flag to `false` on update if `policy_document` is empty ([#38675](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38675)) BUG FIXES: - resource/aws_amplify_app: Fix crash updating `auto_branch_creation_config` ([#39041](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39041)) - resource/aws_elasticsearch_domain_policy: Change `domain_name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) ([#38086](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38086)) - resource/aws_elbv2\_listener: Fix crash when reading forward actions not configured in state ([#39039](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39039)) - resource/aws_emr_instance_group: Properly send an `instance_count` value of `0` on create when configured ([#37740](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37740)) - resource/aws_gamelift_game_server_group: Fix crash while reading server group with a nil auto scaling group ARN ([#39022](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39022)) - resource/aws_guardduty_invite_accepter: Fix `BadRequestException: The request is rejected because an invalid or out-of-range value is specified as an input parameter` errors on resource Create ([#39084](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39084)) - resource/aws_lakeformation_permissions: Fix error when revoking `data_cells_filter` permissions ([#39026](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39026)) - resource/aws_neptune_cluster: Mark `neptune_cluster_parameter_group_name` as Computed ([#38980](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38980)) - resource/aws_neptune_cluster_instance: Mark `neptune_parameter_group_name` as Computed ([#38980](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38980)) - resource/aws_ssm_parameter: Fix `ValidationException: Parameter ARN is not supported for this operation` errors when deleting resources imported by ARN ([#39067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39067)) ### [`v5.64.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5640-August-22-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.63.1...v5.64.0) ENHANCEMENTS: - data-source/aws_opensearch_domain: Add `dashboard_endpoint_v2`, `domain_endpoint_v2_hosted_zone_id`, and `endpoint_v2` attributes ([#38456](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38456)) - resource/aws_appautoscaling_target: Add `suspended_state` configuration block ([#38942](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38942)) - resource/aws_dynamodb_table: Add `restore_source_table_arn` attribute ([#38953](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38953)) - resource/aws_opensearch_domain: Add `dashboard_endpoint_v2`, `domain_endpoint_v2_hosted_zone_id`, and `endpoint_v2` attributes ([#38456](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38456)) BUG FIXES: - resource/aws_bedrockagent_agent: Fixes consistency issues where only some prompts are overridden ([#38944](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38944)) - resource/aws_cloudformation_stack_set_instance: Fix crash during construction of the `id` attribute when `deployment_targets` does not include organizational unit IDs. ([#38969](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38969)) - resource/aws_glue_trigger: Fix crash when null `action` is configured ([#38994](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38994)) - resource/aws_rds_cluster: Allow Web Service Data API (`enabled_http_endpoint`) to be enabled and disabled for `provisioned` engine mode and serverlessv2 ([#38997](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38997)) ### [`v5.63.1`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5631-August-20-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.63.0...v5.63.1) FEATURES: - **New Data Source:** `aws_route53_zones` ([#17457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/17457)) - **New Data Source:** `aws_ssoadmin_permission_sets` ([#38741](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38741)) ENHANCEMENTS: - data-source/aws_batch_job_queue: Add `job_state_time_limit_action` attribute ([#38784](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38784)) - resource/aws_batch_job_definition: Add `ecs_properties` argument ([#37871](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/37871)) - resource/aws_batch_job_queue: Add `job_state_time_limit_action` argument ([#38784](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38784)) BUG FIXES: - provider: Fix crash when flattening string pointer slices with nil items ([#38886](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38886)) - resource/aws_datazone_project: Properly surface import `id` parsing errors ([#38924](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38924)) - resource/aws_quicksight_data_set: Fix crash when setting `logical_table_map.data_transforms.project_operation.projected_columns` with null list elements ([#38886](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38886)) - resource/aws_ses_configuration_set: Fix crash when `reputation_metrics_enabled` is set to `true` ([#38921](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38921)) ### [`v5.63.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5630-August-15-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.62.0...v5.63.0) FEATURES: - **New Data Source:** `aws_bedrockagent_agent_versions` ([#38792](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38792)) - **New Resource:** `aws_bedrock_guardrail` ([#38757](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38757)) - **New Resource:** `aws_cloudtrail_organization_delegated_admin_account` ([#38817](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38817)) - **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581)) - **New Resource:** `aws_datazone_form_type` ([#38746](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38746)) - **New Resource:** `aws_datazone_glossary_term` ([#38706](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38706)) - **New Resource:** `aws_pinpoint_email_template` ([#33266](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33266)) ENHANCEMENTS: - resource/aws_networkfirewall_logging_configuration: Change `logging_configuration.log_destination_config` `MaxItems` from `2` to `3` ([#38824](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38824)) BUG FIXES: - data-source/aws_acm_certificate: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_appstream_stack: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_bedrockagent_agent_knowledge_base_association: Prepare agent when associating a knowledge base so it can be used ([#38799](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38799)) - resource/aws_cloudwatch_event_connection: Fix various expander type assertions to prevent crashes ([#38800](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38800)) - resource/aws_controltower_landing_zone: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_db_event_subscription: Fix plan-time validation of `name` and `name_prefix` ([#38194](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38194)) - resource/aws_ecs_cluster_capacity_providers: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_ecs_service: Fix crash from nil `service_registries` item ([#38883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38883)) - resource/aws_ecs_task_definition: Fix perpetual `container_definitions` diffs on `healthCheck`'s default values ([#38872](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38872)) - resource/aws_ecs_task_definition: Prevent lowercasing of the first character of JSON keys in `container_definitions.dockerLabels` ([#38804](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38804)) - resource/aws_ecs_task_definition: Remove `null`s from `container_definition` array fields ([#38870](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38870)) - resource/aws_elasticache_replication_group: Fix crash when setting `replicas_per_node_group` if node groups are empty ([#38797](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38797)) - resource/aws_fms_policy: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_grafana_workspace: Fix crash when empty `network_access_control` block is configured ([#38775](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38775)) - resource/aws_grafana_workspace: Fix crash when empty `vpc_configuration` block is configured ([#38775](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38775)) - resource/aws_iot_thing_group: Fix crash when empty `attribute_payload` block is configured ([#38776](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38776)) - resource/aws_lexv2models_slot_type: Fix slot_type_values to have sample_value attribute ([#38856](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38856)) - resource/aws_networkmanager_connect_peer: Set all `configuration.bgp_configurations` on Read ([#38798](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38798)) - resource/aws_redshift_cluster: Set `encrypted` on snapshot restore, when enabled ([#38828](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38828)) - resource/aws_rolesanywhere_profile: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_rolesanywhere_trust_anchor: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) - resource/aws_s3\_bucket_lifecycle_configuration: Fix unreturned `sdkdiags.AppendErrorf` function calls ([#38854](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38854)) ### [`v5.62.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5620-August-8-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.61.0...v5.62.0) FEATURES: - **New Data Source:** `aws_rds_cluster_parameter_group` ([#38416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38416)) - **New Data Source:** `aws_secretsmanager_secret_versions` ([#35411](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35411)) - **New Resource:** `aws_ebs_snapshot_block_public_access` ([#38641](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38641)) - **New Resource:** `aws_rds_integration` ([#35199](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35199)) ENHANCEMENTS: - data-source/aws_s3\_bucket_object: Expand content types that can be read from S3 to include include `application/x-sql` ([#38737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38737)) - data-source/aws_s3\_object: Expand content types that can be read from S3 to include `application/x-sql` ([#38737](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38737)) - provider: Allow `default_tags` to be set by environment variables ([#33339](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/33339)) - provider: Allow `ignore_tags.keys` and `ignore_tags.key_prefixes` to be set by environmentConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.