hashicorp/terraform-provider-aws v6.18.0

on GitHub

6.18.0 (October 23, 2025)

NOTES:

• data-source/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)
• data-source/aws_organizations_organizational_unit_child_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
• data-source/aws_organizations_organizational_unit_descendant_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
• resource/aws_organizations_account: The status attribute is deprecated. Use state instead. (#44327)
• resource/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)

FEATURES:

• New Resource: aws_bedrockagentcore_memory (#44306)
• New Resource: aws_bedrockagentcore_memory_strategy (#44306)
• New Resource: aws_bedrockagentcore_oauth2_credential_provider (#44307)
• New Resource: aws_bedrockagentcore_token_vault_cmk (#44606)
• New Resource: aws_bedrockagentcore_workload_identity (#44308)

ENHANCEMENTS:

• data-source/aws_iam_policy: Adds validation for path_prefix attribute (#44703)
• data-source/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)
• data-source/aws_organizations_organizational_unit_child_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
• data-source/aws_organizations_organizational_unit_descendant_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
• resource/aws_appstream_directory_config: Add certificate_based_auth_properties argument (#44679)
• resource/aws_iam_policy: Adds List support (#44703)
• resource/aws_iam_policy: Adds validation for path attribute (#44703)
• resource/aws_iam_role_policy_attachment: Adds List support (#44739)
• resource/aws_odb_network: Add delete_associated_resources attribute to enable practitioner to delete associated oci resource. (#44754)
• resource/aws_organizations_account: Add state attribute (#44327)
• resource/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)

BUG FIXES:

• data-source/aws_vpn_connection: Properly set tags attribute (#44761)
• resource/aws_rds_cluster: Fix "When modifying Provisioned IOPS storage, specify a value for both allocated storage and iops" error when updating RDS clusters with Provisioned IOPS storage (#44706)
• resource/guardduty_detector_feature: Fix additional_configuration block to ignore ordering (#44627)