Merge branch 'main' into HEAD

# Conflicts:
#	internal/service/elbv2/target_group.go

.actrc

@@ -1,4 +1,5 @@
 # Needed for testing our workflows
 # The `full` variants are needed for Maven for TeamCity configuration validation
--P ubuntu-latest=ghcr.io/catthehacker/ubuntu:full-20.04
--P linux=ghcr.io/catthehacker/ubuntu:full-20.04
+-P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
+-P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04

.archive/changelog/36595.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_dynamodb_resource_policy
+```

.changelog/14270.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudformation_stack: CRLF line endings in `template_body` no longer cause erroneous diffs
+```
+
+```release-note:note
+provider: When using YAML or JSON documents, such as in `template_body` of `aws_cloudformation_stack`, CRLF was previously treated as different from LF but these are now treated as equivalent in many situations
+```

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/25967.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_iam_policy_document: When using multiple principals, sort them to avoid differences based only on order
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/26755.txt

@@ -0,0 +1,4 @@
+```release-note:bug
+resource/aws_cloudwatch_event_connection: Add plan-time validation preventing empty `auth_parameters.oauth.oauth_http_parameters` or `auth_parameters.invocation_http_parameters`
+`body`, `header` and `query_string` configuration blocks
+```

.changelog/30399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_dynamodb_table_export
+```

.changelog/30403.txt

@@ -0,0 +1,9 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Fix excessive delay on read
+```
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add `transit_encryption_mode` argument
+```
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Changes to the `transit_encryption_enabled` argument can now be done in-place for engine versions > `7.0.5`
+```

.changelog/30493.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Fix `unexpected state 'snapshotting'` errors when increasing or decreasing replica count
+```

.changelog/30862.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ce_cost_category: Allow up to 3 levels of `and`, `not` and `or` operand nesting for the `rule` argument
+```

.changelog/32027.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_memorydb_user: Support IAM authentication mode
+```

.changelog/33713.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appautoscaling_scheduled_action: Always send `start_time` and `end_time` values on update when configured
+```

.changelog/34099.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_instance_profile: Detect when the associated `role` no longer exists
+```

.changelog/34227.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+resource/aws_quicksight_dashboard: Fix failure when updating a dashboard takes a while
+```
+
+```release-note:bug
+resource/aws_quicksight_template: Fix "a number is required" errors when state contains an empty string
+```
+
+```release-note:bug
+resource/aws_quicksight_template: Fix "Invalid address to set" errors
+```

.changelog/34233.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: The `use_fips_endpoint` flag is now ignored for any service with a custom endpoint configured in `endpoints`.
+```

.changelog/34266.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_appstream_fleet: Add `desired_sessions` argument to the `compute_capacity` block.
+```
+
+```release-note:enhancement
+resource/aws_appstream_fleet: Add `max_sessions_per_instance` argument.
+```

.changelog/34293.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_pipes_pipe: Mark `source_parameters.self_managed_kafka_parameters.credentials.basic_auth` as Optional
+```

.changelog/34362.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudfront_origin_access_control: Add `lambda` and `mediapackagev2` as valid values for `origin_access_control_origin_type`
+```

.changelog/34370.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `enable_local_write_forwarding` argument to support Aurora MySQL local write forwarding
+```

.changelog/34382.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appautoscaling_scheduled_action: Read correct resource by using `scalable_dimension` as an additional filter
+```

.changelog/34819.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Decrease replica count after other updates
+```

.changelog/34905.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_event_rule: Add `force_destroy` attribute
+```

.changelog/34934.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appautoscaling_policy: Fix errors when importing an MSK storage autoscaling policy
+```

.changelog/35003.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_certificate
+```

.changelog/35149.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_batch_job_definition: Add update functions instead of ForceNew. Add `deregister_on_new_revision` to allow keeping prior versions ACTIVE when a new revision is published.
+```

.changelog/35168.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkfirewall_tls_inspection_configuration
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add plan-time validation of `firewall_arn`
+```

.changelog/35231.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecr_lifecycle_policy: Add missing `tagPatternList` change detection in policy JSON
+```

.changelog/35311.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_m2_environment
+```

.changelog/35399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_m2_application
+```

.changelog/35408.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_m2_deployment
+```

.changelog/35413.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_verifiedpermissions_policy
+```

.changelog/35662.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_organizations_account: Allow import of accounts with IAM access to the AWS Billing and Cost Management console
+```

.changelog/35670.txt

@@ -0,0 +1,6 @@
+```release-note:bug
+resource/aws_dms_replication_config: Fix persistent change in `replication_settings`
+```
+```release-note:bug
+resource/aws_dms_replication_task: Fix persistent change in `replication_task_settings`
+```

.changelog/35677.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_iam_policy_document: Add `minified_json` attribute
+```

.changelog/35722.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkmonitor_monitor
+```
+
+```release-note:new-resource
+aws_networkmonitor_probe
+```

.changelog/35865.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshiftserverless_custom_domain_association
+```

.changelog/35960.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_parameter: force create a new SSM parameter when `data_type` is updated.
+```

.changelog/35978.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_glue_data_catalog_encryption_settings: Add `data_catalog_encryption_settings.encryption_at_rest.catalog_encryption_service_role` argument
+```
+
+```release-note:enhancement
+data/aws_glue_data_catalog_encryption_settings: Add `data_catalog_encryption_settings.encryption_at_rest.catalog_encryption_service_role` attribute
+```

.changelog/35991.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_globalaccelerator_cross_account_attachment
+```
+
+```release-note:enhancement
+resource/aws_eip: Add `arn` attribute
+```
+
+```release-note:enhancement
+data-source/aws_eip: Add `arn` attribute
+```

.changelog/36072.txt

@@ -0,0 +1,27 @@
+```release-note:bug
+resource/aws_datasync_location_azure_blob: Fix missing `container_url` attribute value and bad `subdirectory` attribute value from state read/refresh
+```
+
+```release-note:bug
+resource/aws_datasync_location_efs: Fix missing `efs_file_system_arn` attribute value from state read/refresh
+```
+
+```release-note:bug
+resource/aws_datasync_location_nfs: Fix missing `server_hostname` attribute value from state read/refresh
+```
+
+```release-note:bug
+resource/aws_datasync_location_s3: Fix missing `s3_bucket_arn` attribute value from state read/refresh
+```
+
+```release-note:bug
+resource/aws_datasync_location_smb: Fix missing `server_hostname` attribute value from state read/refresh
+```
+
+```release-note:enhancement
+resource/aws_datasync_location_hdfs: Add `kerberos_keytab_base64` and `kerberos_krb5_conf_base64` arguments
+```
+
+```release-note:bug
+resource/aws_datasync_location_hdfs: Mark `qop_configuration` as Computed
+```

.changelog/36268.txt

@@ -0,0 +1,31 @@
+```release-note:bug
+resource/aws_securitylake_subscriber: Allow more than one log source
+```
+
+```release-note:bug
+resource/aws_securitylake_aws_log_source: Correctly handles unspecified `source_version`
+```
+
+```release-note:bug
+resource/aws_securitylake_aws_log_source: Prevents errors when creating multiple log sources concurrently
+```
+
+```release-note:bug
+resource/aws_securitylake_custom_log_source: Validates length of `source_name` parameter
+```
+
+```release-note:bug
+resource/aws_securitylake_custom_log_source: Prevents errors when creating multiple log sources concurrently
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly handles unspecified `access_type`
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly requires `source_name` parameter for `aws_log_source_resource` and `custom_log_source_resource`
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly handles unspecified `source_version` parameter for `aws_log_source_resource` and `custom_log_source_resource`
+```

.changelog/36277.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalogappregistry_application
+```

.changelog/36286.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iot_topic_rule: Retry IAM eventual consistency errors on Update
+```

.changelog/36301.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_control
+```

.changelog/36391.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_vpc_peering_connection: Add `ipv6_cidr_block_set` and `peer_ipv6_cidr_block_set` attributes
+```

.changelog/36405.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_vpn_connection: `local_ipv6_network_cidr`, `remote_ipv6_network_cidr`, `tunnel1_inside_ipv6_cidr`, and `tunnel2_inside_ipv6_cidr` no longer require `transit_gateway_id` to be specified
+```

.changelog/36445.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_api_gateway_documentation_part: Add `documentation_part_id` attribute
+```
+
+```release-note:enhancement
+resource/aws_wafregional_web_acl_association: Add plan-time validation of `resource_arn`
+```
+
+```release-note:enhancement
+resource/aws_wafregional_web_acl_association: Add configurable timeouts
+```

.changelog/36458.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_job: Adjust `number_of_workers` minimum value to `1`
+```

.changelog/36467.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Change the default AWS SDK for Go v2 API client [`RateLimiter`](https://pkg.go.dev/github.com/aws/aws-sdk-go-v2/aws/retry#RateLimiter) to [`ratelimit.None`](https://pkg.go.dev/github.com/aws/aws-sdk-go-v2/aws/ratelimit#pkg-variables) so that services migrated to AWS SDK for Go v2 maintain behavioral compatibility with AWS SDK for Go v1
+```

.changelog/36481.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_redshift_producer_data_shares
+```

.changelog/36484.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_eks_access_entry: Always send `kubernetes_groups` and `user_name` values on update when configured
+```

.changelog/36485.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_devopsguru_event_sources_config
+```

.changelog/36486.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_finspace_kx_dataview: Add `read_write` and `segment_configuration.on_demand` arguments
+```

.changelog/36488.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lexv2models_slot: Fix custom_payload typo
+```

.changelog/36489.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_devopsguru_resource_collection
+```

.changelog/36503.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_instance: Add `dedicated_log_volume` argument
+```

.changelog/36504.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipam: Add `tier` argument
+```

.changelog/36506.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_mq_broker: Do not reboot on changes to `maintenance_window_start_time` or `auto_minor_version_upgrade`
+```

.changelog/36511.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Support up to 12 `ha_pairs`
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Increase `storage_capacity` maximum to 1PiB
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Update `throughput_capacity_per_ha_pair` to support all values from `throughput_capacity`
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Add support for specifying 1 ha_pair with `SINGLE_AZ_1` and `MULTI_AZ_1` deployment types
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_volume: Add `aggregate_configuration` configuration block
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_volume: Add `size_in_bytes` and `volume_style` arguments
+```