hashicorp/terraform-provider-aws v3.72.0

on GitHub

FEATURES:

• New Data Source: aws_cognito_user_pool_client (#22477)
• New Resource: aws_cognito_identity_pool_provider_principal_tag (#22514)
• New Resource: aws_connect_contact_flow_module (#22349)
• New Resource: aws_connect_quick_connect (#22250)
• New Resource: aws_devicefarm_instance_profile (#22458)
• New Resource: aws_memorydb_snapshot (#22486)
• New Resource: aws_shield_protection_health_check_association (#21993)

ENHANCEMENTS:

• data-source/aws_cloudfront_distribution: Add aliases attribute (#22552)
• data-source/aws_customer_gateway: Add certificate_arn attribute (#22435)
• data-source/aws_ebs_snapshot: Add storage_tier and outpost_arn attributes. (#22342)
• data-source/aws_ecr_repository: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22535)
• data-source/aws_eks_cluster: Add ip_family to the kubernetes_network_config configuration block (#22485)
• data-source/aws_elb_service_account: Add account ID for ap-southeast-3 AWS Region (#22453)
• data-source/aws_iam_role: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)
• data-source/aws_iam_user: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)
• data-source/aws_instance: Add the instance_metadata_tags attribute to the metadata_options configuration block (#22463)
• data-source/aws_launch_template: Add the instance_metadata_tags attribute to the metadata_options configuration block (#22463)
• data-source/aws_lb: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• data-source/aws_lb_listener: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• data-source/aws_lb_target_group: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the BlazingText image in af-south-1 and eu-south-1 AWS Regions (#22455)
• data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the DeepAR Forecasting image in af-south-1 and eu-south-1 AWS Regions (#22455)
• data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Factorization Machines image in af-south-1, ap-northeast-3 and eu-south-1 AWS Regions (#22455)
• data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Spark ML Serving image in af-south-1, ap-east-1, cn-north-1, cn-northwest-1, eu-north-1, eu-south-1, eu-west-3, me-south-1 and sa-east-1 AWS Regions (#22455)
• data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the XGBoost image in af-south-1, ap-northeast-3 and eu-south-1 AWS Regions (#22455)
• data-source/aws_sqs_queue: Allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22516)
• resource/aws_appsync_datasource: Add authorization_config attribute to the http_config configuration block (#22411)
• resource/aws_appsync_datasource: Add delta_sync_config and versioned to the dynamodb_config configuration block (#22411)
• resource/aws_appsync_datasource: Add relational_database_config argument (#22411)
• resource/aws_appsync_datasource: Add plan time validation for service_role_arn and lambda_config.function_arn (#22411)
• resource/aws_appsync_function: Add max_batch_size and sync_config arguments. (#22484)
• resource/aws_appsync_resolver: Add max_batch_size and sync_config arguments. (#22510)
• resource/aws_backup_selection: Add condition configuration block and not_resources argument in support of fine-grained backup plan resource assignment (#22074)
• resource/aws_cloudwatch_composite_alarm: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)
• resource/aws_cloudwatch_event_bus: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22550)
• resource/aws_cloudwatch_event_rule: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22550)
• resource/aws_cloudwatch_log_destination_policy: Add force_update argument. (#22460)
• resource/aws_cloudwatch_log_destination_policy: Add plan time validation for access_policy. (#22460)
• resource/aws_cloudwatch_metric_alarm: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)
• resource/aws_cloudwatch_metric_stream: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)
• resource/aws_connect_contact_flow: add delete function (#22303)
• resource/aws_customer_gateway: Add certificate_arn argument (#22435)
• resource/aws_ebs_snapshot: Add outpost_arn, storage_tier, permanent_restore, temporary_restore_days arguments (#22342)
• resource/aws_ebs_snapshot_copy: Add storage_tier, permanent_restore, temporary_restore_days arguments (#22342)
• resource/aws_ebs_snapshot_import: Add storage_tier, permanent_restore, temporary_restore_days arguments (#22342)
• resource/aws_ecr_repository: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22535)
• resource/aws_ecs_capacity_provider: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)
• resource/aws_ecs_cluster: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)
• resource/aws_ecs_service: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)
• resource/aws_ecs_task_definition: Add skip_destroy argument to optionally prevent overwriting previous revision (#22269)
• resource/aws_ecs_task_definition: Add plan time validation for family (#18610)
• resource/aws_ecs_task_definition: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)
• resource/aws_ecs_task_set: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)
• resource/aws_eks_cluster: Add ip_family to the kubernetes_network_config configuration block (#22485)
• resource/aws_glue_crawler: add delta_target argument. (#22472)
• resource/aws_iam_role: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)
• resource/aws_iam_user: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)
• resource/aws_instance: Add the instance_metadata_tags argument to the metadata_options configuration block (#22463)
• resource/aws_launch_template: Add the instance_metadata_tags argument to the metadata_options configuration block (#22463)
• resource/aws_lb: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• resource/aws_lb_listener: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• resource/aws_lb_listener_rule: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• resource/aws_lb_target_group: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)
• resource/aws_s3_bucket: Add additional protection against object_lock_configuration causing errors in partitions (e.g., ISO) where not supported (#22575)
• resource/aws_sns_topic: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22511)
• resource/aws_sqs_queue: Attempt tags-on-create, fallback to tag after create, and allow some tags errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22516)
• resource/aws_vpc: Add ipv6_cidr_block_network_border_group argument (#22211)
• resource/aws_vpc_ipam_pool_cidr_allocation: Add disallowed_cidrs argument (#22470)
• resource/aws_vpc_ipam_preview_next_cidr: Add disallowed_cidrs argument (#22501)
• resource/aws_vpn_connection: Add vgw_telemetry.certificate_arn attribute (#19311)
• resource/aws_vpn_connection: customer_gateway_id, transit_gateway_id and vpn_gateway_id can be updated without recreating the resource (#19311)
• resource/aws_vpn_connection: tunnel1_preshared_key and tunnel2_preshared_key can be updated without recreating the resource (#19311)

BUG FIXES:

• data-source/aws_vpc_ipam_pool: Return an error if more than 1 IPAM Pool matches (#22438)
• data-source/aws_vpc_ipam_pool: Set address_family, allocation_default_netmask_length, allocation_max_netmask_length, allocation_min_netmask_length and tags attributes (#22438)
• resource/aws_cloudfront_distribution: Increase the maximum valid origin_read_timeout value to 180 (#22461)
• resource/aws_fsx_lustre_file_system: Add missing values to per_unit_storage_throughput validation (#22462)
• resource/aws_fsx_openzfs_file_system: Change root_volume_configuration.copy_tags_to_snapshots to ForceNew (#22480)
• resource/aws_fsx_openzfs_file_system: Fix crash with nil root_volume_configuration.nfs_exports value (#22480)
• resource/aws_memorydb_cluster: Correctly propagate configurable timeouts to waiters. (#22489)
• resource/aws_route53_record: Fix import with underscores in names (#21556)
• resource/aws_sqs_queue: Don't timeout when a queue policy Condition value contains an empty array (#22547)
• resource/aws_ssm_parameter: Mark version as Computed when value changes (#22522)
• resource/aws_subnet: Protect against errors when availability_zone_id is not supported in a partition (e.g., ISO) (#22580)
• resource/aws_subnet: Resource-based naming is not available in the ap-southeast-3 region (#22531)