Update Terraform aws to v6 #247
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/aws-6.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
4.67.0->6.19.0Release Notes
hashicorp/terraform-provider-aws (aws)
v6.19.0Compare Source
FEATURES:
aws_ecrpublic_images(#44795)aws_lakeformation_identity_center_configuration(#44867)ENHANCEMENTS:
log_typeisTail(#44843)ami_tagsattribute (#44731)regex_valuesattribute tocondition.host_header,condition.http_headerandcondition.path_patternblocks (#44741)transformattribute (#44702)authorizer_configurationandauthorizer_typeconfig (#44826)monitoring_configurationargument (#43317)runtime_configurationargument (#43302)arnattribute. (#44867)ami_tagsargument (#44731)regex_valuesargument tocondition.host_header,condition.http_headerandcondition.path_patternblocks (#44741)transformconfiguration block (#44702)valuesargument incondition.host_header,condition.http_headerandcondition.path_patternis now optional (#44741)physical_table_map.relational_table.namefrom 64 to 256 characters (#44807)notebook-al2023-v1to validplatform_identifiervalues (#44570)account_idandregionfrom Resource Identity schema (#44846)account_idandregionfrom Resource Identity schema (#44846)account_idandregionfrom Resource Identity schema (#44846)account_idandregionfrom Resource Identity schema (#44846)BUG FIXES:
principal. (#44867)authorizer_configurationblock fromRequiredtoOptional(#44812)authorizer_typeargument asForceNew(#44812)principal. (#44867)v6.18.0Compare Source
NOTES:
accounts.statusandnon_master_accounts.statusattributes are deprecated. Use theaccounts.stateandnon_master_accounts.stateattributes instead. (#44327)accounts.statusattribute is deprecated. Useaccounts.stateinstead. (#44327)accounts.statusattribute is deprecated. Useaccounts.stateinstead. (#44327)statusattribute is deprecated. Usestateinstead. (#44327)accounts.statusandnon_master_accounts.statusattributes are deprecated. Use theaccounts.stateandnon_master_accounts.stateattributes instead. (#44327)FEATURES:
aws_bedrockagentcore_memory(#44306)aws_bedrockagentcore_memory_strategy(#44306)aws_bedrockagentcore_oauth2_credential_provider(#44307)aws_bedrockagentcore_token_vault_cmk(#44606)aws_bedrockagentcore_workload_identity(#44308)ENHANCEMENTS:
path_prefixattribute (#44703)state,joined_method, andjoined_timestampattributes to theaccountsandnon_master_accountsblocks (#44327)state,joined_method, andjoined_timestampattributes to theaccountsblock (#44327)state,joined_method, andjoined_timestampattributes to theaccountsblock (#44327)certificate_based_auth_propertiesargument (#44679)pathattribute (#44703)delete_associated_resourcesattribute to enable practitioner to delete associated oci resource. (#44754)stateattribute (#44327)state,joined_method, andjoined_timestampattributes to theaccountsandnon_master_accountsblocks (#44327)BUG FIXES:
tagsattribute (#44761)additional_configurationblock to ignore ordering (#44627)v6.17.0Compare Source
NOTES:
FEATURES:
aws_rds_global_cluster(#37286)aws_vpn_connection(#44622)aws_bedrockagentcore_agent_runtime(#44301)aws_bedrockagentcore_agent_runtime_endpoint(#44301)aws_bedrockagentcore_api_key_credential_provider(#44302)aws_bedrockagentcore_browser(#44303)aws_bedrockagentcore_code_interpreter(#44304)aws_bedrockagentcore_gateway(#44305)aws_bedrockagentcore_gateway_target(#44305)ENHANCEMENTS:
throughputmaximum validation from 1000 to 2000 MiB/s for gp3 volumes (#44604)throughputmaximum validation from 1000 to 2000 MiB/s for gp3 volumes (#44604)throughputmaximum validation from 1000 to 2000 MiB/s for gp3 volumes (#44604)admin_pro_group,author_pro_group, andreader_pro_grouparguments (#44638)BUG FIXES:
inconsistent final planerrors (#44542)source_code_hash,s3_bucket,s3_key,s3_object_versionandfilename) to their previous values when an update operation fails (#42829)v6.16.0Compare Source
FEATURES:
aws_transcribe_start_transcription_job(#44445)aws_odb_cloud_autonomous_vm_clusters(#44336)aws_odb_cloud_exadata_infrastructures(#44336)aws_odb_cloud_vm_clusters(#44336)aws_odb_network_peering_connections(#44336)aws_odb_networks(#44336)aws_prometheus_resource_policy(#44256)aws_transfer_host_key(#44559)aws_transfer_web_app(#42708)aws_transfer_web_app_customization(#42708)ENHANCEMENTS:
auto_retry_limitargument (#40035)scheduler_configurationblock (#44589)schema_registry_configconfiguration blocks toamazon_managed_kafka_event_source_configandself_managed_kafka_event_source_configblocks (#44540)ipv4_addresses_per_eniargument (#44560)BUG FIXES:
Missing Resource Identity After Updateerrors for non-refreshed and failed updates of Plugin Framework based resources (#44518)Unexpected Identity Changeerrors when fully-null identity values in state are updated to valid values for Plugin Framework based resources (#44518)glossary_terms. (#44491)unknown valueerror when optionalaccount_identifieris not specified. (#44491)unknown valueerror when optionalaccount_regionis not specified. (#44491)unexpected stateerror when deleting. (#44491)blueprint_identifieron creation. (#44491)user_parameterswhen importing. (#44491)user_parametersshould not be updateable. (#44491)LimitExceededException(#44576)maximum_message_rate_per_secondvalidation maximum to100(#44572)kms_key_idvalidation now accepts key ID, alias, and alias ARN in addition to key ARN (#44505)ThrottlingExceptionerrors (#24730)v6.15.0Compare Source
BREAKING CHANGES:
capacity_provider_strategyto avoid ECS service recreation after recent AWS changes (#43533)FEATURES:
aws_codebuild_start_build(#44444)aws_events_put_events(#44487)aws_sfn_start_execution(#44464)aws_appconfig_application(#44168)aws_odb_db_node(#43792)aws_odb_db_nodes(#43792)aws_odb_db_server(#43792)aws_odb_db_servers(#43792)aws_odb_db_system_shapes(#43825)aws_odb_gi_versions(#43825)aws_lakeformation_lf_tag_expression(#43883)ENHANCEMENTS:
mysql_settingsattribute (#44516)locationattribute (#44328)default_auth_schemeattribute (#44309)ip_address_typeargument toorigin.custom_origin_configblock (#44463)mysql_settingsconfiguration block (#44516)force_destroy. (#44406)throughputmaximum validation from 1000 to 2000 MiB/s for gp3 volumes (#44514)clusterandmanaged_instances_providerarguments (#44509)auto_scaling_group_provideroptional (#44509)credential_age_days,service_credential_alias,service_credential_secret,create_date, andexpiration_dateattributes (#44299)enable_monitoring_dashboardargument (#44515)aiml_optionsargument (#44417)two_way_channel_arnargument to acceptconnect.[region].amazonaws.comin addition to ARNs (#44372)default_auth_schemeargument (#44309)authconfiguration block optional (#44309)network_typeargument (#44377)arnargument (#44408)BUG FIXES:
Invalid address to set: []string{"secondary_ips_auto_assigned_per_subnet"}errors (#44485)firewall_policy.stateful_rule_group_referenceattributes (#44482)quota_namewas provided (#44449)AttributeName("arn") still remains in the path: could not find attribute or block "arn" in schemaerrors when upgrading from a pre-v6.0.0 provider version (#44434)configuration_nameis modified (#43996)LimitExceededException(#44489)LimitExceededException(#44522)ipv6_cidr_blockwhen the VPC has multiple associated IPv6 CIDRs (#44362)postgres_settingsare updated (#44389)deletion_protection_enablednot set. (#44406)compute_config,kubernetes_network_config.elastic_load_balancing, andstorage_config.to Optional and Computed, allowing EKS Auto Mode settings to be enabled, disabled, and removed from configuration (#44334)inconsistent final planerror in some cases withsettingelements. (#44461)inconsistent final planerror in some cases withsettingelements. (#44461)provider produced unexpected valueforcache_usage_limitsargument. (#43841)metadata_configurationfirst to allow simultaneous increase ofmetadata_configuration.iopsandstorage_capacity(#44456)interface conversion: interface {} is nil, not map[string]interface {}panics whencapacity_reservation_targetis empty (#44459)application_configuration.run_configurationvalues are respected during update (#43490)database_insights_modewithglobal_cluster_identifier. (#44404)child_health_thresholdto properly accept explicitly specified zero value (#44006)noncurrent_version_expiration.newer_noncurrent_versionsandnoncurrent_version_transition.newer_noncurrent_versions. (#44442)ipv6_cidr_blockwhen the VPC has multiple associated IPv6 CIDRs (#44362)v6.14.1Compare Source
NOTES:
BUG FIXES:
Missing Resource Identity After Updateerrors for non-refreshed and failed updates (#44375)Unexpected Identity Changeerrors when fully-null identity values in state are updated to valid values (#44375)v6.14.0Compare Source
FEATURES:
aws_cloudfront_create_invalidation(#43955)aws_ec2_stop_instance(#43700)aws_lambda_invoke(#43972)aws_ses_send_email(#44214)aws_sns_publish(#44232)aws_billing_views(#44272)aws_odb_cloud_autonomous_vm_cluster(#43809)aws_odb_cloud_exadata_infrastructure(#43650)aws_odb_cloud_vm_cluster(#43790)aws_odb_network(#43715)aws_odb_network_peering_connection(#43757)aws_controltower_baseline(#42397)aws_odb_cloud_autonomous_vm_cluster(#43809)aws_odb_cloud_exadata_infrastructure(#43650)aws_odb_cloud_vm_cluster(#43790)aws_odb_network(#43715)aws_odb_network_peering_connection(#43757)ENHANCEMENTS:
deployment_configuration.lifecycle_hook.hook_detailsargument (#44289)source_db_cluster_identifierandenginearguments (#44252)action_after_completionargument (#44264)BUG FIXES:
InvalidParameterValue: User xxx is not a member of user group xxxerrors during group modification (#43520)async_inference_config.output_config.notification_configblock is specified (#44310)v6.13.0Compare Source
ENHANCEMENTS:
billing_view_arnattribute (#44241)warm_throughputandglobal_secondary_index.warm_throughputattributes (#41308)ap-southeast-5,ap-southeast-7,eu-south-2, andme-central-1AWS Regions (#44132)ap-southeast-6AWS Region (#44132)ap-southeast-6AWS Region (#44132)ap-southeast-6AWS Region (#44132)predictive_scaling_policy_configurationargument (#44211)policy_type(#44211)step_scaling_policy_configuration.adjustment_typeandstep_scaling_policy_configuration.metric_aggregation_type(#44211)input_action,output_action,input_enabled, andoutput_enabledarguments toword_policy_config.managed_word_lists_configandword_policy_config.words_configconfiguration blocks (#44224)billing_view_arnargument (#44241)origin.response_completion_timeoutargument (#44163)pull_request_build_policyconfiguration block (#44201)warm_throughputandglobal_secondary_index.warm_throughputarguments (#41308)dualStackIPv6as a valid value forname(#44165)iceberg_configuration.run_rate_in_hoursargument toretention_configurationandorphan_file_deletion_configurationblocks (#44207)address_definitionarguments insourceanddestinationblocks withinrule_group.rules_source.stateless_rules_and_custom_actions.stateless_rule.rule_definition.match_attributes(#44215)options.dns_supportandoptions.security_group_referencing_supportarguments (#43742)optionsto Optional and Computed (#43742)engine_versionargument (#44155)schedule.retry_configconfiguration block (#44244)BUG FIXES:
interface conversion: interface {} is nil, not map[string]interface {}panics whenstep_scaling_policy_configurationis empty (#44211)reading Cognito Managed Login Branding by client ... couldn't find resourceerrors when a user pool contains multiple client apps (#44204)compute_config.node_role_arnwhen disabling auto mode or built-in node pools (#42483)Error decoding ... from prior state: unsupported attribute "log_group_name"errors when upgrading from a pre-v6.0.0 provider version (#44191)Error decoding ... from prior state: unsupported attribute "elastic_gpu_specifications"errors when upgrading from a pre-v6.0.0 provider version (#44195)feature_nameoptional (#44143)MethodNotAllowederrors when deleting non-existent lifecycle configurations (#44189)warningwhen remote policy is invalid (#44228)timeouts.readarguments removed in v6.12.0 (#44238)v6.12.0Compare Source
NOTES:
access_control_policy.grant.grantee.display_nameattribute is deprecated. AWS has ended support for this attribute. API responses began inconsistently returning it on July 15, 2025, and will stop returning it entirely on November 21, 2025. This attribute will be removed in a future major version. (#44090)access_control_policy.owner.display_nameattribute is deprecated. AWS has ended support for this attribute. API responses began inconsistently returning it on July 15, 2025, and will stop returning it entirely on November 21, 2025. This attribute will be removed in a future major version. (#44090)target_grant.grantee.display_nameattribute is deprecated. AWS has ended support for this attribute. API responses began inconsistently returning it on July 15, 2025, and will stop returning it entirely on November 21, 2025. This attribute will be removed in a future major version. (#44090)FEATURES:
aws_cognito_managed_login_branding(#43817)ENHANCEMENTS:
ip_address_typeandipv6_addressattributes (#44079)placement_group_idattribute (#38527)source_kms_key_arnattribute (#44080)placement.group_idattribute (#44097)ap-southeast-6as a valid AWS Region (#44127)availability_zone_rebalancingand change the attribute to Optional and Computed. This allow ECS to default toENABLEDfor new resources compatible with AvailabilityZoneRebalancing and maintain an existing service'savailability_zone_rebalancingvalue during update when not configured. If an existing service never had anavailability_zone_rebalancingvalue configured and is updated, ECS will treat this asDISABLED(#43241)ip_address_typeandipv6_addressarguments to support IPv6 connectivity (#44079)user_and_group_quotasargument (#44120)user_and_group_quotasargument (#44118)placement_group_idargument (#38527)source_kms_key_arnargument (#44080)placement.group_idargument (#44097)run_config.ephemeral_storageargument. (#44105)BUG FIXES:
nameandnamespace(#44072)provisioning_parametersandprovisioning_artifact_idto the values from the last successful deployment when update fails (#43956)v6.11.0Compare Source
FEATURES:
aws_timestreaminfluxdb_db_cluster(#42382)aws_workspacesweb_browser_settings_association(#43735)aws_workspacesweb_data_protection_settings_association(#43773)aws_workspacesweb_identity_provider(#43729)aws_workspacesweb_ip_access_settings_association(#43774)aws_workspacesweb_network_settings_association(#43775)aws_workspacesweb_portal(#43444)aws_workspacesweb_session_logger(#43863)aws_workspacesweb_session_logger_association(#43866)aws_workspacesweb_trust_store(#43408)aws_workspacesweb_trust_store_association(#43778)aws_workspacesweb_user_access_logging_settings_association(#43776)aws_workspacesweb_user_settings_association(#43777)ENHANCEMENTS:
endpoint_ip_address_typeandtraffic_ip_address_typeattributes (#44059)attachment.network_card_indexattribute (#42188)verification_statusattribute (#44045)signing_materialandsigning_parametersattributes (#43921)metered_accountattribute (#43967)domain_versionandservice_rolearguments to support V2 domains (#44042)copy_tags,create_interval,exclusions,extend_deletion,policy_language,resource_typeandretain_intervalattributes topolicy_detailsconfiguration block (#41055)default_policyargument (#41055)policy_details.create_rule.scriptsargument (#41055)policy_details.schedule.cross_region_copy_rule.target_regionargument (#33796)policy_details.schedule.cross_region_copy_rule.targetoptional (#33796)policy_details.schedule.archive_ruleargument (#41055)modeargument in support of CloudWatch contributor insights modes (#43914)endpoint_ip_address_typeandtraffic_ip_address_typearguments to support IPv6 connectivity in Client VPN (#44059)client_cidr_blockoptional (#44059)sigint_rollbackargument (#43986)deployment_configurationto Optional and Computed (#43986)remote_network_configto be updated in-place, enabling support for EKS hybrid nodes on existing clusters (#42928)engineto Optional and Computed (#42636)code_repository_project_name,code_repository_provider_type,ecr_image_in_use_count, andecr_image_last_in_use_atinfilter_criteria(#43950)thing_principal_typeargument (#43916)key_specargument (#44011)key_usageto Optional and Computed (#44011)secondary_ips_auto_assigned_per_subnetargument for Network Load Balancers (#43699)worker_replacement_strategyargument (#43946)attachment.network_card_indexargument (#42188)network_card_indexargument (#42188)force_destroyargument (#43922)verification_statusattribute (#44045)signing_parametersargument (#43921)vpc_config.ipv6_allowed_for_dual_stackargument (#43989)metered_accountargument (#43967)BUG FIXES:
partition_keys.parametersattribute (#26702)email_mfa_configurationblock (#43926)database_insights_modewhen using custom KMS key (#44050)DescribeHostedConnections failed for connection dxcon-xxxx doesn't existby pointing to the correct connection ID when doing the describe. (#43499)partition_keys.parametersargument, fixingInvalid address to set: []string{"partition_keys", "0", "parameters"}errors (#26702)block_device_mapping.ebs.iopsfrom10000to100000(#43981)secondary_private_ip_addresses(#43708)network_interface.network_card_indexto Computed (#38336)nameinresponse_inspection.headerblocks forAWSManagedRulesATPRuleSetandAWSManagedRulesACFPRuleSetto avoid persistent plan diffs (#44032)v6.10.0Compare Source
NOTES:
network_interfaceblock has been deprecated. Useprimary_network_interfacefor the primary network interface andaws_network_interface_attachmentresources for other network interfaces. (#43953)network_interfaceblock has been deprecated. Useprimary_network_interfacefor the primary network interface andaws_network_interface_attachmentresources for other network interfaces. (#43953)ENHANCEMENTS:
image_tag_mutability_exclusion_filterattribute (#43886)image_tag_mutability_exclusion_filterattribute (#43886)image_tag_mutability_exclusion_filterconfiguration block (#43886)G.12X,G.16X,R.1X,R.2X,R.4X, andR.8Xas valid values forworker_type(#43988)BUG FIXES:
SPOT_PRICE_CAPACITY_OPTIMIZEDstrategy (#40148)Provider produced inconsistent result after applyerror whenpolicy_detail.exclusion_rules.amis.is_publicis omitted (#43925)primary_network_interfaceto allow importing resources with custom primary network interface. (#43953)database_insights_modewhen using custom KMS key (#43942)primary_network_interfaceto allow importing resources with custom primary network interface. (#43953)v6.9.0Compare Source
FEATURES:
aws_appsync_api(#43787)aws_appsync_channel_namespace(#43787)ENHANCEMENTS:
deletion_protectionattribute (#43779)replica.deletion_protection_enabledargument (#43240)deletion_protectionargument (#43779)BUG FIXES:
reserved_concurrent_executionsattribute when a published version exists. This functionality requires thelambda:GetFunctionConcurrencyIAM permission (#43753)firewall_policy.stateful_engine_options.flow_timeouts(#43852)account_takeover_risk_configuration.notify_configurationoptional (#33624)service_connect_configurationwhen deleted outside of Terraform (#43871)reserved_concurrent_executionsattribute when a published version exists. This functionality requires thelambda:GetFunctionConcurrencyIAM permission (#43753)runtime error: invalid memory address or nil pointer dereferencepanics whenGetTableMaintenanceConfigurationreturns an error (#43764)user_profile_name(#43807)create, to check if new value is less than current value of quota (#43545)InvalidGatewayRequestException: The specified gateway is not connectederrors during Read by using theListGatewaysAPI to return minimal information about a disconnected gateway. This functionality requires thestoragegateway:ListGatewaysIAM permission (#43819)netmask_lengthnot being saved and diffed correctly (#43262)v6.8.0Compare Source
FEATURES:
aws_networkfirewall_vpc_endpoint_association(#43675)aws_quicksight_custom_permissions(#43613)aws_quicksight_role_custom_permission(#43613)aws_quicksight_user_custom_permission(#43613)aws_wafv2_web_acl_rule_group_association(#43561)ENHANCEMENTS:
custom_permissions_nameattribute (#43613)resource_arnargument to enable finding web ACLs by resource ARN (#43597)CLOUDFRONTscopeweb ACLs usingresource_arn(#43597)input_action,output_action,input_enabled, andoutput_enabledattributes tosensitive_information_policy_config.pii_entities_configandsensitive_information_policy_config.regexes_configconfiguration blocks (#43702)AuroraDBClusterStorageas a validresource_type(#43677)serverless_v2_scaling_configurationargument in support of Amazon DocumentDB serverless (#43667)image_tag_mutability_exclusion_filterargument (#43642)IMMUTABLE_WITH_EXCLUSIONandMUTABLE_WITH_EXCLUSIONas valid values forimage_tag_mutability(#43642)force_destroyargument that allows destruction even whendisable_api_terminationanddisable_api_stoparetrue(#43722)iceberg_configuration.append_onlyargument (#43647)iam_arn(#43613)user_nameto Optional and Computed (#43613)IAM_IDENTITY_CENTERas a valid value foridentity_type(#43613)RESTRICTED_AUTHORandRESTRICTED_READERas valid values foruser_role(#43613)max_message_sizefrom 256 KiB to 1024 KiB (#43710)BUG FIXES:
inconsistent final planerror whencompute_resource.launch_template.versionis unknown during an update (#43337)created_atbecomingnullon Update (#43654)PrefixListVersionMismatch: The prefix list has the incorrect version numbererrors when updating entry description (#43661)disable_api_terminationistrue(#43722)maintenance_configurationread failure (#43707)image_nameregular expression validation (#43751)network_typeas ForceNew if the value is not configured. This fixes a problem withterraform apply -refresh=falseafter upgrade fromv5.90.0and below (#43534)regular_expressionargument (#43693)v6.7.0Compare Source
FEATURES:
aws_quicksight_ip_restriction(#43596)aws_quicksight_key_registration(#43587)ENHANCEMENTS:
instance_typeattribute incompute_configurationblock (#43449)volume_initialization_rateattribute (#43565)load_balancerattribute (#43582)tagsattribute. This functionality requires thes3:ListTagsForResourceIAM permission with S3 Access Points for general purpose buckets and thes3express:ListTagsForResourceIAM permission with S3 Access Points for directory buckets (#43630)deletion_protectionattribute (#43452)configuration.identity_center_configurationargument (#38717)analytics_engineargument (#43614)instance_typeargument incompute_configurationblock to support custom instance types (#43449)volume_initialization_rateargument (#43565)tagsargument andtags_allattribute. This functionality requires thes3:ListTagsForResource,s3:TagResource, ands3:UntagResourceIAM permissions with S3 Access Points for general purpose buckets and thes3express:ListTagsForResource,s3express:TagResource, ands3express:UntagResourceIAM permissions with S3 Access Points for directory buckets (#43630)deletion_protectionargument (#43452)BUG FIXES:
missing required field, CreateFlowInput.Definition.Nodes[0].Configuration[prompt].SourceConfiguration[resource].PromptArnerrors on Create (#43595)NoSuchTagSetErrorresponses from S3-compatible services (#43589)NoSuchTagSetErrorresponses from S3-compatible services (#43589)Provider produced inconsistent final planerrors when changing from usingvalueto usingvalue_wo(#42877)versionnot being updated whendescriptionchanges (#42595)v6.6.0Compare Source
FEATURES:
aws_connect_phone_number_contact_flow_association(#43557)aws_nat_gateway_eip_association(#42591)ENHANCEMENTS:
log_configattribute (#43453)available_security_updates_compliance_statusargument (#43560)cross_region_config,content_policy_config.tier_config, andtopic_policy_config.tier_configarguments (#43517)workgroupargument (#36628)compute_resources.ec2_configuration.image_kubernetes_versionargument (#43454)log_configargument (#43453)nameto be updated in-place (#41702)nameto be updated in-place (#42639)secondary_allocation_idsto Optional and Computed (#42591)available_security_updates_compliance_statusargument (#43560)/ssm/prefix) forsetting_id(#43562)BUG FIXES:
test_listener_ruleincorrectly being set as empty string inload_balancer.advanced_configurationblock (#43558)v6.5.0Compare Source
NOTES:
FEATURES:
aws_ecr_images(#42577)aws_cognito_log_delivery_configuration(#43396)aws_networkfirewall_firewall_transit_gateway_attachment_accepter(#43430)aws_s3_bucket_metadata_configuration(#41364)ENHANCEMENTS:
postgres_settings.authentication_methodandpostgres_settings.service_access_role_arnattributes (#43440)availability_zone_change_protection,availability_zone_mapping,firewall_status.sync_states.attachment.status_message,firewall_status.transit_gateway_attachment_sync_states,transit_gateway_id, andtransit_gateway_owner_account_idattributes (#43430)oracle_settingsconfiguration block for authentication method (#43125)postgres_settings.authentication_methodandpostgres_settings.service_access_role_arnarguments (#43440)postgres_settings.database_mode,postgres_settings.map_long_varchar_as, andpostgres_settings.plugin_namearguments (#43440)dns_name_serversattribute andkerberos_authentication_settingsconfiguration block for Kerberos authentication settings (#43125)transit_gateway_attachment_idattribute. This functionality requires theec2:DescribeTransitGatewayAttachmentsIAM permission (#43436)CODE_REPOSITORYas a valid value forresource_types(#43525)auto_enable.code_repositoryargument (#43525)availability_zone_change_protection,availability_zone_mapping, andtransit_gateway_idarguments andfirewall_status.transit_gateway_attachment_sync_statesandtransit_gateway_owner_account_idattributes (#43430)subnet_mappingandvpc_idas Optional (#43430)aws_account_idargument. (#43501)rules_jsonargument (#43397)statement.rate_based_statement.custom_key.asnargument (#43506)BUG FIXES:
forces replacementonregionfor numerous resource types when upgrading from a pre-v6.0.0 provider version and-refresh=falseis in effect (#43516)pathwhenpath_partis updated (#43215)definition.connectionanddefinition.nodelist length limits (#43471)ipv6_addresseswhenipv6_address_countis updated (#43158)v6.4.0Compare Source
FEATURES:
aws_s3_access_point(#43391)aws_bedrockagent_flow(#42201)aws_fsx_s3_access_point_attachment(#43391)ENHANCEMENTS:
typeargument (#43150)hybrid_access_enabled,with_federationandwith_privileged_accessattributes (#43377)options.exportargument to issue an exportable certificate (#43207)apply_on_transformed_logsargument (#43381)agent_arnsoptional (#43400)deployment_configurationargument (#43434)load_balancer.advanced_configurationargument (#43434)service.client_alias.test_traffic_rulesargument (#43434)deployment_controller.typechanges no longer force a replacement (#43434)with_privileged_accessargument (#43377)skip_destroyargument (#43415)BUG FIXES:
parent_action_group_signatureon Read (#43355)Inappropriate value for attribute "regional_parameters"errors during planning. This fixes a regression introduced in v6.0.0 (#43382)transit_gateway_attachment_idas ForceNew if the value is known not to change (#43405)waiting for Lambda Function (...) version publish: unexpected state '', wanted target 'Successful'errors on Update. This fixes a regression introduced in v6.2.0 (#43416)sub_slot_setting.slot_specification.value_elicitation_setting.prompt_specification.prompt_attempts_specificationandvalue_elicitation_setting.prompt_specification.prompt_attempts_specificationhave default values (#43358)meta_store_role_arnto be updated in-place (#36874)v6.3.0Compare Source
FEATURES:
aws_prometheus_query_logging_configuration(#43222)ENHANCEMENTS:
anycast_ip_list_idattribute (#43196)core_network_configuration.dns_supportandcore_network_configuration.security_group_referencing_supportarguments (#43277)anycast_ip_list_idargument (#43196)replica.consistency_modeargument in support of multi-Region strong consistency for Amazon DynamoDB global tables (#43236)BUG FIXES:
runtime error: invalid memory address or nil pointer dereferencepanics for numerous resource types when modifyingtags(#43324)operation can't be performed on Agent when it is in Preparing state.errors during agent action group base creation, update, and deletion. (#43232)operation can't be performed on Agent when it is in Preparing state.errors during agent knowledge base creation and disassociation (#43232)managed_login_versionfor custom Cognito domains (#43252)InvalidDBInstanceStateerrors on delete (#43303)interface conversion: interface {} is nil, not map[string]interface {}panics when configuration blocks are empty (#43308)InvalidDBClusterStateFaulterrors on delete (#43303)availability_zone_relocation_enabled(#43270)resource_propertiesto Computed to enablevpc_endpointassociations (#42562)arnwhen refreshing state. (#43273)v6.2.0Compare Source
NOTES:
idattribute has changed fromkeytobucket/key. All configurations usingidshould be updated to use thekeyattribute instead (#43119)idattribute has changed fromkeytobucket/key. All configurations usingidshould be updated to use thekeyattribute instead (#43119)ENHANCEMENTS:
tagsattribute. This functionality requires thekinesis:ListTagsForResourceIAM permission (#43173)firewall_policy.stateful_rule_group_reference.deep_threat_inspectionattribute (#43137)configuration.internal_accessargument (#43138)job_configargument (#43136)enable_skew_protectionargument (#43218)errorCode,eventType,sessionCredentialFromConsole, andvpcEndpointIdas valid values foradvanced_event_selector.field_selector.field(#43091)errorCode,eventType,sessionCredentialFromConsole, andvpcEndpointIdas valid values foradvanced_event_selector.field_selector.field(#43091)kms_key_identifierargument (#43139)DELIVERYas a valid value forlog_group_class(#42658)environment.docker_serverconfiguration block (#42982)disable_session_tagsandtarget_role_arnarguments andexternal_idattribute (#42979)os_release_labelargument (#43018)resource_tag_logical_operatorargument (#43031)job_modeargument (#42607)tagsargument andtags_allattribute. This functionality requires thekinesis:ListTagsForResource,kinesis:TagResource, andkinesis:UntagResourceIAM permissions (#43173)HMAC_224,HMAC_384,HMAC_512,ML_DSA_44,ML_DSA_65, andML_DSA_87as valid values forcustomer_master_key_spec(#43128)-1is now a valid value forport_info.from_portandport_info.to_port(#37703)firewall_policy.stateful_rule_group_reference.deep_threat_inspectionargument (#43137)exclude_resource_tagsargument (#43189)tagsargument andtags_allattribute. This functionality requires thes3express:ListTagsForResource,s3express:TagResource, ands3express:UntagResourceIAM permissions (#43256)metadataargument (#43112)aws_managed_rules_anti_ddos_rule_settomanaged_rule_group_configsconfiguration block in support of L7 DDoS protection (#43149)BUG FIXES:
Unexpected Identity Changeerrors for numerous resource types when refreshing resources created or refreshed by Terraform AWS Provider v6.0.0 (#43221)Exceeded the number of retries on OptLock failure. Too many concurrent requests.errors during update (#43179)Prepare operation can't be performed on Agent when it is in Preparing state.errors during prepare (#43179)Update operation can't be performed on Agent when it is in Preparing state.errors during update (#43179)operation can't be performed on Agent when it is in Preparing state.errors during agent collaborator update and disassociation (#43179)log_group_names(#43183)"") value fors3_prefix. This fixes a regression introduced in v6.0.0 (#43159)log_publishing_optionsremoved on Update. This prevents a perpetual diff (#43033)ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log streamIAM eventual consistency errors on Create (#43033)logging_configdiffs whenlog_formatis set toJSONandpublish = true(#42660)confirmation_setting.prompt_specification.prompt_attempts_specificationdefaults (#43147)log_publishing_optionsremoved on Update. This prevents a perpetual diff (#43033)ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log streamIAM eventual consistency errors on Create (#43033)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)email(#43014)Value Conversion Errorerrors when upgrading existing resources to Terraform AWS Provider v6.0.0 (#43116)v6.0.0Compare Source
BREAKING CHANGES:
most_recentistrueand owner and image ID filter criteria has been increased to an error. Existing configurations which were previously receiving a warning diagnostic will now fail to apply. To prevent this error, set theownerargument or include afilterblock with animage-idorowner-idname/value pair. To continue using unsafe filter values withmost_recentset totrue, set the newallow_unsafe_filterargument totrue. This is not recommended. (#42114)inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)inference_accelerator_overridesattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)action.authenticate_cognito,action.authenticate_oidc,action.fixed_response,action.forward,action.forward.stickiness,action.redirect,condition.host_header,condition.http_header,condition.http_request_method,condition.path_pattern,condition.query_string, andcondition.source_ipattributes are now list nested blocks instead of single nested blocks (#42283)filterhas been removed (#42325)elastic_inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)elastic_gpu_specificationshas been removed (#42312)kibana_endpointhas been removed (#42268)saml_optionsis now a list nested block instead of a single nested block (#42270)tags_allattribute (#42136)aws_opsworks_applicationresource has been removed (#41948)aws_opsworks_custom_layerresource has been removed (#41948)aws_opsworks_ecs_cluster_layerresource has been removed (#41948)aws_opsworks_ganglia_layerresource has been removed (#41948)aws_opsworks_haproxy_layerresource has been removed (#41948)aws_opsworks_instanceresource has been removed (#41948)aws_opsworks_java_app_layerresource has been removed (#41948)aws_opsworks_memcached_layerresource has been removed (#41948)aws_opsworks_mysql_layerresource has been removed (#41948)aws_opsworks_nodejs_app_layerresource has been removed (#41948)aws_opsworks_permissionresource has been removed (#41948)aws_opsworks_php_app_layerresource has been removed (#41948)aws_opsworks_rails_app_layerresource has been removed (#41948)aws_opsworks_rds_db_instanceresource has been removed (#41948)aws_opsworks_stackresource has been removed (#41948)aws_opsworks_static_web_layerresource has been removed (#41948)aws_opsworks_user_profileresource has been removed (#41948)aws_simpledb_domainresource has been removed. Add a constraint to v5 of the Terraform AWS Provider for continued use of this resource (#41775)aws_worklink_fleetresource has been removed (#42059)aws_worklink_website_certificate_authority_associationresource has been removed (#42059)aws_redshift_service_accountresource has been removed. AWS recommends that a service principal name should be used instead of an AWS account ID in any relevant IAM policy (#41941)endpoints.iotanalyticsandendpoints.ioteventsconfiguration arguments have been removed (#42703)endpoints.opsworksconfiguration argument has been removed (#41948)endpoints.simpledbandendpoints.sdbconfiguration arguments have been removed (#41775)endpoints.worklinkconfiguration argument has been removed (#42059)filter.existsnow only accepts one of""(empty string),true, orfalse(#42434)preserve_client_ipnow only accepts one of""(empty string),true, orfalse(#42434)reset_on_deleteargument has been removed (#42226)canary_settings,execution_arn,invoke_url,stage_description, andstage_namearguments. Instead, use theaws_api_gateway_stageresource to manage stages. (#42249)compute_environment_nametonameresource/aws_batch_compute_environment: Rename
compute_environment_name_prefixtoname_prefix(#38050)compute_environment_nametoname(#38050)compute_environmentsin place ofcompute_environment_order(#40751)logging_config,logging_config.cloudwatch_config,logging_config.cloudwatch_config.large_data_delivery_s3_config, andlogging_config.s3_configare now list nested blocks instead of single nested blocks (#42307)idis now set to remote object'sIdinstead ofname(#42230)etagargument is now computed only (#38448)suspendnow only accepts one of""(empty string),true, orfalse(#42434)idattribute is now a comma-delimited string concatenating theuser_pool_id,group_name, andusernamearguments (#34082)s3_prefixargument is now required (#38446)character_set_namenow cannot be set withreplicate_source_db,restore_to_point_in_time,s3_import, orsnapshot_identifier. (#42348)s3_settingsattribute. Useaws_dms_s3_endpointinstead (#42379)vpn_gateway_idhas been removed (#42323)terminate_instances_on_deletenow only accepts one of""(empty string),true, orfalse(#42434)block_duration_minutesattribute (#42060)inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)vpchas been removed. Usedomaininstead. (#42340)resolve_conflictshas been removed. Useresolve_conflicts_on_createandresolve_conflicts_on_updateinstead. (#42318)auto_minor_version_upgradenow only accepts one of""(empty string),true, orfalse(#42434)at_rest_encryption_enabledandauto_minor_version_upgradenow only accept one of""(empty string),true, orfalse(#42434)auth_token_update_strategyno longer has a default value. Ifauth_tokenis set,auth_token_update_strategymust also be explicitly configured. (#42336)variations.value.bool_valuenow only accepts one of""(empty string),true, orfalse(#42434)log_group_namehas been removed. Uselog_destinationinstead. (#42333)idattribute is now computed only (#42097)datasources. Useaws_guardduty_detector_featureresources instead. (#42436)auto_enableattribute has been removed (#42251)filterhas been removed (#42325)instance_configuration.block_device_mapping.ebs.delete_on_terminationandinstance_configuration.block_device_mapping.ebs.encryptednow only accept one of""(empty string),true, orfalse(#42434)block_device_mapping.ebs.delete_on_terminationandblock_device_mapping.ebs.encryptednow only accept one of""(empty string),true, orfalse(#42434)cpu_core_countandcpu_threads_per_core. Instead, usecpu_options. (#42280)user_datanow displays cleartext instead of a hash. Base64 encoded content should useuser_data_base64instead. (#42078)block_device_mappings.ebs.delete_on_termination,block_device_mappings.ebs.encrypted,ebs_optimized,network_interfaces.associate_carrier_ip_address,network_interfaces.associate_public_ip_address,network_interfaces.delete_on_termination, andnetwork_interfaces.primary_ipv6now only accept one of""(empty string),true, orfalse(#42434)elastic_inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)elastic_gpu_specificationshas been removed (#42312)mutual_authenticationattributesadvertise_trust_store_ca_names,ignore_client_certificate_expiry, andtrust_store_arnare only valid ifmodeisverify(#42326)preserve_client_ipnow only accepts one of""(empty string),true, orfalse(#42434)logs.auditnow only accepts one of""(empty string),true, orfalse(#42434)base_policy_regionargument has been removed. Usebase_policy_regionsinstead. (#38398)kibana_endpointhas been removed (#42268)saml_optionsis now a list nested block instead of a single nested block (#42270)key_attributesandkey_attributes.key_modes_of_useare now list nested blocks instead of single nested blocks. (#42264)tags_allhas been removed (#42260)cluster_public_key,cluster_revision_number, andendpointare now read only and should not be set (#42119)loggingattribute has been removed (#42013)publicly_accessibleattribute now defaults tofalse(#41978)snapshot_copyattribute has been removed (#41995)regions_of_interest.bounding_boxis now a list nested block instead of a single nested block (#41380)policy,policy.az,policy.hardware,policy.software, andpolicy.regionare now list nested blocks instead of single nested blocks (#42297)code_editor_app_image_config,jupyter_lab_image_config, orkernel_gateway_image_configblock must be configured (#42753)idis now a comma-delimited string concatenatingimage_nameandversion(#42536)accelerator_typesfrom your configuration—it no longer exists. Instead, useinstance_typeto use Inferentia. (#42099)instance_idargument (#42224)definitionis now a list nested block instead of a single nested block (#42305)rule.statement.managed_rule_group_statement.managed_rule_group_configs.aws_managed_rules_bot_control_rule_set.enable_machine_learningnow defaults tofalse(#39858)NOTES:
nameattribute has been deprecated. All configurations usingnameshould be updated to use theregionattribute instead (#42131)bucket_regionattribute. Use of thebucket_regionattribute instead of theregionattribute is encouraged (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theaws_regionattribute instead (#42131)regionattribute has been deprecated. All configurations usingregionshould be updated to use theregionsattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theservice_regionattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use therequester_regionattribute instead (#42014)s3_us_east_1_regional_endpointargument. The ability to use the global S3 endpoint will be removed inv7.0.0. (#42375)regionattribute has been deprecated. All configurations usingregionshould be updated to use thestack_set_instance_regionattribute instead (#42014)idin favor ofarn(#42232)regionattribute has been deprecated. All configurations usingregionshould be updated to use theauthorized_aws_regionattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theconnection_regionattribute instead (#42014)enginevalue is deprecated (#42419)enginevalue is deprecated (#42419)enginevalue is deprecated (#42419)datasourcesnow returns a deprecation warning (#42251)aws_kinesisanalyticsv2_applicationresource instead (#42102)encryptedis nowtrueto match the AWS API. (#42631)bucket_regionattribute. Use of thebucket_regionattribute instead of theregionattribute is encouraged (#42014)health_check_custom_config.failure_thresholdis deprecated. The argument is no longer supported by AWS and is always set to 1 (#40777)regionattribute has been deprecated. All configurations usingregionshould be updated to use theaws_regionattribute instead (#42131)regionattribute has been deprecated. All configurations usingregionshould be updated to use theregionsattribute instead (#42014)ENHANCEMENTS:
allow_unsafe_filterargument (#42114)group_long_nameattribute (#42014)regionas Optional, allowing a value to be configured (#42014)roles.role_arnandroles.role_type(#42131)regionsupport to most resources, data sources, and ephemeral resources, allowing per-resource Region targeting without requiring multiple provider configurations. See the Enhanced Region Support guide for more information. (#43075)control_mapping_sources.source_frequency,control_mapping_sources.source_set_up_option, andcontrol_mapping_sources.source_type(#42131)destination_account(#42741)admin_account_id(#42741)arnattribute (#42733)finding_publishing_frequency. (#42436)mutual_authenticationattributetrust_store_arnis required ifmodeisverify(#42326)policy_arn(#42131)aliasesargument (#42610)access_typesource.aws_log_source_resource.source_name, andsubscriber_identity.external_id(#42131)BUG FIXES:
Provider produced inconsistent result after applyerrors (#42131)encryptedis not explicitly set totrue. (#42631)regions_of_interest.bounding_boxandregions_of_interest.polygonargument validation (#41380)access_typeto ForceNew (#42131)v5.100.0Compare Source
NOTES:
FEATURES:
aws_dsql_cluster(#41868)aws_dsql_cluster_peering(#41868)aws_prometheus_workspace_configuration(#42478)aws_s3control_directory_bucket_access_point_scope(#42338)aws_vpc_route_server(#42392)aws_vpc_route_server_endpoint(#42392)aws_vpc_route_server_peer(#42392)aws_vpc_route_server_propagation(#42392)aws_vpc_route_server_vpc_association(#42392)aws_workspacesweb_data_protection_settings(#42852)aws_workspacesweb_ip_access_settings(#42863)aws_workspacesweb_user_access_logging_settings(#42868)ENHANCEMENTS:
ap-east-2AWS Region (#42915)ap-east-2AWS Region (#42915)latest,has_major_target,preferred_major_targets, andpreferred_upgrade_targets(#42854)ap-east-2AWS Region (#42915)ap-east-2as a valid AWS Region (#42906)data_read_cache_configurationandthroughput_capacityarguments in support of the Intelligent-Tiering storage class (#42839)two_way_channel_roleargument (#42950)preshared_key_storageargument andpreshared_key_arnattribute (#42819)statement.asn_match_statementconfiguration block (#42965)statement.asn_match_statementconfiguration block (#42965)BUG FIXES:
max_batch_sizeargument can be used to override the default value of50items. (#42795)stream_arnattribute when changingstream_view_type(#42561)InvalidPaginationTokenerrors on read (#42948)InvalidParameterValue: The value of loadBalancerOptions.port you provided is not validerrors when creating TCP load balancer endpoints (#42736)OperationInProgress: VpcEndpoint modify operation in progresserrors when deleting multiple associations in parallel (#42884)v5.99.1Compare Source
BUG FIXES:
panic: runtime error: invalid memory address or nil pointer dereference(#42813)InvalidActionexceptions forDescribeCapacityReservationoperations. This fixes a regression introduced in v5.99.0 (#42812)rule.filter. (#42655)v5.99.0Compare Source
FEATURES:
aws_notifications_channel_association(#42575)aws_notifications_event_rule(#42575)aws_notifications_notification_configuration(#42575)aws_notifications_notification_hub(#42544)aws_notificationscontacts_email_contact(#42575)aws_quicksight_account_settings(#42185)aws_workspacesweb_browser_settings(#42681)aws_workspacesweb_network_settings(#42722)aws_workspacesweb_user_settings(#42783)ENHANCEMENTS:
block_device_mappings.ebs["volume_initialization_rate"]attribute (#42684)block_device_mappings.ebs.volume_initialization_rateattribute (#42684)tagsattribute. This functionality requires theverifiedpermissions:ListTagsForResourceIAM permission (#42663)volume_configuration.managed_ebs_volume.volume_initialization_rateargument (#42750)block_device_mappings.ebs.volume_initialization_rateargument (#42684)minimum_load_balancer_capacityconfiguration block. This functionality requires theelasticloadbalancing:DescribeCapacityReservationsandelasticloadbalancing:ModifyCapacityReservationIAM permissions (#42685)nameto be updated in-place. This functionality requires theaccount:PutAccountNameIAM permission (#42350)tagsargument andtags_allattribute. This functionality requires theverifiedpermissions:ListTagsForResource,verifiedpermissions:TagResource, andverifiedpermissions:UntagResourceIAM permissions (#42663)BUG FIXES:
prefixcan now be up to 256 characters (#42723)user_pool_add_ons.advanced_security_additional_flowsblock is non-empty, but contains only a singlenilvalue. (#42793)prefixcan now be up to 256 characters (#42723)HeadBucketS3 API calls are made using configured credentials. This fixes a regression introduced in v5.98.0 (#42786)rule.filter. (#42624)dns_optionswere not being updated correctly whenprivate_dns_enabledwas set to true (#42746)v5.98.0Compare Source
FEATURES:
aws_account_primary_contact(#42526)aws_dynamodb_tables(#42339)aws_bedrockagent_prompt(#42211)aws_cloudfrontkeyvaluestore_keys_exclusive(#42246)aws_dataexchange_revision_assets(#42272)aws_inspector2_filter(#42374)aws_wafv2_api_key(#42525)ENHANCEMENTS:
dead_letter_configattribute (#42471)kms_key_identifierattribute (#42385)refresh_token_rotationattribute (#42430)user_pool_add_onsattribute (#42470)point_in_time_recovery.recovery_period_in_daysattribute (#41484)client_route_enforcement_optionsattribute (#42424)distribution.ssm_parameter_configurationattribute (#42604)track_nameattribute (#42451)active_directory_config,user_identity_type,workspace_directory_description,workspace_directory_name, andworkspace_typeattributes (#42330)destination_flow_config.destination_connector_properties.salesforce.data_transfer_apiargument (#42479)capacity_reservation_specificationargument (#42380)prepared_atattribute. (#42586)instructionmax length for validation to 20000 (#42596)dead_letter_configargument (#42471)kms_key_identifierargument (#42385)refresh_token_rotationargument (#42430)refresh_token_rotationargument (#42430)user_pool_add_ons.advanced_security_additional_flowsargument (#42470)manage_master_user_passwordargument andmaster_user_secretattribute (#42563)point_in_time_recovery.recovery_period_in_daysargument (#41484)client_route_enforcement_optionsargument (#42424)defaultLogDriverModevalue inNameargument (#42418)distribution.ssm_parameter_configurationargument (#42604)application_protocolandauthentication_typearguments (#42534)bootstrap_brokers_sasl_iamattribute. This functionality requires thekafka:GetBootstrapBrokersIAM permission (#42148)track_nameargument (#42451)domain_listargument (#42456)domainas Optional (#42456)encryption_configurationargument. This functionality requires thes3tables:GetTableEncryptionIAM permission (#42356)encryption_configurationargument. This functionality requires thes3tables:GetTableBucketEncryptionIAM permission (#42356)NO_REGIONSas a valid value forlinking_mode(#42574)fifo_throughput_scopeargument (#42508)uri_fragmenttofield_to_matchconfiguration blocks (#42407)data_protection_configargument (#42404)uri_fragmenttofield_to_matchconfiguration blocks (#42407)active_directory_config,user_identity_type,workspace_directory_description,workspace_directory_name, andworkspace_typearguments in support of WorkSpaces Pools (#42330)directory_idas Optional (#42330)BUG FIXES:
ValidationException: The provided MLflow version is not supportederrors (#42435)firewall_policy.policy_variablesconfiguration block (#42473)routing_configurationso we only send it on update when explicility configured. This allows updates to aliases to create new versions. (#42603)20as a valid value formetric_query.metric.period,metric_query.period, andperiod(#42390)ResourceNotFoundexceptions during delete (#42494)parametersblock removal (#42494)filter_at_source.source_addressis unspecified. (#42369)InvalidNetworkInterface.InUseerrors on Create (#42623)false,0or"") for unconfigured listener attributes on Create (#41846)InvalidParameterValue: collation_server '..' is not valid for character_set '...'errors on Create (#42559)v5.97.0Compare Source
FEATURES:
aws_ec2_default_credit_specification(#42345)ENHANCEMENTS:
athena_propertiesattribute (#42262)placementattribute (#42347)enabled_analysis_typesattribute (#42160)certificate_based_auth_propertiesattribute (#42269)configuration.unused_access.analysis_ruleargument (#42332)ManagedResourcestoaction.*.target(#42376)athena_propertiesargument and allowDYNAMODBconnection type. (#42262)DYNAMODBas a valid value forconnection_type(#42262)placementargument (#42347)enabled_analysis_typesargument (#42160)certificate_based_auth_propertiesconfiguration block (#42269)BUG FIXES:
listener_identifierto ARN. (#42215)service_identifierto ARN. (#42215)match.http_match. (#42215)action.fixed_responseoraction.forward. (#42215)v5.96.0Compare Source
FEATURES:
aws_fis_experiment_templates(#37060)aws_vpc_endpoint_associations(#41918)ENHANCEMENTS:
endpoint_configuration.ip_address_typeattribute (#42146)endpoint_configuration.ip_address_typeattribute (#42146)ip_address_typeattribute (#42145)kinesis_settings.use_large_integer_valueattribute (#42300)arnattribute (#42344)tagsattribute (#42344)endpoint_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42146)endpoint_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42146)ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42145)domain_name_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42145)kinesis_settings.use_large_integer_valueargument (#42300)experiment_report_configurationargument (#41120)BUG FIXES:
malformed versionerror when parsing 7.x redis engine versions (#42346)ConcurrentModificationExceptions during user creation (#42081)InvalidParameterValue: SecondsUntilAutoPause can only be specified when minimum capacity is 0errors when removingserverlessv2_scaling_configuration.seconds_until_auto_pause(#41180)v5.95.0Compare Source
NOTES:
invoke_urlandexecution_arnare deprecated. Use theinvoke_urlandexecution_arnattributes of theaws_api_gateway_stageresource instead. (#42244)FEATURES:
aws_redshift_integration(#42105)ENHANCEMENTS:
filter_at_destinationandfilter_at_sourceattributes (#42214)compute_role_arnargument (#41650)manual_creationargument (#40155)managed_login_versionargument (#40855)filter_at_destinationandfilter_at_sourceconfiguration blocks (#42214)force_update_versionargument (#42134)alias,destination,role_configuration, andscrape_configurationto be updated in-place (#42109)price_performance_targetargument (#40946)horovod,job_type,ml_framework,processor,programming_lang,release_notes, andvendor_guidancearguments (#42143)tagsargument andtags_allattribute (#42141)TransferSecurityPolicy-2025-03,TransferSecurityPolicy-FIPS-2025-03, andTransferSecurityPolicy-SshAuditCompliant-2025-02as valid values forsecurity_policy_name(#42164)BUG FIXES:
engineis changed fromredistovalkey(#42208)panic: runtime error: invalid memory address or nil pointer dereferencewhen noXksProxyConfigurationis returned (#42241)rulefrom top of list (#42228)rule.filter.and.tags(#42041)default_user_settings.custom_file_system_configanddefault_space_settings.custom_file_system_configto be removed on Update (#42144)user_settings.custom_file_system_configto be removed on Update (#42144)v5.94.1Compare Source
BUG FIXES:
AuthorizationErrorexceptions forListSubscriptionByTopicoperations. This fixes a regression introduced inv5.94.0. (#42117)v5.94.0Compare Source
NOTES:
overwriteargument is no longer deprecated (#42030)ENHANCEMENTS:
last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)source_control_detailsargument (#42046)ruby3.4runtimevalue (#42052)ruby3.4compatible_runtimesvalue (#42052)role_configurationargument (#42039)rule.expirationare set (#42036)rule.prefixnorrule.filteris set (#42036)rule.transition.datenorrule.transition.daysis set and error if both are set (#42036)BUG FIXES:
CFNRegistryException: Version '...' is the default version and cannot be deregisterederrors when deregistering an extension and thecreate_before_destroymeta-argument istrue(#38855)volume_configurationandservice_connect_configurationsvalues from state read/refresh (#41998)service_connect_configuration.service.discovery_nameandservice_connect_configuration.service.client_alias.dns_nameas Computed (#41998)Provider produced inconsistent final planerrors whenconfiguration_info.revisionis unknown (#42037)refresh_propertiesis not configured (#42076)rule.filter(#42036)waiting for SQS Queue... attributes create: timeout while waitingerrors whensqs_managed_sse_enabled = falseor omitted andkms_master_key_idis not set butkms_data_key_reuse_period_secondsis set to a non-default value. (#42062)workspace_properties.running_mode_auto_stop_timeout_in_minuteswhen modified (#40953)v5.93.0Compare Source
FEATURES:
aws_api_gateway_rest_api_put(#41375)ENHANCEMENTS:
custom_role_arnandupstream_repository_prefixattributes (#41933)memory_configurationconfiguration block (#39970)trigger_allattribute (#42008)triggerargument now properly removes custom trigger definitions (#42008)username_configurationandusername_configuration.case_sensitivearguments as optional and computed. This will future proof the provider against upstream API changes which may return a default value for the block when omitted during create operations. (#35439)task_modeargument (#39979)custom_role_arnandupstream_repository_prefixarguments (#41933)ecr_repository_prefixto support a value of"ROOT"(#41933)runtime_environmentto be updated in-place (#41935)cidr_options,load_balancer.port_range,network_interface_options.port_range, andrds_optionsarguments (#41957)application_domain,domain_certificate_arnandendpoint_domain_prefixas Optional (#41957)cidrandrdsas valid values forendpoint_type(#41957)cidr_endpoint_custom_subdomainargument andname_serversattribute (#41957)native_application_oidc_optionsandsse_specificationarguments (#41957)BUG FIXES:
InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing instances (#41960)InvalidReplicationGroupStateexceptions during tagging operations (#41954)domain_nameto Computed (#41985)resource_data.table_wildcardattribute (#41939)v5.92.0Compare Source
NOTES:
configuration.s3_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the upgraded Amazon S3 connector. Amazon has ended support for the older architecture as of June 2024, and resources created with this argument cannot be edited or updated. See the Amazon Kendra documentation for additional details. (#35437)configuration.web_crawler_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the Amazon Kendra Web Crawler connector v2.0. See the Amazon Kendra documentation for additional details. (#35437)FEATURES:
aws_api_gateway_api_keys(#39335)aws_eks_cluster_versions(#40741)aws_identitystore_group_memberships(#31589)aws_identitystore_users(#31688)aws_athena_capacity_reservation(#41858)ENHANCEMENTS:
identity_info.secondary_emailattribute (#41001)database_insights_modeattribute (#41607)create_timeattribute (#41839)ipam_poolsattribute (#41822)aws-marketplaceas a valid account ID in ARNs (#41867)extension_arnandresource_arn(#41907)identity_info.secondary_emailattribute (#41001)database_insights_modeargument (#41607)create_timeattribute (#41839)configuration.template_configurationargument (#35437)ipam_poolsconfiguration block (#41822)BUG FIXES:
vpc_endpoint_ids(#41836)instructionvalidator to consider multi-byte chars so not to artificially limit instruction length (#41921)compute_config.node_role_arnto update in place when previously unset (#41925)performance_insights_enabledtakes effect when creating a cluster that is a member of a global cluster (#41737)InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing clusters (#41737)secondary_availability_zoneattribute when changingdeployment_type(#41849)v5.91.0Compare Source
NOTES:
FEATURES:
aws_network_interface_permission(#40797)aws_route53_records_exclusive(#41741)ENHANCEMENTS:
secondary_sources.authconfiguration block (#40191)msk_source_configuration.read_from_timestampargument (#41794)network_typeandportattributes. The following can now be updated in place:allocated_storage,db_instance_type,db_storage_typeanddeployment_type(#40661)ipv4_ipam_pool_idandipv4_netmask_lengthattributes (#41779)ipv6_ipam_pool_idandipv6_netmask_lengthattributes (#41779)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument (#40889)rule.challenge_configargument (#40123)BUG FIXES:
storage_modeupdates are actually applied to the cluster (#41773)v5.90.1Compare Source
NOTES:
godebug tlskyber=0directive ingo.mod. This disables the experimental the post-quantum key exchange mechanismX25519Kyber768Draft00, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in v5.90.0 (#41740)FEATURES:
aws_datazone_domain(#41480)ENHANCEMENTS:
stage.before_entry,stage.on_successandstage.on_failureconfiguration blocks (#41663)connector_configurationto be updated in-place (#41685)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)v5.90.0Compare Source
BREAKING CHANGES:
rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required (#40796)NOTES:
elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)X25519Kyber768Draft00. Previously, in environments using AWS Network Firewall, the Provider would hang due to a handshake issue between Go 1.23 and Network Firewall, which supported Suricata 6.0.9. We had disabled the post-quantum key exchange to resolve the issue. Since November 2024, AWS Network Firewall has upgraded to Suricata 7.0, which no longer has this issue. However, if you use AWS Network Firewall, we’d appreciate your help in identifying any remaining issues related to this change. (#41655)overrides.inference_accelerator_overridesis deprecated. AWS no longer provides the Elastic Inference service. (#41676)elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)accelerator_typesis deprecated and will be removed in a future version. Useinstance_typeinstead. (#41673)FEATURES:
aws_dataexchange_event_action(#40552)aws_lakeformation_opt_in(#41611)ENHANCEMENTS:
arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)stateattribute (#41575)cluster_config.node_optionsattribute (#40181)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)disconnect_on_session_timeoutattribute (#41621)max_webserversandmin_webserversarguments from2to1in support of Amazon MWAA micro environments (#40244)cluster_config.node_optionsconfiguration block in support of dedicated coordinator nodes (#40181)vpc_options.vpc_endpoint_managementargument (#38001)arnattribute (#41645)tagsargument andtags_allattribute (#41645)arnattribute (#41660)arnattribute (#41660)rule.filter(#41662)rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required. Technically this is a breaking change, but failure to configure this attribute would have led toInvalidArgumentorMalformedXMLerrors (#40796)arnattribute (#41660)arnattribute (#41660)BUG FIXES:
exclude_charactersfromBooltoString(#41546)vpc_lattice_configurationsblocks (#41594)ruleconfiguration fromfilter.prefixtofilter.and.prefix(#41662)ruleconfiguration fromprefixtofilter.prefixorfilter.and.prefix(#41662)ConflictExceptionerrors on delete (#41594)v5.89.0Compare Source
FEATURES:
aws_macie2_organization_configuration(#41475)aws_neptunegraph_graph(#41216)aws_quicksight_role_membership(#41589)aws_rds_shard_group(#41254)aws_xray_resource_policy(#41517)ENHANCEMENTS:
configurationargument (#41524)cluster_scalability_typeattribute (#41254)database_insights_modeattribute (#41254)application/yamlto the list ofContent-Types that return a body (#41443)application/yamlto the list ofContent-Types that return a body (#41443)checksum_crc64nvmeattribute (#41015)target_tracking_configuration.customized_metric_specification.periodargument to support high-resolution metrics (#41385)RequiredWithvalidationpassword_woandpassword_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)25Gbpsand400Gbpsas supportedbandwidthvalues (#41547)25Gbpsas a supportedbandwidthvalue (#41547)400Gbpsas a supportedconnections_bandwidthvalue (#41547)network_interfaces.ena_srd_specificationconfiguration block (#41367)enable_zonal_shiftsupport for Application Load Balancers (#41335)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)secondary_private_ip_address_counttosecondary_private_ip_addressesfor private NAT Gateways (#41403)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)cluster_scalability_typeargument (#41254)database_insights_modeargument (#41254)""as a valid value forengine_mode(#41254)iam-db-auth-erroras a valid value forenabled_cloudwatch_logs_exports(#41408)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)RequiredWithvalidationadmin_user_password_woandadmin_user_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)data_redundancyisSingleLocalZoneiflocation.typeisLocalZone(#40944)checksum_crc64nvmeattribute (#41015)checksum_crc64nvmeattribute (#41015)RequiredWithvalidationsecret_string_woandsecret_string_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)PreferWriteOnlyAttributevalidation (#41562)BUG FIXES:
s3_delivery_configuration.suffix_path(#41497)spot_options.max_total_price,spot_options.min_target_capacity,spot_options.single_instance_type, andspot_options.single_availability_zonearguments (#41272)routing_http_response_server_enabled,routing_http_response_strict_transport_security_header_value,routing_http_response_access_control_allow_origin_header_value,routing_http_response_access_control_allow_methods_header_value,routing_http_response_access_control_allow_headers_header_value,routing_http_response_access_control_allow_credentials_header_value,routing_http_response_access_control_expose_headers_header_value,routing_http_response_access_control_max_age_header_value,routing_http_response_content_security_policy_header_value,routing_http_response_x_content_type_options_header_value,routing_http_response_x_frame_options_header_value,routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name,routing_http_request_x_amzn_mtls_clientcert_issuer_header_name,routing_http_request_x_amzn_mtls_clientcert_subject_header_name,routing_http_request_x_amzn_mtls_clientcert_validity_header_name,routing_http_request_x_amzn_mtls_clientcert_leaf_header_name,routing_http_request_x_amzn_mtls_clientcert_header_name,routing_http_request_x_amzn_tls_version_header_name, androuting_http_request_x_amzn_tls_cipher_suite_header_nameare updated iftcp_idle_timeout_secondsdoes not change (#41299)statusandtagscan be updated in-place (#41266)secondary_allocation_idsto be updated in-place (#41403)master_usernamevalidation (#41556)InvalidRequesterror whenrule.and.object_size_less_thannot set. (#41542)v5.88.0Compare Source
NOTES:
rule.expiration.expired_object_delete_markeris set with eitherrule.expiration.dateorrule.expiration.days. While historically the provider allowed this invalid configuration, the migration of this resource to the Terraform Plugin Framework inv5.86.0resulted in this misconfiguration surfacing as a hardinconsistent result after applyerror. This diagnostic aims to direct users how to resolve the issue at plan time. See this issue comment for additional context. (#41462)FEATURES:
aws_cloudwatch_contributor_managed_insight_rules(#41472)aws_cloudwatch_contributor_managed_insight_rule(#41449)aws_qbusiness_application(#35249)ENHANCEMENTS:
video_data_delivery_enabledargument (#41317)password_wowrite-only attribute (#41366)master_password_wowrite-only attribute (#41413)storage_descriptor.additional_locationsargument (#41434)master_password_wowrite-only attribute (#41411)admin_user_password_wowrite-only attribute (#41412)secret_string_wowrite-only attribute (#41371)BUG FIXES:
scaling_configurationis not empty. (#41377)sub_domain(#36961)embedding_data_delivery_enabled,image_data_delivery_enabled, andtext_data_delivery_enabledarguments as optional with default value oftrue(#41317)v5.87.0Compare Source
FEATURES:
aws_cloudwatch_contributor_insight_rule(#41373)ENHANCEMENTS:
export_typeandincremental_export_specificationarguments (#41303)parameters.s3.role_arnargument to allow override an account-wide role for a specific S3 data source (#41284)master_password_wowrite-only attribute (#41314)stream_processor_arnin favor ofarn. (#41271)value_wowrite-only attribute (#40952)service_network_log_typeargument (#41304)BUG FIXES:
on_demand_throughputandglobal_secondary_index.*.on_demand_throughputattributes to resolve read error (#41350)OperationInProgresserrors (#41388)v5.86.1Compare Source
BUG FIXES:
AccessDeniedErrorattempting to list tags (#41295)AccessDeniedErrorattempting to list tags (#41295)sns_topic_nameshows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)rule[*].prefixis an empty string. (#41296)v5.86.0Compare Source
NOTES:
prefix, the Terraform plan will show the removal ofprefixfrom state. This is expected, and should not occur on subsequent plans. (#41159)ENHANCEMENTS:
monitoring_intervalandmonitoring_role_arnattributes (#41002)us-isof-east-1andus-isof-south-1as valid AWS Regions (#41243)security_service_policy_data.policy_option.network_acl_common_policyargument to allow creation of FMS-managed NACL rules (#41219)monitoring_intervalandmonitoring_role_arnarguments (#41002)timeouts. (#41232)BUG FIXES:
tags_allvalue (#41256)instance_lifecycleisspot(#41206)panic: runtime error: invalid memory address or nil pointer dereferencewhen deleting the resource would otherwise return an error (#41260)transition_default_minimum_object_size(#41159)ruleduring import (#41205)v5.85.0Compare Source
NOTES:
FEATURES:
aws_vpc_ipam(#40459)aws_vpc_ipams(#40459)aws_secretsmanager_random_password(#41106)aws_guardduty_member_detector_feature(#35625)aws_route53domains_domain(#37885)aws_timestreamquery_scheduled_query(#41145)aws_vpclattice_resource_configuration(#41019)aws_vpclattice_service_network_resource_association(#41057)ENHANCEMENTS:
arnattribute (#41086)arnattribute (#41087)arnattribute (#41084)network_interfaces.connection_tracking_specificationattribute (#41184)connector_profile_config.connector_profile_properties.salesforce.use_privatelink_for_metadata_and_authorizationargument (#41175)target_tracking_configuration.customized_metric_specification.metrics.metric_stat.periodargument to support high-resolution metrics (#41066)data_source_configuration.confluence_configuration,data_source_configuration.salesforce_configuration,data_source_configuration.share_point_configuration, anddata_source_configuration.web_configurationarguments (#40711)knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configurationandknowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configurationarguments (#40737)sns_topic_arnattribute (#41168)suspendargument (#40607)invocation_connectivity_parametersargument (#41144)arnattribute (#41087)arnattribute (#41084)enable_fault_injectionargument (#41078)network_interfaces.connection_tracking_specificationargument (#41184)concurrent_jobsargument (#41012)createtimeout (#40972)orchestration_sending_role_arnargument (#41043)kms_key_identifierargument (#41082)instanceas a valid value forenabled_cloudwatch_logs_exports(#41111)tagsargument andtags_allattribute (#41192)resource_configuration_arnandservice_network_arnarguments to support creating VPC Endpoints of typeResourceandServiceNetwork(#41116)BUG FIXES:
created_dateandlast_modified_dateattributes (#41105)sort_ascendingto sort in ascending order (#40529)role_arnargument (#41072)Provider produced inconsistent result after applyerrors fors3_delivery_configuration.enable_hive_compatible_path(#41122)field_delimiteras Computed (#41122)provider_nameto count UTF-8 characters properly (#41187)nameto count UTF-8 characters properly (#41187)callback_urls,default_redirect_uri,logout_urls, andsupported_identity_providers` to count UTF-8 characters properly (#41187)panic: interface conversion: interface {} is float64, not string(#41096)InvalidParameterCombinationerror during update (#40969)name,name_prefix, andpathwithout forcing new resource (#41186)invitation_idwhen calling theAcceptInvitationAPI (#41163)v5.84.0Compare Source
NOTES:
FEATURES:
aws_eks_cluster_auth(#40660)aws_media_packagev2_channel_group(#38406)ENHANCEMENTS:
uefi_dataattribute (#40210)bandwidth_weightings,boot_modes,default_network_card_index,efa_maximum_interfaces,ena_srd_supported,inference_accelerators.memory_size,media_accelerators,network_cards,neuron_devices,nitro_enclaves_support,nitro_tpm_support,nitro_tpm_supported_versions,phc_support,supported_cpu_features,total_inference_memory,total_media_memory, andtotal_neuron_device_memoryattributes (#40717)mx-central-1AWS Region (#40940)mx-central-1AWS Region (#40940)mx-central-1AWS Region (#40940)mx-central-1as a valid AWS Region (#40940)uefi_dataargument (#40210)uefi_dataattribute (#40210)uefi_dataattribute (#40210)userIdentity.arnto advanced_event_selector.field_selector (#40629)engineis now case insensitive (#40794)engineis now case insensitive (#40794)arnattribute (#40930)arnattribute (#40930)arnattribute (#40930)arnattribute (#40930)routing_http_response_server_enabled,routing_http_response_strict_transport_security_header_value,routing_http_response_access_control_allow_origin_header_value,routing_http_response_access_control_allow_methods_header_value,routing_http_response_access_control_allow_headers_header_value,routing_http_response_access_control_allow_credentials_header_value,routing_http_response_access_control_expose_headers_header_value,routing_http_response_access_control_max_age_header_value,routing_http_response_content_security_policy_header_value,routing_http_response_x_content_type_options_header_value,routing_http_response_x_frame_options_header_value,routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name,routing_http_request_x_amzn_mtls_clientcert_issuer_header_name,routing_http_request_x_amzn_mtls_clientcert_subject_header_name,routing_http_request_x_amzn_mtls_clientcert_validity_header_name,routing_http_request_x_amzn_mtls_clientcert_leaf_header_name,routing_http_request_x_amzn_mtls_clientcert_header_name,routing_http_request_x_amzn_tls_version_header_name, androuting_http_request_x_amzn_tls_cipher_suite_header_namearguments in support of HTTP header modification (#40736)triggersargument to support synchronization with upstream CloudWatch alarm changes (#40918)production_variants.managed_instance_scalingandshadow_production_variants.managed_instance_scalingto0(#40882)BUG FIXES:
ingress_vpc_configuration,name, andservice_arnto ForceNew (#40927)location URI global ID and subdirectory (...) does not match pattern "..."errors on Read whens3_bucket_arnis an S3 on Outposts access point (#40929)volume.configure_at_launchandvolume.docker_volume_configuration(#40853)v5.1.0with aninputthat cannot be marshaled into amap[string]interface{}(#40958)v5.1.0with no configuration changes (#40958)broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughputis unset (#40910)broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughputblock is removed (#40910)v5.83.1Compare Source
BUG FIXES:
fdqnvalue ifnameis a wildcard domain name (the leftmost label is*). This fixes a regression introduced in v5.83.0 (#40868)v5.83.0Compare Source
NOTES:
apigatewayv2client has been updated to more extensively matchConflictExceptionerror responses. This change should be transparent to users, but if any unexpected changes in behavior withapigatewayv2resources occur following an upgrade to this release, please open a bug report. (#40840)idin favor ofarn. (#40626)id. (#40626)idin favor ofbucket. (#40626)FEATURES:
aws_cloudwatch_event_buses(#40662)aws_ecs_clusters(#40638)aws_route53_records(#38186)aws_cognito_identity_openid_token_for_developer_identity(#40763)aws_bedrockagent_agent_collaborator(#40559)aws_cleanrooms_membership(#35165)aws_cloudwatch_log_delivery(#40731)aws_cloudwatch_log_delivery_destination(#40731)aws_cloudwatch_log_delivery_destination_policy(#40731)aws_cloudwatch_log_delivery_source(#40731)aws_cloudwatch_log_index_policy(#40594)aws_vpclattice_resource_gateway(#40821)ENHANCEMENTS:
compute_configurationattribute (#40752)kafka_settings.sasl_mechanismattribute (#36918)ap-southeast-7AWS Region (#40850)ap-southeast-7AWS Region (#40850)default_for_new_launchesattribute (#40536)supports_certificate_rotation_without_restart,supports_integrations, andsupports_local_write_forwardingattributes (#40700)ap-southeast-7AWS Region (#40850)regionattribute (#40795)service_regionsargument (#40795)ap-southeast-7as a valid AWS Region (#40849)data_transfer_apiattribute to destination_flow_config_list.destination_connector_properties.salesforce (#34937)grpc_configargument todefault_cache_behaviorandordered_cache_behaviorconfiguration blocks (#40762)compute_configurationargument (#40752)email_mfa_configurationargument (#40734)sign_in_policyandweb_authn_configurationarguments (#40765)user_pool_tierargument (#40633)kafka_settings.sasl_mechanismargument (#36918)nameandvaluearguments (#40772)instance_idornetwork_interface_id(#40769)node_repair_configconfiguration block (#40698)VALKEYas supported value for 'engine' argument (#40764)VALKEYas supported value for 'engine' argument (#40764)encryption_key_arnargument (#40771)user_invitation_urlattribute (#40775)iam-db-auth-erroras a valid value forenabled_cloudwatch_logs_exports(#40789)data_filterargument (#40816)override_providerconfiguration block, allowing tags inherited from the providerdefault_tagsconfiguration block to be ignored (#40689)BUG FIXES:
description,nameorversionif they are not present in the OpenAPI definitionbody(#40707)ConflictExceptionerror responses (#40840)panic: interface conversion: interface {} is nil, not map[string]interface {}whenparameters_in_cache_key_and_forwarded_to_origin.cookies_config,parameters_in_cache_key_and_forwarded_to_origin.headers_config, orparameters_in_cache_key_and_forwarded_to_origin.query_strings_configare empty (#40815)scaling_configurationto be removed on Update (#40773)file_system_locationsto be removed on Update (#40842)fips_dns_nameto an empty value ("") when no value is returned from the EC2 API. This fixes known-after-apply loops in Regions that don't support FIPS endpoints (#37939)create_table_default_permissionwith a nilprincipalblock (#40761)http_tokenswhenmetadata_optionsis updated (#40727)public_dnsandpublic_ipattributes when changinginstance_type,user_data, oruser_data_base64(#40710)operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ...errors on delete for resources deleted out-of-band (#40790)operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ...errors on delete for resources deleted out-of-band (#40790)logical_table_map.tag_column_operation.tags.column_description(#40713)manage_master_user_passwordbeing updated in state when update errors (#40538)alias.namecontains characters that the Route 53 API escapes (#40154)namecontains characters that the Route 53 API escapes (#40154)delivery_options.max_delivery_secondswhen not configured (#40670)sqs_managed_sse_enabled=trueandkms_data_key_reuse_period_secondsis configured (#40729)v5.82.2Compare Source
BUG FIXES:
mutual_authentication.advertise_trust_store_ca_namesattribute. This fixes a regression introduced in v5.82.0 causingsetting mutual_authentication: Invalid address to set: []string{"mutual_authentication", "0", "advertise_trust_store_ca_names"}errors (#40658)v5.82.1Compare Source
ENHANCEMENTS:
availability_zone_distributionargument (#40634)BUG FIXES:
statementsid(#40639)v5.82.0Compare Source
NOTES:
idattribute has changed to prevent inconsistent parsing which resulted in provider crashes under certain conditions. The new format is a comma-delimited string combininggroup_arnandresource_arnin their entirety. Configuarations relying on the previous format may need to be updated to continue functioning correctly. (#40579)FEATURES:
aws_servicecatalogappregistry_attribute_group_associations(#38306)aws_api_gateway_domain_name_access_association(#40566)aws_cloudfront_vpc_origin(#40239)aws_memorydb_multi_region_cluster(#40376)aws_networkmanager_dx_gateway_attachment(#40546)aws_rds_cluster_snapshot_copy(#40398)ENHANCEMENTS:
arnattribute (#40546)statementsidis valid, including on alphanumeric characters (#40562)service_regionattribute (#40583)agent_collaborationattribute to configure agent collaboration role (#40543)origin.vpc_origin_configargument (#40239)name_prefixargument (#40622)arnattribute (#40546)efa_enabledargument (#40381)advertise_trust_store_ca_namesattribute to themutual_authenticationconfiguration block (#40550)multi_region_cluster_nameargument (#40376)edge_locationsattribute (#40546)service_regionargument (#40583)BUG FIXES:
AccessDeniedException: ... is not authorized to perform: acm-pca:GetCertificateAuthorityCsr on resource: ...errors for RAM-shared CAs (#39952)setting entitlements: Invalid address to set: []string{"entitlements", "0", "overage"}errors (#40621)certificate_settingswhen updating. (#40589)certificate_settings.typetoCUSTOM. (#40589)ValidationExceptionwhen settingcertificate_settings.typetoAMPLIFY_MANAGED. (#40589)certificate_settingsnot set. (#40589)certificate_settingsis not set during update. (#40589)arnfor private custom domain names (#40566)vpc_configuration.tls_certificateas Optional (#40574)at_rest_encryption_enabledwhenengineisvalkey. (#40514)IAMPrincipalsprincipal group (#38600)permissionsandpermissions_with_grant_optionattributes (#38047)resultattribute when changinginputattribute, for lifecycle scope "CRUD" (#34263)teletext_destination_settings. (#33797)allocated_storage(#40601)force_destroy = truecan now delete objects with non-XML-safe keys (#40537)force_destroy = truecan now delete objects with non-XML-safe keys (#40537)automatically_after_dayswas not being set properly whenschedule_expressionhad been set previously (#34295)InvalidRequestException: A previous rotation isn't complete. That rotation will be reattempted.(#34295)redrive_allow_policydiffs (#40604)v5.81.0Compare Source
FEATURES:
aws_servicecatalogappregistry_attribute_group(#38188)aws_ssm_parameter(#40313)aws_bedrock_inference_profile(#40294)aws_cloudwatch_log_anomaly_detector(#40437)aws_ecr_account_setting(#40219)aws_msk_single_scram_secret_association(#37056)aws_servicecatalogappregistry_attribute_group(#38183)aws_servicecatalogappregistry_attribute_group_association(#38290)ENHANCEMENTS:
policyanddomain_name_idattributes (#40364)tagsattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyattributes (#40194)domain_name_idargument (#40447)policyargument anddomain_name_idattribute (#40364)PRIVATEas a valid value forendpoint_configuration.typesargument, enabling custom domain name support for private REST API endpoints (#40364)completion_duration_minutesargument (#40336)configuration.retention_configurationandconfiguration.orphan_file_deletion_configurationattributes. (#40199)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses on EC2 instances (#36425)shard_countwould not exceed the AWS account's shard quota when the data stream capacity mode isPROVISIONED, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires thekinesis:DescribeLimitsIAM permission (#40499)kinesis:DescribeLimitsIAM permission (#40499)topic_replication.topic_name_configurationargument (#40101)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses for network interfaces (#36425)stateful_engine_options.flow_timeoutsargument (#39996)serverlessv2_scaling_configuration.seconds_until_auto_pauseargument (#40441)tagsargument andtags_allattribute (#40470)notebook-al2-v3value forplatform_identifier(#40484)tagsargument andtags_allattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyarguments (#40194)BUG FIXES:
InvalidArgumentException: NextToken and StreamName cannot be provided togethererrors when the data stream has more than 1000 shards (#40499)rulefromTypeSettoTypeListas order is significant (#40521)throughput_capacityvalidation to allow values up to12228(#40468)logging_configuration.log_destination_configs (#40092)InvalidDBClusterStateFaulterrors when deleting clusters that are members of a global cluster (#40333)InvalidParameterValue: Serverless v2 maximum capacity 0.0 isn't valid. The maximum capacity must be at least 1.0.errors when removingserverlessv2_scaling_configurationin an update (#40511)storage_typewhen restoring from S3 (#40471)storage_typewhen restoring from snapshot (#40471)storage_typewhen restoring to a point in time (#40471)database_nameas Computed. This prevents resource recreation when the source cluster specifies adatabase_name(#40469)v5.80.0Compare Source
FEATURES:
aws_codeconnections_connection(#40300)aws_codeconnections_host(#40300)aws_s3tables_namespace(#40420)aws_s3tables_table(#40420)aws_s3tables_table_bucket(#40420)aws_s3tables_table_bucket_policy(#40420)aws_s3tables_table_policy(#40420)ENHANCEMENTS:
instructionmax length for validation to 8000 (#40279)deletion_protection_enabledargument (#35359)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityminimum values to0to support Amazon Aurora Serverless v2 scaling to 0 ACUs (#40230)LocalZoneas a valid value forlocation.type, enabling support for Amazon S3 Express One Zone in AWS Dedicated Local Zones (#40339)BUG FIXES:
tags_allwhen planning. (#40305)deserialization failed, failed to decode response body with invalid JSONerrors on Read (#40419)v5.79.0Compare Source
FEATURES:
aws_vpc_block_public_access_exclusion(#40235)aws_vpc_block_public_access_options(#40233)ENHANCEMENTS:
compute_config,storage_config, andkubernetes_network_config.elastic_load_balancingarguments for EKS Auto Mode (#40370)remote_network_configargument for EKS Auto Mode (#40371)metrics_configargument (#40322)provisioned_poller_configargument (#40303)supported_regionsargument (#40346)BUG FIXES:
disk_iops_configuration.iopsfrom350000to400000fordeployment_type = "SINGLE_AZ_2"(#40359)v5.78.0Compare Source
NOTES:
FEATURES:
aws_iam_organizations_features(#40164)ENHANCEMENTS:
engineattribute (#40224)cluster_configuration.engineattribute (#40224)engineargument (#40224)cluster_configuration.engineattribute (#40224)BUG FIXES:
product_description(e.g., "postgresql") is a substring of multiple products, fixError: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering(#40281)Warning: AWS account ID not found for providerwhenskip_requesting_account_idistrue(#40264)eksPropertiesorecsPropertiesblock (#40172)content_policy_config.filters_configs are specified. (#40304)sns_topic_arnschanges (#40253)sns_topic_arnschanges (#40291)storage_typefromio1orio2togp3, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#37257)gp3volume'sallocated_storageto a value larger than the threshold value forengine, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#28847)v5.77.0Compare Source
NOTES:
aws_kms_secrets,aws_lambda_invocation, andaws_secretsmanager_secret_versionnow support ephemeral values. (#40009)FEATURES:
aws_kms_secrets(#40009)aws_lambda_invocation(#39988)aws_secretsmanager_secret_version(#40009)aws_rds_instance_state(#40180)ENHANCEMENTS:
most_recentis true and certain filter criteria are missing (#40211)availability_zone_rebalancingattribute (#40225)availability_zone_rebalancingattribute (#40225)versionConsistencyargument tocontainer_definitions(#40216)endpointargument to point to the writer DB instance in the current primary cluster (#39960)BUG FIXES:
tagsfrom theDescribeSubnetsresponse, removing the need for theec2:DescribeTagsIAM permission (#40144)schemaelement (#40195)pod_identity_associationis modified (#40168)pod_identity_associationis changed (#40168)v5.76.0Compare Source
FEATURES:
aws_vpc_security_group_vpc_association(#40069)ENHANCEMENTS:
BUG FIXES:
BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parametersand/orcache_key_parameters(#40124)BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parameters(#40124)launch_templatethat is updated causingValidationError: You must use a valid fully-formed launch template.(#40088)ipam_pool_idis set (#40082)Provider returned invalid result object after applyerrors (#40090)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)v5.75.1Compare Source
ENHANCEMENTS:
descriptionattribute (#39980)reset_on_deleteto properly reset CloudWatch Role ARN on deletion. (#40004)descriptionargument (#39980)BUG FIXES:
canary_settingsandstage_descriptionwhenstage_namenot set. (#40067)ttl[0].attribute_nameto be set whenttl[0].enabledis false (#40046)ValidationExceptionon updates when RStudio is disabled on the domain (#40049)v5.75.0Compare Source
BREAKING CHANGES:
canary_settings.deployment_idattribute asrequired(#39929)NOTES:
ARNTypewill properly surface validation errors (#40008)deployment_idwas added tocanary_settingsas arequiredattribute. This breaking change was necessary to makecanary_settingsfunctional. Without this change all canary traffic was routed to the main deployment (#39929)FEATURES:
aws_spot_datafeed_subscription(#39647)ENHANCEMENTS:
init_containers,share_process_namespace, andimage_pull_secretsattributes (#40019)init_containersandshare_process_namespacearguments (#40019)containersarguments to 10 (#40019)pod_identity_associationargument (#38357)passwordargument as sensitive (#39991)BUG FIXES:
alarm_configuration.alarmsargument (#39971)ResourceNotFoundexceptions during resource destruction (#38357)Value Conversion Errorduring resource creation (#39945)tcp_idle_timeout_secondsargument for gateway load balancers (#40039)tcp_idle_timeout_secondsvalue, preventingModifyListenerAttributesAPI calls when a value is not explicitly configured (#40039)public_ip_source = "amazon":The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip.(#40042)v5.74.0Compare Source
FEATURES:
aws_lb_listener_rule(#39865)aws_opensearch_authorize_vpc_endpoint_access(#39846)aws_ssmquicksetup_configuration_manager(#39931)ENHANCEMENTS:
distribution.s3_export_configurationattribute (#35492)block_device_mapping.0.ebs.0.delete_on_termination: '' expected type 'bool', got unconvertible type 'string'errors (#39928)termination_hook_enabledargument (#35482)zonal_shift_configargument (#39852)distribution.s3_export_configurationargument (#35492)container_recipe_arnandimage_recipe_arnto be updated in-place (#39117)replication_specificationargument (#36331)efa-onlyas a valid value fornetwork_interfaces.interface_type(#39882)TransferSecurityPolicy-Restricted-2024-06as a valid value forsecurity_policy_name(#39871)BUG FIXES:
master_passwordon resource Create whensnapshot_identifieris configured (#38193)component.parameter.name,component.parameter.value,target_repository.repository_name, andtarget_repository.serviceto ForceNew (#39117)interface conversion: interface {} is nil, not map[string]interface {}panic whengeolocation_routing_policyis empty (#39944)approval_rule.approve_after_daysvalidation to allow a maximum value of360(#39949)decoding JSON: unexpected end of JSON inputerrors when updating from usingrule_jsonto usingrule(#39283)rule_json(#39878)v5.73.0Compare Source
FEATURES:
aws_ssm_patch_baselines(#39779)aws_imagebuilder_lifecycle_policy(#35674)aws_resiliencehub_resiliency_policy(#38913)aws_sagemaker_hub(#39807)aws_sagemaker_mlflow_tracking_server(#39796)ENHANCEMENTS:
valkeyas valid value forproduct_description(#39745)parametersmap attribute to readCROSS_ACCOUNT_VERSION(#39826)enable_zonal_shiftattribute (#39585)min_sizeandmax_size(#39843)zonal_configargument (#34850)approximate_creation_date_time_precisionargument (#38098)valkeyas valid value forengine(#39745)engine_version(#39745)engine_version(#39745)valkeyas valid value forengine(#39745)valkeyas valid value forengine(#39745)iceberg_configurationargument (#39844)parametersmap argument enablingCROSS_ACCOUNT_VERSIONto be set (#39826)enable_zonal_shiftargument (#39585)tcp_idle_timeout_secondsargument (#39585)nameargument (#39798)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)default_user_settings.jupyter_lab_app_settings.app_lifecycle_management,default_user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_user_settings.jupyter_lab_app_settings.emr_settings,default_space_settings.jupyter_lab_app_settings.app_lifecycle_management,default_space_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_space_settings.jupyter_lab_app_settings.emr_settings,default_user_settings.auto_mount_home_efs,default_user_settings.canvas_app_settings.emr_serverless_settings,default_user_settings.studio_web_portal_settings.hidden_instance_types,default_user_settings.code_editor_app_settings.app_lifecycle_management,default_user_settings.code_editor_app_settings.built_in_lifecycle_config_arn, andtag_propagationarguments (#39774)app_network_access_typeandapp_security_group_managementto be updated in-place (#39774)feature_definition.collection_config,feature_definition.collection_type, andthroughput_configarguments (#39805)space_settings.code_editor_app_settings.app_lifecycle_managementandspace_settings.jupyter_lab_app_settings.app_lifecycle_managementarguments (#39800)user_settings.auto_mount_home_efs,user_settings.canvas_app_settings.emr_serverless_settings,user_settings.code_editor_app_settings.app_lifecycle_management,user_settings.code_editor_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.app_lifecycle_management,user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.emr_settingsanduser_settings.studio_web_portal_settings.hidden_instance_typesarguments (#39774)BUG FIXES:
name. This fixes a regression introduced in v5.72.0 causingmultiple WorkSpaces Bundles matched; use additional constraints to reduce matches to a single WorkSpaces Bundleerrors (#39777)on_demand_throughputis excluded (#39784)policycontent is written to state (#39842)InvalidParameterValue: This API supports only cross-engine upgrades to Valkey engine currentlyerrors on Update (#39745)policycontent is written to state (#39842)policycontent is written to state (#39842)policycontent is written to state (#39842)InvalidParameterValueException: Invalid RowLevelPermissionDataSet. Namespace parameter should not be specified for Version 2errors on Create and Update (#39778)ttl=0(#39728)policycontent is written to state (#39842)policycontent is written to state (#39842)v5.72.1Compare Source
FEATURES:
aws_iam_group_policy_attachments_exclusive(#39732)aws_iam_user_policy_attachments_exclusive(#39731)ENHANCEMENTS:
scopeargument (#39744)BUG FIXES:
billing_modeis set toPAY_PER_REQUESTwithoutglobal_secondary_indexupdates (#39752)AGGREGATORindexes as tainted on Create (#39744)v5.72.0Compare Source
NOTES:
managed_policy_arnsargument is deprecated. Use theaws_iam_role_policy_attachments_exclusiveresource instead. (#39718)FEATURES:
aws_iam_role_policy_attachments_exclusive(#39718)ENHANCEMENTS:
saml_propertiesattribute (#39060)source_flow_config.source_connector_properties.sapo_data.pagination_configandsource_flow_config.source_connector_properties.sapo_data.parallelism_configattributes (#38932)aws:RequestTagconditions (#39648)appsync_targetconfiguration block (#37773)on_demand_throughputandglobal_secondary_index.on_demand_throughputarguments (#37799)principalto be an AWS federated-user arn (#33298)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityfrom128to256(#39697)storage-optimizationstatus as success when creating or updating cluster DB instances (#39691)saml_propertiesconfiguration block (#39060)BUG FIXES:
arnfor automation documents (#39705)schemahas emptystring_attribute_constraintsornumber_attribute_constraints(#20386)arnfor automation documents (#39705)v5.70.0Compare Source
NOTES:
aws_simpledb_domainresource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead (#39536)aws_worklink_fleetresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)aws_worklink_website_certificate_authority_associationresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)FEATURES:
aws_backup_logically_air_gapped_vault(#39098)aws_ec2_transit_gateway_default_route_table_association(#39496)aws_ec2_transit_gateway_default_route_table_propagation(#39517)aws_iam_group_policies_exclusive(#39554)aws_iam_user_policies_exclusive(#39544)aws_securityhub_standards_control_association(#39511)ENHANCEMENTS:
start_timeattribute (#39557)prepare_agentargument (#39486)vector_ingestion_configuration.custom_transformation_configurationargument (#39556)endpoint_configuration.attachment_arnargument (#39507)tagsargument andtags_allattribute (#39535)arnattribute (#39535)tagsargument andtags_allattribute (#39535)transition_default_minimum_object_sizeargument (#39578)BUG FIXES:
customer_encryption_key_arnnot being passed during update (#39565)prompt_override_configurationnot being passed when not modified (#39565)knowledge_base_configurationandstorage_configurationto ForceNew (#39567)security_group_referencing_supportargument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) (#39519)policy_versioncomputed attribute changing (#39528)policy_versioncomputed attribute changing (#39528)sheets.filter_controls.list.cascading_control_configurationandsheets.parameter_controls.list.cascading_control_configurationattributes (#39453)v5.69.0Compare Source
NOTES:
(account-id).ddb.(region).amazonaws.cominstead ofdynamodb.(region).amazonaws.com. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by settingaccount_id_endpoint_mode = disabledin a shared config file or setting theAWS_ACCOUNT_ID_ENDPOINT_MODEenvironment variable todisabled(#39505)1.23.1. The issue with AWS Network Firewall dropping TLS handshakeClientHellomessages after the v5.65.0 upgrade to Go1.23.0, temporarily resolved by the v5.67.0 downgrade to Go1.22.7, has been addressed by removing theX25519Kyber768Draft00key exchange mechanism from the HTTP client used to make AWS API calls (#39432)ENHANCEMENTS:
tagsattribute (#39402)security_group_referencing_supportattribute (#34542)security_group_referencing_supportattribute (#34542)failure_codeandfailure_reasonattributes (#38995)guardrail_configurationargument (#39440)tagsargument andtags_allattribute (#39402)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)volume_configuration.managed_ebs_volume.tag_specificationsattribute (#38662)display_nameto be updated in-place (#39416)credentials.secret_arnargument (#29034)BUG FIXES:
security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)ap-southeast-5Region (#39389)nameattribute. (#38993)nameattribute. (#38993)ConcurrentModificationExceptions during role creation (#39429)AccessDeniedException: Lambda code scanning is not supported in ...errors (#38254)AccessDeniedExceptionerrors during creation (#38254)nameandvpc_idto ForceNew (#39454)security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)v5.68.0Compare Source
NOTES:
inline_policyargument is deprecated. Use theaws_iam_role_policyresource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use theaws_iam_role_policies_exclusiveresource as well. (#39203)composite_slot_type_settingblock, thesubslotsargument has been renamedsub_slots. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39353)FEATURES:
aws_elasticache_reserved_cache_node_offering(#29832)aws_securityhub_standards_control_associations(#39334)aws_synthetics_runtime_version(#39180)aws_synthetics_runtime_versions(#39180)aws_appsync_source_api_association(#39323)aws_elasticache_reserved_cache_node(#29832)aws_iam_role_policies_exclusive(#39203)aws_pinpointsmsvoicev2_opt_out_list(#25036)aws_pinpointsmsvoicev2_phone_number(#25036)aws_sesv2_account_suppression_attributes(#39325)ENHANCEMENTS:
iam_role_arnargument tos3_actionconfiguration block (#39364)namelength to 255 characters (#39315)BUG FIXES:
assume_role.role_arnto be an empty string when there is a singleassume_roleentry. (#39328)environment_variablesargument (#39397)Managed by DynamoDBencryption setting (#31284)engine_versionmismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above (#39024)endpoint_management = "CUSTOMER"(#39394)policy(#39322)v5.67.0Compare Source
BREAKING CHANGES:
value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy(#39254)NOTES:
1.22.6. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go1.23.0(v5.65.0). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go1.22.6for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. (#39256)value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39254)FEATURES:
aws_codebuild_fleet(#39237)aws_cloudformation_stack_instances(#36794)aws_codebuild_fleet(#39237)aws_computeoptimizer_enrollment_status(#35349)aws_computeoptimizer_recommendation_preferences(#35349)aws_costoptimizationhub_enrollment_status(#36440)aws_costoptimizationhub_preferences(#36526)aws_datazone_asset_type(#38812)aws_datazone_environment_profile(#38581)aws_lambda_function_recursion_config(#39153)ENHANCEMENTS:
domainandtagsas Optional. This enables certificates to be matched based on tags (#31453)encryption_typeandkms_key_idattributes (#39212)user_pool_tagsin favor of standardtags. (#39260)assume_rolenow accepts multiple elements. (#39255)cache_configargument (#39215)modeargument (#39206)hsm2m.mediumas a valid value forhsm_type(#39206)fleetattribute inenvironmentconfiguration block (#39237)snowflake_configuration.buffering_internalandsnowflake_configuration.buffering_sizearguments (#39214)READER_PRO,AUTHOR_PRO, andADMIN_PROas valid values for theuser_roleargument (#39220)default_user_settings.domain_settings.docker_settingsconfiguration block (#35416)default_user_settings.studio_web_portal_settings,default_space_settings.jupyter_lab_app_settings,default_space_settings.space_storage_settings,default_space_settings.custom_posix_user_config, anddefault_space_settings.custom_file_system_configconfiguration blocks (#38457)production_variants.managed_instance_scalingandshadow_production_variants.managed_instance_scalingconfiguration blocks (#35479)primary_container.inference_specification_nameandcontainer.inference_specification_namearguments (#35873)primary_container.model_data_source.s3_data_source.model_access_config,primary_container.multi_model_config,container.model_data_source.s3_data_source.model_access_config, and ``container.multi_model_config` configuration blocks (#35873)user_settings.studio_web_portal_settingsconfiguration block (#38567)definitionusing the AWS Step Functions Validation API (#39229)BUG FIXES:
created_atas an RFC3339 formatted timestamp (#24183)created_atas an RFC3339 formatted timestamp (#24183)check_certificate_revovation_statusis ignored due to bad autoflex field mapping (#39211)aggregation_periodnot set. (#39279)permissions.actionsMaxItemsfrom16to20. This fixes a regression introduced in v5.66.0 (#39226)vpc_connection_idregular expression validator. This fixes a regression introduced in v5.66.0 (#39231)default_user_settings.domain_settingsto include missingsecurity_group_idsandr_studio_server_pro_domain_settingsvalues (#35416)suppression_options.suppressed_reasonsto be an empty list ([]) in order to disable the suppression list (#29671)event_destination.matching_event_typesfromTypeListtoTypeSetas order is not significant (#36897)load_balancer_options.subnet_ids(#39196)v5.66.0Compare Source
FEATURES:
aws_glue_registry(#37953)aws_organizations_organizational_unit_descendant_organizational_units(#39120)aws_quicksight_analysis(#31737)aws_datazone_environment(#38811)ENHANCEMENTS:
tagsattribute (#38959)tagsattribute (#39092)api_typeandmerged_api_execution_role_arnarguments (#39159)vector_ingestion_configuration.chunking_configuration.semantic_chunking_configuration,vector_ingestion_configuration.chunking_configuration.hierarchical_chunking_configuration, andvector_ingestion_configuration.parsing_configurationconfiguration blocks (#39138)skip_deletion_protectionattribute (#38811)backup_retention_periodandpreferred_backup_windowattributes (#38452)parameters.databricksargument (#31737)notification_settingsargument (#39108)InServicetimeouts to 60 minutes (#39090)rate_based_statement.limitminimum from100to10(#39107)rate_based_statement.limitminimum from100to10(#39107)BUG FIXES:
segment_actions.via.with_edge_override.use_edgeto be nested set of edges, matching JSON (#39142)segment_actions.via.with_edge_override.use_edge. Usesegment_actions.via.with_edge_override.use_edge_locationinstead (#39142)nullvalue. (#38869)role_arnas Optional (#38900)slot_type_valuesvalidator which limited configurations to 1 element (#39126)theme_arnargument on create and update when configured (#31737)role_arnsas Optional and send an empty list if unconfigured (#39108)run_config.timeout_in_secondsdefault value to allow creation of resources with a frequency less than 14 minutes (#35177)v5.65.0Compare Source
NOTES:
FEATURES:
aws_shield_protection(#37524)aws_glue_catalog_table_optimizer(#38052)ENHANCEMENTS:
ap-southeast-5AWS Region (#39052)ap-southeast-5AWS Region (#39052)ap-southeast-5AWS Region (#39052)ap-southeast-5as a valid AWS Region (#39049)password_policy.password_history_sizeargument (#39043)processargument (#25468)SUCCEEDED_WITH_ISSUESstatus as success when upgrading cluster (#38086)io2as a valid value forebs_config.type(#37740)io2as a valid value forinstance_type_configs.ebs_config.type(#37740)io2as a valid value forinstance_type_configs.ebs_config.type(#37740)job_run_queuing_enabledargument (#39027)kms_key_arnargument (#39055)falseon update ifpolicy_documentis empty (#38675)BUG FIXES:
auto_branch_creation_config(#39041)domain_nameto ForceNew (#38086)instance_countvalue of0on create when configured (#37740)BadRequestException: The request is rejected because an invalid or out-of-range value is specified as an input parametererrors on resource Create (#39084)data_cells_filterpermissions (#39026)neptune_cluster_parameter_group_nameas Computed (#38980)neptune_parameter_group_nameas Computed (#38980)ValidationException: Parameter ARN is not supported for this operationerrors when deleting resources imported by ARN (#39067)v5.64.0Compare Source
ENHANCEMENTS:
dashboard_endpoint_v2,domain_endpoint_v2_hosted_zone_id, andendpoint_v2attributes (#38456)suspended_stateconfiguration block (#38942)restore_source_table_arnattribute (#38953)dashboard_endpoint_v2,domain_endpoint_v2_hosted_zone_id, andendpoint_v2attributes (#38456)BUG FIXES:
idattribute whendeployment_targetsdoes not include organizational unit IDs. (#38969)actionis configured (#38994)enabled_http_endpoint) to be enabled and disabled forprovisionedengine mode and serverlessv2 (#38997)v5.63.1Compare Source
FEATURES:
aws_route53_zones(#17457)aws_ssoadmin_permission_sets(#38741)ENHANCEMENTS:
job_state_time_limit_actionattribute (#38784)ecs_propertiesargument (#37871)job_state_time_limit_actionargument (#38784)BUG FIXES:
idparsing errors (#38924)logical_table_map.data_transforms.project_operation.projected_columnswith null list elements (#38886)reputation_metrics_enabledis set totrue(#38921)v5.63.0Compare Source
FEATURES:
aws_bedrockagent_agent_versions(#38792)aws_bedrock_guardrail(#38757)aws_cloudtrail_organization_delegated_admin_account(#38817)aws_datazone_environment_profile(#35603)aws_datazone_form_type(#38746)aws_datazone_glossary_term(#38706)aws_pinpoint_email_template(#33266)ENHANCEMENTS:
logging_configuration.log_destination_configMaxItemsfrom2to3(#38824)BUG FIXES:
sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)nameandname_prefix(#38194)sdkdiags.AppendErrorffunction calls (#38854)service_registriesitem (#38883)container_definitionsdiffs onhealthCheck's default values (#38872)container_definitions.dockerLabels(#38804)nulls fromcontainer_definitionarray fields (#38870)replicas_per_node_groupif node groups are empty (#38797)sdkdiags.AppendErrorffunction calls (#38854)network_access_controlblock is configured (#38775)vpc_configurationblock is configured (#38775)attribute_payloadblock is configured (#38776)configuration.bgp_configurationson Read (#38798)encryptedon snapshot restore, when enabled (#38828)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)v5.62.0Compare Source
FEATURES:
aws_rds_cluster_parameter_group(#38416)aws_secretsmanager_secret_versions(#35411)aws_ebs_snapshot_block_public_access(#38641)aws_rds_integration(#35199)ENHANCEMENTS:
application/x-sql(#38737)application/x-sql(#38737)default_tagsto be set by environment variables (#33339)ignore_tags.keysandignore_tags.key_prefixesto be set by environment variables (#35264)skip_destroyargument (#29663)skip_destroyargument (#29663)secret_arn(#37213)force_deleteargument (#38707)grafana_tokenargument (#38743)target_health_state.unhealthy_draining_intervalargument (#38654)sub_slot_settingattribute (#38698)BUG FIXES:
ROOTas a valid value forprefix(#38685)namemax length validation to 128 (#37539)eks_propertiesfor job updates (#38716)retry_strategyfor job updates (#38716)timeoutfor job updates (#38716)created_dateattribute (#38689)ROOTas a valid value forprefix(#38685)launch_specificationsargument (#38773)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)$.network-function-groups: null found, array expectederrors when creating resource withcreate_base_policyargument (#38642)revision_idandstate_machine_version_arnas Computed on update ifpublishistrue(#38657)v5.61.0Compare Source
NOTES:
FEATURES:
aws_ecr_repository_creation_template(#38597)aws_chatbot_slack_channel_configuration(#38124)aws_chatbot_teams_channel_configuration(#38630)aws_datazone_glossary(#38602)aws_ecr_repository_creation_template(#38597)aws_timestreaminfluxdb_db_instance(#37963)ENHANCEMENTS:
upgrade_policyattribute (#38573)repository_namevalues. See documentation for details (#38575)enhanced_metrics_configconfiguration block (#38570)upgrade_storage_configargument (#36904)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)upgrade_policyconfiguration block (#38573)log_configuration.include_execution_dataargument (#38569)performance_insights_enabled,performance_insights_kms_key_id, andperformance_insights_retention_periodarguments (#29415)restore_to_point_in_time.source_cluster_resource_idargument (#38540)restore_to_point_in_time.source_cluster_identifieras Optional (#38540)encryption_configurationconfiguration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions Activity resources (#38574)encryption_configurationconfiguration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions State Machine resources (#38574)jsonattribute value (#35950)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)assign_generated_ipv6_cidr_blockandipv6_poolarguments (#27274)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)tagsto theAuthorizeSecurityGroupEgressEC2 API call instead of making a separateCreateTagscall (#35614)tagsto theAuthorizeSecurityGroupIngressEC2 API call instead of making a separateCreateTagscall (#35614)rule_jsonattribute to allow raw JSON for rules. (#38309)BUG FIXES:
CoreNetworkPolicyExceptionwhen putting policy with single wildcard inwhen_sent_to(#38595)index_namecharacter length validation (#38509)container_definitionsstart with a lowercase letter (#38622)typeargument on create when configured (#38640)policycontent to prevent persistent differences (#38604)target_parametersif the configured value has not changed (#38598)domain_dns_ipsto use single DNS server IP (#36500)domain_settings.r_studio_server_pro_domain_settings.r_studio_package_manager_urlargument on create (#38547)descriptionon Read (#38618)netmask_lengthon Read (#38618)v5.60.0Compare Source
NOTES:
FEATURES:
aws_service_principal(#38307)aws_shield_subscription(#37637)ENHANCEMENTS:
kms_key_identifierattribute (#38492)tagsattribute (#38483)metadata_catalog_configattribute (#37566)prefix_hierarchyattribute todestination_flow_config.s3.s3_output_format_config(#37566)eks_properties.*.pod_properties.*.image_pull_secretargument (#38517)operation_preferences.concurrency_modeargument (#38498)kms_key_identifierargument (#38492)tagsargument andtags_allattribute (#38483)shared_accountsargument (#34885)shared_accountsargument (#34843)AZURECOSMOS,AZURESQL,BIGQUERY,OPENSEARCH, andSNOWFLAKEas valid values for theconnection_typeargument andSparkPropertiesas a valid value for theconnection_propertiesargument (#37731)inline_policyfails to create (#38477)scaling_configuration.seconds_before_timeoutargument (#38451)event_destination.event_bridge_destinationconfiguration block (#38458)runtime error: invalid memory address or nil pointer dereferencepanic when reading a non-existent table (#38512)BUG FIXES:
tagson Read (#38343)tagson Read (#38343)ruleargument on update (#38449)scope_configuration.domainargument (#38513)error marshaling prior state: a number is requiredwhen upgrading from v5.58.0 to v5.59.0 (#38490)Provider produced inconsistent final planerrors whencontainer_definitionsis unknown (#38471)error marshaling prior statewhen upgrading from v4.67.0 to v5.59.0 (#38476)tagson Read (#38343)ca_certificate_identifieras Computed (#38437)copy_tags_to_snapshotvalue whenrestore_to_point_in_timeis set (#34044)apply_immediatelyistrue. This fixesInvalidParameterCombinationerrors when updatingengine_version(#38437)v5.59.0Compare Source
FEATURES:
secrets_manager_configurationtoredshift_configuration,snowflake_configuration, andsplunk_configuration(#38151)aws_cloudfront_origin_access_control(#36301)aws_timestreamwrite_database(#36368)aws_timestreamwrite_table(#36599)aws_datazone_project(#38345)aws_grafana_workspace_service_account(#38101)aws_grafana_workspace_service_account_token(#38101)aws_rds_certificate(#35003)aws_rekognition_stream_processor(#37536)ENHANCEMENTS:
cluster_modeattribute (#38002)allow_full_table_external_data_accessattribute (#34474)broker_node_group_infoattribute (#37705)skip_resource_in_use_checkargument (#37586)action_group_executor.custom_controlargument (#37484)function_schemaconfiguration block (#37484)routing_configuration.provisioned_throughputargument (#37520)scope_configurationargument (#38199)timeout_in_minutesargument to theactionconfiguration block (#36316)engine_lifecycle_supportargument (#37708)configuration.managed_storage_configurationargument (#37932)cluster_modeargument (#38002)interactive_configurationargument (#37889)experiment_optionsconfiguration block (#36900)final_backup_tagsandskip_final_backuparguments (#37717)final_backup_tagsargument (#37717)delete_optionsandfinal_backup_tagsarguments (#37717)final_backup_tagsargument (#37717)execution_roleandworkflowarguments (#37317)secrets_manager_configurationtohttp_endpoint_configuration(#38245)FLINK-1_19as a valid value forruntime_environment(#38350)allow_full_table_external_data_accessattribute (#34474)target_group_healthconfiguration block (#37082)starting_positionargument (#36968)engine_lifecycle_supportargument (#37708)engine_lifecycle_supportargument (#37708)arnfromDescribeClusterSnapshotsAPI response (#37996)TLS_PASSTHROUGHas a valid value forprotocol(#37964)enable_machine_learningtoaws_managed_rules_bot_control_rule_setconfiguration block (#37006)BUG FIXES:
idthe the access point ID, not the file system ID. This fixes a regression introduced in v5.58.0 (#38372)default_action.target_group_arn(#37348)concurrent_build_limit(#37748)triggeras Computed (#36316)volume_configuration.managed_ebs_volume.throughputfromTypeStringtoTypeInt(#38109)replicas_per_node_groupto0and sets the maximum to5. (#38396)description. (#38396)num_cache_clustersis set, prevents settingreplicas_per_node_group. (#38396)num_cache_clustersmust be at least 2 whenautomatic_failover_enabledistrue. (#38396)ip_address_typevalue whentarget_typeisinstance(#36423)ACTIVEon resource Create (#38332)interface conversion: interface {} is nil, not map[string]interface {}panic whencampaign_hookis empty ({}) (#38323)TransferSecurityPolicy-FIPS-2024-05,TransferSecurityPolicy-Restricted-2018-11, andTransferSecurityPolicy-Restricted-2020-06for thesecurity_policy_nameargument (#38425)v5.58.0Compare Source
FEATURES:
aws_cloudwatch_log_account_policy(#38328)aws_verifiedpermissions_identity_source(#38181)ENHANCEMENTS:
network_interfaces.primary_ipv6attribute (#37142)tagsattribute (#38270)tagsattribute (#38270)tagsattribute (#38270)link_configurationattribute (#38277)deployment_targetsargument. (#37898)billing_modeargument (#38273)InvalidParameterCombination: A parameter group can't be specified during Read Replica creation for the following DB engine: postgreserrors (#38227)InsufficientInstanceCapacityerrors (#36754)bootstrap_self_managed_addonsargument (#38162)resource_set_idsattribute (#38161)384,768,1536,3072, and6144as valid values forthroughput_capacity(#38308)384,768, and1536as valid values forthroughput_capacity_per_ha_pair(#38308)MULTI_AZ_2as a valid value fordeployment_type(#38308)cidr_blockargument toresourceconfiguration block (#38196)deletetimeout (#38212)network_interfaces.primary_ipv6argument (#37142)tagsargument andtags_allattribute (#38270)tagsargument andtags_allattribute (#38270)tagsargument andtags_allattribute (#38270)link_configurationargument (#38277)ca_certificate_identifierargument andca_certificate_valid_tillattribute (#37108)tagsargument andtags_allattribute (#38271)BUG FIXES:
tagsattribute is not set (#38272)access_config.bootstrap_cluster_creator_admin_permissionsattribute (#38295)0as a valid value foridle_disconnect_timeout_in_seconds(#38274)ForceNewto deployment_targets attributes to ensure a new resource is recreated when the deployment_targets argument is changed, which was not the case previously. (#37898)access_config.bootstrap_cluster_creator_admin_permissionstotrueon Read for clusters with noaccess_configconfigured. This allows in-place updates of existing clusters whenaccess_configis configured (#38295)cache_usage_limits.data_storage.maximum,cache_usage_limits.data_storage.minimum,cache_usage_limits.ecpu_per_second.maximumandcache_usage_limits.ecpu_per_second.minimumto be updated in-place (#38269)interface conversion: interface {} is nil, not map[string]interface {}panic whenlog_delivery.worker_log_deliveryis empty ({}) (#38270)v5.57.0Compare Source
FEATURES:
aws_appstream_image(#38225)aws_cognito_user_pool(#37399)aws_ec2_transit_gateway_peering_attachments(#25743)aws_transfer_connector(#38213)ENHANCEMENTS:
ruleattribute (#37890)certificate_settingsargument (#37105)optionsargument (#36902)tagsargument (#37152)cloudwatch_logs.batch_modeanderror_action.cloudwatch_logs.batch_modearguments (#36772)InputAndOutputincapture_mode(#37726)BUG FIXES:
pre_provisioning_hookupdate operation (#37152)v5.56.1Compare Source
BUG FIXES:
InvalidParameterException: 2 validation errors detectederrors on Read (#38168)runtime error: index out of range [0] with length 0panic when addinglambda_config(#38184)v5.56.0Compare Source
FEATURES:
aws_appfabric_app_authorization_connection(#38084)aws_appfabric_ingestion(#37291)aws_appfabric_ingestion_destination(#37627)aws_networkfirewall_tls_inspection_configuration(#35168)aws_networkmonitor_monitor(#35722)aws_networkmonitor_probe(#35722)ENHANCEMENTS:
parametersargument andarnattribute (#38071)firewall_arn(#35168)iam_identity_center_instance_arnattribute (#36830)firewall_domain_redirection_actionargument (#37242)q_typeargument (#38074)default_user_settings.canvas_app_settings.generative_ai_settingsconfiguration block (#37139)default_user_settings.code_editor_app_settings.custom_imageconfiguration block (#37153)production_variants.inference_ami_versionandshadow_production_variants.inference_ami_versionarguments (#38085)user_settings.canvas_app_settings.generative_ai_settingsconfiguration block (#37139)user_settings.code_editor_app_settings.custom_imageconfiguration block (#37153)oidc_config.authentication_request_extra_paramsandoidc_config.scopearguments (#38078)worker_access_configurationattribute (#38087)sensitivity_levelargument tosqli_match_statementconfiguration block (#38077)BUG FIXES:
tags(#38067)v5.55.0Compare Source
FEATURES:
aws_drs_replication_configuration_template(#26399)ENHANCEMENTS:
mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_priceattribute (#38003)additional_locationsargument instorage_descriptor(#37891)instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_priceattribute (#38003)attachment_policies.action.add_to_network_function_groupargument (#38013)network_function_groupsconfiguration block (#38013)send-viaandsend-toas valid values forsegment_actions.action(#38013)single-hopanddual-hopas valid values forsegment_actions.mode(#38013)when_sent_toandviaconfiguration blocks tosegment_actions(#38013)timeout_millisecondsfrom29000(29 seconds) to300000(5 minutes) (#38010)api_key_idattribute (#36568)mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_priceargument (#38003)warm_pool.max_group_prepared_capacityandwarm_pool.min_size(#37174)restore_to_point_in_timeargument (#37716)ttlvalues. (#37991)launch_template_config.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_priceargument (#38003)additional_locationsargument instorage_descriptor(#37891)maintenance_windowargument (#37760)instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_priceargument (#38003)BUG FIXES:
interface conversion: interface {} is types.ProductCodeValues, not stringpanic (#37977)exceptvalues to the returned JSON document whensegment_actions.share_with_exceptis configured (#38013)use_fips_endpointis set and no FIPS endpoint is available (#38057)warm_pool.max_group_prepared_capacityto0(#37174)ttl.attribute_nameis set whenttl.enabledis not set. (#37991)destinationas Optional (#36966)scaling_config.maximum_concurrency(#37980)NotFounderrors (#38011)v5.54.1Compare Source
BUG FIXES:
interface conversion: interface {} is types.ProductCodeValues, not stringpanic (######)build_batch_config.timeout_in_minsandbuild_timeoutfrom480(8 hours) to2160(36 hours) (#37970)v5.54.0Compare Source
NOTES:
FEATURES:
aws_ec2_capacity_block_offering(#37528)aws_appfabric_app_authorization(#37468)aws_appfabric_app_bundle(#37542)aws_ec2_capacity_block_reservation(#37528)aws_fms_resource_set(#37767)aws_guardduty_malware_protection_plan(#37919)ENHANCEMENTS:
ip_address_typeargument (#37237)packet_lengthas Computed (#36962)ip_address_typeargument (#37237)subnet_configurationargument to support user defined IP addresses (#37226)BUG FIXES:
tags(#37966)resource_group_nameto ForceNew (#36962)UnknownOperationException: Tagging is not currently supported in DynamoDB Localerrors on resource Read (#37924)InvalidCapacityReservationId.NotFounderrors during Read and Delete when resource is manually deleted (#37127)InvalidInput: 1 validation error detected: Value '...' at 'resourceId' failed to satisfy constraint: Member must have length less than or equal to 32errors for resources imported with a/hostedzone/prefix (#37893)ConflictException: Unable to complete operation due to concurrent modificationerrors (#37902)v5.53.0Compare Source
FEATURES:
aws_paymentcryptography_key(#37017)aws_paymentcryptography_key_alias(#37020)ENHANCEMENTS:
bgp_asn_extendedargument (#37815)supports_limitless_databaseattribute (#37271)use_fips_endpointflag is now ignored for any service with a custom endpoint configured inendpoints. (#34233)deletetimeout (#37732)bgp_asn_extendedargument (#37815)metadata_configurationargument (#37868)max_webserversandmin_webserversattributes (#37632)log_configurationargument (#37135)InvalidChangeBatcherrors on resource Delete (#37850)UnsupportedOperationerrors when readingacceleration_status,server_side_encryption_configurationandtags(#37801)ssh_key_idattribute (#37548)BUG FIXES:
ConflictExceptionerrors on resource Delete (#37732)instructionmax length for validation to 4000 (#37758)ignore_tagsmatches tag assigned to resource (#37818)ignore_tagsmatches tag assigned to resource (#37818)ignore_tagsmatches tag assigned to resource (#37818)ignore_tagsmatches tag assigned to resource (#37818)maintenance_window_start_timeorauto_minor_version_upgrade(#36506)source_parameters.self_managed_kafka_parameters.credentials.basic_authas Optional (#34293)Cannot import non-existent remote objecterrors when importing resources with version (#37832)falseforprivate_dns_enabled(#37715)v5.52.0Compare Source
ENHANCEMENTS:
application_modeargument (#37714)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)ListTagsfunction for proper key-only tag handling (#37711)BUG FIXES:
v5.51.1Compare Source
ENHANCEMENTS:
volume_configurationargument (#37019)configure_at_launchparameter involumeargument (#37019)BUG FIXES:
name_serversvalues (#37685)nameandzone_idarguments when one is an empty string (#37686)name_serversvalues (#37685)v5.51.0Compare Source
NOTES:
source_code_hashattribute has been deprecated in favor ofcode_sha256. Will be removed in a future major version (#37669)source_code_hashattribute has been deprecated in favor ofcode_sha256. Will be removed in a future major version (#37646)FEATURES:
aws_chatbot_slack_workspace(#37218)aws_lambda_runtime_management_config(#37643)aws_vpc_endpoint_private_dns(#37628)aws_vpc_endpoint_service_private_dns_verification(#37176)ENHANCEMENTS:
code_sha256attribute (#37669)code_sha256attribute (#37646)application-load-balancer,elastic-beanstalkandnetwork-load-balancerendpoint.typevalues (#37618)canary_settingsattribute (#37573)client_id_listto be updated in-place (#37612)code_sha256attribute (#37669)replace_security_group_on_destroyandreplacement_security_group_idsdeprecations, re-implement with alternate workflow (#37624)code_sha256attribute (#37646)cloudwatch_alarm_region(#37510)latency_routing_policy.region(#37510)vpc_region(#37510)vpc_region(#37510)api_gateway,app_runner_service,cognito_user_pool, andverified_access_instanceconfiguration blocks toassociation_config.request_body(#37588)BUG FIXES:
kms_key_arnon Read (#37570)grant_tokentoSensitive(#37593)source_code_hashcauses drift even if source code has not changed (#37669)source_code_hashforces a replacement even if source code has not changed (#37646)stateerror ondeployment_idduring start/stop update (#37581)cache_attributesis removed on update (#37611)v5.50.0Compare Source
ENHANCEMENTS:
tagsattribute (#37361)launch_timeattribute (#37002)tagsargument (#37361)tagsargument (#37361)fargateTaskRetirementWaitPeriodvalue inNameargument (#37018)s3_destination.kms_key_arn,s3_destination.regionands3_destination.sync_format(#37481)BUG FIXES:
by_providerargument (#37306)UnknownOperationException: Tagging is not currently supported in DynamoDB Localerrors on resource Read (#37472)interface conversion: interface {} is nil, not map[string]interface {}panic whennotify_delay_afteris empty (null) (#37347)stateerror when usingrow_filter.all_rows_wildcard(#37433)principalto fixpanic: unexpected format for ID parts ([...]), the following id parts indexes are blank ([1])(#37450)v5.49.0Compare Source
FEATURES:
aws_datazone_environment_blueprint(#36600)aws_bedrockagent_data_source(#37158)aws_datazone_domain(#36600)aws_datazone_environment_blueprint_configuration(#36600)ENHANCEMENTS:
minified_jsonattribute (#35677)table_arn(#37288)rotation_period_in_daysargument (#37140)endpoint_idin favor ofsubscriber_endpoint(#37332)configuration.https_notification_configuration.authorization_api_key_valueas sensitive value (#37332)BUG FIXES:
tagson Read (#37353)InvalidParameterValue: Invalid value 3412 for MaxRecords. Must be between 20 and 1000errors (#37251)view_arnin the AWS API request (#36778)prepare_agentvalue (or default value oftruewhen omitted) for all create and update operations (#37405)auto_tune_options.rollback_on_disableargument (#37394)tagsandtags_allon resource Read (#37353)tagsandtags_allon resource Read (#37353)trust_anchor_certificateto ForceNew (#37092)auto_tune_options.rollback_on_disableargument (#37394)auto_tune_optionsto be applied during creation (#37394)source_version(#36268)source_nameparameter (#36268)access_type(#36268)source_versionparameter foraws_log_source_resourceandcustom_log_source_resource(#36268)source_nameparameter foraws_log_source_resourceandcustom_log_source_resource(#36268)configuration.https_notification_configuration.endpoint(#37332)BackoffDelayerto maintain behavioral compatibility with AWS SDK for Go v1 (#37404)v5.48.0Compare Source
FEATURES:
aws_bedrockagent_agent_knowledge_base_association(#37185)ENHANCEMENTS:
force_destroyargument (#37130)SINGLE_AZ_1andMULTI_AZ_1deployment types (#36511)storage_capacitymaximum to 1PiB (#36511)ha_pairs(#36511)throughput_capacity_per_ha_pairto support all values fromthroughput_capacity(#36511)aggregate_configurationconfiguration block (#36511)size_in_bytesandvolume_stylearguments (#36511)BUG FIXES:
table_configurationsexpand/flatten (#37205)auth_parameters.oauth.oauth_http_parametersorauth_parameters.invocation_http_parametersbody,headerandquery_stringconfiguration blocks (#26755)unexpected state 'snapshotting'errors when increasing or decreasing replica count (#30493)v5.47.0Compare Source
NOTES:
FEATURES:
aws_identitystore_groups(#36993)aws_bcmdataexports_export(#36847)aws_bedrockagent_agent(#36851)aws_bedrockagent_agent_action_group(#36935)aws_bedrockagent_agent_alias(#36905)aws_bedrockagent_knowledge_base(#36783)aws_globalaccelerator_cross_account_attachment(#35991)aws_verifiedpermissions_policy(#35413)ENHANCEMENTS:
arnattribute (#35991)root_resource_idon resource Read (#37040)spec.service_discoveryargument (#37042)dedicated_log_volumeargument (#36503)arnattribute (#35991)transit_encryption_modeargument (#30403)transit_encryption_enabledargument can now be done in-place for engine versions >7.0.5(#30403)snowflake_configurationargument (#36646)code_editor_app_image_configandjupyter_lab_image_config.jupyter_lab_image_configarguments (#37059)kernel_gateway_image_config.kernel_specMaxItems to 5 (#37059)sftp_authentication_methodsargument (#37015)BUG FIXES:
revisiondo not trigger changes in dependent resources and/or cause an error, "Provider produced inconsistent final plan" (#37111)and,notandoroperand nesting for theruleargument (#30862)v5.46.0Compare Source
NOTES:
template_bodyofaws_cloudformation_stack, CRLF was previously treated as different from LF but these are now treated as equivalent in many situations (#14270)FEATURES:
aws_eip_domain_name(#36963)ENHANCEMENTS:
client_keep_aliveargument (#36969)ptr_recordattribute (#36963)attachment_countattribute (#36759)client_keep_aliveargument (#36969)master_account_nameattribute (#36797)ipv6_address_preferred_lease_timeattribute (#36934)client_keep_aliveargument (#36969)alarm_specificationto theinstance_refresh.preferencesconfiguration block (#36954)lambdaandmediapackagev2as valid values fororigin_access_control_origin_type(#34362)force_destroyattribute (#34905)report_build_statusandbuild_status_configarguments (#36942)ipv6_address_preferred_lease_timeas Computed attribute (#36934)resource_identifierargument (#36901)ptr_recordattribute (#36963)minimumattribute incache_usage_limits.data_storageandcache_usage_limits.ecpu_per_second(#36766)endpoint_ip_addressattribute (#36767)attachment_countattribute (#36759)execution_roleandworkflowarguments (#36953)client_keep_aliveargument (#36969)database_vpc_endpoint_serviceandwebserver_vpc_endpoint_serviceattributes (#36903)master_account_nameattribute (#36797)security_policy_nameargument (#36893)ipv6_address_preferred_lease_timeattribute (#36934)cascadeargument (#36898)BUG FIXES:
ConflictExceptionerrors on resource Create (#36980)monitor_dimensionto ForceNew (#36773)account_idto ForceNew (#36773)template_bodyno longer cause erroneous diffs (#14270)interface conversion: interface {} is nil, not map[string]interface {}panic whenauthis empty ({}) (#36967)replication_settingsto disallowLogging.CloudWatchLogGroupandLogging.CloudWatchLogStream. (#36936)replication_settingsJSON documents. (#36936)replication_task_settingsto disallowLogging.CloudWatchLogGroupandLogging.CloudWatchLogStream. (#36936)replication_task_settingsunset to use default settings. (#36936)replication_task_settingsJSON documents. (#36936)BadRequest: AuditLogDestination must not be provided when auditing is disabledwhen updatingaudit_log_configuration.0.file_access_audit_log_levelandaudit_log_configuration.0.file_share_access_audit_log_levelto"DISABLED"(#36928)number_of_workersandworker_typeas optional/computed, preventing persistent differences whenmax_capacityis set. (#36770)password_reset_requiredistrueand initial password reset is completed (#36926)certificate_nameon create and update (#36888)NotFounderror handling on delete (#36933)v5.45.0Compare Source
NOTES:
loggingargument is now deprecated. Use theaws_redshift_loggingresource instead. (#36862)snapshot_copyargument is now deprecated. Use theaws_redshift_snapshot_copyresource instead. (#36810)FEATURES:
aws_redshift_logging(#36862)aws_redshift_snapshot_copy(#36810)ENHANCEMENTS:
registry_idforaf-south-1AWS Region (#36803)documentation_part_idattribute (#36445)resource_arn(#36445)BUG FIXES:
MaxBackoffvalue to 300 seconds so that services migrated to AWS SDK for Go v2 maintain behavioral compatibility with AWS SDK for Go v1 (#36855)agent_arns(#36819)filters.message_typesorfilters.severitiescontains multiple elements (#36804)configuration_policy.enabled_standard_arnsas Optional, fixingInvalidInputException: Invalid semantics: Enabled standards and security control configurations must be configured when Security Hub is enablederrors (#36740)v5.44.0Compare Source
FEATURES:
aws_devopsguru_notification_channel(#36656)aws_devopsguru_resource_collection(#36657)aws_ecr_lifecycle_policy_document(#6133)trim_iam_role_path(#36723)aws_devopsguru_service_integration(#36694)ENHANCEMENTS:
application_tagattribute (#36647)data_catalog_encryption_settings.encryption_at_rest.catalog_encryption_service_roleattribute (#35978)desired_sessionsargument to thecompute_capacityblock. (#34266)max_sessions_per_instanceargument. (#34266)deregister_on_new_revisionto allow keeping prior versions ACTIVE when a new revision is published. (#35149)character_set_namewhenreplicate_source_db,restore_to_point_in_time, orsnapshot_identifieris set (#36518)unhealthy_node_replacementargument (#36523)data_catalog_encryption_settings.encryption_at_rest.catalog_encryption_service_roleargument (#35978)application_tagattribute (#36647)s3_storage_optionsconfiguration block (#36664)address_fieldsandphone_number_fieldstostatement.managed_rule_group_statement.managed_rule_group_configs.aws_managed_rules_acfp_rule_set.request_inspection(#36685)BUG FIXES:
TF_APPEND_USER_AGENTwhich contain/,(,), or space. (#36738)email_verification_message,email_verification_subject,admin_create_user_config.invite_message_template.email_message,admin_create_user_config.invite_message_template.email_subject,admin_create_user_config.invite_message_template.sms_message,sms_authentication_message,sms_verification_message,verification_message_template.email_message,verification_message_template.email_message_by_link,verification_message_template.email_subject,verification_message_template.email_subject_by_link, andverification_message_template.sms_messageto count UTF-8 characters properly (#36661)tagPatternListchange detection in policy JSON (#35231)alarms.rollbackon resource Create and Update (#36691)force_destroyis used and there are inline or attached policies, allow resource to be destroyed (#36640)ami_distribution_configuration.name(#36659)snapshot_copyblock (#36655)v5.43.0Compare Source
FEATURES:
aws_resourceexplorer2_search(#36560)aws_servicecatalogappregistry_application(#36596)aws_cloudfrontkeyvaluestore_key(#36534)aws_devopsguru_notification_channel(#36557)aws_ec2_instance_metadata_defaults(#36589)aws_lakeformation_resource_lf_tag(#36537)aws_m2_application(#35399)aws_m2_deployment(#35408)aws_m2_environment(#35311)aws_redshiftserverless_custom_domain_association(#35865)aws_servicecatalogappregistry_application(#36277)ENHANCEMENTS:
key_value_store_associationsattribute (#36585)original_snapshot_create_timeattribute (#36544)key_value_store_associationsargument (#36585)policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)assume_role_policyandinline_policy.*.policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)FLINK-1_18runtime_environmentvalue (#36562)policyto have leading whitespace (#36597)inline_policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)policyto have leading whitespace (#36597)tierargument (#36504)BUG FIXES:
us-east-1endpoint as this is the only Region in which AWS Cost and Usage Reports is available (#36540)ACTIVEa valid create target status (#36615)us-east-1endpoint as this is the only Region in which AWS Cost and Usage Reports is available (#36540)ValidationException. (#36592)roleno longer exists (#34099)instance_typechange also requires an architecture change, such as x86_64 to arm64 (#36590)ValidationException. (#36592)InvalidParameterCombinationerrors when updating onlyskip_final_snapshot(#36635)namecasing changes (#36563)InvalidRequestException(#36609)data_typeis updated. (#35960)v5.42.0Compare Source
FEATURES:
aws_redshift_producer_data_shares(#36481)aws_devopsguru_event_sources_config(#36485)aws_devopsguru_resource_collection(#36489)aws_dynamodb_table_export(#30399)ENHANCEMENTS:
ipv6_cidr_block_setandpeer_ipv6_cidr_block_setattributes (#36391)kerberos_keytab_base64andkerberos_krb5_conf_base64arguments (#36072)read_writeandsegment_configuration.on_demandarguments (#36486)enable_local_write_forwardingargument to support Aurora MySQL local write forwarding (#34370)BUG FIXES:
RateLimitertoratelimit.Noneso that services migrated to AWS SDK for Go v2 maintain behavioral compatibility with AWS SDK for Go v1 (#36467)start_timeandend_timevalues on update when configured (#33713)scalable_dimensionas an additional filter (#34382)container_urlattribute value and badsubdirectoryattribute value from state read/refresh (#36072)efs_file_system_arnattribute value from state read/refresh (#36072)qop_configurationas Computed (#36072)server_hostnameattribute value from state read/refresh (#36072)s3_bucket_arnattribute value from state read/refresh (#36072)server_hostnameattribute value from state read/refresh (#36072)replication_settings(#35670)replication_task_settings(#35670)kubernetes_groupsanduser_namevalues on update when configured (#36484)number_of_workersminimum value to1(#36458)local_ipv6_network_cidr,remote_ipv6_network_cidr,tunnel1_inside_ipv6_cidr, andtunnel2_inside_ipv6_cidrno longer requiretransit_gateway_idto be specified (#36405)v5.41.0Compare Source
FEATURES:
aws_apprunner_hosted_zone_id(#36288)aws_medialive_input(#36307)aws_lakeformation_data_cells_filter(#36264)aws_securityhub_configuration_policy(#35752)aws_securityhub_configuration_policy_association(#35752)aws_securitylake_subscriber_notification(#36323)ENHANCEMENTS:
stateattribute (#36304)data_cells_filterattribute (#36264)nameis Optional (#36062)pre_token_generation_configconfiguration block (#35236)stateattribute (#36304)DEFAULT) forconfiguration.execute_command_configuration.logging(#36341)data_cells_filterattribute (#36264)resource_arnandresource_share_arn(#36062)billing_contactandbilling_privacyarguments (#36285)organization_configurationconfiguration block to support central configuration (#35752)auto_enabletofalse,auto_enable_standardstoNONE, andorganization_configuration.configuration_typetoLOCALon resource Delete (#35752)BUG FIXES:
Failed to marshal state to json: unsupported attribute "override_json"andFailed to marshal state to json: unsupported attribute "source_json"errors when runningterraform show -jsonorterraform state rm(#36383)auto_tune_options.use_off_peak_windowattribute. This fixes a regression introduced in v5.40.0 causingInvalid address to seterrors (#36298)InvalidParameterException: ActiveEncryptionCertificate is not a valid key for SAML identity provider detailserrors on resource Update (#36311)ipv6_address_count(#36308)panic: interface conversion: interface {} is nil, not map[string]interface {}whenconfiguration,configuration.execute_command_configuration, orconfiguration.execute_command_configuration.log_configurationare empty (#36341)panic: interface conversion: interface {} is nil, not map[string]interface {}whenservice_connect_configuration.service.timeoutis empty (#36309)service_connect_configuration.service.tls.issuer_cert_authority.aws_pca_authority_arnis Required (#36309)InvalidReplicationGroupState: Cluster not in available state to perform tagging operations.(#36310)command_line_argumentsandinitialization_scriptupdates from overwriting one another (#36361)InvalidNetworkAclID.NotFounderrors on resource Delete (#36326)principalis disassociated outside of Terraform (#36062)couldn't find resourceerrors on resource Delete (#36326)tunnel1_inside_ipv6_cidrandtunnel2_inside_ipv6_cidr(#36236)v5.40.0Compare Source
FEATURES:
arn_build(#34952)arn_parse(#34952)aws_account_region(#35739)aws_securitylake_subscriber(#35981)ENHANCEMENTS:
has_major_targetandhas_minor_targetoptional arguments andvalid_major_targetsandvalid_minor_targetsattributes (#36246)compute_environment_orderwhich conflicts withcompute_environmentsbut aligns with AWS API.compute_environmentshas been deprecated. (#34750)origin.custom_origin_config.origin_read_timeout(#36088)io2as a valid value forstorage_type(#36252)cache_usage_limits.ecpu_per_second.maximum(#35927)use_off_peak_windowargument to theauto_tune_optionsconfiguration block (#36067)io2as a valid value forstorage_type(#36252)arn. (#35710)arn. (#35710)arn. (#35710)evaluation_window_secargument to therate_based_statementconfiguration block (#36045)evaluation_window_secargument to therate_based_statementconfiguration block (#36045)BUG FIXES:
parameter_group_namewhenreplicate_source_dbis in different region. (#36080)InvalidParameterValue: Environment named ... is in an invalid state for this operation. Must be Readyerrors whentagsare updated along with other attributes (#36074)cache_usage_limits.data_storage.maximumandcache_usage_limits.ecpu_per_second.maximumto ForceNew (#35927)encoder_settings.audio_descriptionsarguments (#36097)action.forward.target_groupsmaximum item limit (#36095)v5.39.1Compare Source
BUG FIXES:
panic: Invalid address to setrelated toroot_block_device.0.tags_all(#36054)v5.39.0Compare Source
FEATURES:
aws_redshift_data_shares(#35937)aws_apprunner_deployment(#35758)aws_config_retention_configuration(#15136)aws_securityhub_automation_rule(#34781)aws_shield_proactive_engagement(#34667)ENHANCEMENTS:
custom_time_zoneandfile_extensionarguments to theextended_S3_configurationconfiguration block (#35969)task.source_fieldsto be anullvalue (#35993)triggerconfiguration block (#35475)aws_config_organization_custom_rule.lambda_function_arn(#15136)readtimeout (#35955)aws_instance, addebs_block_device.*.tags_allandroot_block_device.*.tags_allattributes which include default tags (#33769)data_replication_modeanddata_replication_primary_broker_arnarguments, enabling support for cross-region data replication (#35990)endpoint_managementattribute (#35961)Add attributes
admin_password_secret_kms_key_idandmanage_admin_password(#35965)readtimeout (#35955)application_integration_urlattribute (#35974)BUG FIXES:
iam_rolesattribute on read (#35965)task.task_typeis set toMap_all(#35993)panic: interface conversion: interface {} is nil, not map[string]interface {}whenrecording_group.exclusion_by_resource_typesis empty (#15136)nameto ForceNew (#15136)InvalidParameterValueException: PolicyText is required when Owner is CUSTOM_POLICYerrors on resource Update (#15136)container_definitionsdiffs whenNames are ordered differently (#36029)detect_and_copy_new_topicsattribute value from state read/refresh (#35966)max_capacityremoval (#36032)base_capacityandmax_capacity(#36032)log_bucketandrole_arn_association_idto ForceNew (#34667)v5.38.0Compare Source
FEATURES:
aws_batch_job_definition(#34663)aws_cognito_user_group(#34046)aws_cognito_user_groups(#34046)ENHANCEMENTS:
load_balancer_arnsattribute (#34364)maximum_network_cardsattribute (#35840)vpc_idattribute (#35887)load_balancer_arnsattribute (#34364)token_bucket_rate_limiter_capacityparameter (#35926)load_balancer_arnsattribute (#34364)arnattribute (#35888)execution_modeargument (#35875)recording_modeconfiguration block (#35527)performance_insights_retention_period(#35870)vpc_idattribute (#35887)load_balancer_arnsattribute (#34364)max_capacityargument (#35720)TransferSecurityPolicy-2024-01andTransferSecurityPolicy-FIPS-2024-01as valid values forsecurity_policy_name(#35879)BUG FIXES:
sts_regionis specified (#35860)cluster_nameplan-time validation, allowing single-character names (#35874)cluster_nameplan-time validation, allowing single-character names (#35874)nameplan-time validation, allowing single-character names (#35874)index_fieldoptions response values (#35900)cluster_nameplan-time validation, allowing single-character names (#35874)cluster_nameplan-time validation, allowing single-character names (#35874)cluster_nameplan-time validation, allowing single-character names (#35874)nameplan-time validation, allowing single-character names (#35874)cluster_nameplan-time validation, allowing single-character names (#35874)cluster_nameplan-time validation, allowing single-character names (#35874)v5.37.0Compare Source
NOTES:
FEATURES:
aws_db_parameter_group(#35698)aws_bedrock_provisioned_model_throughput(#35689)aws_cloudfront_key_value_store(#35663)aws_redshift_data_share_consumer_association(#35771)ENHANCEMENTS:
credential_arnattribute (#34475)client_tokenargument (#34402)skip_final_snapshotargument (#35698)latest,preferred_major_targets, andpreferred_upgrade_targets. Addversion_actualattribute (#35698)engine_latest_versionandsupports_clustersarguments and convertingread_replica_capable,supported_engine_modes,supported_network_types, andsupports_multi_azto arguments for use as search criteria (#35698)introspection_config,query_depth_limit, andresolver_count_limitarguments (#35631)s3_bucket_arnattribute (#35760)credential_arnargument (#34475)service_connect_configuration.service.timeoutandservice_connect_configuration.service.tlsconfiguration blocks (#35684)track_latestargument (#30154)federated_databaseargument (#35799)timeouts(#35542)domainanddomain_iam_role_namearguments to support Kerberos authentication (#35753)geoproximity_routing_policyconfiguration block to support geoproximity routing (#35565)target_ip.protocolargument (#35744)routing_configargument. Enables the specification of arouting_strategy. (#34777)ownership_settings,space_sharing_settings,space_settings.app_type,space_settings.code_editor_app_settings,space_settings.custom_file_system,space_settings.jupyter_lab_app_settings, andspace_settings.space_storage_settingsarguments (#35116)BUG FIXES:
failed to get rate limit token, retry quota exceedederrors (#35817)ownership_verification_certificate_arnon update (#35777)BadRequestException: Unable to update route. Authorizer type is invalid or nullerrors when updatingauthorizer_id(#35821)report_overridevalues (#35778)report_overridearguments (#35778)authfromTypeListtoTypeSetas order is not significant (#35819)value(#33393)container_definitionsdiffs whenSecretsare ordered differently (#35792)ReservationCapacityExceedederrors when updatinginstance_typeandcapacity_reservation_specification.capacity_reservation_target.capacity_reservation_id(#33412)falsevalues foruse_service_linked_role(#35799)client_cachetohls_group_settings. (#35738)ACTIVEstatus (#35771)access_control_policywhen switching configuration toacl. (#35775)v5.36.0Compare Source
NOTES:
FEATURES:
aws_controltower_landing_zone(#34595)aws_osis_pipeline(#35582)aws_redshift_data_share_authorization(#35703)aws_securitylake_custom_log_source(#35354)ENHANCEMENTS:
output_format(#35569)diag.logandnotify.logas valid values forenabled_cloudwatch_logs_exports(#35626)domain_auth_secret_arn,domain_dns_ips,domain_fqdn, anddomain_ouarguments to support self-managed Active Directory (#35500)filter.access_pointargument (#35590)sse_configurationargument (#34055)BUG FIXES:
passwordattribute correctly (#35589)replicas are always set on Read (#35630)launch_specifications.on_demand_specification.allocation_strategyandlaunch_specifications.spot_specification.allocation_strategyvalues to fix perpetual state differences (#34367)extended_s3_configuration.processing_configuration.processors.parametersfromTypeListtoTypeSetas order is not significant (#35672)logging_configwhen values forapplication_log_levelorsystem_log_levelare not specified (#35694)default_actionparameters which don't match thetype. (#35678)default_action[].target_group_arnwhenignore_changeswas set. (#35671)default_action[].forwardin state if only a singletarget_groupwas set. (#35671)actionparameters which don't match thetype. (#35678)action[].target_group_arnwhenignore_changeswas set. (#35671)action[].forwardin state if only a singletarget_groupwas set. (#35671)jsonas Computed if there are content changes (#35606)v5.35.0Compare Source
FEATURES:
aws_bedrock_custom_model(#34310)aws_bedrock_custom_models(#34310)aws_ssmcontacts_rotation(#32710)aws_bedrock_custom_model(#34310)aws_lexv2models_slot(#34617)aws_lexv2models_slot_type(#35555)aws_rekognition_collection(#35407)aws_sesv2_email_identity_policy(#35486)aws_ssmcontacts_rotation(#32710)ENHANCEMENTS:
multi_azattribute (#35508)hybrid_access_enabledargument (#35571)with_federationargument (#35154)multi_azargument (#35508)owner_accountargument (#35509)header_ordertofield_to_matchconfiguration blocks (#35521)header_ordertofield_to_matchconfiguration blocks (#35521)BUG FIXES:
core_network_configuration.edge_locationsmaximum item limit (#35585)InvalidParameterValueException: Invalid lifecycle. EBS Cold Tier is not yet supportederrors on resource Create in AWS GovCloud (US) (#35560)/(#35501)source_idsas Optional. This fixes a regression introduced in v5.31.0 (#35541)lifecycle_policymaximum item limit to 3 (#35522)command_line_argumentsmax length restriction from 50 to 1024. (#35581)v5.34.0Compare Source
FEATURES:
aws_rekognition_project(#35429)aws_route53domains_delegation_signer_record(#33596)ENHANCEMENTS:
kms_key_idattribute (#35095)ThirdPartyownervalue (#35286)ThirdPartyownervalue (#35286)ThirdPartyownervalue (#35286)jsonattribute to facilitate use with S3 buckets (#33402)configurationconfiguration block (#35310)flow_statusattribute (#34948)kms_key_idargument (#35095)trigger.destination_arnandtrigger.events(#35095)auto_scaling_group_provider.managed_drainingargument (#35421)AutoScalingGroups,Buckets,ReplicationGroups,TablesandTransitGatewaystoaction.*.target(#35300)skip_final_backupargument (#35320)role_arnattribute (#35453)jsonattribute to facilitate use with S3 buckets (#33402)challenge_configargument (#35367)BUG FIXES:
build_batch_configto be removed on Update (#34121)kubernetes_groupsas Computed (#35391)typeanduser_nameas Optional, allowing values to be configured (#35391)workspace_idattribute after import (#35290)UnsupportedOperation: The functionality you requested is not available in this regionerrors on Read in certain partitions (#33484)v5.33.0Compare Source
FEATURES:
aws_eks_access_entry(#35037)aws_eks_access_entry(#35037)aws_eks_access_policy_association(#35037)aws_lexv2models_intent(#34891)ENHANCEMENTS:
access_configattribute (#35037)created_dateandlast_changed_dateattributes (#35117)created_dateattribute (#35117)rule.lifecycle.opt_in_to_archive_for_supported_resourcesandrule.copy_action.lifecycle.opt_in_to_archive_for_supported_resourcesand arguments (#34994)access_configconfiguration block (#35037)use_service_linked_roleargument (#35284)rotate_immediatelyargument (#35105)BUG FIXES:
scheduleto be removed successfully (#35282)target.resource_arnsortarget.resource_tagattributes. (#35254)ValidationError: Mutual Authentication mode passthrough does not support ignoring certificate expiryerrors whenmutual_authentication.modeis set topassthrough(#35289)InvalidParameterException: The parameter RemoveFromVersionId can't be empty. Staging label AWSCURRENT is currently attached to version ..., so you must explicitly reference that version in RemoveFromVersionIderrors when a secret is updated outside Terraform (#19943)v5.32.1Compare Source
BUG FIXES:
most_recentis not alsolatest(#35269)registration_config.role_arnfromTypeBooltoTypeString, fixingInappropriate value for attribute "role_arn": a bool is requirederrors (#35234)interface conversion: interface {} is *schema.Set, not []stringpanic (#35265)v5.32.0Compare Source
FEATURES:
aws_mq_broker_engine_types(#34232)aws_msk_bootstrap_brokers(#32484)aws_verifiedpermissions_policy_store(#32204)aws_ebs_fast_snapshot_restore(#35211)aws_elasticache_serverless_cache(#34951)aws_imagebuilder_workflow(#35097)aws_kinesis_resource_policy(#35167)aws_prometheus_scraper(#34749)aws_securitylake_aws_log_source(#34974)aws_ssoadmin_application_access_scope(#34811)aws_verifiedpermissions_policy_store(#32204)aws_verifiedpermissions_policy_template(#32205)aws_verifiedpermissions_schema(#32204)ENHANCEMENTS:
update_policyattribute (#34353)image_uriattribute (#24526)lifecycle_policy.transition_to_archiveattribute (#35096)protectionattribute (#35029)il-central-1AWS Region (#35131)ca-west-1AWS Region (#35131)ha_pairsandthroughput_capacity_per_ha_pairattributes (#34993)regionattribute totarget_tableblock. (#34817)logging_configattribute (#35050)ca-west-1AWS Region (#35131)load_balancing_anomaly_mitigationattribute (#35083)namelength validation (#34399)firewall_policy.tls_inspection_configuration_arnattribute (#35094)kms_key_arnattribute (#35062)protocolsattribute (#35098)resolver_endpoint_typeattribute (#34798)ca-west-1AWS Region (#35131)ca-west-1as a valid AWS Region (#35131)destination_connector_properties.s3.s3_output_format_config.target_file_sizeargument (#35215)idle_disconnect_timeout_in_secondsmax value for validation to 360000 (#35173)instance_refresh.preferences.max_healthy_percentageattribute (#34929)ValidationError: The instance ... is not part of Auto Scaling group ...errors on resource Delete when disabling scale-in protection for instances that are already fully terminated (#35071)update_policyparameter (#34353)scheduling_priorityargument andarn_prefixattribute (#34997)amazonlinux-2023-x86_64andresolve:ssm:/aws/service/cloud9/amis/amazonlinux-2023-x86_64as valid values forimage_id(#35020)pipeline_typeargument andvariableconfiguration block (#34841)cdc_start_timeto use RFC3339 formatted dates in addition to UNIX timestamps (#31917)replication_instance_arn, allowing in-place migration between DMS instances (#30721)lifecycle_policy.transition_to_archiveargument (#35096)protectionconfiguration block (#35029)destination.file_system_idas Optional, enabling EFS replication fallback (#34955)per_unit_storage_throughputto be updated in-place (#34932)ha_pairsandthroughput_capacity_per_ha_pairarguments (#34993)disk_iops_configuration.iopsto2400000(#34993)throughput_capacityis Optional (#34993)regionattribute totarget_tableblock. (#34817)csv_classifier.serdeargument (#34251)opensearch_configuration.document_id_optionsconfiguration block (#35137)splunk_configuration.buffering_intervalandsplunk_configuration.buffering_sizearguments (#35137)elasticsearch_configuration.buffering_interval,http_endpoint_configuration.buffering_interval,opensearch_configuration.buffering_interval,opensearchserverless_configuration.buffering_interval,redshift_configuration.s3_backup_configuration.buffering_interval,extended_s3_configuration.s3_backup_configuration.buffering_interval,elasticsearch_configuration.s3_configuration.buffering_interval,http_endpoint_configuration.s3_configuration.buffering_interval,opensearch_configuration.s3_configuration.buffering_interval,opensearchserverless_configuration.s3_configuration.buffering_interval,redshift_configuration.s3_configuration.buffering_intervalandsplunk_configuration.s3_configuration.buffering_intervalminimum values to0to support zero buffering (#35137)xks_key_idattribute (#31216)logging_configconfiguration block in support of advanced logging controls (#35050)python3.12runtimevalue (#35049)python3.12compatible_runtimesvalue (#35049)load_balancing_anomaly_mitigationargument (#35083)weighted_randomas a valid value forload_balancing_algorithm_type(#35083)storage_typeargument (#34985)storage_typeattribute (#34985)firewall_policy.tls_inspection_configuration_arnargument (#35094)kms_key_arnargument, enabling encryption at-rest using AWS KMS Customer Managed Keys (CMK) (#35062)portargument (#34925)protocolsargument (#35098)resolver_endpoint_typeargument (#34798)TransferSecurityPolicy-PQ-SSH-Experimental-2023-04andTransferSecurityPolicy-PQ-SSH-FIPS-Experimental-2023-04as valid values forsecurity_policy_name(#35129)policy_documentargument (#34264)BUG FIXES:
deregistration_delayfromTypeInttoTypeString(#31436)./fromkeyto maintain AWS SDK for Go v1 (pre-v5.17.0) compatibility (#35223)./fromkeyto maintain AWS SDK for Go v1 (pre-v5.17.0) compatibility (#35223)image_idis Required (#35020)build_timeoutandqueued_timeoutfor Lambda compute types (#35043)activation_keyby removing requirement for one ofip_addressoractivation_keyto be set (#35150)replication_settings(#34356)replication_task_settings(#34356)arnattribute on read, resolving persistent differences whentagsare configured (#34998)thing_indexing_configuration.filter.named_shadow_names(#35225)InvalidArgumentException: Both BufferSizeInMBs and BufferIntervalInSeconds are required to configure buffering for lambda processorerrors on resource Update (#26964)extended_s3_configuration.processing_configuration.processors.parametersdiffs when processor type isLambda(#35137)source_code_hashdoes not change. (#29921)ValidationError: Attributes cannot be emptyerrors (#35228)stickiness.cookie_namewhenstickiness.typeislb_cookie(#31436)snapshottingstatus as pending when creating cluster (#31077)reading RAM Resource Share (...) Principal Association (...): couldn't find resource (21 retries)errors when a high number of principals are associated with a resource share (#34738)./fromkeyto maintain AWS SDK for Go v1 (pre-v5.17.0) compatibility (#35223)./fromkeyto maintain AWS SDK for Go v1 (pre-v5.17.0) compatibility (#35223)./fromkeyto maintain AWS SDK for Go v1 (pre-v5.17.0) compatibility (#35223)rotation_rules.automatically_after_dayswhenrotation_rules.schedule_expressionis set. (#35024)tracking_optionsbeing omitted from state and resulting in persistent diff (#35056)portal_options.sign_in_options.application_urltriggeringValidationErrorwhen unset (#34967)v5.31.0Compare Source
FEATURES:
aws_polly_voices(#34916)aws_ssoadmin_application_assignments(#34796)aws_ssoadmin_principal_application_assignments(#34815)aws_finspace_kx_dataview(#34828)aws_finspace_kx_scaling_group(#34832)aws_finspace_kx_volume(#34833)aws_ssoadmin_trusted_token_issuer(#34839)ENHANCEMENTS:
log_group_classattribute (#34812)postgres_settingsattribute (#34724)connection_logsattribute (#34864)dns_record_client_routing_policyattribute (#34135)standby_replicasattribute (#34677)elasticsearch_settings.use_new_mapping_typeargument (#29470)postgres_settingsconfiguration block (#34724)database.dataview_name,scaling_group_configuration, andtickerplant_log_configurationarguments. (#34831)capacity_configurationargument is now optional. (#34831)connection_logsconfiguration block (#34864)subnetsorsubnet_mappingis configured (#33205)subnet_mappings for Application Load Balancers to be changed without recreating the resource (#33205)subnet_mappings for Network Load Balancers to be increased without recreating the resource (#33205)subnetsfor Network Load Balancers to be increased without recreating the resource (#33205)standby_replicasattribute (#34677)BUG FIXES:
ecr_repository_prefix(#34716)us-east-1for S3 directory bucket operations. This fixesno such hosterrors (#34893)backends per virtual node (#34774)invalid new value for .skip_destroy: was cty.False, but now nullerrors (#30354)STANDARD) forlog_group_classargument and mark as Computed. This fixesInvalidParameterException: Only Standard log class is supportederrors in AWS Regions other than AWS Commercial (#34812)source_idsandsource_typeare Required (#33731)ecr_repository_prefix(#34716)security_groupsfor Network Load Balancers when the new value is Computed (#33205)InvalidConfigurationRequest: Load balancer attribute key 'dns_record.client_routing_policy' is not supported on load balancers with type 'network'errors on resource Create in AWS GovCloud (US) (#34135)failover_conditionargument (#33410)reflect.Set: value of type basetypes.StringValue is not assignable to type types.ARNpanic when importing resources withnilARN fields (#34820)v5.30.0Compare Source
FEATURES:
aws_codeguruprofiler_profiling_group(#34672)aws_ecr_repositories(#34446)aws_lb_trust_store(#34584)aws_ssoadmin_application(#34773)aws_ssoadmin_application_providers(#34670)aws_codeguruprofiler_profiling_group(#34672)aws_customerprofiles_domain(#34622)aws_customerprofiles_profile(#34622)aws_lb_trust_store(#34584)aws_lb_trust_store_revocation(#34584)aws_securitylake_data_lake(#34521)aws_ssoadmin_application(#34723)aws_ssoadmin_application_assignment(#34741)aws_ssoadmin_application_assignment_configuration(#34752)ENHANCEMENTS:
kms_key_identifierattribute (#34725)enforce_security_group_inbound_rules_on_private_link_trafficattribute (#33767)mutual_authenticationattribute (#34584)kms_key_identifierattribute (#34725)kms_key_identifierattribute (#34739)log_group_classargument (#34679)enforce_security_group_inbound_rules_on_private_link_trafficargument (#33767)mutual_authenticationconfiguration block (#34584)stack overflowfatal errors on resource Delete whenforce_destroyistrueand the bucket contains delete markers (#34712)resource_spec.sagemaker_image_version_aliasargument (#34729)jupyter_lab_image_configconfiguration block (#34696)default_user_settings.code_editor_app_settings,default_user_settings.custom_file_system_config,default_user_settings.custom_posix_user_config,default_user_settings.default_landing_uri,default_user_settings.jupyter_lab_app_settings,default_user_settings.space_storage_settings,default_user_settings.studio_web_portalarguments (#34729)sagemaker_image_version_aliasargument under alldefault_resource_specblocks (#34729)single_sign_on_application_arnattribute (#34729)sagemaker_image_version_aliasargument under alldefault_resource_specblocks (#34729)space_display_nameargument (#34729)urlattribute (#34729)sagemaker_image_version_aliasargument under alldefault_resource_specblocks (#34729)user_settings.code_editor_app_settings,user_settings.custom_file_system_config,user_settings.custom_posix_user_config,user_settings.default_landing_uri,user_settings.jupyter_lab_app_settings,user_settings.space_storage_settings,user_settings.studio_web_portalarguments (#34729)TransferSecurityPolicy-FIPS-2023-05security_policy_namevalue (#34709)BUG FIXES:
deprecation_timeon creation and update due to eventual consistency (#34691)descriptionon update due to eventual consistency (#34691)deprecation_time(#34691)destination_flow_config(#34770)physical_connection_requirementsconfiguration block (#34737)v5.29.0Compare Source
FEATURES:
aws_docdbelastic_cluster(#31033)aws_eks_pod_identity_association(#34566)ENHANCEMENTS:
storage_typeargument (#34637)name_prefixargument (#34500)BUG FIXES:
optionsfields while waiting for acceptance (#34547)NotImplemented: This bucket does not support Object Versioningerrors on resource Delete whenforce_destroyistrue(#34647)v5.28.0Compare Source
FEATURES:
aws_s3_directory_buckets(#34612)aws_s3_directory_bucket(#34612)ENHANCEMENTS:
identity_center_arnargument andidentity_center_application_arnattribute (#34582)BUG FIXES:
auth_token_update_strategyargument with a default value (#34600)v5.27.0Compare Source
NOTES:
internetmonitor,ivschat,pipes, ands3. These changes primarily affect how arguments with default values are serialized for outbound requests, changing scalar types to pointers. See this AWS SDK for Go V2 issue for additional context. The corresponding provider changes should make this breakfix transparent to users, but as with any breaking change there is the potential for missed edge cases. If errors are observed in the impacted resources, please link to this dependency update pull request in the bug report (#34476)FEATURES:
aws_emr_supported_instance_types(#34481)aws_apprunner_default_auto_scaling_configuration_version(#34292)aws_lexv2models_bot_version(#33858)aws_s3control_access_grant(#34564)aws_s3control_access_grants_instance(#34564)aws_s3control_access_grants_instance_resource_policy(#34564)aws_s3control_access_grants_location(#34564)ENHANCEMENTS:
has_associated_serviceandis_defaultattributes (#34292)network_configuration.ip_address_typeargument (#34292)source_configuration.code_repository.source_directoryargument to support monorepos (#34292)health_check_configurationto be updated in-place (#34292)stateparameter and deprecateis_enabledparameter (#34510)auth_token_update_strategyargument (#34460)java21runtimevalue (#34476)python3.12runtimevalue (#34533)java21compatible_runtimesvalue (#34476)python3.12compatible_runtimesvalue (#34533)target_object_key_formatconfiguration block to support automatic date-based partitioning (#34504)BUG FIXES:
InvalidParameter: 2 validation error(s) founderror whendestination_flow_configortaskis updated (#34456)interface conversion: interface {} is nil, not map[string]interface {}panic (#34456)service_urlfor private services (#34292)ConcurrentModificationException: Workflow <workflowName> was modified while adding trigger <triggerName>errors (#34530)voice_settings.enginevalidation, value conversion errors (#34532)typeargument on create and update when configured (#34524)source_parameterson update (#34487)v5.26.0Compare Source
FEATURES:
aws_iot_registration_code(#15098)aws_iot_billing_group(#31237)aws_iot_ca_certificate(#15098)aws_iot_event_configurations(#31237)ENHANCEMENTS:
instance_maintenance_policyattribute (#34430)https_proxyandno_proxyparameters. (#34243)instance_maintenance_policyconfiguration block (#34430)policy_arn(#34378)policy_arn(#34378)policy_arn(#34378)policy_arn(#34378)ca_certificate_idattribute (#15098)nodejs20.xandprovided.al2023runtimevalues (#34401)nodejs20.xandprovided.al2023compatible_runtimesvalues (#34401)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.sparklineattribute (#33931)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.visual_layout_optionsattribute (#33931)number_display_format_configurationandpercentage_display_format_configurationto nestednumeric_format_configurationargument (#33931)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.sparklineattribute (#33931)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.visual_layout_optionsattribute (#33931)number_display_format_configurationandpercentage_display_format_configurationto nestednumeric_format_configurationargument (#33931)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.sparklineattribute (#33931)definition.sheets.visuals.kpi_visual.chart_configuration.kpi_options.visual_layout_optionsattribute (#33931)number_display_format_configurationandpercentage_display_format_configurationto nestednumeric_format_configurationargument (#33931)delete_automated_backupsargument (#34309)BUG FIXES:
readerror when resource is not created inus-east-1(#34334)readerror when resource is not created inus-east-1(#34334)readerror when resource is not created inus-east-1(#34334)readerror when resource is not created inus-east-1(#34334)readerror when resource is not created inus-east-1(#34334)readerror when resource is not created inus-east-1(#34334)us-east-1(#34334)us-east-1(#34426)us-east-1(#34426)UserNotFound: ... is not available for taggingerrors on resource Read when there is a concurrent update to the user (#34396)keytoSensitive(#34105)ConcurrentModificationExceptionerrors on create and delete (#34378)ConcurrentModificationExceptionerrors on create and delete (#34378)ConcurrentModificationExceptionerrors on create and delete (#34378)ConcurrentModificationExceptionerrors on create and delete (#34378)errors: *target must be interface or implement errorpanic (#34424)interface conversion: interface {} is nil, not map[string]inspector2.AccountResourceStatuspanic (#34424)ca_pemandcertificate_pemto ForceNew (#15098)DeleteConflictExceptionerrors on delete (#34329)number_scale,prefix, andsuffixinteger arguments (#33931)rolling_dateargument (#33931)select_all_optionsargument (#33931)visual_idsargument (#33931)column_indexandrow_indexarguments now properly handle zero values (#33931)number_scale,prefix, andsuffixinteger arguments (#33931)rolling_dateargument (#33931)select_all_optionsargument (#33931)visual_idsargument (#33931)column_indexandrow_indexarguments now properly handle zero values (#33931)permissions.actionsmaximum item limit to 20, aligning with the AWS API limits (#33931)number_scale,prefix, andsuffixinteger arguments (#33931)rolling_dateargument (#33931)select_all_optionsargument (#33931)visual_idsargument (#33931)column_indexandrow_indexarguments now properly handle zero values (#33931)default_user_settings.canvas_app_settings.identity_provider_oauth_settingsfrom TypeSet to TypeList, preventinginterface conversion: interface {} is *schema.Set, not []interface {}panics (#34418)expressionisrate(0 minutes)(#34084)UnsupportedOperation: The tunnel inside ip version parameter is not currently supported in this regionerror when creating connections in certain partitions and Regions (#34420)v5.25.0Compare Source
NOTES:
nametoarn(#30758)FEATURES:
aws_apigatewayv2_vpc_link(#33974)aws_athena_named_query(#24815)aws_bedrock_foundation_model(#34148)aws_bedrock_foundation_models(#34148)aws_athena_prepared_statement(#33417)aws_lexv2models_bot_locale(#33949)ENHANCEMENTS:
endpoints.sso(#34302)jwt_tokenandoauth2_grant_typearguments to theconnector_profile_config.connector_profile_credentials.salesforceblock. (#34248)initial_lifecycle_hook.default_result,initial_lifecycle_hook.heartbeat_timeout,initial_lifecycle_hook.lifecycle_transition,initial_lifecycle_hook.name,initial_lifecycle_hook.notification_target_arnandinitial_lifecycle_hook.role_arn(#12145)default_result,heartbeat_timeout,lifecycle_transition,name,notification_target_arnandrole_arn(#12145)task_report_configargument (#33861)postgresas a validenginevalue for blue/green deployments (#34216)pause_replication_tasks, which when set totrue, pauses associated running replication tasks, regardless if they are managed by Terraform, prior to modifying the endpoint (only tasks paused by the resource will be restarted after the modification completes) (#34316)vpc_config.security_group_idsandvpc_config.subnet_idsto be updated in-place (#32409)lambda_codeargument to theauto_enableconfiguration block (#34261)default_user_settings.canvas_app_settings.direct_deploy_settings,default_user_settings.canvas_app_settings.identity_provider_oauth_settingsanddefault_user_settings.canvas_app_settings.kendra_settingsarguments (#34265)default_space_settings.kernel_gateway_app_settings.custom_image,default_user_settings.kernel_gateway_app_settings.custom_imageanddefault_user_settings.r_session_app_settings.custom_imageMaxItemsfrom30to200(#34265)offline_store_config.s3_storage_config.resolved_output_s3_uri,online_store_config.storage_typeandonline_store_config.ttl_durationarguments (#34283)online_store_config.ttl_durationto be updated in-place (#34283)container.model_data_sourceandprimary_container.model_data_sourceconfiguration blocks (#34158)space_settings.kernel_gateway_app_settings.custom_imageMaxItemsfrom30to200(#34265)default_user_settings.canvas_app_settings.direct_deploy_settings,default_user_settings.canvas_app_settings.identity_provider_oauth_settingsanddefault_user_settings.canvas_app_settings.kendra_settingsarguments (#34265)archive_policyargument andbeginning_archive_timeattribute to support message archiving (#34252)replay_policyargument (#34252)BUG FIXES:
Value Conversion Errorpanic for certain resources whennulltag values are specified (#34319)initial_lifecycle_hookconfiguration block attributes to ForceNew (#34260)idattribute from the trail's name to its ARN to support organization trails (#30758)event_patternmax length for validation to 4096 (#34270)default_space_settings.r_studio_server_pro_app_settings.access_statusfromENABLEDtoDISABLED(#34265)v5.24.0Compare Source
NOTES:
FEATURES:
aws_opensearchserverless_lifecycle_policy(#34144)aws_detective_organization_admin_account(#25237)aws_detective_organization_configuration(#25237)aws_opensearchserverless_lifecycle_policy(#34144)aws_redshift_resource_policy(#34149)aws_verifiedaccess_endpoint(#30763)ENHANCEMENTS:
custom_headersargument (#31561)node_propertiesargument (#34153)code,database, andinitialization_scriptarguments. The update timeout has been increased to 30 minutes. (#34220)kafka.headeranderror_action.kafka.headerarguments (#34191)NO_ENCAPas a validoptions.protocolvalue (#34109)subnet_arnargument to support Tunnel-less Connect attachments (#34109)inside_cidr_blocksis Optional (#34109)backup_retention_period(also, "1") to allow integration with AWS Backup (#34187)snapshot_arnargument (#34181)manage_master_passwordandmaster_password_secret_kms_key_idarguments to support managed admin credentials (#34182)override_providerconfiguration block, allowing tags inherited from the providerdefault_tagsconfiguration block to be ignored (#33262)rotation_lambda_arnargument is now optional to support modifying the rotation schedule of AWS-managed secrets. (#34180)BUG FIXES:
idattribute for individual IPAM pools (#32133)action.forward.target_groupargument minimum item requirement. Previously this was set to 2, but the AWS API allows specifying a single target group. (#33727)enable_performance_mode(#34141)action.forward.target_groupargument minimum item requirement. Previously this was set to 2, but the AWS API allows specifying a single target group. (#33727)window_options.bounds.*argument validatation functions (#34230)window_options.bounds.*argument validatation functions (#34230)window_options.bounds.*argument validatation functions (#34230)unexpected state 'scaling-compute'(#34187)v5.23.1Compare Source
BUG FIXES:
vpc_config.ipv6_allowed_for_dual_stackattribute, fixingInvalid address to set: []string{"vpc_config", "0", "ipv6_allowed_for_dual_stack"}errors (#34134)v5.23.0Compare Source
NOTES:
finspace,kafka,medialive,rds,s3control,timestreamwrite, andxray. These changes primarily affect how arguments with default values are serialized for outbound requests, changing scalar types to pointers. See this AWS SDK for Go V2 issue for additional context. The corresponding provider changes should make this breakfix transparent to users, but as with any breaking change there is the potential for missed edge cases. If errors are observed in the impacted resources, please link to this dependency update pull request in the bug report. (#34096)FEATURES:
aws_iot_domain_configuration(#24765)ENHANCEMENTS:
image_scanning_configurationattribute (#34049)evaluation_modeattribute (#34033)ip_discoveryandnetwork_typearguments (#34019)image_scanning_configurationconfiguration block (#34049)vpc_config.ipv6_allowed_for_dual_stackargument (#34045)dns_record_client_routing_policyattribute to configure Availability Zonal DNS affinity on Network Load Balancer (NLB) (#33992)target_health_stateconfiguration block (#34070)false) forconnection_terminationargument and mark as Computed, to support new default behavior for UDP/TCP_UDP target groups (#34070)slowqueryas a validenable_cloudwatch_logs_exportsvalue (#34053)BUG FIXES:
tags_allis null (#34073)launch_templatename is updated. (#34086)falseforadd_trailing_padding_character, maintaining compatibility with older (pre-3.4.7) DMS engine versions (#34048)0as a valid value forvolume.efs_volume_configuration.transit_encryption_port, preventing unexpected drift (#34020)descriptionattribute when it is changed (#34037)thing_indexing_configuration.filterattribute, resolvingInvalidRequestException: NamedShadowNames Filter must not be empty for enabling NamedShadowIndexingModeerrors (#26859)0(representing Sunday) formaintenance_start_time.day_of_week(#34015)InvalidParameterValue: Policy Document cannot be provided when Policy Enabled is false or missingerrors when updatingpolicy_document(#34054)v5.22.0Compare Source
FEATURES:
aws_media_convert_queue(#27075)aws_elasticsearch_vpc_endpoint(#33925)aws_msk_replicator(#33973)ENHANCEMENTS:
self_service_portal_urlattribute (#34007)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)cluster_identifier_prefixargument (#33852)identifier_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)self_service_portal_urlattribute (#34007)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)typeattribute (#33950)name_prefixargument (#33852)name_prefixargument (#33852)cluster_identifier_prefixargument (#33852)identifier_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)name_prefixargument (#33852)cluster_identifier_prefixargument (#33852)identifier_prefixargument (#33852)name_prefixargument (#33852)signer:SignPayloadas a validactionvalue (#33852)statement_id_prefixargument (#33852)pre_authentication_login_bannerandpost_authentication_login_bannerlength limits to 4096 (#33937)ja3_fingerprinttofield_to_matchconfiguration blocks (#33933)BUG FIXES:
computedvalues are not set when there is no update (#33969)manage_master_user_passwordandmaster_user_secret_kms_key_idattributes correctly (#33699)engine_versionfrom6.xto a specific6.<digit>version number (#33954)permission_boundarywhen deleted outside of Terraform (#33963)permission_boundarywhen deleted outside of Terraform (#33963)Value at 'resourceTypes' failed to satisfy constrainterrors (#33348)engine_version(#33487)found resourceerrors on Delete (#33966)v5.21.0Compare Source
FEATURES:
aws_servicequotas_templates(#33871)aws_ec2_image_block_public_access(#33810)aws_guardduty_organization_configuration_feature(#33913)aws_servicequotas_template_association(#33725)aws_verifiedaccess_group(#33297)aws_verifiedaccess_instance_logging_configuration(#33864)ENHANCEMENTS:
s3_settings.glue_catalog_generationattribute (#33778)cluster_uuidattribute (#33805)outdated_instances_strategyargument (#33844)s3_settings.glue_catalog_generationattribute (#33778)glue_catalog_generationattribute (#33778)allow_major_version_upgradeargument (#33790)copy_tags_to_snapshotargument (#31022)import_tableconfiguration block (#33802)cluster_uuidattribute (#33805)cluster_uuidattribute (#33805)base_policy_documentargument (#33712)require_sslanduse_fips_sslconfig_parameterskeys (#33916)fips_enabledargument (#33880)config.lambda_event_structure_versionargument (#33804)config.port,config.protocolandconfig.vpc_identifieroptional (#33804)aws_managed_rules_acfp_rule_settomanaged_rule_group_configsconfiguration block (#33915)BUG FIXES:
AWS_S3_US_EAST_1_REGIONAL_ENDPOINTenvironment variable when configuring the S3 API client (#33874).) no longer fail validation (#33704).) no longer fail validation (#33704)v5.20.1Compare Source
NOTES:
v5.20.0Compare Source
FEATURES:
aws_guardduty_detector_feature(#31463)aws_servicequotas_template(#33688)aws_sesv2_account_vdm_attributes(#33705)aws_verifiedaccess_instance_trust_provider_attachment(#33734)ENHANCEMENTS:
featuresattribute (#31463)name(#21030)opensearchserverless_configurationandmsk_source_configurationconfiguration blocks (#33101)opensearchserverlessas a validdestinationvalue (#33101)BUG FIXES:
active_directory_configuration.self_managed_active_directory_configuration.file_system_administrators_groupis not configured (#33800)active_directory_configuration.self_managed_active_directory_configuration.file_system_administrators_groupis not configured (#33800)dns_options.dns_record_ip_typetoComputedto prevent diffs (#33743)v5.19.0Compare Source
BREAKING CHANGES:
metadataattribute's keys are always returned in lowercase (#33660)metadataattribute's keys are always returned in lowercase (#33660)NOTES:
metadataattribute's keys are now always returned in lowercase. Please modify configurations as necessary (#33660)metadataattribute's keys are now always returned in lowercase. Please modify configurations as necessary (#33660)FEATURES:
aws_cleanrooms_configured_table(#33602)aws_dms_replication_config(#32908)aws_lexv2models_bot(#33475)aws_rds_custom_db_engine_version(#33285)aws_vpclattice_service_network(#30482)ENHANCEMENTS:
off_peak_window_optionsattribute (#30965)ubuntu-22.04-x86_64andresolve:ssm:/aws/service/cloud9/amis/ubuntu-22.04-x86_64as valid values forimage_id(#33662)bypass_snaplock_enterprise_retentionargument andsnaplock_configurationconfiguration block to support SnapLock (#32530)copy_tags_to_backupsandsnapshot_policyarguments (#32530)delete_volume_optionsargument (#32530)force_deleteargument (#33586)off_peak_window_optionsconfiguration block (#30965)connection_properties,connection_modeandaccept_connectionarguments (#32990)JSONSchemaDraft4schema type support (#33442)rate_based_statement.custom_keyconfiguration block (#33594)rate_based_statement.custom_keyconfiguration block (#33594)BUG FIXES:
compute_environmentsas ARNs (#33577)IllegalUpdateerrors when updating a stagingaws_cloudfront_distributionthat is part of continuous deployment (#33578)IllegalUpdateerrors when updating a staging distribution associated with anaws_cloudfront_continuous_deployment_policy(#33578)PreconditionFailederrors when destroying a distribution associated with anaws_cloudfront_continuous_deployment_policy(#33578)StagingDistributionInUseerrors when destroying a distribution associated with anaws_cloudfront_continuous_deployment_policy(#33578)protocol.smb.domain,protocol.smb.userandprotocol.smb.password(#33641)policy(#33570)policy(#33570)policy(#33570)assume_role_policy(#33570)policy(#33570)policy(#33570)policy(#33570)couldn't find resourceerrors on resource Create (#33537)inline_policy(#33570)policy(#33570)policy(#33570)v5.18.1Compare Source
NOTES:
v5.18.0Compare Source
FEATURES:
aws_fsx_ontap_file_system(#32503)aws_fsx_ontap_storage_virtual_machine(#32621)aws_fsx_ontap_storage_virtual_machines(#32624)aws_organizations_organizational_unit(#33408)aws_opensearch_package(#33227)aws_opensearch_package_association(#33227)ENHANCEMENTS:
active_directory_configuration.self_managed_active_directory_configuration.domain_name,active_directory_configuration.self_managed_active_directory_configuration.file_system_administrators_groupandactive_directory_configuration.self_managed_active_directory_configuration.organizational_unit_distinguished_nameallowing an SVM to join AD after creation (#33466)BUG FIXES:
dkim_signing_attributes.domain_signing_private_keyas sensitive (#33477)storage_throughputcan be changed wheniopsandallocated_storageare not changed (#33529)optionportand/orversionis not set (#33511)active_directory_configuration.self_managed_active_directory_configuration.file_system_administrators_groupis configured (#33466)file_system_idto ForceNew (#32621)OperationAborted: A conflicting conditional operation is currently in progress against this resourceerrors (#33531)OperationAborted: A conflicting conditional operation is currently in progress against this resourceerrors (#33531)OperationAborted: A conflicting conditional operation is currently in progress against this resourceerrors (#33531)dkim_signing_attributes.domain_signing_private_keyas sensitive (#33477)v5.17.0Compare Source
NOTES:
/as the value forkeyis no longer supported (#33358)FEATURES:
aws_shield_application_layer_automatic_response(#33432)aws_verifiedaccess_instance(#33459)ENHANCEMENTS:
checksum_modeargument andchecksum_crc32,checksum_crc32c,checksum_sha1andchecksum_sha256attributes (#33358)details.region.bucket_account_idattribute (#33416)checksum_algorithmargument andchecksum_crc32,checksum_crc32c,checksum_sha1andchecksum_sha256attributes (#33358)checksum_algorithmargument andchecksum_crc32,checksum_crc32c,checksum_sha1andchecksum_sha256attributes (#33358)details.region.bucket_account_idargument to support cross-account Multi-Region Access Points (#33416)details.region.regionattribute (#33416)JSONSchemaDraft4schema type support (#35971)sftp_configargument and makeas2_configoptional (#32741)WAFOptimisticLockExceptionerrors (#33432)BUG FIXES:
replication_task_settingsisnil(#33456)redisengine types caused by the newtransit_encryption_enabledargument (#33451)kms_key_arnon restore from DB cluster snapshot (#33413)provisioning_artifact_parametersattribute (#33448)v5.16.2Compare Source
FEATURES:
aws_cognito_identity_pool(#33053)aws_verifiedaccess_trust_provider(#33195)ENHANCEMENTS:
instance_refresh.preferences.scale_in_protected_instancesandinstance_refresh.preferences.standby_instancesfromWaitto the Amazon EC2 Auto Scaling console recommended value ofIgnore(#33382)aliasattribute (#33388)BUG FIXES:
ValidationErrorerrors when starting Auto Scaling group instance refresh (#33382)InvalidParametererrors on Update with Kafka destinations (#33360)name(#33405)name(#33405)name(#33405)name(#33405)lb_name(#33405)lb_name(#33405)lb_name(#33405)lb_name(#33405)lb_name(#33405)lb_name(#33405)v5.16.1Compare Source
BUG FIXES:
Search returned 0 resultserrors when there are more than 101 file systems in the configured Region (#33336)unexpected stateerrors on resource Create (#33369)metadata_locationandtable_typeparameterswhen updating Iceberg tables (#33374)v5.16.0Compare Source
NOTES:
FEATURES:
aws_shield_drt_access_log_bucket_association(#33328)aws_shield_drt_access_role_arn_association(#33328)ENHANCEMENTS:
customer_idattribute (#33281)disk_iops_configurationattribute (#33303)software_update_optionsattribute (#32234)request_payerargument andrequest_chargedattribute (#33304)encoding_type(#33304)api_key_versionandfeaturesattributes (#33279)customer_idargument (#33281)name(#33281)scale_in_protected_instancesandstandby_instancesattributes toinstance_refresh.preferencesconfiguration block (#33310)redshift-serverlessas valid value forengine_name(#33316)transit_encryption_enabledargument, enabling in-transit encryption for Memcached clusters inside a VPC (#26987)disk_iops_configurationconfiguration block (#33303)open_table_format_inputconfiguration block to support open table formats such as Apache Iceberg (#33274)automatic_input_failover_settingsininput_attachments(#33129)software_update_optionsattribute (#32234)sync_complianceattribute (#23515)BUG FIXES:
filterargument to preventUnknownOperationExceptionerrors in certain Regions (#33311)filterargument to preventUnknownOperationExceptionerrors in certain Regions (#33311)max_keysvalue if it's greater than1000(#33304)cloudwatch_role_arnto an empty value and set it correctly on Read, allowing its value to be determined on import (#33279)disk_iops_configuration.iopsto160000(#33263)ResourceNotFoundExceptionerrors on resource Delete when configuredprincipal_typeisIAM_PATTERN(#32243)v5.15.0Compare Source
ENHANCEMENTS:
nameattribute (#33243)read_only_adminsattribute (#33189)cluster_config.multi_az_with_standby_enabledattribute (#33031)call_as = "DELEGATED_ADMIN"via StackSetName,CallAs syntax forimportblock orterraform importcommand (#19092)call_as = "DELEGATED_ADMIN"via StackSetName,AccountID,Region,CallAs syntax forimportblock orterraform importcommand (#19092)setting protocol: Invalid address to seterrors (#33225)nameattribute (#33243)endpoint_ip_address_range,preferred_subnet_idandroute_table_idsarguments to support the Multi-AZ deployment type (#33245)read_only_adminsargument (#33189)cluster_config.multi_az_with_standby_enabledargument (#33031)name_prefixargument (#33206)statement.managed_rule_group_statement.managed_rule_group_configs.aws_managed_rules_atp_rule_set.enable_regex_in_pathargument (#33217)BUG FIXES:
tagsthat arecomputed(#33226)oauth2incustom_connector_profile(#33192)Can only set RetainStacksOnAccountRemoval if AutoDeployment is enablederrors (#19092)TypeStringinstead ofTypeIntto preventvalue out of rangepanic (#33220)tag propagation: timeout while waiting for state to become 'TRUE'errors when any tag value is empty ("") (#33226)ShieldMitigationRuleGrouprule on resource Update (#33216)v5.14.0Compare Source
NOTES:
statement.*.conditionblocks with the sametestandvariablearguments were incorrectly handled by the provider. Since this results in unexpected IAM Policies being submitted to AWS, we have updated the logic to mergevalueslists in this case. This may cause existing IAM Policy documents to report a difference. However, those policies are likely not what was originally intended. (#33093)FEATURES:
aws_datasync_location_azure_blob(#32632)aws_datasync_location_fsx_ontap_file_system(#32632)ENHANCEMENTS:
network_typeattribute (#33158)destination_arnandsource_arnattributes (#33168)network_typeargument (#33158)destination_arnandsource_arnattributes (#33168)transit_gateway_configuration.*.attachment_network_acl_configurationargument. (#33123)selector_settingsforaudio_selectorandselector_settingsforcaption_selector(#32714)BUG FIXES:
conditionblocks with duplicatedtestandvariablearguments (#33093)outpost_arnwithout anasset_id(#33142)setting forward_path_components: Invalid address to seterrors (#33168)sourceordestination(#33168)AnalysisExistsForNetworkInsightsPatherrors on resource Delete (#33168)tag propagation: timeout while waiting for state to become 'TRUE'errors whenignore_tagshas been configured (#33167)InvalidParameterValueExceptionerrors during resource Delete (#32845)Current cluster policy version needed for Updateerrors (#33118)definition.*.parameter_declarationsto a set type, preventing persistent differences (#33120)word_orientationargument when using word cloud visuals. (#33122)definition.*.parameter_declarations.*.*_parameter_declaration.static_valueswhen empty, preventing persistent differences. (#33161)definition.*.parameter_declarationsto a set type, preventing persistent differences (#33120)word_orientationargument when using word cloud visuals. (#33122)definition.*.parameter_declarations.*.*_parameter_declaration.static_valueswhen empty, preventing persistent differences. (#33161)definition.*.parameter_declarationsto a set type, preventing persistent differences (#33120)word_orientationargument when using word cloud visuals. (#33122)definition.*.parameter_declarations.*.*_parameter_declaration.static_valueswhen empty, preventing persistent differences. (#33161)aclas Computed. This suppresses the diffs shown when migrating resources with no configuredaclattribute value from v4.67.0 (or earlier) (#33138)aclas Computed. This suppresses the diffs shown when migrating resources with no configuredaclattribute value from v4.67.0 (or earlier) (#33138)SECURITY_CONTROL) forcontrol_finding_generatorargument and mark as Computed (#33095)v5.13.1Compare Source
BUG FIXES:
source_code_hashback to ForceNew. This fixesdoesn't support updateerrors (#33097)current Organization ID (o-xxxxxxxxxx) does not matcherrors on resource Read (#33091)v5.13.0Compare Source
FEATURES:
aws_msk_cluster_policy(#32848)aws_opensearch_vpc_endpoint(#32435)aws_ram_sharing_with_organization(#25433)ENHANCEMENTS:
image_scanning_configurationattribute (#33005)resource_arnsattribute (#22591)s3_us_east_1_regional_endpointattribute to support using the regional S3 API endpoint inus-east-1. (#33024)babelfishas anengine_nameoption (#32975)image_scanning_configurationconfiguration block (#33005)security_groupsfor Network Load Balancers force a new resource if either the old or new set of security group IDs is empty (#32987)global_cluster_identifier(#30996)BUG FIXES:
most_recent_image_tagswhen only a single image is found (#31757)outputsas Computed when there are potential changes. (#33059)source_code_hashis used but not changed (#32535)terraform importis the current Organization (#31796)definition.*.calculated_fields.*.expressionto 32000 characters (#33012)definition.*.calculated_fieldsto a set type, preventing persistent differences (#33040)permissionsargument to TypeSet, preventing persistent differences (#33023)font_configurationto be set for table header styles (#33018)font_configurationto be set for table header styles (#33018)font_configurationto be set for table header styles (#33018)visualsblocks per sheet to 50 (#32856)definition.*.calculated_fields.*.expressionto 32000 characters (#33012)definition.*.calculated_fieldsto a set type, preventing persistent differences (#33040)permissionsargument to TypeSet, preventing persistent differences (#33023)definition.*.calculated_fieldsto 500 (#33012)definition.*.calculated_fields.*.expressionto 32000 characters (#33012)definition.*.calculated_fieldsto a set type, preventing persistent differences (#33040)permissionsargument to TypeSet, preventing persistent differences (#33023)expected_bucket_owneris configured (#32989)s3_kms_key_idinsharing_settingsandkms_key_id(#32661)rule_group_reference_statement.rule_action_override.action_to_use.challengeargument (#31127)v5.12.0Compare Source
NOTES:
FEATURES:
aws_codecatalyst_dev_environment(#32886)aws_ec2_transit_gateway_route_table_routes(#30771)aws_msk_vpc_connection(#31062)aws_cloudfront_continuous_deployment_policy(#32936)aws_codecatalyst_dev_environment(#32366)aws_codecatalyst_project(#32883)aws_codecatalyst_source_repository(#32899)aws_msk_vpc_connection(#31062)ENHANCEMENTS:
metadata_options.http_protocol_ipv6attribute (#32759)db_system_idattribute (#32846)il-central-1as a valid AWS Region (#32878)ignore_failed_scaling_activitiesargument (#32914)continuous_deployment_policy_idandstagingarguments to support continuous deployments (#32936)actions_suppressorconfiguration block (#32751)sagemaker_pipeline_targetargument (#32882)hudi_targetargument (#32898)http_protocol_ipv6attribute tometadata_optionsconfiguration block (#32759)bootstrap_brokers_vpc_connectivity_sasl_iam,bootstrap_brokers_vpc_connectivity_sasl_scramandbootstrap_brokers_vpc_connectivity_tlsattributes (#31062)vpc_connectivityattribute to thebroker_node_group_info.connectivity_infoconfiguration block (#31062)db_system_idargument to support RDS Custom engine types (#32846)custom_iam_instance_profileargument to allow RDS Custom users to specify an IAM Instance Profile for the RDS Cluster Instance (#32846)engineplan-time validation to allow for RDS Custom engine types (#32846)BUG FIXES:
max_user_duration_in_secondsto 432000 (#32933)UpdateDistributionAPI if only tags are updated (#32865)restore_to_point_in_timeconfiguration block (#32928)argsforbootstrap_action(#32956)security_service_policy_data.managed_service_data(#32860)InvalidParameterCombination: Network interfaces and an instance-level security groups may not be specified on the same requesterrors creating Instances withsubnet_idconfigured andlaunch_templatereferencing anaws_launch_templatewith configuredvpc_security_group_ids(#32854)v5.11.0Compare Source
FEATURES:
aws_sagemaker_pipeline(#32527)ENHANCEMENTS:
il-central-1AWS Region (#32840)tagsargument (#31602)tags(#32740)tags(#32740)tagsargument (#31600)il-central-1AWS Region (#32840)il-central-1AWS Region (#32840)il-central-1AWS Region (#32840)name(#32177)savedown_storage_configuration.sizeminimum value to10GB. (#32800)python3.11runtimevalue (#32729)python3.11compatible_runtimesvalue (#32729)REJECTaction in stateful rule actions (#32746)deployment_config.rolling_update_policyargument (#32418)deployment_config.blue_green_update_policyoptional (#32418)BUG FIXES:
container_overrides.memorytocontainer_overrides.memory_reservation(#32793)unexpected state 'Pending'errors on resource Create (#31600)transit_gateway_default_route_table_associationandtransit_gateway_default_route_table_propagationto Computed (#32821)InvalidRequestException: IdentityId is invaliderrors reading resources created withidentity_name(#32416)definition.sheets.visuals.insight_visual.insight_configuration.computation(#32791)select_all_optionsvalues forcustom_filter_configuration,custom_filter_list_configuration,filter_list_configuration,numeric_equality_filter, andnumeric_range_filter(#32822)definition.sheets.visuals.insight_visual.insight_configuration.computation(#32791)definition.sheets.visuals.insight_visual.insight_configuration.computation(#32791)select_all_optionsvalues forcustom_filter_configuration,custom_filter_list_configuration,filter_list_configuration,numeric_equality_filter, andnumeric_range_filter(#32822)Provider produced inconsistent final planerrors forpublish(#32844)v5.10.0Compare Source
FEATURES:
aws_iam_security_token_service_preferences(#32091)ENHANCEMENTS:
secondary_allocation_ids,secondary_private_ip_addressesandsecondary_private_ip_address_countattributes (#31778)structured_log_destinationsattribute (#32654)compute_resources.allocation_strategy,compute_resources.bid_percentage,compute_resources.ec2_configuration.image_id_override,compute_resources.ec2_configuration.image_type,compute_resources.ec2_key_pair,compute_resources.image_id,compute_resources.instance_role,compute_resources.launch_template.launch_template_id,
compute_resources.launch_template.launch_template_name,compute_resources.tagsandcompute_resources.typecan now be updated in-place (#30438)command.runtimeattribute (#32528)grafana_versionto be updated in-place (#32679)caption_descriptions,global_configuration,motion_graphics_configuration, andnielsen_configurationsupport toencoder settings(#32233)secondary_allocation_ids,secondary_private_ip_addressesandsecondary_private_ip_address_countarguments (#31778)firewall_policy.policy_variablesconfiguration block to support Suricata HOME_NET variable override (#32400)default_user_settings.canvas_app_settings.workspace_settingsattribute (#32526)user_settings.canvas_app_settings.workspace_settingsattribute (#32526)structured_log_destinationsargument (#32654)BUG FIXES:
phone_number(#32715)ebs_options.throughputandebs_options.iopsfor unsupported volume types (#32659)database.cache_configurations.db_pathsargument is now optional (#32579)database.cache_configurationsargument is now optional (#32579)AAAAtypevalue (#32664)off_peak_window_options.off_peak_window.window_start_timevalue of00:00(#32716)definition.sheets.visuals.pie_chart_visual.chart_configuration.data_labels.measure_label_visibility(#32668)optimized_view_port_widthargument changed to Optional (#32644)definition.sheets.visuals.pie_chart_visual.chart_configuration.data_labels.measure_label_visibility(#32668)optimized_view_port_widthargument changed to Optional (#32644)definition.sheets.visuals.pie_chart_visual.chart_configuration.data_labels.measure_label_visibility(#32668)optimized_view_port_widthargument changed to Optional (#32644)destination_arn(#32186)resource_identifier(#32186)service_identifierorservice_network_identifier(#32658)service_network_identifier(#32658)v5.9.0Compare Source
FEATURES:
aws_workspaces_connection_alias(#32482)ENHANCEMENTS:
pathto thespec.http_route.action.rewriteandspec.http2_route.action.rewriteconfiguration blocks (#32449)max_allocated_storageattribute (#32477)asset_idattribute (#32388)pathto thespec.http_route.action.rewriteandspec.http2_route.action.rewriteconfiguration blocks (#32449)stack_instance_summariesattribute to track all account and stack IDs for deployments to organizational units. (#24523)deployment_targetsnow force a new resource. (#24523)backup_targetattribute (#32609)asset_idargument (#32388)rule_number(#32594)tagsattribute (#32606)signing_materialattribute. (#32414)platform_idvalidation. (#32414)association_configargument (#31668)BUG FIXES:
replication_instance_private_ips,replication_instance_public_ips, andvpc_security_group_idsto always returnnull(#32551)setting user: Invalid address to seterrors (#32593)dns_options.private_dns_only_for_inbound_resolver_endpoint(#32517)schema.string_attribute_constraintsis omitted forStringattribute types (#32445)private_link_endpointis not explicitly configured. (#32546)endpoint_group_regionvalue on resource Create (#32393)Error: setting target_parameters: Invalid address to seterrors when creating pipes with ecs task targets (#32432)ValidationExceptionerrors when updating pipe (#32622)defaultvalue for namespace (#32494)Value Conversion Errorerrors (#32596)response_inspectionparameters (#31111)v5.8.0Compare Source
ENHANCEMENTS:
insecure_valueattribute (#30817)policy_optionattribute forsecurity_service_policy_datablock (#25362)enable_dateanduser_nameattributes (#32462)BUG FIXES:
replication_usertofalse(#32454)definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows(#32464)definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows(#32464)definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility(#32464)definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows(#32464)v5.7.0Compare Source
FEATURES:
aws_opensearchserverless_security_config(#32321)aws_opensearchserverless_security_policy(#32226)aws_opensearchserverless_vpc_endpoint(#32276)aws_cleanrooms_collaboration(#31680)ENHANCEMENTS:
client_side_timestampsconfiguration block (#32339)target_database.regionargument (#32283)iceberg_targetconfiguration block (#32332)health_events_configconfiguration block (#32343)code_signing_config_arnin theap-east-1AWS Region (#32327)descriptionto be updated in-place (#32342)descriptionto be updated in-place (#32342)schemaconfiguration block (#32354)BUG FIXES:
forbidden_account_ids(#32352)InvalidParameterException: You cannot specify both rotation frequency and schedule expression togethererrors on resource Update (#31915)overwriteparameter changes (#32372)InvalidParameter: PrivateDnsOnlyForInboundResolverEndpoint not supported for this serviceerrors creating S3 Interface VPC endpoints (#32355)v5.6.2Compare Source
BUG FIXES:
InvalidArgument: Invalid attribute name specifiederrors when listing S3 Bucket objects, caused by an AWS SDK for Go regression (#32317)v5.6.1Compare Source
BUG FIXES:
tagsortags_allare updated (#32297)v5.6.0Compare Source
FEATURES:
aws_opensearchserverless_access_policy(#32231)aws_opensearchserverless_collection(#32247)aws_sfn_alias(#32176)aws_sfn_state_machine_versions(#32176)aws_ec2_instance_connect_endpoint(#31858)aws_sfn_alias(#32176)aws_transfer_agreement(#32203)aws_transfer_certificate(#32203)aws_transfer_connector(#32203)aws_transfer_profile(#32203)ENHANCEMENTS:
placement_groupattribute to thecompute_resourcesconfiguration block (#32200)release_labelchanges (#32278)log_configurationconfiguration block (#32102)parametersattribute to thetargetconfiguration block (#32160)PodsandTaskstoaction.*.target(#32152)queuesargument has changed from a set to a list with a maximum of one element. (#31931)activemq_broker_parameters,dynamodb_stream_parameters,kinesis_stream_parameters,managed_streaming_kafka_parameters,rabbitmq_broker_parameters,self_managed_kafka_parametersandsqs_queue_parametersattributes to thesource_parametersconfiguration block. NOTE: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#31607)batch_job_parameters,cloudwatch_logs_parameters,ecs_task_parameters,eventbridge_event_bus_parameters,http_parameters,kinesis_stream_parameters,lambda_function_parameters,redshift_data_parameters,sagemaker_pipeline_parameters,sqs_queue_parametersandstep_function_state_machine_parametersattributes to thetarget_parametersconfiguration block. NOTE: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#31607)enrichment_parametersargument (#31607)resource_queryno longer conflicts withconfiguration(#30242)description,publish,revision_id,state_machine_version_arnandversion_descriptionattributes (#32176)BUG FIXES:
availablestate whenidentifier_prefixis specified (#32287)reading Route in Route Table (rtb-1234abcd) with destination (1.2.3.4/5): couldn't find resourceerrors when reading new resource (#32196)security_group_idis Required (#32148)security_group_idis Required (#32148)v5.5.0Compare Source
NOTES:
trust-adoption in/etc/resolv.confand, if set, will set the "authentic data" option in outgoing DNS requests in order to better match the behavior of the GNU libc resolver. (#32108)FEATURES:
aws_sesv2_email_identity(#32026)aws_sesv2_email_identity_mail_from_attributes(#32026)aws_chimesdkvoice_sip_rule(#32070)aws_organizations_resource_policy(#32056)ENHANCEMENTS:
TF_LOGlevel isTRACE(#32174)exclusion_by_resource_typesandrecording_strategyattributes to therecording_groupconfiguration block (#32007)object_tagsattribute tooptionsconfiguration block (#27811)BUG FIXES:
binary_media_typesisnull(#32169)server_certificateargument (#27811)reading EC2 EIP (eipalloc-abcd1234): couldn't find resourceerrors when reading new resource (#32016)waiting for completion: unexpected state 'AVAILABLE'errors when deleting resource (#32067)reading Route Table (rtb-abcd1234): couldn't find resourceerrors when reading new resource (#30999)kms_encryptedistruebutkms_key_arnis not sent in the request (#32171)v5.4.0Compare Source
FEATURES:
aws_organizations_policies(#31545)aws_organizations_policies_for_target(#31682)aws_chimesdkvoice_sip_media_application(#31937)aws_opensearchserverless_collection(#31091)aws_opensearchserverless_security_config(#28776)aws_opensearchserverless_vpc_endpoint(#28651)ENHANCEMENTS:
catalog_idargument totarget_tableblock (#31926)BUG FIXES:
index out of range [0] with length 0panic (#32004)subnetsis updated to an empty list (#31976)function_nameargument now properly handles ARN values (#31933)*conns.AWSClient is not ssm.ssmClient: missing method SSMClientpanic (#31928)v5.3.0Compare Source
NOTES:
metadata_options.http_endpointargument now correctly defaults toenabled. (#24774)replace_security_groups_on_destroyandreplacement_security_group_idsattributes are being deprecated as AWS no longer supports this operation. These attributes now have no effect, and will be removed in a future major version. (#31904)FEATURES:
aws_quicksight_theme(#31900)aws_opensearchserverless_access_policy(#28518)aws_opensearchserverless_security_policy(#28470)aws_quicksight_theme(#31900)ENHANCEMENTS:
cluster_namespace_arnattribute (#31884)cluster_namespace_arnattribute (#31884)private_dns_only_for_inbound_resolver_endpointattribute to thedns_optionsconfiguration block (#31873)BUG FIXES:
efs_volume_configurationhas bothroot_volumeandauthorization_configset. (#26880)metadata_options.http_endpointargument. (#24774)name(#31352)keyspace_name,table_nameand column names (#31352)availability_zone_relocation_enabledto betruewhenpublicly_accessibleistrue(#31886)reading EC2 VPC (vpc-abcd1234) Attribute (enableDnsSupport): couldn't find resourceerrors when reading new resource (#31877)v5.2.0Compare Source
NOTES:
FEATURES:
aws_budgets_budget(#31691)aws_ecr_pull_through_cache_rule(#31696)aws_guardduty_finding_ids(#31711)aws_iam_principal_policy_simulation(#25569)aws_chimesdkvoice_global_settings(#31365)aws_finspace_kx_cluster(#31806)aws_finspace_kx_database(#31803)aws_finspace_kx_environment(#31802)aws_finspace_kx_user(#31804)ENHANCEMENTS:
bgp_peer_addressandbgp_transit_gateway_addressesattributes (#31752)retry_modeparameter (#31745)bgp_peer_addressandbgp_transit_gateway_addressesattributes (#31752)replace_existing_associationargument (#31452)Volumestoactions.*.target(#31499)instance_market_optionsconfiguration block andinstance_lifecycleandspot_instance_request_idattributes (#31495)ruby3.2runtimevalue (#31842)ruby3.2compatible_runtimesvalue (#31842)CREATING_SNAPSHOTa valid pending state for resource update (#31833)stream_exception_policyoption tofirewall_policy.stateful_engine_options(#31541)config_parameter.parameter_key(#31747)container.model_package_nameandprimary_container.model_package_namearguments (#31755)BUG FIXES:
modifyingstate (#31772)default_tagsto resourcetags, and vice versa (#31826)Failedscaling activities due to IAM eventual consistency (#31282)vlan_idfromTypeStringtoTypeIntin Terraform state for existing resources. This fixes a regression introduced in v5.1.0 causinga number is requirederrors (#31735)endpoint_configuration.weightto0(#31767)hls_cdn_settingsexpander. (#31844)iam_rolesdiffs when the namespace contains a workgroup (#31749)config_parameterfromTypeListtoTypeSetas order is not significant (#31747)ValidationException: Can't update multiple configurations at the same timeerrors (#31747)v5.1.0Compare Source
BREAKING CHANGES:
role_last_usedattribute has been removed. Use theaws_iam_roledata source instead. (#31656)NOTES:
load_balancersandtarget_group_arnsattributes have been changed toComputed. This means that omitting this argument is interpreted as ignoring any existing load balancer or target group attachments. To remove all load balancer or target group attachments an empty list should be specified. (#31527)role_last_usedattribute has been removed. Use theaws_iam_roledata source instead. See the community feedback provided in the linked issue for additional justification on this change. As the attribute is read-only, unlikely to be used as an input to another resource, and available in the corresponding data source, a breaking change in a minor version was deemed preferable to a long deprecation/removal cycle in this circumstance. (#31656)aqua_configuration_status, since the AWS API ignores it. Now always returnsauto. (#31612)FEATURES:
aws_vpclattice_resource_policy(#31372)aws_autoscaling_traffic_source_attachment(#31527)aws_emrcontainers_job_template(#31399)aws_glue_data_quality_ruleset(#31604)aws_quicksight_analysis(#31542)aws_quicksight_dashboard(#31448)aws_resourcegroups_resource(#31430)ENHANCEMENTS:
traffic_sourceattribute (#31527)off_peak_window_optionsattribute (#35970)visibilityargument (#31369)log_config.cloudwatch_logs_role_arn(#31369)traffic_sourceconfiguration block (#31527)managed_executionargument (#25210)skip_final_backupargument (#31544)security_styleargument and mark as Computed (#31544)ontap_volume_typeattribute to be configurable (#31544)junction_pathis Optional (#31544)storage_efficiency_enabledis Optional (#31544)skip_destroyattribute (#29571)skip_destroyargument (#31646)off_peak_window_optionsconfiguration block (#35970)shadow_production_variants.serverless_config.provisioned_concurrencyarguments (#31398)TransferSecurityPolicy-2023-05security_policy_namevalue (#31536)BUG FIXES:
vlan_idbeing returned as null (#31480)tagsarenulland others arecomputed(#31687)The AutoRollback parameter cannot be set to true when the DesiredConfiguration parameter is emptyerrors when refreshing instances (#31715)origin_keepalive_timeout(#31608)CREATION_FAILEDstatus (#31689)tagsin state (#31716)vlan_idbeing returned as null (#31480)alarmsis updated (#31683)storage_virtual_machine_idto ForceNew (#31544)volume_typeto ForceNew (#31544)user_group_resolution_modevalue to state after creation (#31669)hls_cdn_settingsexpand (#31647)resource_tagsblocks are configured (#31393)db_cluster_instance_class(#31709)Maintenance(#31612)ConcurrentModificationerror (#31588)v5.0.1Compare Source
BUG FIXES:
null(#31587)v5.0.0Compare Source
BREAKING CHANGES:
minimum_compression_sizeis now a string type to allow values set via thebodyattribute to be properly computed. (#30969)hours_of_operation_arnattribute has been removed (#31484)db_security_groupsattribute has been removed (#30966)security_group_namesattribute has been removed (#30966)number_cache_clusters,replication_group_descriptionarguments -- usenum_cache_clusters, anddescription, respectively, instead (#31008)statement.sidvalues tojsonattribute value (#28539)source_jsonandoverride_jsonhave been removed -- usesource_policy_documentsandoverride_policy_documents, respectively, instead (#30829)filterargument has been removed (#31312)filterargument has been removed (#31312)vpc_classic_link_idandvpc_classic_link_security_groupsattributes have been removed (#30966)cluster_security_groupsattribute has been removed (#30966)rotation_enabled,rotation_lambda_arnandrotation_rulesattributes have been removed (#31487)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)assume_role.duration_seconds,assume_role_with_web_identity.duration_seconds,s3_force_path_style,shared_credentials_fileandskip_get_ec2_platformsattributes have been removed (#31155)aws_subnet_idsdata source has been removed (#31140)aws_db_security_groupresource has been removed (#30966)aws_elasticache_security_groupresource has been removed (#30966)aws_redshift_security_groupresource has been removed (#30966)aws_macie_member_account_associationresource has been removed (#31058)aws_macie_s3_bucket_associationresource has been removed (#31058)statusattribute has been removed (#31084)minimum_compression_sizeis now a string type to allow values set via thebodyattribute to be properly computed. (#30969)alb_target_group_arnhas been removed -- uselb_target_group_arninstead (#30828)tagsattribute (#30842)cost_filtersattribute has been removed (#31395)thresholdattribute has been removed (#30374)ecs_target.propagate_tagsattribute now has no default value (#25233)secondary_sources.authandsource.authattributes have been removed (#31483)hours_of_operation_arnattribute has been removed (#31484)quick_connect_ids_associatedattribute has been removed (#31376)queue_configs_associatedattribute has been removed (#31376)name- usedb_nameinstead (#31232)security_group_namesattribute has been removed (#30966)idis no longer the AWS databaseidentifier-idis now thedbi-resource-id. Refer toidentifierinstead ofidto use the database's identifier (#31232)enable_classiclinkandenable_classiclink_dns_supportattributes have been removed (#30966)s3_settings.ignore_headers_rowhas been removed (#30452)snapshot_identifierchange now properly forces replacement (#29409)statusattribute has been removed (#31223)security_groupsattribute has been removed (#31396)statusattribute has been removed (#31223)capacity_providersanddefault_capacity_provider_strategyattributes have been removed (#31346)standarddomain is no longer supported (#30966)standarddomain is no longer supported (#30966)security_group_namesattribute has been removed (#30966)availability_zones,number_cache_clusters,replication_group_descriptionarguments -- usepreferred_cache_cluster_azs,num_cache_clusters, anddescription, respectively, instead (#31008)cluster_modeconfiguration block -- use top-levelnum_node_groupsandreplicas_per_node_groupinstead (#31008)s3_configurationattribute from the root of the resource.s3_configurationis now a part of the following blocks:elasticsearch_configuration,opensearch_configuration,redshift_configuration,splunk_configuration, andhttp_endpoint_configuration(#31138)s3as an option fordestination. Useextended_s3instead (#31138)extended_s3_configuration.0.s3_backup_configuration.0.buffer_sizeandextended_s3_configuration.0.s3_backup_configuration.0.buffer_intervaltoextended_s3_configuration.0.s3_backup_configuration.0.buffering_sizeandextended_s3_configuration.0.s3_backup_configuration.0.buffering_interval, respectively (#31141)redshift_configuration.0.s3_backup_configuration.0.buffer_sizeandredshift_configuration.0.s3_backup_configuration.0.buffer_intervaltoredshift_configuration.0.s3_backup_configuration.0.buffering_sizeandredshift_configuration.0.s3_backup_configuration.0.buffering_interval, respectively (#31141)s3_configuration.0.buffer_sizeands3_configuration.0.buffer_internvaltos3_configuration.0.buffering_sizeands3_configuration.0.buffering_internval, respectively (#31141)vpc_classic_link_idandvpc_classic_link_security_groupsattributes have been removed (#30966)ipv6_addressattribute has been removed (#31489)statemux_settingsattribute has been removed. Usestatmux_settingsargument instead (#31034)broker_node_group_info.ebs_volume_sizeattribute has been removed (#31324)snapshot_identifierchange now properly forces replacement (#29409)policy_documentargument -- useaws_networkmanager_core_network_policy_attachmentresource instead (#30875)engineargument is now required and has no default (#31112)snapshot_identifierchange now properly forces replacement (#29409)engineargument is now required and has no default (#31112)cluster_security_groupsattribute has been removed (#30966)instance_idcan no longer be set in configurations. Usenetwork_interface_idinstead, for example, settingnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)route.*.instance_idcan no longer be set in configurations. Useroute.*.network_interface_idinstead, for example, settingnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)rotation_enabled,rotation_lambda_arnandrotation_rulesattributes have been removed (#31487)provisioning_artifact_parametersarguments now properly trigger a replacement. This fixes incorrect behavior, but may technically be breaking for configurations expecting non-functional in-place updates. (#31061)enable_classiclinkandenable_classiclink_dns_supportattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)statement.managed_rule_group_statement.excluded_ruleandstatement.rule_group_reference_statement.excluded_ruleattributes have been removed (#31374)redacted_fields.all_query_arguments,redacted_fields.bodyandredacted_fields.single_query_argumentattributes have been removed (#31486)NOTES:
descriptioninstead of thereplication_group_descriptionargument (#31008)num_cache_clustersinstead of thenumber_cache_clustersargument (#31008)kibana_endpointattribute has been deprecated. All configurations usingkibana_endpointshould be updated to use thedashboard_endpointattribute instead (#31490)tags_allattribute has been deprecated and will be removed in a future version (#31162)aws_redshift_service_accountdata source has been deprecated and will be removed in a future version. AWS documentation states that a service principal name should be used instead of an AWS account ID in any relevant IAM policy (#31006)tags_allattribute has been deprecated and will be removed in a future version (#31162)minimum_compression_sizeset to pass the value as a string. Valid values remain the same. (#30969)lb_target_group_arninstead ofalb_target_group_arnwhich has been removed (#30828)source_idsusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,source_ids = [aws_db_instance.example.id]must be updated tosource_ids = [aws_db_instance.example.identifier](#31232)replicate_source_dbusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,replicate_source_db = aws_db_instance.example.idmust be updated toreplicate_source_db = aws_db_instance.example.identifier(#31232)idis, namely, a DBI Resource ID now versus DB Identifier previously, has far-reaching consequences. Configurations that refer to, for example,aws_db_instance.example.idwill now have errors and must be changed to useidentifierinstead, for example,aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)vpn_gateway_idattribute has been deprecated. All configurations usingvpn_gateway_idshould be updated to use theassociated_gateway_idattribute instead (#31384)descriptioninstead of thereplication_group_descriptionargument (#31008)num_cache_clustersinstead of thenumber_cache_clustersargument (#31008)preferred_cache_cluster_azsinstead of theavailability_zonesargument (#31008)num_node_groupsandreplicas_per_node_groupinstead ofcluster_mode.0.num_node_groupsandcluster_mode.0.replicas_per_node_group, respectively (#31008)log_group_nameattribute has been deprecated. All configurations usinglog_group_nameshould be updated to use thelog_destinationattribute instead (#31382)auto_enableargument has been deprecated. Use theauto_enable_organization_membersargument instead. (#30736)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)aws_networkmanager_core_network_policy_attachmentresource instead of thepolicy_documentargument (#30875)engine_versionattribute no longer has a default value. When omitted, the underlying AWS API will use the latest OpenSearch engine version. (#31568)kibana_endpointattribute has been deprecated. All configurations usingkibana_endpointshould be updated to use thedashboard_endpointattribute instead (#31490)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)engineargument must be updated to includeengineas it is now required. Previously, not includingenginewas equivalent toengine = "aurora"and created a MySQL-5.6-compatible cluster (#31112)engineargument must be updated to includeengineas it is now required. Previously, not includingenginewas equivalent toengine = "aurora"and created a MySQL-5.6-compatible cluster instance (#31112)instance_idcan no longer be set in configurations, usenetwork_interface_idinstead. For example, setnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)route.*.instance_idcan no longer be set in configurations, useroute.*.network_interface_idinstead. For example, setnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)instance_idattribute has been deprecated. All configurations usinginstance_idshould be updated to use thetargetsattribute instead (#31380)ENHANCEMENTS:
computedtagson resources (#30793)default_tagsand resourcetagsto include zero values""(#30793)default_tagscan now be included and will be overwritten by resourcetags(#30793)identifierandidentifier_prefixwill no longer cause the database instance to be destroyed and recreated (#31232)vpcattribute. Usedomaininstead (#31567)auto_enable_organization_membersattribute (#30736)s3_configurationtoelasticsearch_configuration,opensearch_configuration,redshift_configuration,splunk_configuration, andhttp_endpoint_configuration(#31138)engine_versiondefault value (#31568)rule_action_overrideonrule_group_reference_statement(#31374)BUG FIXES:
instance_warmup_periodof0in theauto_scaling_group_provider.managed_scalingconfiguration block (#24005)metadata_optionsto allow default condition (#30545)acldefault in order to work with S3 buckets that have ACL disabled (#27197)acldefault in order to work with S3 buckets that have ACL disabled (#27197)provisioning_artifact_parametersarguments now properly trigger a replacement (#31061)vpcPeeringConnectionOptionsEqual(#30966)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
2772750cbf41f5d2994a41f5d2994ae719bdffb9e719bdffb948c0a0f5c548c0a0f5c540b5a4cfcd40b5a4cfcdbf9bb61948bf9bb619482d71e439d92d71e439d9002b0592fc002b0592fc356ddd720c356ddd720c7f3a75d09a7f3a75d09a8a44371b0a8a44371b0a1f32675be81f32675be82d641fb2582d641fb258592c3f5fb9592c3f5fb9dd11b8ba2bdd11b8ba2b19986b089119986b089171267ea07a71267ea07ad4ecb3b557d4ecb3b557396a097474396a0974743ff485e81d3ff485e81de3ab4ca12ae3ab4ca12a464dda27b6464dda27b67249b34ae17249b34ae13d3892ba9a3d3892ba9a577c41be0aView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.