Merge branch 'main' into HEAD

.changelog/28847.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: When changing a `gp3` volume's `allocated_storage` to a value larger than the [threshold value for `engine`](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#gp3-storage), fix bug causing error `InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops`
+```

.changelog/35359.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dynamodb_table_replica: Add `deletion_protection_enabled` argument
+```

.changelog/37257.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: When changing `storage_type` from `io1` or `io2` to `gp3`, fix bug causing error `InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops`
+```

.changelog/40164.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iam_organizations_features
+```

.changelog/40172.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_batch_job_definition: Fix crash when specifying `eksProperties` or `ecsProperties` block
+```

.changelog/40177.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add vpc_lattice_configurations argument
+```

.changelog/40211.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ami: Add warning diagnostic when `most_recent` is true and certain filter criteria are missing
+```

.changelog/40224.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_memorydb_cluster: Add `engine` argument
+```
+
+```release-note:enhancement
+resource/aws_memorydb_snapshot: Add `cluster_configuration.engine` attribute
+```
+
+```release-note:enhancement
+data-source/aws_memorydb_cluster: Add `engine` attribute
+```
+
+```release-note:enhancement
+data-source/aws_memorydb_snapshot: Add `cluster_configuration.engine` attribute
+```

.changelog/40225.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add `availability_zone_rebalancing` attribute
+```
+
+```release-note:enhancement
+data-source/aws_ecs_service: Add `availability_zone_rebalancing` attribute
+```

.changelog/40233.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_vpc_block_public_access_options
+```

.changelog/40235.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_vpc_block_public_access_exclusion
+```

.changelog/40253.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_chatbot_slack_channel_configuration: Fix inconsistent provider result when order of `sns_topic_arns`changes
+```

.changelog/40264.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Suppress `Warning: AWS account ID not found for provider` when `skip_requesting_account_id` is `true`
+```

.changelog/40268.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/aws_s3_bucket_lifecycle_configuration: Lifecycle configurations can now be applied to directory buckets
+```

.changelog/40281.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_rds_reserved_instance_offering: When `product_description` (e.g., "postgresql") is a substring of multiple products, fix `Error: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering`
+```

.changelog/40291.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_chatbot_teams_channel_configuration: Fix inconsistent provider result when order of `sns_topic_arns`changes
+```

.changelog/40300.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_codeconnections_connection
+```
+
+```release-note:new-resource
+aws_codeconnections_host
+```

.changelog/40303.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `provisioned_poller_config` argument
+```

.changelog/40304.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_bedrock_guardrail: Fix perpetual diff if multiple `content_policy_config.filters_config`s are specified.
+```

.changelog/40305.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_bedrock_provisioned_model_throughput: Properly manages `tags_all` when planning.
+```

.changelog/40322.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `metrics_config` argument
+```

.changelog/40337.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add ability to promote read replica cluster to standalone
+```

.changelog/40339.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_directory_bucket: Support `LocalZone` as a valid value for `location.type`, enabling support for [Amazon S3 Express One Zone in AWS Dedicated Local Zones](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-data-residency.html)
+```

.changelog/40346.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_endpoint_service: Add `supported_regions` argument
+```

.changelog/40359.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_fsx_openzfs_file_system: Increase maximum value of `disk_iops_configuration.iops` from `350000` to `400000` for `deployment_type = "SINGLE_AZ_2"`
+```

.changelog/40370.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Add `compute_config`, `storage_config`, and `kubernetes_network_config.elastic_load_balancing` arguments for EKS Auto Mode
+```

.changelog/40371.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Add `remote_network_config` argument for EKS Auto Mode
+```

.changelog/40419.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_connect_contact_flow: Fix `deserialization failed, failed to decode response body with invalid JSON` errors on Read
+```

.changelog/40420.txt

@@ -0,0 +1,19 @@
+```release-note:new-resource
+aws_s3tables_namespace
+```
+
+```release-note:new-resource
+aws_s3tables_table_bucket
+```
+
+```release-note:new-resource
+aws_s3tables_table_bucket_policy
+```
+
+```release-note:new-resource
+aws_s3tables_table
+```
+
+```release-note:new-resource
+aws_s3tables_table_policy
+```

.ci/.semgrep-service-name0.yml

@@ -4315,3 +4315,18 @@ rules:
       - focus-metavariable: $NAME
       - pattern-not: func $NAME($T *testing.T)
     severity: WARNING
+  - id: connect-in-test-name
+    languages:
+      - go
+    message: Include "Connect" in test name
+    paths:
+      include:
+        - internal/service/connect/*_test.go
+    patterns:
+      - pattern: func $NAME( ... )
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-not-regex: "^TestAccConnect"
+            - pattern-regex: ^TestAcc.*
+    severity: WARNING

.ci/.semgrep-service-name1.yml

@@ -1,20 +1,5 @@
 # Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
 rules:
-  - id: connect-in-test-name
-    languages:
-      - go
-    message: Include "Connect" in test name
-    paths:
-      include:
-        - internal/service/connect/*_test.go
-    patterns:
-      - pattern: func $NAME( ... )
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-not-regex: "^TestAccConnect"
-            - pattern-regex: ^TestAcc.*
-    severity: WARNING
   - id: connect-in-const-name
     languages:
       - go
@@ -4305,3 +4290,35 @@ rules:
           patterns:
             - pattern-regex: "(?i)IoTAnalytics"
     severity: WARNING
+  - id: iotanalytics-in-var-name
+    languages:
+      - go
+    message: Do not use "IoTAnalytics" in var name inside iotanalytics package
+    paths:
+      include:
+        - internal/service/iotanalytics
+    patterns:
+      - pattern: var $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)IoTAnalytics"
+    severity: WARNING
+  - id: iotevents-in-func-name
+    languages:
+      - go
+    message: Do not use "IoTEvents" in func name inside iotevents package
+    paths:
+      include:
+        - internal/service/iotevents
+      exclude:
+        - internal/service/iotevents/list_pages_gen.go
+    patterns:
+      - pattern: func $NAME( ... )
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)IoTEvents"
+      - focus-metavariable: $NAME
+      - pattern-not: func $NAME($T *testing.T)
+    severity: WARNING

.ci/.semgrep-service-name2.yml

@@ -1,37 +1,5 @@
 # Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
 rules:
-  - id: iotanalytics-in-var-name
-    languages:
-      - go
-    message: Do not use "IoTAnalytics" in var name inside iotanalytics package
-    paths:
-      include:
-        - internal/service/iotanalytics
-    patterns:
-      - pattern: var $NAME = ...
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)IoTAnalytics"
-    severity: WARNING
-  - id: iotevents-in-func-name
-    languages:
-      - go
-    message: Do not use "IoTEvents" in func name inside iotevents package
-    paths:
-      include:
-        - internal/service/iotevents
-      exclude:
-        - internal/service/iotevents/list_pages_gen.go
-    patterns:
-      - pattern: func $NAME( ... )
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)IoTEvents"
-      - focus-metavariable: $NAME
-      - pattern-not: func $NAME($T *testing.T)
-    severity: WARNING
   - id: iotevents-in-test-name
     languages:
       - go
@@ -4308,3 +4276,50 @@ rules:
           patterns:
             - pattern-regex: "(?i)Redshift"
     severity: WARNING
+  - id: redshiftdata-in-func-name
+    languages:
+      - go
+    message: Do not use "RedshiftData" in func name inside redshiftdata package
+    paths:
+      include:
+        - internal/service/redshiftdata
+      exclude:
+        - internal/service/redshiftdata/list_pages_gen.go
+    patterns:
+      - pattern: func $NAME( ... )
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)RedshiftData"
+      - focus-metavariable: $NAME
+      - pattern-not: func $NAME($T *testing.T)
+    severity: WARNING
+  - id: redshiftdata-in-test-name
+    languages:
+      - go
+    message: Include "RedshiftData" in test name
+    paths:
+      include:
+        - internal/service/redshiftdata/*_test.go
+    patterns:
+      - pattern: func $NAME( ... )
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-not-regex: "^TestAccRedshiftData"
+            - pattern-regex: ^TestAcc.*
+    severity: WARNING
+  - id: redshiftdata-in-const-name
+    languages:
+      - go
+    message: Do not use "RedshiftData" in const name inside redshiftdata package
+    paths:
+      include:
+        - internal/service/redshiftdata
+    patterns:
+      - pattern: const $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)RedshiftData"
+    severity: WARNING