Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update terraform aws to v5 #1125

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 7, 2023

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider major ~> 3.69.0 -> ~> 5.84.0
aws (source) required_provider major ~> 4.20.0 -> ~> 5.84.0

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.84.0

Compare Source

NOTES:

  • resource/aws_kms_custom_key_store: We cannot acceptance test the support for external key stores added in this release. The impementation is best effort and we ask for community help in testing. (#​40557)

FEATURES:

  • New Ephemeral Resource: aws_eks_cluster_auth (#​40660)
  • New Resource: aws_media_packagev2_channel_group (#​38406)

ENHANCEMENTS:

  • data-source/aws_ami: Add uefi_data attribute (#​40210)
  • data-source/aws_ec2_instance_type: Add bandwidth_weightings, boot_modes, default_network_card_index, efa_maximum_interfaces, ena_srd_supported, inference_accelerators.memory_size, media_accelerators, network_cards, neuron_devices, nitro_enclaves_support, nitro_tpm_support, nitro_tpm_supported_versions, phc_support, supported_cpu_features, total_inference_memory, total_media_memory, and total_neuron_device_memory attributes (#​40717)
  • data-source/aws_elb_hosted_zone_id: Add hosted zone ID for mx-central-1 AWS Region (#​40940)
  • data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for mx-central-1 AWS Region (#​40940)
  • data-source/aws_s3_bucket: Add hosted zone ID for mx-central-1 AWS Region (#​40940)
  • provider: Support mx-central-1 as a valid AWS Region (#​40940)
  • resource/aws_ami: Add uefi_data argument (#​40210)
  • resource/aws_ami_copy: Add uefi_data attribute (#​40210)
  • resource/aws_ami_from_instance: Add uefi_data attribute (#​40210)
  • resource/aws_cloudtrail: Add userIdentity.arn to advanced_event_selector.field_selector (#​40629)
  • resource/aws_elasticache_user: engine is now case insensitive (#​40794)
  • resource/aws_elasticache_user_group: engine is now case insensitive (#​40794)
  • resource/aws_globalaccelerator_accelerator: Add arn attribute (#​40930)
  • resource/aws_globalaccelerator_custom_routing_accelerator: Add arn attribute (#​40930)
  • resource/aws_globalaccelerator_custom_routing_listener: Add arn attribute (#​40930)
  • resource/aws_globalaccelerator_listener: Add arn attribute (#​40930)
  • resource/aws_kms_custom_key_store: Add support for external key stores (#​40557)
  • resource/aws_lb_listener: Add routing_http_response_server_enabled, routing_http_response_strict_transport_security_header_value, routing_http_response_access_control_allow_origin_header_value, routing_http_response_access_control_allow_methods_header_value, routing_http_response_access_control_allow_headers_header_value, routing_http_response_access_control_allow_credentials_header_value, routing_http_response_access_control_expose_headers_header_value, routing_http_response_access_control_max_age_header_value, routing_http_response_content_security_policy_header_value, routing_http_response_x_content_type_options_header_value, routing_http_response_x_frame_options_header_value, routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name, routing_http_request_x_amzn_mtls_clientcert_issuer_header_name, routing_http_request_x_amzn_mtls_clientcert_subject_header_name, routing_http_request_x_amzn_mtls_clientcert_validity_header_name, routing_http_request_x_amzn_mtls_clientcert_leaf_header_name, routing_http_request_x_amzn_mtls_clientcert_header_name, routing_http_request_x_amzn_tls_version_header_name, and routing_http_request_x_amzn_tls_cipher_suite_header_name arguments in support of HTTP header modification (#​40736)
  • resource/aws_route53_health_check: Add triggers argument to support synchronization with upstream CloudWatch alarm changes (#​40918)
  • resource/aws_sagemaker_endpoint_configuration: Support setting production_variants.managed_instance_scaling and shadow_production_variants.managed_instance_scaling to 0 (#​40882)

BUG FIXES:

  • resource/aws_apprunner_vpc_ingress_connection: Change ingress_vpc_configuration, name, and service_arn to ForceNew (#​40927)
  • resource/aws_datasync_location_s3: Fix location URI global ID and subdirectory (...) does not match pattern "..." errors on Read when s3_bucket_arn is an S3 on Outposts access point (#​40929)
  • resource/aws_ecs_task_definition: Correctly detect differences in volume.configure_at_launch and volume.docker_volume_configuration (#​40853)
  • resource/aws_lambda_invocation: Fix failed input transformations when upgrading from a version less than v5.1.0 with an input that cannot be marshaled into a map[string]interface{} (#​40958)
  • resource/aws_lambda_invocation: Prevent a new invocation when upgrading from a version less than v5.1.0 with no configuration changes (#​40958)
  • resource/aws_msk_cluster: Prevent persistent differences when broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughput is unset (#​40910)
  • resource/aws_msk_cluster: Properly disable provisioned throughput when a previously configured broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughput block is removed (#​40910)
  • resource/aws_ses_receipt_rule: Retry errors caused by IAM eventual consistency (#​40873)

v5.83.1

Compare Source

BUG FIXES:

  • resource/aws_route53_record: Correct fdqn value if name is a wildcard domain name (the leftmost label is *). This fixes a regression introduced in v5.83.0 (#​40868)

v5.83.0

Compare Source

NOTES:

  • provider: The retry handling in the apigatewayv2 client has been updated to more extensively match ConflictException error responses. This change should be transparent to users, but if any unexpected changes in behavior with apigatewayv2 resources occur following an upgrade to this release, please open a bug report. (#​40840)
  • resource/aws_api_gateway_domain_name_access_association: Deprecates id in favor of arn. (#​40626)
  • resource/aws_route53_cidr_location: Deprecates id. (#​40626)
  • resource/aws_s3_directory_bucket: Deprecates id in favor of bucket. (#​40626)

FEATURES:

  • New Data Source: aws_cloudwatch_event_buses (#​40662)
  • New Data Source: aws_ecs_clusters (#​40638)
  • New Data Source: aws_route53_records (#​38186)
  • New Ephemeral Resource: aws_cognito_identity_openid_token_for_developer_identity (#​40763)
  • New Resource: aws_bedrockagent_agent_collaborator (#​40559)
  • New Resource: aws_cleanrooms_membership (#​35165)
  • New Resource: aws_cloudwatch_log_delivery (#​40731)
  • New Resource: aws_cloudwatch_log_delivery_destination (#​40731)
  • New Resource: aws_cloudwatch_log_delivery_destination_policy (#​40731)
  • New Resource: aws_cloudwatch_log_delivery_source (#​40731)
  • New Resource: aws_cloudwatch_log_index_policy (#​40594)
  • New Resource: aws_vpclattice_resource_gateway (#​40821)

ENHANCEMENTS:

  • data-source/aws_codebuild_fleet: Add compute_configuration attribute (#​40752)
  • data-source/aws_dms_endpoint: Add kafka_settings.sasl_mechanism attribute (#​36918)
  • data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-southeast-7 AWS Region (#​40850)
  • data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-southeast-7 AWS Region (#​40850)
  • data-source/aws_rds_certificate: Add default_for_new_launches attribute (#​40536)
  • data-source/aws_rds_engine_version: Add supports_certificate_rotation_without_restart, supports_integrations, and supports_local_write_forwarding attributes (#​40700)
  • data-source/aws_s3_bucket: Add hosted zone ID for ap-southeast-7 AWS Region (#​40850)
  • data-source/aws_vpc_endpoint_service: Add region attribute (#​40795)
  • data-source/aws_vpc_endpoint_service: Add service_regions argument (#​40795)
  • provider: Support ap-southeast-7 as a valid AWS Region (#​40849)
  • resource/aws_appflow_flow: Add data_transfer_api attribute to destination_flow_config_list.destination_connector_properties.salesforce (#​34937)
  • resource/aws_cloudfront_distribution: Add grpc_config argument to default_cache_behavior and ordered_cache_behavior configuration blocks (#​40762)
  • resource/aws_codebuild_fleet: Add compute_configuration argument (#​40752)
  • resource/aws_cognito_user_pool: Add email_mfa_configuration argument (#​40734)
  • resource/aws_cognito_user_pool: Add sign_in_policy and web_authn_configuration arguments (#​40765)
  • resource/aws_cognito_user_pool: Add user_pool_tier argument (#​40633)
  • resource/aws_dms_endpoint: Add kafka_settings.sasl_mechanism argument (#​36918)
  • resource/aws_ecr_account_setting: Add valid values for registry policy scope to name and value arguments (#​40772)
  • resource/aws_eip_association: Adds validation to only allow one of instance_id or network_interface_id (#​40769)
  • resource/aws_eks_node_group: Add node_repair_config configuration block (#​40698)
  • resource/aws_elasticache_user: Add VALKEY as supported value for 'engine' argument (#​40764)
  • resource/aws_elasticache_user_group: Add VALKEY as supported value for 'engine' argument (#​40764)
  • resource/aws_emr_studio: Add encryption_key_arn argument (#​40771)
  • resource/aws_quicksight_user: Add user_invitation_url attribute (#​40775)
  • resource/aws_rds_cluster: Support iam-db-auth-error as a valid value for enabled_cloudwatch_logs_exports (#​40789)
  • resource/aws_rds_integration: Add data_filter argument (#​40816)
  • resource/aws_s3_object_copy: Add override_provider configuration block, allowing tags inherited from the provider default_tags configuration block to be ignored (#​40689)

BUG FIXES:

  • resource/aws_api_gateway_domain_name: Fixed error when adding policy to existing private domain name (#​40708)
  • resource/aws_apigatewayv2_api: Don't overwrite the configured values of description, name or version if they are not present in the OpenAPI definition body (#​40707)
  • resource/aws_apigatewayv2_route: Fix retry handling of ConflictException error responses (#​40840)
  • resource/aws_cloudfront_cache_policy: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when parameters_in_cache_key_and_forwarded_to_origin.cookies_config, parameters_in_cache_key_and_forwarded_to_origin.headers_config, or parameters_in_cache_key_and_forwarded_to_origin.query_strings_config are empty (#​40815)
  • resource/aws_codebuild_fleet: Allow scaling_configuration to be removed on Update (#​40773)
  • resource/aws_codebuild_project: Allow file_system_locations to be removed on Update (#​40842)
  • resource/aws_ec2_instance_connect_endpoint: Set fips_dns_name to an empty value ("") when no value is returned from the EC2 API. This fixes known-after-apply loops in Regions that don't support FIPS endpoints (#​37939)
  • resource/aws_emr_studio: Fix issue with IAM/KMS policy eventual consistency handling not working (#​40771)
  • resource/aws_glue_catalog_database: Fix crash when expanding create_table_default_permission with a nil principal block (#​40761)
  • resource/aws_instance: Always set http_tokens when metadata_options is updated (#​40727)
  • resource/aws_instance: Set new computed value for public_dns and public_ip attributes when changing instance_type, user_data, or user_data_base64 (#​40710)
  • resource/aws_internet_gateway: Handle operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#​40790)
  • resource/aws_internet_gateway_attachment: Handle operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#​40790)
  • resource/aws_quicksight_data_set: Correctly expand logical_table_map.tag_column_operation.tags.column_description (#​40713)
  • resource/aws_rds_instance Fix manage_master_user_password being updated in state when update errors (#​40538)
  • resource/aws_route53_record: Fix perpetual diff if alias.name contains characters that the Route 53 API escapes (#​40154)
  • resource/aws_route53_zone: Fix perpetual diff if name contains characters that the Route 53 API escapes (#​40154)
  • resource/aws_ses_identity_notification_topic: Prevent destroy failure when resource is already deleted outside of Terraform (#​40684)
  • resource/aws_sesv2_configuration_set: Fix handling of delivery_options.max_delivery_seconds when not configured (#​40670)
  • resource/aws_sesv2_configuration_set_event_destination: Retry IAM eventual consistency errors (#​40843)
  • resource/aws_sqs_queue: Fix timeout error on creation if sqs_managed_sse_enabled=true and kms_data_key_reuse_period_seconds is configured (#​40729)

v5.82.2

Compare Source

BUG FIXES:

  • data-source/aws_lb_listener: Add mutual_authentication.advertise_trust_store_ca_names attribute. This fixes a regression introduced in v5.82.0 causing setting mutual_authentication: Invalid address to set: []string{"mutual_authentication", "0", "advertise_trust_store_ca_names"} errors (#​40658)

v5.82.1

Compare Source

ENHANCEMENTS:

  • resource/aws_autoscaling_group: Add availability_zone_distribution argument (#​40634)

BUG FIXES:

  • data-source/aws_iam_policy_document: Reverts plan-time validation for statement sid (#​40639)

v5.82.0

Compare Source

NOTES:

  • resource/aws_resourcegroups_resource: The format of the read-only id attribute has changed to prevent inconsistent parsing which resulted in provider crashes under certain conditions. The new format is a comma-delimited string combining group_arn and resource_arn in their entirety. Configuarations relying on the previous format may need to be updated to continue functioning correctly. (#​40579)

FEATURES:

  • New Data Source: aws_servicecatalogappregistry_attribute_group_associations (#​38306)
  • New Resource: aws_api_gateway_domain_name_access_association (#​40566)
  • New Resource: aws_cloudfront_vpc_origin (#​40239)
  • New Resource: aws_memorydb_multi_region_cluster (#​40376)
  • New Resource: aws_networkmanager_dx_gateway_attachment (#​40546)
  • New Resource: aws_rds_cluster_snapshot_copy (#​40398)

ENHANCEMENTS:

  • data-source/aws_dx_gateway: Add arn attribute (#​40546)
  • data-source/aws_iam_policy_document: Add plan-time validation that the statement sid is valid, including on alphanumeric characters (#​40562)
  • data-source/aws_vpc_endpoint: Add service_region attribute (#​40583)
  • resource/aws_bedrockagent_agent: Add agent_collaboration attribute to configure agent collaboration role (#​40543)
  • resource/aws_cloudfront_distribution: Add origin.vpc_origin_config argument (#​40239)
  • resource/aws_db_parameter_group: Support import of name_prefix argument (#​40622)
  • resource/aws_dx_gateway: Add arn attribute (#​40546)
  • resource/aws_fsx_lustre_file_system: Add efa_enabled argument (#​40381)
  • resource/aws_lb_listener: Add advertise_trust_store_ca_names attribute to the mutual_authentication configuration block (#​40550)
  • resource/aws_memorydb_cluster: Add multi_region_cluster_name argument (#​40376)
  • resource/aws_networkmanager_attachment_accepter: Add edge_locations attribute (#​40546)
  • resource/aws_resourcegroups_resource: Add import support (#​40579)
  • resource/aws_vpc_endpoint: Add service_region argument (#​40583)

BUG FIXES:

  • data-source/aws_acmpca_certificate_authority: Ignore AccessDeniedException: ... is not authorized to perform: acm-pca:GetCertificateAuthorityCsr on resource: ... errors for RAM-shared CAs (#​39952)
  • data-source/aws_licensemanager_received_license: Fix setting entitlements: Invalid address to set: []string{"entitlements", "0", "overage"} errors (#​40621)
  • resource/aws_amplify_domain_association: No longer ignores changes to certificate_settings when updating. (#​40589)
  • resource/aws_amplify_domain_association: Prevent "unexpected state" error when setting certificate_settings.type to CUSTOM. (#​40589)
  • resource/aws_amplify_domain_association: Prevent ValidationException when setting certificate_settings.type to AMPLIFY_MANAGED. (#​40589)
  • resource/aws_amplify_domain_association: Prevent permanent diff when certificate_settings not set. (#​40589)
  • resource/aws_amplify_domain_association: Prevents panic in some circumstances when certificate_settings is not set during update. (#​40589)
  • resource/aws_api_gateway_domain_name: Correct arn for private custom domain names (#​40566)
  • resource/aws_codeconnections_host: Mark vpc_configuration.tls_certificate as Optional (#​40574)
  • resource/aws_elasticache_replication_group: Prevent perpetual diff which triggers resource replacement on at_rest_encryption_enabled when engine is valkey. (#​40514)
  • resource/aws_lakeformation_permissions: Add support for IAMPrincipals principal group (#​38600)
  • resource/aws_lakeformation_permissions: Fix refreshing state so order is not considered in permissions and permissions_with_grant_option attributes (#​38047)
  • resource/aws_lakeformation_resource_lf_tag: Fix panic when resource tries to destroy a LFTag reference that does not exist (#​40584)
  • resource/aws_lambda_invocation: Set new computed value for result attribute when changing input attribute, for lifecycle scope "CRUD" (#​34263)
  • resource/aws_medialive_channel: Added missing teletext_destination_settings. (#​33797)
  • resource/aws_rds_cluster: Fix issue with waiter when modifying allocated_storage (#​40601)
  • resource/aws_resourcegroups_resource: Fix crash when parsing certain ARN formats (#​40579)
  • resource/aws_s3_bucket: Destroying a bucket with force_destroy = true can now delete objects with non-XML-safe keys (#​40537)
  • resource/aws_s3_directory_bucket: Destroying a directory bucket with force_destroy = true can now delete objects with non-XML-safe keys (#​40537)
  • resource/aws_secretsmanager_secret_rotation: Fix bug where automatically_after_days was not being set properly when schedule_expression had been set previously (#​34295)
  • resource/aws_secretsmanager_secret_rotation: Retry rotation in case it has not yet propagated when previously an error would occur: InvalidRequestException: A previous rotation isn't complete. That rotation will be reattempted. (#​34295)
  • resource/aws_sqs_queue_redrive_allow_policy: Fix perpetual redrive_allow_policy diffs (#​40604)

v5.81.0

Compare Source

FEATURES:

  • New Data Source: aws_servicecatalogappregistry_attribute_group (#​38188)
  • New Ephemeral Resource: aws_ssm_parameter (#​40313)
  • New Resource: aws_bedrock_inference_profile (#​40294)
  • New Resource: aws_cloudwatch_log_anomaly_detector (#​40437)
  • New Resource: aws_ecr_account_setting (#​40219)
  • New Resource: aws_msk_single_scram_secret_association (#​37056)
  • New Resource: aws_servicecatalogappregistry_attribute_group (#​38183)
  • New Resource: aws_servicecatalogappregistry_attribute_group_association (#​38290)

ENHANCEMENTS:

  • data-source/aws_api_gateway_domain_name: Add policy and domain_name_id attributes (#​40364)
  • data-source/aws_servicecatalogappregistry_application: Add tags attribute (#​38243)
  • data-source/aws_sesv2_configuration_set: Add delivery_options.max_delivery_seconds and tracking_options.https_policy attributes (#​40194)
  • resource/aws_api_gateway_base_path_mapping: Add domain_name_id argument (#​40447)
  • resource/aws_api_gateway_domain_name: Add policy argument and domain_name_id attribute (#​40364)
  • resource/aws_api_gateway_domain_name: Support PRIVATE as a valid value for endpoint_configuration.types argument, enabling custom domain name support for private REST API endpoints (#​40364)
  • resource/aws_ebs_snapshot_copy: Add completion_duration_minutes argument (#​40336)
  • resource/aws_glue_catalog_table_optimizer: Add configuration.retention_configuration and configuration.orphan_file_deletion_configuration attributes. (#​40199)
  • resource/aws_instance: Add enable_primary_ipv6 argument to add support for enabling primary IPv6 addresses on EC2 instances (#​36425)
  • resource/aws_kinesis_stream: Add plan-time validation that shard_count would not exceed the AWS account's shard quota when the data stream capacity mode is PROVISIONED, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires the kinesis:DescribeLimits IAM permission (#​40499)
  • resource/aws_kinesis_stream: Add plan-time validation that creation of an on-demand stream would not exceed the AWS account's data stream quota, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires the kinesis:DescribeLimits IAM permission (#​40499)
  • resource/aws_msk_replicator: Add topic_replication.topic_name_configuration argument (#​40101)
  • resource/aws_network_interface: Add enable_primary_ipv6 argument to add support for enabling primary IPv6 addresses for network interfaces (#​36425)
  • resource/aws_networkfirewall_firewall_policy: Add stateful_engine_options.flow_timeouts argument (#​39996)
  • resource/aws_rds_cluster: Add serverlessv2_scaling_configuration.seconds_until_auto_pause argument (#​40441)
  • resource/aws_rds_global_cluster: Add tags argument and tags_all attribute (#​40470)
  • resource/aws_sagemaker_notebook_instance: Support notebook-al2-v3 value for platform_identifier (#​40484)
  • resource/aws_servicecatalogappregistry_application: Add tags argument and tags_all attribute (#​38243)
  • resource/aws_sesv2_configuration_set: Add delivery_options.max_delivery_seconds and tracking_options.https_policy arguments (#​40194)

BUG FIXES:

  • data-source/aws_kinesis_stream: Fix InvalidArgumentException: NextToken and StreamName cannot be provided together errors when the data stream has more than 1000 shards (#​40499)
  • resource/aws_ce_cost_category: Change rule from TypeSet to TypeList as order is significant (#​40521)
  • resource/aws_fsx_windows_file_system: Fix plan-time validation of throughput_capacity validation to allow values up to 12228 (#​40468)
  • resource/aws_networkfirewall_logging_configuration: Correctly manage all configured logging_configuration.log_destination_configs (#​40092)
  • resource/aws_rds_cluster: Fix InvalidDBClusterStateFault errors when deleting clusters that are members of a global cluster (#​40333)
  • resource/aws_rds_cluster: Fix InvalidParameterValue: Serverless v2 maximum capacity 0.0 isn't valid. The maximum capacity must be at least 1.0. errors when removing serverlessv2_scaling_configuration in an update (#​40511)
  • resource/aws_rds_cluster: Respect storage_type when restoring from S3 (#​40471)
  • resource/aws_rds_cluster: Respect storage_type when restoring from snapshot (#​40471)
  • resource/aws_rds_cluster: Respect storage_type when restoring to a point in time (#​40471)
  • resource/aws_rds_global_cluster: Mark database_name as Computed. This prevents resource recreation when the source cluster specifies a database_name (#​40469)

v5.80.0

Compare Source

FEATURES:

  • New Resource: aws_codeconnections_connection (#​40300)
  • New Resource: aws_codeconnections_host (#​40300)
  • New Resource: aws_s3tables_namespace (#​40420)
  • New Resource: aws_s3tables_table (#​40420)
  • New Resource: aws_s3tables_table_bucket (#​40420)
  • New Resource: aws_s3tables_table_bucket_policy (#​40420)
  • New Resource: aws_s3tables_table_policy (#​40420)

ENHANCEMENTS:

  • resource/aws_bedrockagent_agent: Increase instruction max length for validation to 8000 (#​40279)
  • resource/aws_dynamodb_table_replica: Add deletion_protection_enabled argument (#​35359)
  • resource/aws_rds_cluster: Adjust serverlessv2_scaling_configuration.max_capacity and serverlessv2_scaling_configuration.min_capacity minimum values to 0 to support Amazon Aurora Serverless v2 scaling to 0 ACUs (#​40230)
  • resource/aws_s3_directory_bucket: Support LocalZone as a valid value for location.type, enabling support for Amazon S3 Express One Zone in AWS Dedicated Local Zones (#​40339)

BUG FIXES:

  • resource/aws_bedrock_provisioned_model_throughput: Properly manages tags_all when planning. (#​40305)
  • resource/aws_connect_contact_flow: Fix deserialization failed, failed to decode response body with invalid JSON errors on Read (#​40419)
  • resource/aws_rds_cluster_instance: Fix error when destroying from a read replica cluster (#​40409)

v5.79.0

Compare Source

FEATURES:

  • New Resource: aws_vpc_block_public_access_exclusion (#​40235)
  • New Resource: aws_vpc_block_public_access_options (#​40233)

ENHANCEMENTS:

  • resource/aws_eks_cluster: Add compute_config, storage_config, and kubernetes_network_config.elastic_load_balancing arguments for EKS Auto Mode (#​40370)
  • resource/aws_eks_cluster: Add remote_network_config argument for EKS Auto Mode (#​40371)
  • resource/aws_lambda_event_source_mapping: Add metrics_config argument (#​40322)
  • resource/aws_lambda_event_source_mapping: Add provisioned_poller_config argument (#​40303)
  • resource/aws_rds_cluster: Add ability to promote read replica cluster to standalone (#​40337)
  • resource/aws_vpc_endpoint_service: Add supported_regions argument (#​40346)

BUG FIXES:

  • resource/aws_fsx_openzfs_file_system: Increase maximum value of disk_iops_configuration.iops from 350000 to 400000 for deployment_type = "SINGLE_AZ_2" (#​40359)

v5.78.0

Compare Source

NOTES:

  • resource/aws_s3_bucket_lifecycle_configuration: Lifecycle configurations can now be applied to directory buckets (#​40268)

FEATURES:

  • New Resource: aws_iam_organizations_features (#​40164)

ENHANCEMENTS:

  • data-source/aws_memorydb_cluster: Add engine attribute (#​40224)
  • data-source/aws_memorydb_snapshot: Add cluster_configuration.engine attribute (#​40224)
  • resource/aws_memorydb_cluster: Add engine argument (#​40224)
  • resource/aws_memorydb_snapshot: Add cluster_configuration.engine attribute (#​40224)

BUG FIXES:

  • data-source/aws_rds_reserved_instance_offering: When product_description (e.g., "postgresql") is a substring of multiple products, fix Error: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering (#​40281)
  • provider: Suppress Warning: AWS account ID not found for provider when skip_requesting_account_id is true (#​40264)
  • resource/aws_batch_job_definition: Fix crash when specifying eksProperties or ecsProperties block (#​40172)
  • resource/aws_bedrock_guardrail: Fix perpetual diff if multiple content_policy_config.filters_configs are specified. (#​40304)
  • resource/aws_chatbot_slack_channel_configuration: Fix inconsistent provider result when order of sns_topic_arnschanges (#​40253)
  • resource/aws_chatbot_teams_channel_configuration: Fix inconsistent provider result when order of sns_topic_arnschanges (#​40291)
  • resource/aws_db_instance: When changing storage_type from io1 or io2 to gp3, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#​37257)
  • resource/aws_db_instance: When changing a gp3 volume's allocated_storage to a value larger than the threshold value for engine, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#​28847)

v5.77.0

Compare Source

NOTES:

FEATURES:

  • New Ephemeral Resource: aws_kms_secrets (#​40009)
  • New Ephemeral Resource: aws_lambda_invocation (#​39988)
  • New Ephemeral Resource: aws_secretsmanager_secret_version (#​40009)
  • New Resource: aws_rds_instance_state (#​40180)

ENHANCEMENTS:

  • data-source/aws_ami: Add warning diagnostic when most_recent is true and certain filter criteria are missing (#​40211)
  • data-source/aws_ecs_service: Add availability_zone_rebalancing attribute (#​40225)
  • resource/aws_ecs_service: Add availability_zone_rebalancing attribute (#​40225)
  • resource/aws_ecs_service: Add vpc_lattice_configurations argument (#​40177)
  • resource/aws_ecs_task_definition: Add versionConsistency argument to container_definitions (#​40216)
  • resource/aws_lambda_function: Add support for nodejs22.x runtime value (#​40277)
  • resource/aws_lambda_layer_version: Add support for nodejs22.x compatible_runtimes value (#​40277)
  • resource/aws_rds_global_cluster: Add endpoint argument to point to the writer DB instance in the current primary cluster (#​39960)

BUG FIXES:

  • data-source/aws_subnet: Set tags from the DescribeSubnets response, removing the need for the ec2:DescribeTags IAM permission (#​40144)
  • resource/aws_cognito_user_pool: Fix crash when hashing nil schema element (#​40195)
  • resource/aws_eks_addon: Fix crash when pod_identity_association is modified (#​40168)
  • resource/aws_eks_addon: Fix to prevent persistent differences when pod_identity_association is changed (#​40168)

v5.76.0

Compare Source

FEATURES:

  • New Resource: aws_vpc_security_group_vpc_association (#​40069)

ENHANCEMENTS:

  • resource/aws_lambda_function: Add support for python3.13 runtime value (#​40277)
  • resource/aws_lambda_layer_version: Add support for python3.13 compatible_runtimes value (#​40277)
  • resource/aws_medialive_channel: Add missing h265 codec settings (#​40071)

BUG FIXES:

  • resource/aws_api_gateway_integration: Fix BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters and/or cache_key_parameters (#​40124)
  • resource/aws_api_gateway_method: Fix BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters (#​40124)
  • resource/aws_autoscaling_group: Handle eventual consistency issues that occur when using a launch_template that is updated causing ValidationError: You must use a valid fully-formed launch template. (#​40088)
  • resource/aws_eip: Properly surface errors during deletion when ipam_pool_id is set (#​40082)
  • resource/aws_elasticache_reserved_cache_node: Fix Provider returned invalid result object after apply errors (#​40090)
  • resource/aws_iam_group_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
  • resource/aws_iam_group_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
  • resource/aws_iam_instance_profile: Handle eventual consistency issues that occur when this resource is updated and has dependents (#​40088)
  • resource/aws_iam_role_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
  • resource/aws_iam_role_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
  • resource/aws_iam_user_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
  • resource/aws_iam_user_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
  • resource/aws_launch_template: Handle eventual consistency issues that occur when this resource is updated and has dependents (#​40088)

v5.75.1

Compare Source

ENHANCEMENTS:

  • data-source/aws_cloudwatch_event_bus: Add description attribute (#​39980)
  • resource/aws_api_gateway_account: Add attribute reset_on_delete to properly reset CloudWatch Role ARN on deletion. (#​40004)
  • resource/aws_cloudwatch_event_bus: Add description argument (#​39980)

BUG FIXES:

  • resource/aws_api_gateway_deployment: Rolls back validation of canary_settings and stage_description when stage_name not set. (#​40067)
  • resource/aws_dynamodb_table: Allow table TTL to be disabled by allowing ttl[0].attribute_name to be set when ttl[0].enabled is false (#​40046)
  • resource/aws_sagemaker_domain: Fix issue causing a ValidationException on updates when RStudio is disabled on the domain (#​40049)

v5.75.0

Compare Source

BREAKING CHANGES:

  • resource/aws_api_gateway_stage: Add canary_settings.deployment_id attribute as required (#​39929)

NOTES:

  • provider: validation of arguments implementing the custom ARNType will properly surface validation errors (#​40008)
  • resource/aws_api_gateway_stage: deployment_id was added to canary_settings as a required attribute. This breaking change was necessary to make canary_settings

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 13 times, most recently from 9d5f0c1 to 5a6a960 Compare June 14, 2023 08:22
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 8 times, most recently from 6c2eac8 to afb0092 Compare June 22, 2023 07:36
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from 2e82264 to b146331 Compare June 23, 2023 08:00
@CLAassistant
Copy link

CLAassistant commented Jun 23, 2023

CLA assistant check
All committers have signed the CLA.

@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 6 times, most recently from 3d1d103 to 00ef1f8 Compare June 30, 2023 03:55
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from ad9797b to d2d60d5 Compare October 28, 2024 20:42
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from f252486 to e93f53e Compare November 4, 2024 21:12
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 5 times, most recently from 64a6f9c to 96f6555 Compare November 14, 2024 19:14
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 3 times, most recently from b8c5480 to d04620d Compare November 21, 2024 20:15
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from 2e27176 to 5d46f0a Compare December 3, 2024 19:19
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from 5df3b2a to 19a03a7 Compare December 9, 2024 23:35
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 3 times, most recently from df2191a to a450717 Compare December 18, 2024 22:54
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 3 times, most recently from 82fe2d3 to f92225a Compare December 20, 2024 20:40
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from 7479b81 to 7407a4b Compare January 8, 2025 08:08
@renovate renovate bot changed the title chore(deps): update terraform provides (major) chore(deps): update terraform aws to v5 Jan 8, 2025
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch 2 times, most recently from d3186d8 to 60d1efe Compare January 11, 2025 11:00
@renovate renovate bot force-pushed the renovate/major-terraform-provider branch from 60d1efe to d3ec24b Compare January 16, 2025 22:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant