hashicorp/terraform-provider-aws v5.89.0 on GitHub

FEATURES:

New Resource: aws_macie2_organization_configuration (#41475)
New Resource: aws_neptunegraph_graph (#41216)
New Resource: aws_quicksight_role_membership (#41589)
New Resource: aws_rds_shard_group (#41254)
New Resource: aws_xray_resource_policy (#41517)

ENHANCEMENTS:

data-source/aws_cloudwatch_log_data_protection_policy_document: Add configuration argument (#41524)
data-source/aws_rds_cluster: Add cluster_scalability_type attribute (#41254)
data-source/aws_rds_cluster: Add database_insights_mode attribute (#41254)
data-source/aws_s3_bucket_object: Add application/yaml to the list of Content-Types that return a body (#41443)
data-source/aws_s3_object: Add application/yaml to the list of Content-Types that return a body (#41443)
data-source/aws_s3_object: Add checksum_crc64nvme attribute (#41015)
resource/aws_autoscaling_policy: Add target_tracking_configuration.customized_metric_specification.period argument to support high-resolution metrics (#41385)
resource/aws_db_instance: Add RequiredWith validation password_wo and password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_docdb_cluster: Add RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_dx_connection: Add 25Gbps and 400Gbps as supported bandwidth values (#41547)
resource/aws_dx_hosted_connection: Add 25Gbps as a supported bandwidth value (#41547)
resource/aws_dx_lag: Add 400Gbps as a supported connections_bandwidth value (#41547)
resource/aws_launch_template: Add network_interfaces.ena_srd_specification configuration block (#41367)
resource/aws_lb: Add enable_zonal_shift support for Application Load Balancers (#41335)
resource/aws_macie2_classification_job: Allow tags to be updated in-place (#41266)
resource/aws_macie2_custom_data_identifier: Allow tags to be updated in-place (#41266)
resource/aws_macie2_findings_filter: Allow tags to be updated in-place (#41266)
resource/aws_macie2_member: Allow tags to be updated in-place (#41266)
resource/aws_nat_gateway: Make it possible to move from secondary_private_ip_address_count to secondary_private_ip_addresses for private NAT Gateways (#41403)
resource/aws_rds_cluster: Add RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_rds_cluster: Add cluster_scalability_type argument (#41254)
resource/aws_rds_cluster: Add database_insights_mode argument (#41254)
resource/aws_rds_cluster: Support "" as a valid value for engine_mode (#41254)
resource/aws_rds_instance: Support iam-db-auth-error as a valid value for enabled_cloudwatch_logs_exports (#41408)
resource/aws_redshift_cluster: Add RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_redshiftseverless_namespace: Add RequiredWith validation admin_user_password_wo and admin_user_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_s3_directory_bucket: The default value for data_redundancy is SingleLocalZone if location.type is LocalZone (#40944)
resource/aws_s3_object: Add checksum_crc64nvme attribute (#41015)
resource/aws_s3_object_copy: Add checksum_crc64nvme attribute (#41015)
resource/aws_secretsmanager_secret_version: Add RequiredWith validation secret_string_wo and secret_string_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)
resource/aws_ssm_parameter: Remove PreferWriteOnlyAttribute validation (#41562)

BUG FIXES:

resource/aws_cloudwatch_log_delivery: Fix Provider produced inconsistent result error on s3_delivery_configuration.suffix_path (#41497)
resource/aws_ec2_fleet: Add spot_options.max_total_price, spot_options.min_target_capacity, spot_options.single_instance_type, and spot_options.single_availability_zone arguments (#41272)
resource/aws_lb_listener: Ensure that routing_http_response_server_enabled, routing_http_response_strict_transport_security_header_value, routing_http_response_access_control_allow_origin_header_value, routing_http_response_access_control_allow_methods_header_value, routing_http_response_access_control_allow_headers_header_value, routing_http_response_access_control_allow_credentials_header_value, routing_http_response_access_control_expose_headers_header_value, routing_http_response_access_control_max_age_header_value, routing_http_response_content_security_policy_header_value, routing_http_response_x_content_type_options_header_value, routing_http_response_x_frame_options_header_value, routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name, routing_http_request_x_amzn_mtls_clientcert_issuer_header_name, routing_http_request_x_amzn_mtls_clientcert_subject_header_name, routing_http_request_x_amzn_mtls_clientcert_validity_header_name, routing_http_request_x_amzn_mtls_clientcert_leaf_header_name, routing_http_request_x_amzn_mtls_clientcert_header_name, routing_http_request_x_amzn_tls_version_header_name, and routing_http_request_x_amzn_tls_cipher_suite_header_name are updated if tcp_idle_timeout_seconds does not change (#41299)
resource/aws_macie2_classification_job: Ensure that only status and tags can be updated in-place (#41266)
resource/aws_nat_gateway: Allow secondary_allocation_ids to be updated in-place (#41403)
resource/aws_redshift_cluster: Fix master_username validation (#41556)
resource/aws_s3_bucket_lifecycle_configuration: Prevents InvalidRequest error when rule.and.object_size_less_than not set. (#41542)
resource/aws_servicequotas_service_quota: Does not leave stuck resource in state when service quota not supported in current region. (#41509)