NOTES:
- data-source/aws_secretsmanager_secret: The
rotation_*
attributes have been deprecated in favor of the newaws_secretsmanager_secret_rotation
data source. (#9487) - resource/aws_secretsmanager_secret: The
rotation_*
arguments have been deprecated in favor of the newaws_secretsmanager_secret_rotation
resource. The new resource, which fixes workflow issues, prevents the existing resource from showing changes when attempting to remove rotation. Removal must be done with the new resource or manually. (#9487)
FEATURES:
- New Data Source:
aws_ebs_volumes
(#13751) - New Data Source:
aws_ec2_local_gateway_virtual_interface
(#13770) - New Data Source:
aws_ec2_local_gateway_virtual_interface_group
(#13767) - New Data Source:
aws_ec2_local_gateway_virtual_interface_groups
(#13767) - New Data Source:
aws_ecr_authorization_token
(#12395) - New Data Source:
aws_outposts_outpost
(#13777) - New Data Source:
aws_outposts_outpost_instance_type
(#13824) - New Data Source:
aws_outposts_outpost_instance_types
(#13824) - New Data Source:
aws_outposts_outposts
(#13777) - New Data Source:
aws_outposts_site
(#13825) - New Data Source:
aws_outposts_sites
(#13825) - New Data Source:
aws_secretsmanager_secret_rotation
(#9487) - New Data Source:
aws_wafv2_web_acl
(#12791) - New Guide: Resource Tagging (#13779)
- New Resource:
aws_ec2_local_gateway_route
(#13768) - New Resource:
aws_ec2_local_gateway_route_table_vpc_association
(#13765) - New Resource:
aws_ec2_tag
(#8457) - New Resource:
aws_secretsmanager_secret_rotation
(#9487) - New Resource:
aws_wafv2_web_acl
(#12688) - New Resource:
aws_wafv2_web_acl_association
(#12698)
ENHANCEMENTS:
- data-source/aws_vpc_dhcp_options: Add
arn
attribute (#13606) - data-source/aws_efs_mount_target: Add
availability_zone_name
,availability_zone_id
,mount_target_dns_name
, andowner_id
attributes (#13650) - data-source/aws_internet_gateway: Add
arn
attribute (#13614) - data-source/aws_lambda_function: Add
file_system_config
attribute (#13782) - data-source/aws_workspaces_bundle: Add
name
andowner
as search crieria (#12497) - resource/aws_ec2_capacity_reservation: Add
arn
attribute and support for Linux SQL Server values ininstance_platform
argument (#13607) - resource/aws_cloudwatch_log_stream: Support resource import (#13697)
- resource/aws_default_vpc_dhcp_options: Add
arn
attribute (#13606) - resource/aws_devicefarm_project: Support resource import (#13020)
- resource/aws_ec2_traffic_mirror_target: Add
arn
attribute (#13649) - resource/aws_ecs_capacity_provider: Implement API deletion support (#13740)
- resource/aws_efs_mount_target: Add
availability_zone_name
,availability_zone_id
,mount_target_dns_name
, andowner_id
attributes (#13650) - resource/aws_efs_mount_target: Add plan time validation for
ip_address
argument (#13650) - resource_aws_elasticsearch_domain: Add support for elasticsearch warm storage (#12668)
- resource_aws_elasticsearch_domain: Add plan time validation for
cloudwatch_log_group_arn
,role_arn
, andebs_options.volume_type
(#12668) - resource/aws_flow_log: Add
arn
attribute (#13656) - resource/aws_glue_catalog_table: Add
arn
attribute (#13456) - resource/aws_guardduty_detector: Add
tags
argument andarn
attribute (#13756) - resource/aws_guardduty_ipset: Add
tags
argument andarn
attribute (#13756) - resource/aws_guardduty_threatintelset: Add
tags
argument andarn
attribute (#13756) - resource/aws_internet_gateway: Add
arn
attribute (#13614) - resource/aws_key_pair: Add
arn
attribute (#13648) - resource/aws_lambda_function: Add
file_system_config
attribute (#13782) - resource/aws_service_discovery_http_namespace: Add
tags
argument (#13750) - resource/aws_service_discovery_private_dns_namespace: Add
tags
argument (#13750) - resource/aws_service_discovery_public_dns_namespace: Add
tags
argument (#13750) - resource/aws_service_discovery_service: Add
tags
argument (#13750) - resource/aws_vpc_dhcp_options: Add
arn
attribute (#13606) - resource/aws_wafv2_ip_set: Increase
addresses
maximum amount of items limit from 50 to 10,000 to match AWS limits (#13698)
BUG FIXES:
- resource/aws_cloudfront_origin_access_identity: Properly trigger resource recreation when deleted outside Terraform (#13081)
- resource/aws_cognito_user_pool_client: Mark
client_secret
as sensitive (#13680) - resource/aws_route: Ensure retries occur on read after creation if route not found for EC2 eventual consistency (#13747)