FEATURES:
- New Data Source:
aws_iam_instance_profile
[GH-1024] - New Data Source:
aws_alb_target_group
[GH-1037] - New Data Source:
aws_iam_group
[GH-1140] - New Resource:
aws_api_gateway_request_validator
[GH-1064] - New Resource:
aws_api_gateway_gateway_response
[GH-1168] - New Resource:
aws_iot_policy
[GH-986] - New Resource:
aws_iot_certificate
[GH-1225]
IMPROVEMENTS:
- resource/aws_sqs_queue: Add support for Server-Side Encryption [GH-962]
- resource/aws_vpc: Add support for classiclink_dns_support [GH-1079]
- resource/aws_lambda_function: Add support for lambda_function vpc_config update [GH-1080]
- resource/aws_lambda_function: Add support for lambda_function dead_letter_config update [GH-1080]
- resource/aws_route53_health_check: add support for health_check regions [GH-1116]
- resource/aws_spot_instance_request: add support for request launch group [GH-1097]
- resource/aws_rds_cluster_instance: Export the RDI Resource ID for the instance [GH-1142]
- resource/aws_sns_topic_subscription: Support password-protected HTTPS endpoints [GH-861]
BUG FIXES:
- resource/aws_ami: Retry on
InvalidAMIID.NotFound
[GH-1035] - resource/aws_iam_server_certificate: Fix restriction on length of
name_prefix
[GH-1217] - resource/aws_autoscaling_group: Fix handling of empty
vpc_zone_identifier
(EC2 classic & default VPC) [GH-1191] - resource/aws_ecr_repository_policy: Add retry logic to work around IAM eventual consistency [GH-1165]
- resource/aws_ecs_service: Fixes normalization issues in placement_strategy [GH-1025]
- resource/aws_eip: Retry reading EIPs on creation [GH-1053]
- resource/aws_elastic_beanstalk_environment: Avoid spurious diffs of JSON-based
setting
s [GH-901] - resource/aws_opsworks_permission: Fix 'set permissions' failing to set ssh access [GH-1038]
- resource/aws_s3_bucket_notification: Fix missing
bucket
field after import [GH-978] - resource/aws_sfn_state_machine: Handle another NotFound exception type [GH-1062]
- resource/aws_ssm_parameter: ForceNew on ssm_parameter rename [GH-1022]
- resource/aws_instance: Update SourceDestCheck modification on new resources [GH-1065]
- resource/aws_spot_instance_request: fixed and issue with network interfaces configuration [GH-1070]
- resource/aws_rds_cluster: Modify RDS Cluster after restoring from snapshot, if required [GH-926]
- resource/aws_kms_alias: Retry lookups after creation [GH-1040]
- resource/aws_internet_gateway: Retry deletion properly on
DependencyViolation
[GH-1021] - resource/aws_elb: Cleanup ENIs after deleting ELB [GH-1036]
- resource/aws_kms_key: Retry lookups after creation [GH-1039]
- resource/aws_dms_replication_instance: Add modifying as a pending creation state [GH-1114]
- resource/aws_redshift_cluster: Trigger ForceNew aws_redshift_cluster on encrypted change [GH-1120]
- resource/aws_default_network_acl: Add support for ipv6_cidr_block [GH-1113]
- resource/aws_autoscaling_group: Suppress diffs when an empty set is specified for
availability_zones
[GH-1190] - resource/aws_vpc: Ignore ClassicLink DNS support in unsupported regions [GH-1176]
- resource/elastic_beanstalk_configuration_template: Handle missing platform [GH-1222]
- r/elasticache_parameter_group: support more than 20 parameters [GH-1221]
- data-source/aws_db_instance: Fix the output of subnet_group_name [GH-1141]
- data-source/aws_iam_server_certificate: Fix restriction on length of
name_prefix
[GH-1217]
FEATURES:
IMPROVEMENTS:
- Added ability to change the deadline for the EC2 metadata API endpoint (#950)
- resource/aws_api_gateway_integration: Add support for specifying cache key parameters (#893)
- resource/aws_cloudwatch_event_target: Add ecs_target (#977)
- resource/aws_vpn_connection: Add BGP related information on aws_vpn_connection (#973)
- resource/aws_cloudformation_stack: Add timeout support (#994)
- resource/aws_ssm_parameter: Add support for ssm parameter overwrite (#1006)
- resource/aws_codebuild_project: Add support for environment privileged_mode [GH1009]
- resource/aws_dms_endpoint: Add support for dynamodb as an endpoint target (#1002)
- resource/aws_s3_bucket: Support lifecycle tags filter (#899)
- resource/aws_s3_bucket_object: Allow to set WebsiteRedirect on S3 object (#1020)
BUG FIXES:
- resource/aws_waf: Only set FieldToMatch.Data if not empty (#953)
- resource/aws_elastic_beanstalk_application_version: Scope labels to application (#956)
- resource/aws_s3_bucket: Allow use of
days = 0
with lifecycle transition (#957) - resource/aws_ssm_maintenance_window_task: Make task_parameters updateable on aws_ssm_maintenance_window_task resource (#965)
- resource/aws_kinesis_stream: don't force stream destroy on shard_count update (#894)
- resource/aws_cloudfront_distribution: Remove validation from custom_origin params (#987)
- resource_aws_route53_record: Allow import of Route 53 records with underscores in the name (#14717)
- d/aws_db_snapshot: Id was being set incorrectly (#992)
- resource/aws_spot_fleet_request: Raise the create timeout to be 10m (#993)
- d/aws_ecs_cluster: Add ARN as an exported param for aws_ecs_cluster (#991)
- resource/aws_ebs_volume: Not setting the state for ebs_volume correctly (#999)
- resource/aws_network_acl: Make action in ingress / egress case insensitive (#1000)
BUG FIXES:
- Fixing malformed ARN attribute for aws_security_group data source (#910)
BACKWARDS INCOMPATIBILITIES / NOTES:
FEATURES:
- New Resource:
aws_vpn_gateway_route_propagation
[#15137](hashicorp/terraform#15137)
IMPROVEMENTS:
- resource/ebs_snapshot: Add support for tags (#3)
- resource/aws_elasticsearch_domain: now retries on IAM role association failure (#12)
- resource/codebuild_project: Increase timeout for creation retry (IAM) (#904)
- resource/dynamodb_table: Expose stream_label attribute (#20)
- resource/opsworks: Add support for configurable timeouts in AWS OpsWorks Instances. (#857)
- Fix handling of AdRoll's hologram clients (#17)
- resource/sqs_queue: Add support for name_prefix to aws_sqs_queue (#855)
- resource/iam_role: Add support for iam_role tp force_detach_policies (#890)
BUG FIXES:
- fix aws cidr validation error [#15158](hashicorp/terraform#15158)
- resource/elasticache_parameter_group: Retry deletion on InvalidCacheParameterGroupState (#8)
- resource/security_group: Raise creation timeout (#9)
- resource/rds_cluster: Retry modification on InvalidDBClusterStateFault (#18)
- resource/lambda: Fix incorrect GovCloud regexes (#16)
- Allow ipv6_cidr_block to be assigned to peering_connection (#879)
- resource/rds_db_instance: Correctly create cross-region encrypted replica (#865)
- resource/eip: dissociate EIP on update (#878)
- resource/iam_server_certificate: Increase deletion timeout (#907)