NOTES:
- resource/aws_detective_organization_admin_account: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#25237)
- resource/aws_detective_organization_configuration: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#25237)
FEATURES:
- New Data Source:
aws_opensearchserverless_lifecycle_policy
(#34144) - New Resource:
aws_detective_organization_admin_account
(#25237) - New Resource:
aws_detective_organization_configuration
(#25237) - New Resource:
aws_opensearchserverless_lifecycle_policy
(#34144) - New Resource:
aws_redshift_resource_policy
(#34149) - New Resource:
aws_verifiedaccess_endpoint
(#30763)
ENHANCEMENTS:
- resource/aws_amplify_app: Add
custom_headers
argument (#31561) - resource/aws_batch_job_definition: Add
node_properties
argument (#34153) - resource/aws_finspace_kx_cluster: In-place updates are now supported for the
code
,database
, andinitialization_script
arguments. The update timeout has been increased to 30 minutes. (#34220) - resource/aws_iot_topic_rule: Add
kafka.header
anderror_action.kafka.header
arguments (#34191) - resource/aws_networkmanager_connect_attachment: Add
NO_ENCAP
as a validoptions.protocol
value (#34109) - resource/aws_networkmanager_connect_peer: Add
subnet_arn
argument to support Tunnel-less Connect attachments (#34109) - resource/aws_networkmanager_connect_peer:
inside_cidr_blocks
is Optional (#34109) - resource/aws_rds_cluster: Remove the provider default (previously, "1") and use the AWS default for
backup_retention_period
(also, "1") to allow integration with AWS Backup (#34187) - resource/aws_redshift_cluster: Add
snapshot_arn
argument (#34181) - resource/aws_redshift_cluster: Add the
manage_master_password
andmaster_password_secret_kms_key_id
arguments to support managed admin credentials (#34182) - resource/aws_s3_object: Add
override_provider
configuration block, allowing tags inherited from the providerdefault_tags
configuration block to be ignored (#33262) - resource/aws_secretsmanager_secret_rotation: The
rotation_lambda_arn
argument is now optional to support modifying the rotation schedule of AWS-managed secrets. (#34180)
BUG FIXES:
- data-source/aws_vpc_ipam_pools: Add
id
attribute for individual IPAM pools (#32133) - resource/aws_alb_listener_rule: Fixed the
action.forward.target_group
argument minimum item requirement. Previously this was set to 2, but the AWS API allows specifying a single target group. (#33727) - resource/aws_amplify_branch: Remove ForceNew from
enable_performance_mode
(#34141) - resource/aws_lb_listener_rule: Fixed the
action.forward.target_group
argument minimum item requirement. Previously this was set to 2, but the AWS API allows specifying a single target group. (#33727) - resource/aws_quicksight_analysis: Fix "expected type to be integer" errors in
window_options.bounds.*
argument validatation functions (#34230) - resource/aws_quicksight_dashboard: Fix "expected type to be integer" errors in
window_options.bounds.*
argument validatation functions (#34230) - resource/aws_quicksight_template: Fix "expected type to be integer" errors in
window_options.bounds.*
argument validatation functions (#34230) - resource/aws_rds_cluster: Avoid an error on delete related to
unexpected state 'scaling-compute'
(#34187)