hashicorp/terraform-provider-aws v5.83.0

on GitHub

NOTES:

• provider: The retry handling in the apigatewayv2 client has been updated to more extensively match ConflictException error responses. This change should be transparent to users, but if any unexpected changes in behavior with apigatewayv2 resources occur following an upgrade to this release, please open a bug report. (#40840)
• resource/aws_api_gateway_domain_name_access_association: Deprecates id in favor of arn. (#40626)
• resource/aws_route53_cidr_location: Deprecates id. (#40626)
• resource/aws_s3_directory_bucket: Deprecates id in favor of bucket. (#40626)

FEATURES:

• New Data Source: aws_cloudwatch_event_buses (#40662)
• New Data Source: aws_ecs_clusters (#40638)
• New Data Source: aws_route53_records (#38186)
• New Ephemeral Resource: aws_cognito_identity_openid_token_for_developer_identity (#40763)
• New Resource: aws_bedrockagent_agent_collaborator (#40559)
• New Resource: aws_cleanrooms_membership (#35165)
• New Resource: aws_cloudwatch_log_delivery (#40731)
• New Resource: aws_cloudwatch_log_delivery_destination (#40731)
• New Resource: aws_cloudwatch_log_delivery_destination_policy (#40731)
• New Resource: aws_cloudwatch_log_delivery_source (#40731)
• New Resource: aws_cloudwatch_log_index_policy (#40594)
• New Resource: aws_vpclattice_resource_gateway (#40821)

ENHANCEMENTS:

• data-source/aws_codebuild_fleet: Add compute_configuration attribute (#40752)
• data-source/aws_dms_endpoint: Add kafka_settings.sasl_mechanism attribute (#36918)
• data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-southeast-7 AWS Region (#40850)
• data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-southeast-7 AWS Region (#40850)
• data-source/aws_rds_certificate: Add default_for_new_launches attribute (#40536)
• data-source/aws_rds_engine_version: Add supports_certificate_rotation_without_restart, supports_integrations, and supports_local_write_forwarding attributes (#40700)
• data-source/aws_s3_bucket: Add hosted zone ID for ap-southeast-7 AWS Region (#40850)
• data-source/aws_vpc_endpoint_service: Add region attribute (#40795)
• data-source/aws_vpc_endpoint_service: Add service_regions argument (#40795)
• provider: Support ap-southeast-7 as a valid AWS Region (#40849)
• resource/aws_appflow_flow: Add data_transfer_api attribute to destination_flow_config_list.destination_connector_properties.salesforce (#34937)
• resource/aws_cloudfront_distribution: Add grpc_config argument to default_cache_behavior and ordered_cache_behavior configuration blocks (#40762)
• resource/aws_codebuild_fleet: Add compute_configuration argument (#40752)
• resource/aws_cognito_user_pool: Add email_mfa_configuration argument (#40734)
• resource/aws_cognito_user_pool: Add sign_in_policy and web_authn_configuration arguments (#40765)
• resource/aws_cognito_user_pool: Add user_pool_tier argument (#40633)
• resource/aws_dms_endpoint: Add kafka_settings.sasl_mechanism argument (#36918)
• resource/aws_ecr_account_setting: Add valid values for registry policy scope to name and value arguments (#40772)
• resource/aws_eip_association: Adds validation to only allow one of instance_id or network_interface_id (#40769)
• resource/aws_eks_node_group: Add node_repair_config configuration block (#40698)
• resource/aws_elasticache_user: Add VALKEY as supported value for 'engine' argument (#40764)
• resource/aws_elasticache_user_group: Add VALKEY as supported value for 'engine' argument (#40764)
• resource/aws_emr_studio: Add encryption_key_arn argument (#40771)
• resource/aws_quicksight_user: Add user_invitation_url attribute (#40775)
• resource/aws_rds_cluster: Support iam-db-auth-error as a valid value for enabled_cloudwatch_logs_exports (#40789)
• resource/aws_rds_integration: Add data_filter argument (#40816)
• resource/aws_s3_object_copy: Add override_provider configuration block, allowing tags inherited from the provider default_tags configuration block to be ignored (#40689)

BUG FIXES:

• resource/aws_api_gateway_domain_name: Fixed error when adding policy to existing private domain name (#40708)
• resource/aws_apigatewayv2_api: Don't overwrite the configured values of description, name or version if they are not present in the OpenAPI definition body (#40707)
• resource/aws_apigatewayv2_route: Fix retry handling of ConflictException error responses (#40840)
• resource/aws_cloudfront_cache_policy: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when parameters_in_cache_key_and_forwarded_to_origin.cookies_config, parameters_in_cache_key_and_forwarded_to_origin.headers_config, or parameters_in_cache_key_and_forwarded_to_origin.query_strings_config are empty (#40815)
• resource/aws_codebuild_fleet: Allow scaling_configuration to be removed on Update (#40773)
• resource/aws_codebuild_project: Allow file_system_locations to be removed on Update (#40842)
• resource/aws_ec2_instance_connect_endpoint: Set fips_dns_name to an empty value ("") when no value is returned from the EC2 API. This fixes known-after-apply loops in Regions that don't support FIPS endpoints (#37939)
• resource/aws_emr_studio: Fix issue with IAM/KMS policy eventual consistency handling not working (#40771)
• resource/aws_glue_catalog_database: Fix crash when expanding create_table_default_permission with a nil principal block (#40761)
• resource/aws_instance: Always set http_tokens when metadata_options is updated (#40727)
• resource/aws_instance: Set new computed value for public_dns and public_ip attributes when changing instance_type, user_data, or user_data_base64 (#40710)
• resource/aws_internet_gateway: Handle operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#40790)
• resource/aws_internet_gateway_attachment: Handle operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#40790)
• resource/aws_quicksight_data_set: Correctly expand logical_table_map.tag_column_operation.tags.column_description (#40713)
• resource/aws_rds_instance Fix manage_master_user_password being updated in state when update errors (#40538)
• resource/aws_route53_record: Fix perpetual diff if alias.name contains characters that the Route 53 API escapes (#40154)
• resource/aws_route53_zone: Fix perpetual diff if name contains characters that the Route 53 API escapes (#40154)
• resource/aws_ses_identity_notification_topic: Prevent destroy failure when resource is already deleted outside of Terraform (#40684)
• resource/aws_sesv2_configuration_set: Fix handling of delivery_options.max_delivery_seconds when not configured (#40670)
• resource/aws_sesv2_configuration_set_event_destination: Retry IAM eventual consistency errors (#40843)
• resource/aws_sqs_queue: Fix timeout error on creation if sqs_managed_sse_enabled=true and kms_data_key_reuse_period_seconds is configured (#40729)