hashicorp/terraform-provider-aws v6.63.0 on GitHub

6.63.0 (September 3, 2026)

FEATURES:

New List Resource: aws_accountaccess_application (#49551)
New List Resource: aws_key_pair (#49712)
New List Resource: aws_lambdamicrovms_image (#49724)
New List Resource: aws_lambdamicrovms_microvm (#48984)
New List Resource: aws_mailmanager_archive (#49580)
New List Resource: aws_opensearchserverless_access_policy (#49717)
New List Resource: aws_opensearchserverless_lifecycle_policy (#49718)
New List Resource: aws_opensearchserverless_security_config (#49769)
New List Resource: aws_opensearchserverless_security_policy (#49770)
New List Resource: aws_opensearchserverless_vpc_endpoint (#49774)
New Resource: aws_accountaccess_application (#49551)
New Resource: aws_datazone_policy_grant (#47050)
New Resource: aws_lambdamicrovms_microvm (#48984)
New Resource: aws_mailmanager_archive (#49580)

ENHANCEMENTS:

data-source/aws_dx_connection: Add prefix_pool_size_ipv4, prefix_pool_size_ipv6, prefix_pool_unallocated_count_ipv4, and prefix_pool_unallocated_count_ipv6 attributes (#49711)
data-source/aws_dx_connection: Add rate_limiter_status attribute (#48910)
data-source/aws_eks_cluster: Add pod_gc_controller_config attribute to the kube_controller_manager_config configuration block (#49728)
data-source/aws_eks_cluster_versions: Add pod_gc_controller_config attribute to the control_plane_component_config.kube_controller_manager_config configuration block (#49730)
resource/aws_bedrockagentcore_gateway_target: Add Resource Identity support (#48706)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.http.agentcore_runtime.schema and target_configuration.http.passthrough configuration blocks (#48704)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.inference configuration block (#48705)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.mcp.connector configuration block (#48706)
resource/aws_dx_connection: Add prefix_pool_size_ipv4, prefix_pool_size_ipv6, prefix_pool_unallocated_count_ipv4, and prefix_pool_unallocated_count_ipv6 attributes (#49711)
resource/aws_dx_connection: Add rate_limiter_status attribute (#48910)
resource/aws_dx_hosted_private_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 attributes (#49711)
resource/aws_dx_hosted_private_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_private_virtual_interface_accepter: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_hosted_public_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_transit_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 attributes (#49711)
resource/aws_dx_hosted_transit_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_transit_virtual_interface_accepter: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_lag: Add rate_limiter_status attribute (#48910)
resource/aws_dx_private_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_private_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_public_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_transit_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_transit_virtual_interface: Add rate_limit argument (#48910)
resource/aws_eks_cluster: Add pod_gc_controller_config argument to the kube_controller_manager_config configuration block (#49725)
resource/aws_key_pair: Add resource identity support (#49712)
resource/aws_synthetics_canary: Add kms_key_arn argument (#49406)

BUG FIXES:

provider: Fix assume_role_with_web_identity.web_identity_token being rejected when AWS_WEB_IDENTITY_TOKEN_FILE is set (#49671)
resource/aws_db_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_docdb_cluster_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_observabilityadmin_telemetry_rule_for_organization: Fix updates when all_regions is enabled (#49743)
resource/aws_rds_cluster_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_redshift_namespace_registration: Fixes errors when Importing by ID (#49690)
resource/aws_redshift_namespace_registration: Fixes errors when Importing by Identity (#49690)
resource/aws_s3_bucket: Setting object_lock_configuration.object_lock_enabled to Enabled no longer forces a replacement (#36530)
resource/aws_s3_bucket: Setting object_lock_enabled to true no longer forces a replacement (#36530)