hashicorp/terraform-provider-aws v6.61.0

on GitHub

6.61.0 (August 19, 2026)

FEATURES:

• New Data Source: aws_odb_iam_role_association (#46794)
• New List Resource: aws_ec2_ami_launch_permission (#49461)
• New List Resource: aws_iam_instance_profile (#49576)
• New List Resource: aws_lambdacore_network_connector (#49387)
• New List Resource: aws_mailmanager_relay (#49394)
• New List Resource: aws_resiliencehubv2_assertion (#48329)
• New List Resource: aws_resiliencehubv2_service_function (#48328)
• New List Resource: aws_resiliencehubv2_user_journey (#48330)
• New Resource: aws_dsql_cluster_policy (#47748)
• New Resource: aws_lambdacore_network_connector (#49387)
• New Resource: aws_lambdamicrovms_image (#48950)
• New Resource: aws_mailmanager_relay (#49394)
• New Resource: aws_odb_iam_role_association (#46794)
• New Resource: aws_resiliencehubv2_assertion (#48329)
• New Resource: aws_resiliencehubv2_service_function (#48328)
• New Resource: aws_resiliencehubv2_user_journey (#48330)
• New Resource: aws_securityhub_feature_v2 (#49503)

ENHANCEMENTS:

• data-source/aws_fsx_ontap_file_system: Add network_type attribute (#49512)
• data-source/aws_fsx_windows_file_system: Add network_type attribute (#49514)
• data-source/aws_lb_listener_rule: Add condition.source_ip.ip_address_type attribute (#49476)
• data-source/aws_resiliencehubv2_service: Add associated_system attribute (#49498)
• data-source/aws_vpclattice_service: Add idle_timeout_seconds attribute (#49540)
• resource/aws_bedrockagentcore_harness: Adds attribute environment_actual (#48815)
• resource/aws_ec2_ami_launch_permission: Add resource identity support (#49461)
• resource/aws_fsx_ontap_file_system: Add network_type argument (#49512)
• resource/aws_fsx_openzfs_file_system: Add network_type argument (#49513)
• resource/aws_fsx_windows_file_system: Add network_type argument (#49514)
• resource/aws_lb_listener_rule: Add condition.source_ip.ip_address_type argument (#49476)
• resource/aws_lb_listener_rule: Change condition.source_ip.values to Optional (#49476)
• resource/aws_medialive_channel: Add resource identity (#49532)
• resource/aws_medialive_input: Add resource identity support (#49534)
• resource/aws_medialive_input_security_group: Add resource identity support (#49537)
• resource/aws_medialive_multiplex: Add resource identity support (#49557)
• resource/aws_medialive_multiplex_program: Add resource identity (#49561)
• resource/aws_observabilityadmin_centralization_rule_for_organization: Add encryption_scope argument to the logs_encryption_configuration configuration block (#49563)
• resource/aws_pinpointsmsvoicev2_phone_number: Add status attribute (#49485)
• resource/aws_pinpointsmsvoicev2_phone_number: Add wait_for_active argument to allow create and update to return without waiting for the phone number to reach ACTIVE status. Number types gated on carrier or registration approval (for example TEN_DLC, TOLL_FREE, or any number submitted with registration_id) can remain PENDING for days to weeks, which previously caused terraform apply to time out (#49485)
• resource/aws_resiliencehubv2_service: Add associated_system configuration block (#49498)
• resource/aws_vpclattice_service: Add idle_timeout_seconds argument (#49540)

BUG FIXES:

• list-resource/aws_bedrockagentcore_harness: Prevents error when remote resource disappears during List (#49446)
• list-resource/aws_bedrockagentcore_online_evaluation_config: Prevents error when remote resource disappears during List (#49479)
• list-resource/aws_bedrockagentcore_policy_engine: Prevents error when remote resource disappears during List (#49478)
• list-resource/aws_bedrockagentcore_registry: Prevents error when remote resource disappears during List (#49480)
• list-resource/aws_bedrockagentcore_resource_policy: Prevents error when remote resource disappears during List (#49481)
• resource/aws_bedrockagentcore_harness: Fix Provider produced inconsistent result after apply error for environment (#48815)
• resource/aws_bedrockagentcore_online_evaluation_config: Retries additional IAM propagation errors on creation (#49479)
• resource/aws_mailmanager_ingress_point: Include FAILED as a pending state while an ingress point is deleting (#49502)
• resource/aws_nat_gateway: Allow updating secondary_private_ip_address_count in-place for private NAT gateways (#47477)
• resource/aws_observabilityadmin_telemetry_enrichment: Prevent couldn't find resource (21 retries) errors on delete if enrichment has never been started in the Region (#49502)
• resource/aws_observabilityadmin_telemetry_evaluation: Include NOT_STARTED as a target state while the resource is deleting (#49502)