chore(deps): update module aws/aws-sdk-go to v1.21.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/aws/aws-sdk-go	require	minor	v1.20.21 -> v1.21.3

---

Release Notes

aws/aws-sdk-go

v1.21.3

Compare Source

===

Service Client Updates

• service/secretsmanager: Updates service API and documentation
  • This release increases the maximum allowed size of SecretString or SecretBinary from 7KB to 10KB in the CreateSecret, UpdateSecret, PutSecretValue and GetSecretValue APIs. This release also increases the maximum allowed size of ResourcePolicy from 4KB to 20KB in the GetResourcePolicy and PutResourcePolicy APIs.
• service/ssm: Updates service API and documentation
  • You can now use Maintenance Windows to select a resource group as the target. By selecting a resource group as the target of a Maintenance Window, customers can perform routine tasks across different resources such as Amazon Elastic Compute Cloud (AmazonEC2) instances, Amazon Elastic Block Store (Amazon EBS) volumes, and Amazon Simple Storage Service(Amazon S3) buckets within the same recurring time window.

v1.21.2

Compare Source

===

Service Client Updates

• aws/endpoints: Updated Regions and Endpoints metadata.
• service/mq: Updates service API and documentation
  • Adds support for AWS Key Management Service (KMS) to offer server-side encryption. You can now select your own customer managed CMK, or use an AWS managed CMK in your KMS account.
• service/shield: Updates service API and documentation
  • Adding new VectorType (HTTP_Reflection) and related top contributor types to describe WordPress Pingback DDoS attacks.

SDK Enhancements

• Fixup SDK source formating, test error checking, and simplify type conervsions
  • #​2703, #​2704, #​2705, #​2706, #​2707, #​2708

SDK Bugs

v1.21.1

Compare Source

Release v1.21.1 (2019-07-19)

Service Client Updates

• aws/endpoints: Updated Regions and Endpoints metadata.
• service/iotevents: Updates service API and documentation
• service/sqs: Updates service documentation
  • This release updates the information about the availability of FIFO queues and includes miscellaneous fixes.

v1.21.0

Compare Source

===

Service Client Updates

• service/codedeploy: Updates service documentation
  • Documentation updates for codedeploy
• service/comprehend: Updates service API and documentation
• service/ecs: Updates service API and documentation
  • This release of Amazon Elastic Container Service (Amazon ECS) introduces support for cluster settings. Cluster settings specify whether CloudWatch Container Insights is enabled or disabled for the cluster.
• service/elasticache: Updates service documentation
  • Updates for Elasticache

SDK Features

• aws/session: Add support for assuming role via Web Identity Token (#​2667)
  • Adds support for assuming an role via the Web Identity Token. Allows for OIDC token files to be used by specifying the token path through the AWS_WEB_IDENTITY_TOKEN_FILE, and AWS_ROLE_ARN environment variables.

SDK Bugs

---

Renovate configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "rebase!".

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot. View repository job log here.

[bflad]

Pulling this in with the following CHANGELOG items:

NOTES:

* provider: After this update, the AWS Go SDK will prefer credentials found via the `AWS_PROFILE` environment variable when both the `AWS_PROFILE` environment variable and the `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` environment variables are statically defined. Previously the SDK would ignore the `AWS_PROFILE` environment variable, if static environment credentials were also specified. This is listed as a bug fix in the AWS Go SDK release notes. [GH-9428]

ENHANCEMENTS:

* provider: Add support for assuming role via web identity token via the `AWS_WEB_IDENTITY_TOKEN_FILE` and `AWS_ROLE_ARN` environment variables [GH-9428]

BUG FIXES:

* provider: Load credentials via the `AWS_PROFILE` environment variable (if available) when `AWS_PROFILE` is defined along with `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` [GH-9428]

[bflad]

This has been released in version 2.21.0 of the Terraform AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests, documentation updates, or bug reports with this functionality, please create a new GitHub issue following the template for triage. Thanks!

[scalp42]

@bflad this is breaking our Terraform configs now:

AWS_SDK_LOAD_CONFIG=1 AWS_REGION=us-west-2 terraform init                                                                            
Initializing modules...

Initializing the backend...

Error: Error creating AWS session: CredentialRequiresARNError: credential type source_profile requires role_arn, profile bridge

$> cat ~/.aws/config                                                                                                                    

[profile dev]
role_arn = arn:aws:iam::xxxxx:role/admin
role_session_name = anthony-dev
source_profile = bridge
region = us-west-2

$> cat main.tf

provider "aws" {
  alias  = "dev-us-west-2"
  region = "us-west-2"

  profile             = "dev"
  allowed_account_ids = ["xxxxx"]
}

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!