Update Terraform aws to v5 #9
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
382df8e
to
73a47c4
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
7a28854
to
0f7c2c7
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
0f7c2c7
to
5c2e8bc
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
33aefb2
to
9d3ddf7
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
be441d4
to
845b25b
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
3 times, most recently
from
eef52ee
to
2d9ac96
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
2d9ac96
to
0f8c2bd
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
0f8c2bd
to
3b7504d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
3b7504d
to
6fb9acd
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
6fb9acd
to
2778f08
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
3d84f31
to
6e99826
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
6e99826
to
5834c75
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
9a01e04
to
49e694c
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
49e694c
to
e3b63de
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
01ff073
to
b173892
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
c64d8e8
to
7a1fd76
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
8627463
to
553c34d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
3bc9ab8
to
944ac81
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
9d181fc
to
643a8e8
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
643a8e8
to
e43e254
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
21e5298
to
cf45ce5
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
cf45ce5
to
ebf3d36
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
213d232
to
0213ad9
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
0213ad9
to
227c70f
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
70f539f
to
e45cb72
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
e45cb72
to
2bb9d71
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
fd7db7c
to
3809a12
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
3809a12
to
f36e4ba
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
dbdc5a3
to
e6d9a6b
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
e6d9a6b
to
590107e
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
9971d5c
to
48ce4ec
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
65af6ba
to
531990c
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
531990c
to
dd38c20
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
5e60bcf
to
7350a72
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
2 times, most recently
from
be4f41d
to
23f7cbe
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
23f7cbe
to
37edd28
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
37edd28
to
ad9d270
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~> 3.38.0->~> 5.78.0Release Notes
hashicorp/terraform-provider-aws (aws)
v5.78.0Compare Source
NOTES:
FEATURES:
aws_iam_organizations_features(#40164)ENHANCEMENTS:
engineattribute (#40224)cluster_configuration.engineattribute (#40224)engineargument (#40224)cluster_configuration.engineattribute (#40224)BUG FIXES:
product_description(e.g., "postgresql") is a substring of multiple products, fixError: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering(#40281)Warning: AWS account ID not found for providerwhenskip_requesting_account_idistrue(#40264)eksPropertiesorecsPropertiesblock (#40172)content_policy_config.filters_configs are specified. (#40304)sns_topic_arnschanges (#40253)sns_topic_arnschanges (#40291)storage_typefromio1orio2togp3, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#37257)gp3volume'sallocated_storageto a value larger than the threshold value forengine, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#28847)v5.77.0Compare Source
NOTES:
aws_kms_secrets,aws_lambda_invocation, andaws_secretsmanager_secret_versionnow support ephemeral values. (#40009)FEATURES:
aws_kms_secrets(#40009)aws_lambda_invocation(#39988)aws_secretsmanager_secret_version(#40009)aws_rds_instance_state(#40180)ENHANCEMENTS:
most_recentis true and certain filter criteria are missing (#40211)availability_zone_rebalancingattribute (#40225)availability_zone_rebalancingattribute (#40225)versionConsistencyargument tocontainer_definitions(#40216)endpointargument to point to the writer DB instance in the current primary cluster (#39960)BUG FIXES:
tagsfrom theDescribeSubnetsresponse, removing the need for theec2:DescribeTagsIAM permission (#40144)schemaelement (#40195)pod_identity_associationis modified (#40168)pod_identity_associationis changed (#40168)v5.76.0Compare Source
FEATURES:
aws_vpc_security_group_vpc_association(#40069)ENHANCEMENTS:
BUG FIXES:
BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parametersand/orcache_key_parameters(#40124)BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parameters(#40124)launch_templatethat is updated causingValidationError: You must use a valid fully-formed launch template.(#40088)ipam_pool_idis set (#40082)Provider returned invalid result object after applyerrors (#40090)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)v5.75.1Compare Source
ENHANCEMENTS:
descriptionattribute (#39980)reset_on_deleteto properly reset CloudWatch Role ARN on deletion. (#40004)descriptionargument (#39980)BUG FIXES:
canary_settingsandstage_descriptionwhenstage_namenot set. (#40067)ttl[0].attribute_nameto be set whenttl[0].enabledis false (#40046)ValidationExceptionon updates when RStudio is disabled on the domain (#40049)v5.75.0Compare Source
BREAKING CHANGES:
canary_settings.deployment_idattribute asrequired(#39929)NOTES:
ARNTypewill properly surface validation errors (#40008)deployment_idwas added tocanary_settingsas arequiredattribute. This breaking change was necessary to makecanary_settingsfunctional. Without this change all canary traffic was routed to the main deployment (#39929)FEATURES:
aws_spot_datafeed_subscription(#39647)ENHANCEMENTS:
init_containers,share_process_namespace, andimage_pull_secretsattributes (#40019)init_containersandshare_process_namespacearguments (#40019)containersarguments to 10 (#40019)pod_identity_associationargument (#38357)passwordargument as sensitive (#39991)BUG FIXES:
alarm_configuration.alarmsargument (#39971)ResourceNotFoundexceptions during resource destruction (#38357)Value Conversion Errorduring resource creation (#39945)tcp_idle_timeout_secondsargument for gateway load balancers (#40039)tcp_idle_timeout_secondsvalue, preventingModifyListenerAttributesAPI calls when a value is not explicitly configured (#40039)public_ip_source = "amazon":The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip.(#40042)v5.74.0Compare Source
FEATURES:
aws_lb_listener_rule(#39865)aws_opensearch_authorize_vpc_endpoint_access(#39846)aws_ssmquicksetup_configuration_manager(#39931)ENHANCEMENTS:
distribution.s3_export_configurationattribute (#35492)block_device_mapping.0.ebs.0.delete_on_termination: '' expected type 'bool', got unconvertible type 'string'errors (#39928)termination_hook_enabledargument (#35482)zonal_shift_configargument (#39852)distribution.s3_export_configurationargument (#35492)container_recipe_arnandimage_recipe_arnto be updated in-place (#39117)replication_specificationargument (#36331)efa-onlyas a valid value fornetwork_interfaces.interface_type(#39882)TransferSecurityPolicy-Restricted-2024-06as a valid value forsecurity_policy_name(#39871)BUG FIXES:
master_passwordon resource Create whensnapshot_identifieris configured (#38193)component.parameter.name,component.parameter.value,target_repository.repository_name, andtarget_repository.serviceto ForceNew (#39117)interface conversion: interface {} is nil, not map[string]interface {}panic whengeolocation_routing_policyis empty (#39944)approval_rule.approve_after_daysvalidation to allow a maximum value of360(#39949)decoding JSON: unexpected end of JSON inputerrors when updating from usingrule_jsonto usingrule(#39283)rule_json(#39878)v5.73.0Compare Source
FEATURES:
aws_ssm_patch_baselines(#39779)aws_imagebuilder_lifecycle_policy(#35674)aws_resiliencehub_resiliency_policy(#38913)aws_sagemaker_hub(#39807)aws_sagemaker_mlflow_tracking_server(#39796)ENHANCEMENTS:
valkeyas valid value forproduct_description(#39745)parametersmap attribute to readCROSS_ACCOUNT_VERSION(#39826)enable_zonal_shiftattribute (#39585)min_sizeandmax_size(#39843)zonal_configargument (#34850)approximate_creation_date_time_precisionargument (#38098)valkeyas valid value forengine(#39745)engine_version(#39745)engine_version(#39745)valkeyas valid value forengine(#39745)valkeyas valid value forengine(#39745)iceberg_configurationargument (#39844)parametersmap argument enablingCROSS_ACCOUNT_VERSIONto be set (#39826)enable_zonal_shiftargument (#39585)tcp_idle_timeout_secondsargument (#39585)nameargument (#39798)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)default_user_settings.jupyter_lab_app_settings.app_lifecycle_management,default_user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_user_settings.jupyter_lab_app_settings.emr_settings,default_space_settings.jupyter_lab_app_settings.app_lifecycle_management,default_space_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_space_settings.jupyter_lab_app_settings.emr_settings,default_user_settings.auto_mount_home_efs,default_user_settings.canvas_app_settings.emr_serverless_settings,default_user_settings.studio_web_portal_settings.hidden_instance_types,default_user_settings.code_editor_app_settings.app_lifecycle_management,default_user_settings.code_editor_app_settings.built_in_lifecycle_config_arn, andtag_propagationarguments (#39774)app_network_access_typeandapp_security_group_managementto be updated in-place (#39774)feature_definition.collection_config,feature_definition.collection_type, andthroughput_configarguments (#39805)space_settings.code_editor_app_settings.app_lifecycle_managementandspace_settings.jupyter_lab_app_settings.app_lifecycle_managementarguments (#39800)user_settings.auto_mount_home_efs,user_settings.canvas_app_settings.emr_serverless_settings,user_settings.code_editor_app_settings.app_lifecycle_management,user_settings.code_editor_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.app_lifecycle_management,user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.emr_settingsanduser_settings.studio_web_portal_settings.hidden_instance_typesarguments (#39774)BUG FIXES:
name. This fixes a regression introduced in v5.72.0 causingmultiple WorkSpaces Bundles matched; use additional constraints to reduce matches to a single WorkSpaces Bundleerrors (#39777)on_demand_throughputis excluded (#39784)policycontent is written to state (#39842)InvalidParameterValue: This API supports only cross-engine upgrades to Valkey engine currentlyerrors on Update (#39745)policycontent is written to state (#39842)policycontent is written to state (#39842)policycontent is written to state (#39842)InvalidParameterValueException: Invalid RowLevelPermissionDataSet. Namespace parameter should not be specified for Version 2errors on Create and Update (#39778)ttl=0(#39728)policycontent is written to state (#39842)policycontent is written to state (#39842)v5.72.1Compare Source
FEATURES:
aws_iam_group_policy_attachments_exclusive(#39732)aws_iam_user_policy_attachments_exclusive(#39731)ENHANCEMENTS:
scopeargument (#39744)BUG FIXES:
billing_modeis set toPAY_PER_REQUESTwithoutglobal_secondary_indexupdates (#39752)AGGREGATORindexes as tainted on Create (#39744)v5.72.0Compare Source
NOTES:
managed_policy_arnsargument is deprecated. Use theaws_iam_role_policy_attachments_exclusiveresource instead. (#39718)FEATURES:
aws_iam_role_policy_attachments_exclusive(#39718)ENHANCEMENTS:
saml_propertiesattribute (#39060)source_flow_config.source_connector_properties.sapo_data.pagination_configandsource_flow_config.source_connector_properties.sapo_data.parallelism_configattributes (#38932)aws:RequestTagconditions (#39648)appsync_targetconfiguration block (#37773)on_demand_throughputandglobal_secondary_index.on_demand_throughputarguments (#37799)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityfrom128to256(#39697)storage-optimizationstatus as success when creating or updating cluster DB instances (#39691)saml_propertiesconfiguration block (#39060)BUG FIXES:
arnfor automation documents (#39705)schemahas emptystring_attribute_constraintsornumber_attribute_constraints(#20386)arnfor automation documents (#39705)v5.70.0Compare Source
NOTES:
aws_simpledb_domainresource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead (#39536)aws_worklink_fleetresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)aws_worklink_website_certificate_authority_associationresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)FEATURES:
aws_backup_logically_air_gapped_vault(#39098)aws_ec2_transit_gateway_default_route_table_association(#39496)aws_ec2_transit_gateway_default_route_table_propagation(#39517)aws_iam_group_policies_exclusive(#39554)aws_iam_user_policies_exclusive(#39544)aws_securityhub_standards_control_association(#39511)ENHANCEMENTS:
start_timeattribute (#39557)prepare_agentargument (#39486)vector_ingestion_configuration.custom_transformation_configurationargument (#39556)endpoint_configuration.attachment_arnargument (#39507)tagsargument andtags_allattribute (#39535)arnattribute (#39535)tagsargument andtags_allattribute (#39535)transition_default_minimum_object_sizeargument (#39578)BUG FIXES:
customer_encryption_key_arnnot being passed during update (#39565)prompt_override_configurationnot being passed when not modified (#39565)knowledge_base_configurationandstorage_configurationto ForceNew (#39567)security_group_referencing_supportargument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) (#39519)policy_versioncomputed attribute changing (#39528)policy_versioncomputed attribute changing (#39528)sheets.filter_controls.list.cascading_control_configurationandsheets.parameter_controls.list.cascading_control_configurationattributes (#39453)v5.69.0Compare Source
NOTES:
(account-id).ddb.(region).amazonaws.cominstead ofdynamodb.(region).amazonaws.com. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by settingaccount_id_endpoint_mode = disabledin a shared config file or setting theAWS_ACCOUNT_ID_ENDPOINT_MODEenvironment variable todisabled(#39505)1.23.1. The issue with AWS Network Firewall dropping TLS handshakeClientHellomessages after the v5.65.0 upgrade to Go1.23.0, temporarily resolved by the v5.67.0 downgrade to Go1.22.7, has been addressed by removing theX25519Kyber768Draft00key exchange mechanism from the HTTP client used to make AWS API calls (#39432)ENHANCEMENTS:
tagsattribute (#39402)security_group_referencing_supportattribute (#34542)security_group_referencing_supportattribute (#34542)failure_codeandfailure_reasonattributes (#38995)guardrail_configurationargument (#39440)tagsargument andtags_allattribute (#39402)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)volume_configuration.managed_ebs_volume.tag_specificationsattribute (#38662)display_nameto be updated in-place (#39416)credentials.secret_arnargument (#29034)BUG FIXES:
security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)ap-southeast-5Region (#39389)nameattribute. (#38993)nameattribute. (#38993)ConcurrentModificationExceptions during role creation (#39429)AccessDeniedException: Lambda code scanning is not supported in ...errors (#38254)AccessDeniedExceptionerrors during creation (#38254)nameandvpc_idto ForceNew (#39454)security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)v5.68.0Compare Source
NOTES:
inline_policyargument is deprecated. Use theaws_iam_role_policyresource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use theaws_iam_role_policies_exclusiveresource as well. (#39203)composite_slot_type_settingblock, thesubslotsargument has been renamedsub_slots. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39353)FEATURES:
aws_elasticache_reserved_cache_node_offering(#29832)aws_securityhub_standards_control_associations(#39334)aws_synthetics_runtime_version(#39180)aws_synthetics_runtime_versions(#39180)aws_appsync_source_api_association(#39323)aws_elasticache_reserved_cache_node(#29832)aws_iam_role_policies_exclusive(#39203)aws_pinpointsmsvoicev2_opt_out_list(#25036)aws_pinpointsmsvoicev2_phone_number(#25036)aws_sesv2_account_suppression_attributes(#39325)ENHANCEMENTS:
iam_role_arnargument tos3_actionconfiguration block (#39364)namelength to 255 characters (#39315)BUG FIXES:
assume_role.role_arnto be an empty string when there is a singleassume_roleentry. (#39328)environment_variablesargument (#39397)Managed by DynamoDBencryption setting (#31284)engine_versionmismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above (#39024)endpoint_management = "CUSTOMER"(#39394)policy(#39322)v5.67.0Compare Source
BREAKING CHANGES:
value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy(#39254)NOTES:
1.22.6. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go1.23.0(v5.65.0). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go1.22.6for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. (#39256)value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39254)FEATURES:
aws_codebuild_fleet(#39237)aws_cloudformation_stack_instances(#36794)aws_codebuild_fleet(#39237)aws_computeoptimizer_enrollment_status(#35349)aws_computeoptimizer_recommendation_preferences(#35349)aws_costoptimizationhub_enrollment_status(#36440)aws_costoptimizationhub_preferences(#36526)aws_datazone_asset_type([#38812Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.