What's Changed
[1.3.10] — 2026-04-23
Fixed
- DynamoDB
DeletionProtectionEnabledsilently ignored onCreateTable/UpdateTable— the table description never surfaced the field, andDeleteTablealways succeeded regardless. Terraform'saws_dynamodb_tabletreats deletion protection as a safety-critical drift detector, so tables created withdeletion_protection_enabled = trueappeared unprotected and could be destroyed by aterraform destroythat real AWS would have refused.CreateTablenow stores the flag (defaulting toFalse),UpdateTabletoggles it,DescribeTablereturns the current value, andDeleteTablerefuses withValidationException: Table can't be deleted as deletion protection is enabledwhen it's on — matching AWS behaviour exactly. - S3
ListBucketsmissingBucketArnandBucketRegion— the response contained onlyNameandCreationDate, so SDKs/tooling that consumed the newer fields (added by AWS in 2024) receivedNoneand either errored or silently skipped buckets.ListBucketsnow emits both fields per bucket (BucketArnasarn:aws:s3:::<name>,BucketRegionfrom the bucket's stored region orMINISTACK_REGION). Reported by @McDoit.