Merge branch 'main' into HEAD

.actrc

@@ -1,3 +1,4 @@
 # Needed for testing our workflows
--P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
--P medium=ghcr.io/catthehacker/ubuntu:act-22.04
+# The `full` variants are needed for Maven for TeamCity configuration validation
+-P ubuntu-latest=ghcr.io/catthehacker/ubuntu:full-20.04
+-P linux=ghcr.io/catthehacker/ubuntu:full-20.04

.changelog/13477.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_securityhub_account: Add `enable_default_standards` argument
+```

.changelog/19065.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+ resource/aws_securityhub_member: `email` is Optional
+ ```

.changelog/20891.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudhsm_v2_hsm: Enforce `ExactlyOneOf` for `availability_zone` and `subnet_id` arguments
+```

.changelog/22302.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: `account_recovery_setting.recovery_mechanism` is Optional+Computed
+```

.changelog/25275.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+aws_cognito_user_pool_domain: Add ability to update `certificate_arn` in place
+```

.changelog/25535.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_servicecatalog_provisioning_artifacts
+```

.changelog/25926.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rbin_rule
+```

.changelog/26151.txt

@@ -0,0 +1,7 @@
+```release-note:note
+resource/aws_connect_queue: The `quick_connect_ids_associated` attribute is being deprecated in favor of `quick_connect_ids`
+```
+
+```release-note:note
+resource/aws_connect_routing_profile: The `queue_configs_associated` attribute is being deprecated in favor of `queue_configs`
+```

.changelog/26305.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_instance: Add ability to update `private_dns_name_options` in place
+```

.changelog/26546.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lakeformation_lf_tag: Increase values MaxItem up to 1000 to match with AWS real limit
+```

.changelog/26695.txt

@@ -0,0 +1,11 @@
+```release-note:new-data-source
+aws_appmesh_route
+```
+
+```release-note:bug
+data-source/aws_appmesh_mesh: Don't attempt to list tags if the current AWS account is not the mesh owner
+```
+
+```release-note:bug
+data-source/aws_appmesh_virtual_service: Don't attempt to list tags if the current AWS account is not the mesh owner
+```

.changelog/26746.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_opensearch_domain: Add missing `advanced_security_options.anonymous_auth_enabled` attribute
+```

.changelog/26838.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_network_acl_association: Add retry to read step, resolving `empty result` error
+```

.changelog/26908.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_appmesh_virtual_router
+```

.changelog/27057.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_appmesh_virtual_gateway
+```

.changelog/27207.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_batch_compute_environment: Allow a maximum of 2 `compute_resources.ec2_configuration`s
+```

.changelog/27351.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_task_definition: Add `arn_without_revision` attribute
+```

.changelog/27545.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_appmesh_virtual_node
+```

.changelog/27598.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_elasticsearch_domain: Remove upper bound validation for `ebs_options.throughput` as the 1,000 MB/s limit can be raised
+```
+
+```release-note:bug
+resource/aws_opensearch_domain: Remove upper bound validation for `ebs_options.throughput` as the 1,000 MB/s limit can be raised
+```

.changelog/27616.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appflow_flow: Add attribute `preserve_source_data_typing` to `s3_output_format_config` in `s3`
+```

.changelog/27790.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cognito_user_pool_domain: Add `cloudfront_distribution` and `cloudfront_distribution_zone_id` attributes
+```

.changelog/28245.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_ec2_public_ipv4_pools
+```
+
+```release-note:new-data-source
+aws_ec2_public_ipv4_pool
+```

.changelog/28258.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lakeformation_lf_tag: Fix support for lf-tag keys with colons in the name
+```

.changelog/28424.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/db_snapshot: Add `shared_accounts` argument
+```

.changelog/28434.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_db_instance: Add `listener_endpoint` attribute
+```
+
+```release-note:enhancement
+resource/aws_db_instance: Add plan time validations for `backup_retention_period`, `monitoring_interval`, and `monitoring_role_arn`
+```

.changelog/28489.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_document: Correctly set `default_version`, `document_version`, `hash`, `latest_version` and `parameter` as Computed when `content` changes
+```

.changelog/28583.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_openzfs_file_system: Add support for `SINGLE_AZ_2` `deployment_type`
+```

.changelog/28596.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_placement_group: Change `spread_level` to Computed
+```

.changelog/28621.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add `protocol_details` argument
+```

.changelog/28785.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add `name_prefix` argument
+```

.changelog/28812.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sesv2_configuration_set: Add `vdm_options` argument
+```

.changelog/28848.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_db_instance: Add `manage_master_user_password`, `master_user_secret` and `master_user_secret_kms_key_id` arguments to support RDS managed master password in Secrets Manager
+```
+
+```release-note:enhancement
+resource/aws_rds_cluster: Add `manage_master_user_password`, `master_user_secret` and `master_user_secret_kms_key_id` arguments to support RDS managed master password in Secrets Manager
+```
+
+```release-note:enhancement
+data-source/aws_db_instance: Add `master_user_secret` attribute
+```
+
+```release-note:enhancement
+data-source/aws_rds_cluster: Add `master_user_secret` attribute
+```

.changelog/28922.txt

@@ -0,0 +1,23 @@
+```release-note:new-resource
+aws_globalaccelerator_custom_routing_accelerator
+```
+
+```release-note:new-data-source
+aws_globalaccelerator_custom_routing_accelerator
+```
+
+```release-note:new-resource
+aws_globalaccelerator_custom_routing_listener
+```
+
+```release-note:new-resource
+aws_globalaccelerator_custom_routing_endpoint_group
+```
+
+```release-note:enhancement
+resource/aws_globalaccelerator_accelerator: Add `dual_stack_dns_name` attribute
+```
+
+```release-note:enhancement
+data-source/aws_globalaccelerator_accelerator: Add `dual_stack_dns_name` attribute
+```

.changelog/28928.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_elasticache_user: Add `authentication_mode` argument
+```
+
+```release-note:bug
+resource/aws_elasticache_user: Change `user_id` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```

.changelog/28961.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_inspector2_organization_configuration: Add `lambda` attribute to `auto_enable` configuration block
+```

.changelog/29047.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Remove [Computed](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#computed) from `lambda_config.custom_email_sender` and `lambda_config.custom_sms_sender` allowing their values to be removed
+```

.changelog/29064.txt

@@ -0,0 +1,31 @@
+```release-note:enhancement
+resource/aws_appmesh_gateway_route: Add `port` to the `spec.grpc_route.action.target`, `spec.http_route.action.target` and `spec.http2_route.action.target` configuration blocks to support Virtual Services with multiple listeners
+```
+
+```release-note:new-data-source
+aws_appmesh_gateway_route
+```
+
+```release-note:enhancement
+resource/aws_appmesh_gateway_route: Add `priority` to the `spec` configuration block
+```
+
+```release-note:enhancement
+resource/aws_appmesh_virtual_node: Add `ip_preference` and `response_type` to the `spec.service_discovery.dns` configuration block
+```
+
+```release-note:enhancement
+resource/aws_appmesh_route: Add `path` and `query_parameter` to the `spec.http_route.match` and `spec.http2_route.match` configuration blocks
+```
+
+```release-note:enhancement
+resource/aws_appmesh_route: `spec.http_route.match.prefix` and `spec.http2_route.match.prefix` are Optional
+```
+
+```release-note:enhancement
+resource/aws_appmesh_gateway_route: Add `header`, `path` and `query_parameter` to the `spec.http_route.match` and `spec.http2_route.match` configuration blocks
+```
+
+```release-note:bug
+resource/aws_appmesh_virtual_router: `spec.listener` is Optional
+```

.changelog/29254.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_flow_log: Add `deliver_cross_account_role` argument
+```
+
+```release-note:bug
+resource/aws_flow_log: Fix IAM eventual consistency errors on resource Create
+```

.changelog/29291.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ce_cost_category: Add `default_value` attribute
+```

.changelog/29315.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_appmesh_virtual_node: Add `logging.access_log.file.format` configuration block
+```
+
+```release-note:enhancement
+resource/aws_appmesh_virtual_gateway: Add `logging.access_log.file.format` configuration block
+```

.changelog/29362.txt

@@ -0,0 +1,23 @@
+```release-note:bug
+resource/aws_appmesh_gateway_route: Use configured `mesh_owner` when deleting shared gateway route
+```
+
+```release-note:bug
+resource/aws_appmesh_route: Use configured `mesh_owner` value when deleting shared route
+```
+
+```release-note:bug
+resource/aws_appmesh_virtual_gateway: Use configured `mesh_owner` value when deleting shared virtual gateway
+```
+
+```release-note:bug
+resource/aws_appmesh_virtual_node: Use configured `mesh_owner` value when deleting shared virtual node
+```
+
+```release-note:bug
+resource/aws_appmesh_virtual_router: Use configured `mesh_owner` value when deleting shared virtual router
+```
+
+```release-note:bug
+resource/aws_appmesh_virtual_service: Use configured `mesh_owner` value when deleting shared virtual service
+```

.changelog/29566.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_crawler: Add `create_native_delta_table` attribute to the `delta_target` configuration block
+```

.changelog/29632.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add error handling for `XNotImplemented` errors when reading `acceleration_status`, `request_payer`, `lifecycle_rule`, `logging`, or `replication_configuration` into terraform state.
+```

.changelog/29635.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_qldb_ledger: Add configurable timeouts
+```

.changelog/29648.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway_attachment: Add `association_state` and `association_transit_gateway_route_table_id` attributes
+```

.changelog/29656.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_codegurureviewer_repository_association
+```

.changelog/29670.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_oam_sink
+```

.changelog/29692.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_transfer_workflow: Add `decrypt_step_details` to the `on_exception_steps` and `steps` configuration blocks
+```

.changelog/29735.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_apigatewayv2_integration: Retry errors like `ConflictException: Unable to complete operation due to concurrent modification. Please try again later.`
+```

.changelog/29741.txt

@@ -0,0 +1,19 @@
+```release-note:new-resource
+aws_licensemanager_grant
+```
+
+```release-note:new-resource
+aws_licensemanager_grant_accepter
+```
+
+```release-note:new-data-source
+aws_licensemanager_received_license
+```
+
+```release-note:new-data-source
+aws_licensemanager_received_licenses
+```
+
+```release-note:new-data-source
+aws_licensemanager_grants
+```

.changelog/29763.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_acm_certificate: Change `options` to `Computed`
+```
+
+```release-note:bug
+resource/aws_acm_certificate: Update `options.certificate_transparency_logging_preference` in place rather than replacing the resource
+```

.changelog/29769.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_ssmincidents_replication_set
+```
+
+```release-note:new-data-source
+aws_ssmincidents_replication_set
+```

.changelog/29773.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_securityhub_organization_configuration: Add `auto_enable_standards` attribute
+```

.changelog/29783.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ecs_task_execution
+```