2.1.0 (October 22, 2026)
FEATURES:
- New Resource:
alicloud_polardb_gateway_model_service(#10582) - New Resource:
alicloud_polardb_gateway_model_api(#10582) - New Resource:
alicloud_polardb_gateway_consumer_group(#10585) - New Resource:
alicloud_polardb_gateway_consumer(#10585) - New Resource:
alicloud_polardb_gateway_budget_policy(#10586) - New Resource:
alicloud_polardb_gateway_rate_limit_policy(#10586) - New Resource:
alicloud_polardb_gateway_cost_rule(#10592) - New Resource:
alicloud_polardb_polar_fs(#10623) - New Resource:
alicloud_polardb_polar_fs_endpoint(#10623) - New Resource:
alicloud_ecs_snapshot_lock(#10773) - New Resource:
alicloud_oss_access_point_policy(#11076) - New Data Source:
alicloud_polardb_gateway_model_services(#10582) - New Data Source:
alicloud_polardb_gateway_model_apis(#10582) - New Data Source:
alicloud_polardb_gateway_consumer_groups(#10585) - New Data Source:
alicloud_polardb_gateway_consumers(#10585) - New Data Source:
alicloud_polardb_gateway_budget_policies(#10586) - New Data Source:
alicloud_polardb_gateway_rate_limit_policies(#10586) - New Data Source:
alicloud_polardb_gateway_cost_rules(#10592) - New Data Source:
alicloud_polardb_polar_fs_instances(#10623) - New Data Source:
alicloud_polardb_lakebase_tenant_token(#10623) - New Data Source:
alicloud_sae_application_groups(#10929) - New Data Source:
alicloud_sae_application_instances(#11039) - New Ephemeral Resource:
alicloud_sts_token— fetches temporary access credentials through AssumeRole without persisting them to state or plan. Requires Terraform 1.10 or later. Served by the framework provider. (#10788) - New Ephemeral Resource:
alicloud_ram_access_key— creates a temporary RAM access key for use during Terraform operations and deletes it when the ephemeral resource closes. Requires Terraform 1.10 or later. Served by the framework provider. (#11047)
ENHANCEMENTS:
- resource/alicloud_mse_gateway: support resource_group_id and tags. (#10358)
- resource/alicloud_dts_subscription_job: support source_endpoint_ssl and fail fast when prechecks fail. (#10490)
- resource/alicloud_pai_workspace_experiment: support labels. (#10698)
- resource/alicloud_message_service_topic: support enable_sse, sse_type, sse_algorithm and kms_key_id. (#10706)
- resource/alicloud_kvstore_instance and resource/alicloud_redis_tair_instance: export the CA certificate when SSL is enabled. (#10757)
- resource/alicloud_gpdb_instance: support effective_time and sql_collector_status. (#10763)
- docs: update the README for the 2.x provider line. (#10796)
- resource/alicloud_kvstore_instance: support global_security_group_list. (#10798)
- resource/alicloud_elasticsearch_instance: support in-place resource_group_id updates. (#10805)
- docs: align alicloud_ecs_capacity_reservation end_time semantics with the API and document platform as ForceNew. (#10807)
- resource/alicloud_instance: support managed_host_id and configurable additional_attributes. (#10816)
- resource/alicloud_cms_integration_policy: support entity_group.entity_user_id, entity_group.cluster_namespace and entity_group.disable_policy_share. (#10823)
- resource/alicloud_dts_migration_instance and resource/alicloud_dts_migration_job: support MariaDB source and destination engines with case-insensitive validation. (#10825)
- resource/alicloud_privatelink_vpc_endpoint: allow endpoint_type Reverse. (#10826)
- resource/alicloud_pai_service: support service_uid. (#10827)
- resource/alicloud_rds_clone_db_instance: apply tags atomically during CloneDBInstance creation. (#10828)
- docs: document the HTTPS coordinating node prerequisite for alicloud_elasticsearch_instance. (#10832)
- data-source/alicloud_oss_bucket_objects: export x_oss_hash_crc64ecma. (#10859)
- docs: fix NOTE callout placement so attribute guidance is attached to the relevant field. (#11030)
- resource/alicloud_slb_acl_entry_attachment: support batch ACL entries. (#11055)
- docs: add an alicloud_privatelink_vpc_endpoint example using vpc_endpoint_zone. (#11063)
- docs: document the requirement to configure at least one delivery target for alicloud_actiontrail_trail. (#11075)
- docs: pin the region in the alicloud_privatelink_vpc_endpoint endpoint zone example to match the endpoint service. (#11093)
BUG FIXES:
- resource/alicloud_dts_synchronization_job: reconcile instance_class against the actual job class; resource/alicloud_dts_synchronization_instance: accept the full class set and document instance_class as create-only. (#10173)
- data-source/alicloud_polardb_node_classes: normalize db_type and db_version engine matching. (#10280)
- resource/alicloud_ecs_disk: confirm category conversion before enabling bursting. (#10303)
- resource/alicloud_oss_access_point: clear stale vpc_configuration for non-VPC access points to avoid unnecessary replacement. (#10484)
- resource/alicloud_elasticsearch_instance: prevent a provider crash when parsing Kibana private network responses. (#10600)
- data-source/alicloud_express_connect_router_express_connect_routers: add the missing tags element schema. (#10711)
- data-source/alicloud_arms_environments: add the missing tags element schema and refine read handling. (#10725)
- resource/alicloud_click_house_db_cluster: avoid a panic when cold storage State is missing. (#10729)
- resource/alicloud_ots_instance: add the missing tags element schema. (#10753)
- resource/alicloud_message_service_queue: add the missing tags element schema. (#10764)
- resource/alicloud_nlb_server_group: suppress order-only health_check_http_code diffs. (#10785)
- provider: resolve credential profiles separately for each provider instance to prevent profile leakage between aliases. (#10800)
- provider: report credential profile read and parse errors during configuration instead of silently ignoring them; validate profile field types to prevent panics. (#10801)
- resource/alicloud_dts_migration_job: wait for start and suspend operations to reach their target states during updates, and report precheck or migration failures. (#10825)
- resource/alicloud_db_instance and resource/alicloud_ddoscoo_instance: return an error when destroying PrePaid instances instead of silently removing them from Terraform state. (#10833)
- resource/alicloud_adb_db_cluster_lake_version, resource/alicloud_cloud_storage_gateway_gateway, resource/alicloud_ecp_instance, resource/alicloud_ecs_dedicated_host, resource/alicloud_ga_bandwidth_package, resource/alicloud_ga_basic_accelerator, resource/alicloud_hologram_instance, resource/alicloud_mongodb_serverless_instance, resource/alicloud_mongodb_sharding_instance, resource/alicloud_nat_gateway, resource/alicloud_ocean_base_instance, resource/alicloud_realtime_compute_vvp_instance, resource/alicloud_rds_ddr_instance, resource/alicloud_reserved_instance, resource/alicloud_simple_application_server_instance, resource/alicloud_vpn_gateway and resource/alicloud_yundun_dbaudit_instance: return an error when destroying PrePaid instances instead of silently removing them from Terraform state. (#10834)
- resource/alicloud_security_group_rule: return readable errors for malformed import IDs instead of panicking. (#10837)
- resource/alicloud_vpn_gateway_vpn_attachment: preserve explicit tunnel updates and unknown values; resource/alicloud_kvstore_instance: handle missing EngineVersion values. (#10857)
- provider: return errors for invalid API value conversions instead of panicking. (#10884)
- resource/alicloud_redis_global_security_ip_group: fix read errors. (#10907)
- resource/alicloud_router_interface: preserve deletion errors; resource/alicloud_express_connect_router_interface: wait for deletion; resource/alicloud_vpc: retry router interface dependency errors. (#11037)
- resource/alicloud_cloud_firewall_instance_v2: release subscription instances on destroy and reject unsupported billing changes during planning. (#11060)
- resource/alicloud_cdn_domain_config: retry FlowControlError responses. (#11070)
- resource/alicloud_cs_kubernetes and Kubernetes cluster data sources: tolerate nodes with missing IP addresses instead of panicking. (#11087)
- provider: add the regional eflo_controller endpoint fallback. (#11094)