Merge branch 'main' into f-aws_wafv2_web_acl-label-match-statement

.changelog/10539.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudformation_stack: Avoid conflicts with `on_failure` and `disable_rollback`
+```

.changelog/11522.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket_object: Add `source_hash` argument to compliment `etag`'s encryption limitations
+```

.changelog/11937.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_amplify_branch
+```
+
+```release-note:bug
+resource/aws_amplify_app: Mark the `enable_performance_mode` argument in the `auto_branch_creation_config` configuration block as `ForceNew`
+```

.changelog/11938.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_domain_association
+```

.changelog/11939.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_webhook
+```

.changelog/12370.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_rds_cluster_role_association
+```
+
+```release-note:enhancement
+aws_rds_cluster: Set `iam_roles` as Computed to prevent drift when the `aws_rds_cluster_role_association` resource is used
+```

.changelog/12548.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: Ignore allocated_storage for replica at creation time
+```

.changelog/13127.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_spot_fleet_request: Add `on_demand_allocation_strategy`, `on_demand_max_total_price`, and `on_demand_target_capacity` arguments
+```

.changelog/14714.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_securityhub_standards_control
+```

.changelog/15241.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_guardduty_organization_configuration: Add `datasources` argument
+```

.changelog/16049.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudfront_distribution: Add `connection_attempts`, `connection_timeout`, and `origin_shield`.
+```

.changelog/16502.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_cognito_user_pool: Add `custom_domain`, `domain`, and `estimated_number_of_users` attributes
+```
+
+```release-note:enhancement
+resource/aws_cognito_user_pool: Add plan time validation for `name`
+```
+
+```release-note:enhancement
+resource/aws_cognito_user_pool: Add `custom_email_sender`, `custom_sms_sender`, and `kms_key_id` to `lambda_config`
+```

.changelog/16850.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_batch_job_definition: Add `platform_capabilities` attribute
-```
+```

.changelog/16874.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudwatch_event_bus_policy
+```

.changelog/16908.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_instance: Add `capacity_reservation_specification` argument
-```
+```

.changelog/16916.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_lakeformation_permissions: Allow `principal` to be an AWS account ID or an IAM group, ou, or organization
-```
+```

.changelog/16942.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_capacity_provider: Allow updates to the `auto_scaling_group_provider` argument without recreating the resource
+```

.changelog/16961.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_route: Add `carrier_gateway_id` attribute
 ```

.changelog/16963.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 data-source/aws_route: Add `carrier_gateway_id` attribute
 ```

.changelog/16979.txt

@@ -1,11 +1,11 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_default_route_table: Add `arn` attribute
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_route_table: Add `arn` attribute
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_route_table: Add `carrier_gateway_id` attribute to `route` configuration block
 ```

.changelog/17001.txt

@@ -1,7 +1,7 @@
-```release-notes:enhancement
+```release-note:enhancement
 data-source/aws_route_table: Add `arn` attribute
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 data-source/aws_route_table: Add `carrier_gateway_id` attribute to `routes` list
 ```

.changelog/17295.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 data-source/aws_route: Add `destination_prefix_list_id` attribute
 ```

.changelog/17298.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_config_organization_conformance_pack
+```

.changelog/17319.txt

@@ -1,8 +1,8 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_default_route_table: Add `destination_prefix_list_id` attribute
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_route_table: Add `destination_prefix_list_id` attribute
 ```
 
@@ -16,4 +16,4 @@ resource/aws_route_table: Improve eventual consistency handling and handling of
 
 ```release-note:bug
 resource/aws_route_table_association: Improve eventual consistency handling and handling of out-of-band resource removal
-```
+```

.changelog/17347.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 data-source/aws_route_table: Add `destination_prefix_list_id` attribute
 ```

.changelog/17539.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add `security_group_ids` argument to `endpoint_details` configuration block.
+```

.changelog/17610.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_function: Prevents perpetual diff in `vpc_config`
+```

.changelog/17655.txt

@@ -1,3 +1,3 @@
-```release-notes:note
+```release-note:note
 provider: The default development, testing and building of the Terraform AWS Provider is now done with Go 1.16. This version of Go adds support for `darwin/arm64` (Apple Silicon) but deprecates support for macOS 10.12 (Sierra).
 ```

.changelog/17754.txt

@@ -1,3 +1,3 @@
-``release-note:bug
+```release-note:bug
 resource/aws_cloudwatch_event_archive: Fix retention_days type conversion on creation
 ```

.changelog/17959.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_eks_identity_provider_config
+```

.changelog/18006.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_efs_backup_policy
+```

.changelog/18083.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudfront_monitoring_subscription
+```

.changelog/18102.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_target_group: Add support for `app_cookie` stickiness type and `cookie_name` argument
+```

.changelog/18562.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add support for `retention_policy`
+```

.changelog/18733.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_route53_resolver_firewall_config
+```

.changelog/18932.txt

@@ -1,3 +1,3 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_datasync_task: Add `options` `log_level` attribute
 ```

.changelog/19108.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_securityhub_organization_configuration
+```

.changelog/19144.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Allow updates to `encryption_config`
+```

.changelog/19168.txt

@@ -2,10 +2,10 @@
 resource/aws_shield_protection: Add `tags` argument
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_shield_protection: Add `arn` attribute
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_shield_protection: Missing resources are now detected and recreated
-```
+```

.changelog/19307.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_appconfig_application
+```
+
+```release-note:new-resource
+aws_appconfig_environment
+```

.changelog/19320.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appconfig_configuration_profile
+```

.changelog/19323.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add the delete_marker_replication_status argument for V2 replication configurations
+```

.changelog/19324.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appconfig_hosted_configuration_version
+```

.changelog/19359.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appconfig_deployment_strategy
+```

.changelog/19391.txt

@@ -1,3 +1,3 @@
-```release-notes:new-data-source
+```release-note:new-data-source
 aws_default_tags
-```
+```

.changelog/19407.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Support `scope_down_statement` on `managed_rule_group_statement`
+```

.changelog/19415.txt

@@ -1,15 +1,15 @@
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_wafv2_web_acl: Add `custom_request_handling` to `allow` and `count` default action and rule actions.
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_wafv2_web_acl: Add `custom_response` to `block` default action and rule actions.
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_wafv2_rule_group: Add `custom_request_handling` to `allow` and `count` rule actions.
 ```
 
-```release-notes:enhancement
+```release-note:enhancement
 resource/aws_wafv2_rule_group: Add `custom_response` to `block` rule actions.
 ```

.changelog/19423.txt

@@ -1,3 +1,3 @@
-```release-notes:note
+```release-note:note
 resource/aws_appmesh_virtual_node: Number of default backends per virtual node increased up to 50
 ```

.changelog/19425.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `self_managed_event_source` and `source_access_configuration` arguments to support self-managed Apache Kafka event sources
+```
+
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `tumbling_window_in_seconds` argument to support AWS Lambda streaming analytics calculations
+```
+
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `function_response_types` argument to support AWS Lambda checkpointing
+```
+
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `queues` argument to support Amazon MQ for Apache ActiveMQ event sources
+```

.changelog/19426.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+resource/aws_route_table: Add retries when creating, deleting and replacing routes
+```
+
+```release-note:enhancement
+resource/aws_route: Add retries when creating, deleting and replacing routes
+```
+
+```release-note:enhancement
+resource/aws_default_route_table: Add retries when creating, deleting and replacing routes
+```
+
+```release-note:enhancement
+resource/aws_default_route_table: Add retries when creating, deleting and replacing routes
+```
+
+```release-note:enhancement
+resource/aws_main_route_table_association: Wait for association to reach the required state
+```
+
+```release-note:enhancement
+resource/aws_route_table_association: Wait for association to reach the required state
+```

.changelog/19459.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_provisioned_product
+```

.changelog/19470.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_principal_portfolio_association
+```

.changelog/19497.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_elasticsearch_domain_saml_options
+```

.changelog/19499.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_servicecatalog_constraint
+```

.changelog/19500.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+ aws_servicecatalog_portfolio
+ ```

.changelog/19503.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+  aws_servicecatalog_product
+  ```

.changelog/19554.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_budgets_budget_action
+```

.changelog/19555.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_event_target: Fix `ecs_target.launch_type` not allowing empty string values.
+```

.changelog/19557.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add support for ECS Anywhere with the `launch_type` `EXTERNAL`
+```

.changelog/19559.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudtrail: Add `AWS::DynamoDB::Table` as an option for `event_selector`.`data_resource`.`type`
+```

.changelog/19568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_lustre_filesystem: Allow updating `storage_capacity`.
+```