hashicorp/terraform-provider-aws (aws)
### [`v5.68.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5680-September-19-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.67.0...v5.68.0)
NOTES:
- resource/aws_iam_role: The `inline_policy` argument is deprecated. Use the `aws_iam_role_policy` resource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use the `aws_iam_role_policies_exclusive` resource as well. ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203))
- resource/aws_lexv2models_slot_type: Within the `composite_slot_type_setting` block, the `subslots` argument has been renamed `sub_slots`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39353) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39353))
FEATURES:
- **New Data Source:** `aws_elasticache_reserved_cache_node_offering` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832))
- **New Data Source:** `aws_securityhub_standards_control_associations` ([#39334](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39334))
- **New Data Source:** `aws_synthetics_runtime_version` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180))
- **New Data Source:** `aws_synthetics_runtime_versions` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180))
- **New Resource:** `aws_appsync_source_api_association` ([#39323](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39323))
- **New Resource:** `aws_elasticache_reserved_cache_node` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832))
- **New Resource:** `aws_iam_role_policies_exclusive` ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203))
- **New Resource:** `aws_pinpointsmsvoicev2_opt_out_list` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036))
- **New Resource:** `aws_pinpointsmsvoicev2_phone_number` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036))
- **New Resource:** `aws_sesv2_account_suppression_attributes` ([#39325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39325))
ENHANCEMENTS:
- resource/aws_s3\_bucket_server_side_encryption_configuration: S3 directory buckets now support SSE-KMS ([#39366](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39366))
- resource/aws_ses_receipt_rule: Add `iam_role_arn` argument to `s3_action` configuration block ([#39364](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39364))
- resource/aws_synthetics_canary: Increase maximum `name` length to 255 characters ([#39315](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39315))
BUG FIXES:
- provider: Allows `assume_role.role_arn` to be an empty string when there is a single `assume_role` entry. ([#39328](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39328))
- resource/aws_amplify_app: Fix failure when unsetting the `environment_variables` argument ([#39397](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39397))
- resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting ([#31284](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31284))
- resource/aws_dynamodb_table: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_dynamodb_table_replica: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_dynamodb_tag: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326))
- resource/aws_mq_broker: Fix `engine_version` mismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above ([#39024](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39024))
- resource/aws_mwaa_environment: Fix creating environments with `endpoint_management = "CUSTOMER"` ([#39394](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39394))
- resource/aws_opensearchserverless_access_policy: Fix incompatible type error when setting `policy` ([#39322](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39322))
### [`v5.67.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5670-September-12-2024)
[Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.66.0...v5.67.0)
BREAKING CHANGES:
- resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy` ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254))
NOTES:
- provider: Downgrades to Go `1.22.6`. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go `1.23.0` (`v5.65.0`). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go `1.22.6` for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. ([#39256](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39256))
- resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39254) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254))
FEATURES:
- **New Data Source:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- **New Resource:** `aws_cloudformation_stack_instances` ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794))
- **New Resource:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- **New Resource:** `aws_computeoptimizer_enrollment_status` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349))
- **New Resource:** `aws_computeoptimizer_recommendation_preferences` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349))
- **New Resource:** `aws_costoptimizationhub_enrollment_status` ([#36440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36440))
- **New Resource:** `aws_costoptimizationhub_preferences` ([#36526](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36526))
- **New Resource:** `aws_datazone_asset_type` ([#38812](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38812))
- **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581))
- **New Resource:** `aws_lambda_function_recursion_config` ([#39153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39153))
ENHANCEMENTS:
- data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags ([#31453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31453))
- data-source/aws_kinesis_stream: Add `encryption_type` and `kms_key_id` attributes ([#39212](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39212))
- datasource/aws_cognito_user_pool: Deprecates `user_pool_tags` in favor of standard `tags`. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- provider: Adds support for IAM role chaining. The provider attribute `assume_role` now accepts multiple elements. ([#39255](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39255))
- resource/aws_amplify_app: Add `cache_config` argument ([#39215](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39215))
- resource/aws_cloudhsm_v2\_cluster: Add `mode` argument ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206))
- resource/aws_cloudhsm_v2\_cluster: Support `hsm2m.medium` as a valid value for `hsm_type` ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206))
- resource/aws_codebuild_project: Add `fleet` attribute in `environment` configuration block ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237))
- resource/aws_kinesis_firehose_delivery_stream: Add `snowflake_configuration.buffering_internal` and `snowflake_configuration.buffering_size` arguments ([#39214](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39214))
- resource/aws_quicksight_user: Add `READER_PRO`, `AUTHOR_PRO`, and `ADMIN_PRO` as valid values for the `user_role` argument ([#39220](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39220))
- resource/aws_sagemaker_domain: Add `default_user_settings.domain_settings.docker_settings` configuration block ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416))
- resource/aws_sagemaker_domain: Add `default_user_settings.studio_web_portal_settings`, `default_space_settings.jupyter_lab_app_settings`, `default_space_settings.space_storage_settings`, `default_space_settings.custom_posix_user_config`, and `default_space_settings.custom_file_system_config` configuration blocks ([#38457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38457))
- resource/aws_sagemaker_endpoint_configuration: Add `production_variants.managed_instance_scaling` and `shadow_production_variants.managed_instance_scaling` configuration blocks ([#35479](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35479))
- resource/aws_sagemaker_model: Add `primary_container.inference_specification_name` and `container.inference_specification_name` arguments ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873))
- resource/aws_sagemaker_model: Add `primary_container.model_data_source.s3_data_source.model_access_config`, `primary_container.multi_model_config`, `container.model_data_source.s3_data_source.model_access_config`, and \`\`container.multi_model_config\` configuration blocks ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873))
- resource/aws_sagemaker_user_profile: Add `user_settings.studio_web_portal_settings` configuration block ([#38567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38567))
- resource/aws_sfn_state_machine: Add plan-time validation of `definition` using the AWS Step Functions [Validation API](https://docs.aws.amazon.com/step-functions/latest/apireference/API_ValidateStateMachineDefinition.html) ([#39229](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39229))
BUG FIXES:
- data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183))
- datasource/aws_cognito_user_pool: Fixes value conversion error. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- provider: Fix empty tags drift on fwprovider resources ([#38636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38636))
- resource/aws_batch_job_queue: Fixes error in schema migration function. ([#39257](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39257))
- resource/aws_cognito_user_pool: Correctly unsets tags. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260))
- resource/aws_ecr_repository_policy: Fix retry logic handling eventual consistency of newly created IAM roles ([#39190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39190))
- resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183))
- resource/aws_iam_role: Fix to reduce Terraform reporting differences when a role's ARN temporarily appears as the role's unique ID ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794))
- resource/aws_networkfirewall_tls_inspection_configuration: Fix issue where `check_certificate_revovation_status` is ignored due to bad autoflex field mapping ([#39211](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39211))
- resource/aws_networkmonitor_monitor: Fixes error when optional attribute `aggregation_period` not set. ([#39279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39279))
- resource/aws_quicksight_data_set: Change `permissions.actions` `MaxItems` from `16` to `20`. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39226](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39226))
- resource/aws_quicksight_vpc_connection: Remove `vpc_connection_id` regular expression validator. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39231](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39231))
- resource/aws_sagemaker_domain: Fix update for `default_user_settings.domain_settings` to include missing `security_group_ids` and `r_studio_server_pro_domain_settings` values ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416))
- resource/aws_sesv2\_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list ([#29671](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29671))
- resource/aws_sesv2\_configuration_set_event_destination: Change `event_destination.matching_event_types` from `TypeList` to `TypeSet` as order is not significant ([#36897](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36897))
- resource/aws_verifiedaccess_endpoint: fix crash when updating `load_balancer_options.subnet_ids` ([#39196](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39196))
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
~> 5.66.0
->~> 5.68.0
Release Notes
hashicorp/terraform-provider-aws (aws)
### [`v5.68.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5680-September-19-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.67.0...v5.68.0) NOTES: - resource/aws_iam_role: The `inline_policy` argument is deprecated. Use the `aws_iam_role_policy` resource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use the `aws_iam_role_policies_exclusive` resource as well. ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203)) - resource/aws_lexv2models_slot_type: Within the `composite_slot_type_setting` block, the `subslots` argument has been renamed `sub_slots`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39353) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39353)) FEATURES: - **New Data Source:** `aws_elasticache_reserved_cache_node_offering` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832)) - **New Data Source:** `aws_securityhub_standards_control_associations` ([#39334](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39334)) - **New Data Source:** `aws_synthetics_runtime_version` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180)) - **New Data Source:** `aws_synthetics_runtime_versions` ([#39180](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39180)) - **New Resource:** `aws_appsync_source_api_association` ([#39323](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39323)) - **New Resource:** `aws_elasticache_reserved_cache_node` ([#29832](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29832)) - **New Resource:** `aws_iam_role_policies_exclusive` ([#39203](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39203)) - **New Resource:** `aws_pinpointsmsvoicev2_opt_out_list` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036)) - **New Resource:** `aws_pinpointsmsvoicev2_phone_number` ([#25036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/25036)) - **New Resource:** `aws_sesv2_account_suppression_attributes` ([#39325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39325)) ENHANCEMENTS: - resource/aws_s3\_bucket_server_side_encryption_configuration: S3 directory buckets now support SSE-KMS ([#39366](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39366)) - resource/aws_ses_receipt_rule: Add `iam_role_arn` argument to `s3_action` configuration block ([#39364](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39364)) - resource/aws_synthetics_canary: Increase maximum `name` length to 255 characters ([#39315](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39315)) BUG FIXES: - provider: Allows `assume_role.role_arn` to be an empty string when there is a single `assume_role` entry. ([#39328](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39328)) - resource/aws_amplify_app: Fix failure when unsetting the `environment_variables` argument ([#39397](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39397)) - resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting ([#31284](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31284)) - resource/aws_dynamodb_table: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_dynamodb_table_replica: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_dynamodb_tag: Handle eventual consistency of tag creation and removal ([#39326](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39326)) - resource/aws_mq_broker: Fix `engine_version` mismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above ([#39024](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39024)) - resource/aws_mwaa_environment: Fix creating environments with `endpoint_management = "CUSTOMER"` ([#39394](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39394)) - resource/aws_opensearchserverless_access_policy: Fix incompatible type error when setting `policy` ([#39322](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39322)) ### [`v5.67.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5670-September-12-2024) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v5.66.0...v5.67.0) BREAKING CHANGES: - resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy` ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254)) NOTES: - provider: Downgrades to Go `1.22.6`. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go `1.23.0` (`v5.65.0`). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go `1.22.6` for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. ([#39256](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39256)) - resource/aws_lexv2models_slot_type: Within the `value_selection_setting.advanced_recognition_setting` block, the `audio_recognition_setting` argument has been renamed `audio_recognition_strategy`. See the [linked pull request](https://redirect.github.com/hashicorp/terraform-provider-aws/pull/39254) for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. ([#39254](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39254)) FEATURES: - **New Data Source:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - **New Resource:** `aws_cloudformation_stack_instances` ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794)) - **New Resource:** `aws_codebuild_fleet` ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - **New Resource:** `aws_computeoptimizer_enrollment_status` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349)) - **New Resource:** `aws_computeoptimizer_recommendation_preferences` ([#35349](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35349)) - **New Resource:** `aws_costoptimizationhub_enrollment_status` ([#36440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36440)) - **New Resource:** `aws_costoptimizationhub_preferences` ([#36526](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36526)) - **New Resource:** `aws_datazone_asset_type` ([#38812](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38812)) - **New Resource:** `aws_datazone_environment_profile` ([#38581](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38581)) - **New Resource:** `aws_lambda_function_recursion_config` ([#39153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39153)) ENHANCEMENTS: - data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags ([#31453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/31453)) - data-source/aws_kinesis_stream: Add `encryption_type` and `kms_key_id` attributes ([#39212](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39212)) - datasource/aws_cognito_user_pool: Deprecates `user_pool_tags` in favor of standard `tags`. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - provider: Adds support for IAM role chaining. The provider attribute `assume_role` now accepts multiple elements. ([#39255](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39255)) - resource/aws_amplify_app: Add `cache_config` argument ([#39215](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39215)) - resource/aws_cloudhsm_v2\_cluster: Add `mode` argument ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206)) - resource/aws_cloudhsm_v2\_cluster: Support `hsm2m.medium` as a valid value for `hsm_type` ([#39206](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39206)) - resource/aws_codebuild_project: Add `fleet` attribute in `environment` configuration block ([#39237](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39237)) - resource/aws_kinesis_firehose_delivery_stream: Add `snowflake_configuration.buffering_internal` and `snowflake_configuration.buffering_size` arguments ([#39214](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39214)) - resource/aws_quicksight_user: Add `READER_PRO`, `AUTHOR_PRO`, and `ADMIN_PRO` as valid values for the `user_role` argument ([#39220](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39220)) - resource/aws_sagemaker_domain: Add `default_user_settings.domain_settings.docker_settings` configuration block ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416)) - resource/aws_sagemaker_domain: Add `default_user_settings.studio_web_portal_settings`, `default_space_settings.jupyter_lab_app_settings`, `default_space_settings.space_storage_settings`, `default_space_settings.custom_posix_user_config`, and `default_space_settings.custom_file_system_config` configuration blocks ([#38457](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38457)) - resource/aws_sagemaker_endpoint_configuration: Add `production_variants.managed_instance_scaling` and `shadow_production_variants.managed_instance_scaling` configuration blocks ([#35479](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35479)) - resource/aws_sagemaker_model: Add `primary_container.inference_specification_name` and `container.inference_specification_name` arguments ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873)) - resource/aws_sagemaker_model: Add `primary_container.model_data_source.s3_data_source.model_access_config`, `primary_container.multi_model_config`, `container.model_data_source.s3_data_source.model_access_config`, and \`\`container.multi_model_config\` configuration blocks ([#35873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35873)) - resource/aws_sagemaker_user_profile: Add `user_settings.studio_web_portal_settings` configuration block ([#38567](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38567)) - resource/aws_sfn_state_machine: Add plan-time validation of `definition` using the AWS Step Functions [Validation API](https://docs.aws.amazon.com/step-functions/latest/apireference/API_ValidateStateMachineDefinition.html) ([#39229](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39229)) BUG FIXES: - data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183)) - datasource/aws_cognito_user_pool: Fixes value conversion error. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - provider: Fix empty tags drift on fwprovider resources ([#38636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38636)) - resource/aws_batch_job_queue: Fixes error in schema migration function. ([#39257](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39257)) - resource/aws_cognito_user_pool: Correctly unsets tags. ([#39260](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39260)) - resource/aws_ecr_repository_policy: Fix retry logic handling eventual consistency of newly created IAM roles ([#39190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39190)) - resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp ([#24183](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24183)) - resource/aws_iam_role: Fix to reduce Terraform reporting differences when a role's ARN temporarily appears as the role's unique ID ([#36794](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36794)) - resource/aws_networkfirewall_tls_inspection_configuration: Fix issue where `check_certificate_revovation_status` is ignored due to bad autoflex field mapping ([#39211](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39211)) - resource/aws_networkmonitor_monitor: Fixes error when optional attribute `aggregation_period` not set. ([#39279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39279)) - resource/aws_quicksight_data_set: Change `permissions.actions` `MaxItems` from `16` to `20`. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39226](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39226)) - resource/aws_quicksight_vpc_connection: Remove `vpc_connection_id` regular expression validator. This fixes a regression introduced in [v5.66.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#5660-september--5-2024) ([#39231](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39231)) - resource/aws_sagemaker_domain: Fix update for `default_user_settings.domain_settings` to include missing `security_group_ids` and `r_studio_server_pro_domain_settings` values ([#35416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/35416)) - resource/aws_sesv2\_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list ([#29671](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/29671)) - resource/aws_sesv2\_configuration_set_event_destination: Change `event_destination.matching_event_types` from `TypeList` to `TypeSet` as order is not significant ([#36897](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36897)) - resource/aws_verifiedaccess_endpoint: fix crash when updating `load_balancer_options.subnet_ids` ([#39196](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39196))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.