hashicorp/terraform-provider-aws v4.64.0 on GitHub

FEATURES:

New Data Source: aws_dms_endpoint (#30717)
New Data Source: aws_fsx_windows_file_system (#28622)
New Data Source: aws_networkfirewall_resource_policy (#25474)
New Data Source: aws_prometheus_workspaces (#28574)
New Data Source: aws_redshiftserverless_workgroup (#29208)
New Data Source: aws_route53_resolver_query_log_config (#29111)
New Data Source: aws_sesv2_configuration_set (#30108)
New Data Source: aws_vpclattice_listener (#30843)
New Resource: aws_cloudwatch_event_endpoint (#25846)
New Resource: aws_vpclattice_listener (#30711)
New Resource: aws_vpclattice_listener_rule (#30784)

ENHANCEMENTS:

data-source/aws_cloudfront_response_headers_policy: Add remove_headers_config attribute (#28940)
data-source/aws_ecs_task_definition: Add execution_role_arn attribute (#28662)
data-source/aws_eks_node_group: Add launch_template attribute (#30780)
data-source/aws_iam_role: Add role_last_used attribute (#30750)
data-source/aws_kms_key: Add cloud_hsm_cluster_id, custom_key_store_id, key_spec, pending_deletion_window_in_days, and xks_key_configuration attributes (#29250)
data-source/aws_lakeformation_data_lake_settings: Add allow_external_data_filtering, external_data_filtering_allow_list and authorized_session_tag_value_list attributes (#30207)
data-source/aws_outposts_outpost: Add lifecycle_status, site_arn, supported_hardware_type and tags attributes (#30754)
data-source/aws_servicequotas_service_quota: Add usage_metric attribute (#29499)
data-source/aws_subnet: Add enable_lni_at_device_index attribute (#30798)
resource/aws_appsync_datasource: Add opensearchservice_config argument (#29578)
resource/aws_cloudfront_response_headers_policy: Add remove_headers_config argument (#28940)
resource/aws_cloudwatch_event_target: Add ecs_target.ordered_placement_strategy argument (#28384)
resource/aws_cloudwatch_metric_stream: Add include_linked_accounts_metrics argument (#29281)
resource/aws_dms_replication_instance: Increase default timeout for create (#29905)
resource/aws_eks_node_group: Add plan time validation to node_group_name and node_group_name_prefix arguments (#29975)
resource/aws_elastic_beanstalk_application: Add plan time validation to appversion_lifecycle.service_role and name arguments (#17727)
resource/aws_emr_cluster: Add placement_group_config argument (#30121)
resource/aws_fis_experiment_template: Add support for Subnets Network Actions to actions.*.target (#30211)
resource/aws_iam_role: Add role_last_used attribute (#30750)
resource/aws_iot_topic_rule: Add error_action.firehose.batch_mode, error_action.iot_analytics.batch_mode, error_action.iot_events.batch_mode, firehose.batch_mode, iot_analytics.batch_mode and iot_events.batch_mode arguments (#28568)
resource/aws_kinesis_firehose_delivery_stream: Add opensearch_configuration block (#29112)
resource/aws_kinesis_firehose_delivery_stream: Add opensearch as a valid destination value (#29112)
resource/aws_lakeformation_data_lake_settings: Add allow_external_data_filtering, external_data_filtering_allow_list and authorized_session_tag_value_list arguments (#30207)
resource/aws_lambda_event_source_mapping: Add document_db_event_source_config configuration block (#28586)
resource/aws_lambda_function: Add support for python3.10 runtime value (#30781)
resource/aws_lambda_layer_version: Add support for python3.10 compatible_runtimes value (#30781)
resource/aws_main_route_table_association: Add configurable timeouts (#30755)
resource/aws_route: Allow gateway_id value of local when updating a Route (#24507)
resource/aws_route_table_association: Add configurable timeouts (#30755)
resource/aws_s3_bucket: Correct S3 Object Lock error handling for third-party S3-compatible API implementations (#26317)
resource/aws_s3_bucket_object_lock_configuration: Correct error handling for third-party S3-compatible API implementations (#26317)
resource/aws_securityhub_account: Add control_finding_generator, auto_enable_controls and arn attributes (#30692)
resource/aws_servicequotas_service_quota: Add usage_metric attribute (#29499)
resource/aws_ssoadmin_account_assignment: Extend timeout delay and min timeout (#25849)
resource/aws_ssoadmin_permission_set: Extend timeout delay and min timeout (#25849)
resource/aws_subnet: Add enable_lni_at_device_index attribute (#30798)
resource/aws_vpc_endpoint_service_allowed_principal: Changed id to use ServicePermissionId (#27640)
resource/aws_wafv2_rule_group: Add rule.action.challenge argument (#29690)
resource/aws_wafv2_rule_group: Add rule.captcha_config argument (#29608)
resource/aws_wafv2_web_acl: Add captcha_config and rule.captcha_config arguments (#29608)

BUG FIXES:

data-source/aws_lakeformation_permissions: Change lf_tag_policy.expression from TypeList to TypeSet as order is not significant (#26643)
data-source/aws_lakeformation_permissions: Remove limit on number of lf_tag_policy.expression blocks (#26643)
resource/aws_cloudwatch_event_rule: Add retry to read step, resolving couldn't find resource error (#25846)
resource/aws_default_vpc: Fix adoption of default VPC with generated IPv6 (#29083)
resource/aws_dx_gateway: Remove plan time validation from name argument (#30739)
resource/aws_ecs_service: Fix error importing service with an IAM role with a path (#30170)
resource/aws_fsx_windows_file_system: Increase throughput_capacity first to avoid BadRequest errors (#28622)
resource/aws_lakeformation_permissions: Change lf_tag_policy.expression from TypeList to TypeSet as order is not significant (#26643)
resource/aws_lakeformation_permissions: Change lf_tag, lf_tag.values, lf_tag_policy, lf_tag_policy.expression.key, lf_tag_policy.expression.values and lf_tag_policy.resource_type to ForceNew (#26643)
resource/aws_lakeformation_permissions: Remove limit on number of lf_tag_policy.expression blocks (#26643)
resource/aws_lambda_event_source_mapping: Fix IAM eventual consistency errors on resource Update (#28586)
resource/aws_medialive_channel: Fix to properly expand destinations.media_package_settings field (#30660)
resource/aws_networkfirewall_firewall_policy: Fix unexpected encryption_configuration.type updates from Customer_KMS to AWS_KMS (#30821)
resource/aws_networkfirewall_rule_group: Fix unexpected encryption_configuration.type updates from Customer_KMS to AWS_KMS (#30821)
resource/aws_quicksight_data_set: Correct custom_sql documentation (#30742)
resource/aws_quicksight_data_set: Correctly persist create_columns_operation.expression field (#30708)
resource/aws_quicksight_data_set: Fix to properly expand project_operation.projected_columns field (#30699)
resource/aws_quicksight_data_set: Fix to properly flatten cast_column_type_operation.format field (#30701)
resource/aws_sagemaker_app: Fix crash when app is not found (#30786)
resource/aws_sns_topic: Fix IAM eventual consistency error creating SNS topics with ABAC-controlled permissions (#30432)
resource/aws_vpc: Don't overwrite any configured value for ipv6_ipam_pool_id with IPAM Managed (#30795)