hashicorp/terraform-provider-aws v6.46.0

on GitHub

6.46.0 (May 20, 2026)

NOTES:

• resource/aws_xray_resource_policy: Changes to policy_name now force resource recreation. Technically this is a breaking change but the resource did not function correctly previously; updating policy_name would leave an orphaned policy with the old name in AWS (#47948)

FEATURES:

• New List Resource: aws_bedrockagentcore_harness (#47725)
• New List Resource: aws_iam_access_key (#47966)
• New List Resource: aws_observabilityadmin_telemetry_rule_for_organization (#47920)
• New List Resource: aws_route53_vpc_association_authorization (#47905)
• New List Resource: aws_route53_zone_association (#47950)
• New List Resource: aws_securityhub_automation_rule_v2 (#47677)
• New Resource: aws_bedrockagentcore_harness (#47725)
• New Resource: aws_observabilityadmin_telemetry_rule_for_organization (#47920)
• New Resource: aws_securityhub_automation_rule_v2 (#47677)
• New Resource: aws_xray_indexing_rule (#47975)
• New Resource: aws_xray_trace_segment_destination (#47961)

ENHANCEMENTS:

• data-source/aws_ec2_local_gateway_virtual_interface: Add outpost_lag_id and local_gateway_virtual_interface_group_id attributes (#47974)
• data-source/aws_opensearch_domain: Add jwt_options block to fix "Invalid address to set" error (#47874)
• resource/aws_bedrockagent_agent: Increase maximum value of idle_session_ttl_in_seconds from 3600 to 5400 to match the AWS API limit (#47890)
• resource/aws_bedrockagentcore_agent_runtime: Add filesystem_configuration argument for mounting session storage, Amazon S3 Files access points, or Amazon EFS access points into the agent runtime (#47810)
• resource/aws_cloudfront_distribution: Add cache_tag_config configuration block (#47872)
• resource/aws_iam_access_key: Add resource identity support (#47966)
• resource/aws_route53_vpc_association_authorization: Add resource identity support (#47905)
• resource/aws_route53_zone_association: Add resource identity support (#47950)
• resource/aws_vpclattice_resource_gateway: Add resource_config_dns_resolution argument (#47879)
• resource/aws_xray_resource_policy: Add Resource Identity support (#47948)
• resource/aws_xray_sampling_rule: Add Resource Identity support (#47948)

BUG FIXES:

• resource/aws_s3_bucket: Defer to the corresponding dedicated standalone resource for each deprecated nested attribute (acceleration_status, acl, cors_rule, grant, lifecycle_rule, logging, object_lock_configuration, policy, replication_configuration, request_payer, server_side_encryption_configuration, versioning, website) when the attribute is not set in configuration, preventing similar fights between the bucket resource and its standalone counterparts (#47962)
• resource/aws_s3_bucket: Fix InvalidRequest: SourceSelectionCriteria cannot be empty errors on unrelated updates (e.g. tags) when replication is managed by the dedicated aws_s3_bucket_replication_configuration resource using replica_modifications (#47962)
• resource/aws_xray_resource_policy: Fix Provider returned invalid result object after apply errors on Update (#47948)
• resource/aws_xray_resource_policy: Mark policy_name as as ForceNew (#47948)