NOTES:
- data-source/aws_iam_policy_document: In some cases,
statement.*.condition
blocks with the sametest
andvariable
arguments were incorrectly handled by the provider. Since this results in unexpected IAM Policies being submitted to AWS, we have updated the logic to mergevalues
lists in this case. This may cause existing IAM Policy documents to report a difference. However, those policies are likely not what was originally intended. (#33093)
FEATURES:
- New Resource:
aws_datasync_location_azure_blob
(#32632) - New Resource:
aws_datasync_location_fsx_ontap_file_system
(#32632)
ENHANCEMENTS:
- data-source/aws_dms_endpoint: Fix crash when specified endpoint not found (#33158)
- data-source/aws_dms_replication_instance: Add
network_type
attribute (#33158) - data-source/aws_ec2_network_insights_path: Add
destination_arn
andsource_arn
attributes (#33168) - resource/aws_dms_replication_instance: Add
network_type
argument (#33158) - resource/aws_ec2_network_insights_path: Add
destination_arn
andsource_arn
attributes (#33168) - resource/aws_finspace_kx_environment: Add
transit_gateway_configuration.*.attachment_network_acl_configuration
argument. (#33123) - resource/aws_medialive_channel: Updates schemas for
selector_settings
foraudio_selector
andselector_settings
forcaption_selector
(#32714) - resource/aws_ssoadmin_account_assignment: Add configurable timeouts (#33121)
- resource/aws_ssoadmin_customer_managed_policy_attachment: Add configurable timeouts (#33121)
- resource/aws_ssoadmin_managed_policy_attachment: Add configurable timeouts (#33121)
- resource/aws_ssoadmin_permission_set: Add configurable timeouts (#33121)
- resource/aws_ssoadmin_permission_set_inline_policy: Add configurable timeouts (#33121)
- resource/aws_ssoadmin_permissions_boundary_attachment: Add configurable timeouts (#33121)
BUG FIXES:
- data-source/aws_iam_policy_document: Fix inconsistent handling of
condition
blocks with duplicatedtest
andvariable
arguments (#33093) - resource/aws_ec2_host: Fixed a bug that caused resource recreation when specifying an
outpost_arn
without anasset_id
(#33142) - resource/aws_ec2_network_insights_analysis: Fix
setting forward_path_components: Invalid address to set
errors (#33168) - resource/aws_ec2_network_insights_path: Avoid recreating resource when passing an ARN as
source
ordestination
(#33168) - resource/aws_ec2_network_insights_path: Retry
AnalysisExistsForNetworkInsightsPath
errors on resource Delete (#33168) - resource/aws_kms_key: Fix
tag propagation: timeout while waiting for state to become 'TRUE'
errors whenignore_tags
has been configured (#33167) - resource/aws_licensemanager_license_configuration: Surface
InvalidParameterValueException
errors during resource Delete (#32845) - resource/aws_msk_cluster_policy: Fix
Current cluster policy version needed for Update
errors (#33118) - resource/aws_quicksight_analysis: Change
definition.*.parameter_declarations
to a set type, preventing persistent differences (#33120) - resource/aws_quicksight_analysis: Fixed a bug that caused errors related to the
word_orientation
argument when using word cloud visuals. (#33122) - resource/aws_quicksight_analysis: Skip setting
definition.*.parameter_declarations.*.*_parameter_declaration.static_values
when empty, preventing persistent differences. (#33161) - resource/aws_quicksight_dashboard: Change
definition.*.parameter_declarations
to a set type, preventing persistent differences (#33120) - resource/aws_quicksight_dashboard: Fixed a bug that caused errors related to the
word_orientation
argument when using word cloud visuals. (#33122) - resource/aws_quicksight_dashboard: Skip setting
definition.*.parameter_declarations.*.*_parameter_declaration.static_values
when empty, preventing persistent differences. (#33161) - resource/aws_quicksight_template: Change
definition.*.parameter_declarations
to a set type, preventing persistent differences (#33120) - resource/aws_quicksight_template: Fixed a bug that caused errors related to the
word_orientation
argument when using word cloud visuals. (#33122) - resource/aws_quicksight_template: Skip setting
definition.*.parameter_declarations.*.*_parameter_declaration.static_values
when empty, preventing persistent differences. (#33161) - resource/aws_route53_zone: Skip disabling DNS SEC in unsupported partitions (#33103)
- resource/aws_s3_object: Mark
acl
as Computed. This suppresses the diffs shown when migrating resources with no configuredacl
attribute value from v4.67.0 (or earlier) (#33138) - resource/aws_s3_object_copy: Mark
acl
as Computed. This suppresses the diffs shown when migrating resources with no configuredacl
attribute value from v4.67.0 (or earlier) (#33138) - resource/aws_securityhub_account: Remove default value (
SECURITY_CONTROL
) forcontrol_finding_generator
argument and mark as Computed (#33095)