hashicorp/terraform-provider-aws v6.67.0

on GitHub

6.67.0 (September 30, 2026)

NOTES:

• resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

• New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
• New List Resource: aws_default_security_group (#50120)
• New List Resource: aws_directory_service_ip_route (#50138)
• New List Resource: aws_directoryservicedata_user (#50001)
• New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
• New Resource: aws_directory_service_ip_route (#50138)
• New Resource: aws_directory_service_ip_routes_exclusive (#50204)
• New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

• resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
• resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
• resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
• resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
• resource/aws_default_security_group: Add Resource Identity support (#50120)
• resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
• resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
• resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

• list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
• resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
• resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
• resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
• resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
• resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)