6.56.0 (July 22, 2026)
FEATURES:
- New Action:
aws_elasticache_apply_service_update(#48963) - New Data Source:
aws_elasticache_service_update_actions(#48958) - New Data Source:
aws_s3_buckets(#48965) - New List Resource:
aws_eks_addon(#49067) - New List Resource:
aws_s3_bucket_notification(#48974) - New List Resource:
aws_secretsmanager_secret_policy(#49058)
ENHANCEMENTS:
- data-source/aws_eks_node_group: Add
warm_pool_configattribute (#48977) - data-source/aws_msk_bootstrap_brokers: Add
bootstrap_brokers_ipv6,bootstrap_brokers_sasl_iam_ipv6,bootstrap_brokers_sasl_scram_ipv6, andbootstrap_brokers_tls_ipv6attributes to expose IPv6 bootstrap broker URLs (#48975) - data-source/aws_opensearchserverless_security_config: Add
iam_federation_optionsblock (#48495) - data-source/aws_opensearchserverless_security_config: Add
iam_identity_center_optionsblock (#48495) - provider: Web identity tokens can be configured via the
TF_AWS_WEB_IDENTITY_TOKENenvironment variable. Any value configured viaassume_role_with_web_identity.web_identity_tokentakes precedence (#48736) - resource/aws_autoscaling_group: Add
instance_lifecycle_policyconfiguration block (#48973) - resource/aws_bedrockagent_data_source: Add
data_source_configuration.managed_knowledge_base_connector_configurationblock (#48904) - resource/aws_bedrockagent_data_source: Add
timeouts.updatewith a default value of30m(#48904) - resource/aws_bedrockagent_knowledge_base: Add
vector_knowledge_base_configuration.bedrock_embedding_model_configuration.audioandvector_knowledge_base_configuration.bedrock_embedding_model_configuration.videoconfiguration blocks (#48538) - resource/aws_bedrockagent_knowledge_base: Add support for Managed Knowledge Base type (
type = "MANAGED") withmanaged_knowledge_base_configurationblock (#48904) - resource/aws_cloudwatch_log_subscription_filter: Add
@source.logas a valid value foremit_system_fields(#48956) - resource/aws_eks_node_group: Add
warm_pool_configconfiguration block (#48977) - resource/aws_flow_log: Add
tag_field_specificationconfiguration block (#48913) - resource/aws_guardduty_detector_feature: Support
AI_PROTECTIONandAI_ANALYSTfeature names (#48972) - resource/aws_guardduty_organization_configuration_feature: Support
AI_PROTECTIONandAI_ANALYSTfeature names (#48972) - resource/aws_msk_cluster: Add
bootstrap_brokers_ipv6,bootstrap_brokers_sasl_iam_ipv6,bootstrap_brokers_sasl_scram_ipv6, andbootstrap_brokers_tls_ipv6attributes to expose IPv6 bootstrap broker URLs (#48975) - resource/aws_opensearch_package_association: Add import support (#46690)
- resource/aws_opensearchserverless_security_config: Add
iam_federation_optionsconfiguration block (#48495) - resource/aws_opensearchserverless_security_config: Add
iam_identity_center_optionsconfiguration block (#48495) - resource/aws_s3tables_table: Add
metadata.iceberg.propertiesargument (#48635)
BUG FIXES:
- provider: Fix "one of
assume_role_with_web_identity.0.web_identity_token,assume_role_with_web_identity.0.web_identity_token_filemust be specified" errors, allowing anyAWS_WEB_IDENTITY_TOKEN_FILEenvironment variable value to be used (#48736) - resource/aws_bedrockagent_data_source: Short-circuit waiting for creation if the resource reaches a
FAILEDstate (#48904) - resource/aws_datazone_domain: Fixed
AccessDeniedExceptionerror when deleting (#48516) - resource/aws_fsx_lustre_file_system: Fix perpetual diff in
data_read_cache_configuration.sizewhensizing_modeisPROPORTIONAL_TO_THROUGHPUT_CAPACITYandsizeis not specified (#49023) - resource/aws_mq_broker: Fix perpetual
shared_resourcesdiffs for ActiveMQ brokers (#48962) - resource/aws_mq_configuration: Retry
ConflictException: Configuration ID [...] is in useerrors on delete (#48962) - resource/aws_sagemaker_endpoint: Prevents
Cannot create already existing endpointerror when retrying creation. (#48966) - resource/aws_subnet: Wait for IPAM to release its CIDR on delete (#46523)
- resource/aws_vpc_ipam_pool: Fix "Error: reading EC2 VPC" when creating an IPAM VPC resource planning pool for a VPC in another account. (#46483)