Merge remote-tracking branch 'origin/main' into pr-18082

.changelog/10693.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb: Update `name` and `name_prefix` plan-time validation to exclude `"internal-"`
+```

.changelog/11487.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_codecommit_approval_rule_template
+```
+
+```release-note:new-data-source
+aws_codecommit_approval_rule_template
+```

.changelog/11941.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_lambda_layer_version_permission
+```

.changelog/11997.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_layer_version: Add `skip_destroy` argument
+```

.changelog/12018.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_autoscaling_group: Prevent infinite wait for capacity when increasing `min_size` and not specifying `desired_capacity`
+```

.changelog/12578.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_emr_cluster: Wait for the cluster to reach a terminated state on deletion
+```

.changelog/12868.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `cross_region_copy_rule` argument in the `schedule` configuration block
+```

.changelog/12949.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+resource/aws_s3_bucket: Prevent `OperationAborted` conflict errors when simultaneously applying `aws_s3_bucket_policy`, `aws_s3_bucket_public_access_block` changes
+```
+
+```release-note:bug
+resource/aws_s3_bucket_policy: Prevent `OperationAborted` conflict errors when simultaneously applying `aws_s3_bucket`, `aws_s3_bucket_public_access_block` changes
+```
+
+```release-note:bug
+resource/aws_s3_bucket_public_access_block: Prevent `OperationAborted` conflict errors when simultaneously applying `aws_s3_bucket_policy`, `aws_s3_bucket` changes
+```

.changelog/13467.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_codecommit_approval_rule_template_association
+```

.changelog/14764.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+data-source/aws_elb: Add `desync_mitigation_mode` attribute
+```
+
+```release-note:enhancement
+data-source/aws_lb: Add `desync_mitigation_mode` attribute
+```
+
+```release-note:enhancement
+resource/aws_elb: Add `desync_mitigation_mode` argument
+```
+
+```release-note:enhancement
+resource/aws_lb: Add `desync_mitigation_mode` argument
+```

.changelog/15387.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_fleet: Support in-place update of Launch Template config
+```

.changelog/16203.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Allow `auth_token` argument to be rotated without destroy and create
+```

.changelog/16393.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_lb: Add `enable_waf_fail_open` attribute
+```
+
+```release-note:enhancement
+resource/aws_lb: Add `enable_waf_fail_open` argument
+```

.changelog/16901.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ecrpublic_repository_policy
+```

.changelog/17203.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudtrail: Add `exclude_management_event_sources` argument
+```

.changelog/17733.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_athena_workgroup: Add `engine_version` argument
+```

.changelog/18079.txt

@@ -0,0 +1,3 @@
+```release-notes:enhancement
+resource/aws_config_remediation_configuration: Updated to support latest schema including `automatic`, `maximum_automatic_attempts`, `retry_attempt_seconds`, and `execution_controls`
+```

.changelog/19292.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dynamodb_table: Allows restoring to point-in-time
+```

.changelog/19294.txt

@@ -0,0 +1,23 @@
+```release-note:new-resource
+aws_s3control_object_lambda_access_point
+```
+
+```release-note:new-resource
+aws_s3control_object_lambda_access_point_policy
+```
+
+```release-note:new-resource
+aws_s3control_access_point_policy
+```
+
+```release-note:bug
+aws_s3_access_point: `vpc_configuration.vpc_id` is _ForceNew_
+```
+
+```release-note:enhancement
+aws_s3_access_point: Add `alias` attribute
+```
+
+```release-note:enhancement
+aws_s3_access_point: Add `endpoints` attribute
+```

.changelog/19533.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_iam_policy_document: No longer show changes when there's a single condition
+```

.changelog/19576.txt

@@ -0,0 +1,15 @@
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Add `rule_label` to rules.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Added support for `label_match_statement` to rules.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Add `rule_label` to rules.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Added support for `label_match_statement` to rules.
+```

.changelog/19764.txt

@@ -0,0 +1,15 @@
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Added `custom_response_body` blocks so you can define custom response bodies.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Added `custom_response_body_key` to `custom_response` actions.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Added `custom_response_body` blocks so you can define custom response bodies.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Added `custom_response_body_key` to `custom_response` actions.
+```

.changelog/20149.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_apprunner_service: Make instance_role_arn optional
+```

.changelog/20707.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Allow `capacity_provider_strategy` changes to be updated in place, when possible
+```

.changelog/20769.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_kinesis_firehose_delivery_stream: Add `dynamic_partitioning_configuration` configuration block
+```

.changelog/20777.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_s3_bucket_replication_configuration
+```

.changelog/20857.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_graphql_api: Add `lambda_authorizer_config` argument
+```

.changelog/21015.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data source/aws_lambda_function: Add `image_uri` attribute
+```

.changelog/21097.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_connect_bot_association
+```
+
+```release-note:new-resource
+aws_connect_bot_association
+```

.changelog/21130.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_target_group: Add support for `connection_termination` argument for NLBs
+```

.changelog/21276.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_connect_lambda_function_association
+```
+
+```release-note:new-data-source
+aws_connect_lambda_function_association
+```

.changelog/21484.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appstream_stack_fleet_association
+```

.changelog/21485.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_appstream_user
+```
+
+```release-note:new-resource
+aws_appstream_stack_user_association
+```

.changelog/21505.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appstream_directory_config
+```

.changelog/21531.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_route: Extend creation timeout to 5 minutes
+```
+
+```release-note:enhancement
+resource/aws_route_table: Extend creation timeout to 5 minutes
+```

.changelog/21652.txt

@@ -0,0 +1,3 @@
+```release-note: enhancement
+resource/aws_elasticsearch_domain: Add `auto_tune_options` configuration block
+```

.changelog/21777.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_autoscaling_group: Fix pending state in instance refresh
+```

.changelog/21780.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_fsx_ontap_storage_virtual_machine
+```

.changelog/21789.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_account_alternate_contact
+```

.changelog/21793.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudfront_cache_policy: Fix 0 values for `default_ttl`, `max_ttl` and `min_ttl` arguments
+```

.changelog/21794.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_internet_gateway: Allow `available` as a *pending* state during gateway detach
+```

.changelog/21797.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route53_resolver_dnssec_config: Increase resource creation and deletion timeouts to 10 minutes
+```

.changelog/21799.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_iot_thing_group
+```
+
+```release-note:new-resource
+aws_iot_thing_group_membership
+```

.changelog/21803.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_association: Add `s3_region` argument to `output_location` configuration block
+```

.changelog/21814.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_imagebuilder_image_recipes
+```

.changelog/21825.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_layer_version: Increase MaxItems for compatible_runtimes field to 15.
+```

.changelog/21831.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route: On route creation with high custom creation timeout configured, the aws_route resource does no longer give up before the create timeout is exceeded (previously it was giving up after 20 not found checks).
+```

.changelog/21837.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ec2_instance_type: Add `encryption_in_transit_supported` attribute
+```

.changelog/21838.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_cloudfront_response_headers_policy: Correctly set `custom_headers_config` attribute
+```

.changelog/21850.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_instance_types
+```

.changelog/21855.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_emr_studio
+```

.changelog/21882.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudtrail: Add plan time validations for `cloud_watch_logs_group_arn`, `cloud_watch_logs_role_arn`, `name`, `s3_key_prefix`.
+```

.changelog/21884.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_imagebuilder_image_recipe: Enabled updates without failures due to `aws_imagebuilder_image_pipeline` dependencies.
+```

.changelog/21888.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_account_alternate_contact: Add `account_id` argument
+```

.changelog/21889.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_fsx_ontap_volume
+```

.changelog/21900.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster_instance: Fix error from unexpected state `storage-optimization`
+```

.changelog/21901.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_replication_configuration: Mark `event_threshold` in `destination` `metrics` configuration block as `Optional`
+```

.changelog/21934.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_hours_of_operation
+```

.changelog/21937.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `filter_criteria` argument
+```

.changelog/21943.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudfront_distribution: Correct `hosted_zone_id` for AWS China regions
+```
+
+```release-note:bug
+data-source/aws_cloudfront_distribution: Correct `hosted_zone_id` for AWS China regions
+```

.changelog/21954.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sqs_queue: Add `sqs_managed_sse_enabled` argument
+```

.changelog/21955.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_networkfirewall_firewall_rule_group: Add `stateful_rule_options` configuration block
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_firewall_policy: Add `stateful_default_actions` and `stateful_engine_options` configuration blocks. Add `priority` attribute to `stateful_rule_group_reference` block
+```

.changelog/21960.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_backup: Add `volume_id` argument to support Amazon FSx for NetApp ONTAP backup
+```