hashicorp/terraform-provider-aws v4.29.0

on GitHub

NOTES:

• resource/aws_db_instance: With AWS's retirement of EC2-Classic no new RDS DB Instances can be created referencing RDS DB Security Groups (#26525)
• resource/aws_db_security_group: With AWS's retirement of EC2-Classic no new RDS DB Security Groups can be created (#26525)
• resource/aws_default_vpc: With AWS's retirement of EC2-Classic theenable_classiclink and enable_classiclink_dns_support attributes have been deprecated and will be removed in a future version (#26525)
• resource/aws_eip: With AWS's retirement of EC2-Classic no new non-VPC EC2 EIPs can be created (#26525)
• resource/aws_elasticache_cluster: With AWS's retirement of EC2-Classic no new ElastiCache Clusters can be created referencing ElastiCache Security Groups (#26525)
• resource/aws_elasticache_security_group: With AWS's retirement of EC2-Classic no new ElastiCache Security Groups can be created (#26525)
• resource/aws_instance: With the retirement of EC2-Classic, aws_instance has been updated to remove support for EC2-Classic (#26532)
• resource/aws_launch_configuration: With AWS's retirement of EC2-Classic no new Auto Scaling Launch Configurations can be created referencing ClassicLink (#26525)
• resource/aws_opsworks_stack: With AWS's retirement of EC2-Classic no new OpsWorks Stacks can be created without referencing a VPC (#26525)
• resource/aws_redshift_cluster: With AWS's retirement of EC2-Classic no new Redshift Clusters can be created referencing Redshift Security Groups (#26525)
• resource/aws_redshift_security_group: With AWS's retirement of EC2-Classic no new Redshift Security Groups can be created (#26525)
• resource/aws_security_group: With AWS's retirement of EC2-Classic no new Security Groups can be created without referencing a VPC (#26525)
• resource/aws_vpc: With AWS's retirement of EC2-Classic no new VPCs can be created with ClassicLink enabled (#26525)
• resource/aws_vpc_peering_connection: With AWS's retirement of EC2-Classic no new VPC Peering Connections can be created with ClassicLink options enabled (#26525)
• resource/aws_vpc_peering_connection_accepter: With AWS's retirement of EC2-Classic no VPC Peering Connections can be accepted with ClassicLink options enabled (#26525)
• resource/aws_vpc_peering_connection_options: With AWS's retirement of EC2-Classic no new VPC Peering Connection Options can be created with ClassicLink options enabled (#26525)

FEATURES:

• New Data Source: aws_location_tracker_associations (#26472)
• New Resource: aws_cloudfront_origin_access_control (#26508)
• New Resource: aws_medialive_input (#26550)
• New Resource: aws_medialive_input_security_group (#26550)
• New Resource: aws_redshiftserverless_endpoint_access (#26555)

ENHANCEMENTS:

• data-source/aws_cloudtrail_service_account: Add service account ID for me-central-1 AWS Region (#26572)
• data-source/aws_eks_node_group: Add capacity_type attribute (#26521)
• data-source/aws_elb_hosted_zone_id: Add hosted zone ID for me-central-1 AWS Region (#26572)
• data-source/aws_instance: Add host_resource_group_arn attribute (#26532)
• data-source/aws_lambda_function: Return most recent published version when qualifier is not set (#11195)
• data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for me-central-1 AWS Region (#26572)
• data-source/aws_s3_bucket: Add hosted zone ID for me-central-1 AWS Region (#26572)
• provider: Support me-central-1 as a valid AWS Region (#26590)
• provider: Add source_identity argument to assume_role block (#25368)
• resource/aws_cloudfront_distribution: Add origin_access_control_id to the origin configuration block (#26510)
• resource/aws_dms_endpoint: Add redis_settings configuration block (#26411)
• resource/aws_ec2_fleet: Add target_capacity_unit_type attribute to the target_capacity_specification configuration block (#26493)
• resource/aws_instance: Add host_resource_group_arn attribute; improve compatibility with launching instances in a host resource group using an AMI registered with License Manager. NOTE: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing. (#26532)
• resource/aws_lambda_event_source_mapping: Add amazon_managed_kafka_event_source_config and self_managed_kafka_event_source_config configuration blocks (#26560)
• resource/aws_lambda_function: Add validation for function_name attribute (#25259)
• resource/aws_opensearch_domain: Add support for enabling fine-grained access control on existing domains with advanced_security_options anonymous_auth_enabled (#26503)
• resource/aws_redshiftserverless_endpoint_workgroup: Add endpoint attribute (#26555)
• resource/aws_spot_fleet_request: Add target_capacity_unit_type argument (#26493)
• resource/aws_wafv2_rule_group: Add cookies attribute to the field_to_match block (#25845)
• resource/aws_wafv2_rule_group: Add json_body attribute to the field_to_match block (#24772)
• resource/aws_wafv2_web_acl: Add cookies attribute to the field_to_match block (#25845)
• resource/aws_wafv2_web_acl: Add json_body attribute to the field_to_match block (#24772)

BUG FIXES:

• provider: No longer silently ignores assume_role block when role_arn has unknown value. (#26590)
• resource/aws_security_group: Fix complex dependency violations such as using a security group with an EMR cluster (#26553)