Merge branch 'main' into HEAD

.actrc

@@ -1,3 +1,3 @@
 # Needed for testing our workflows
--P ubuntu-latest=ghcr.io/catthehacker/ubuntu:full-18.04
--P medium=ghcr.io/catthehacker/ubuntu:full-18.04
+-P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
+-P medium=ghcr.io/catthehacker/ubuntu:act-22.04

.changelog/17845.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: Change `protocol_version` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```

.changelog/21054.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_kms_secrets: Add `encryption_algorithm` and `key_id` arguments in support of [asymmetric keys](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html)
+```

.changelog/21293.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: When encountering `InsufficientInstanceCapacity` errors, do not retry in order to fail faster, as this error is typically not resolvable in the near future
+```

.changelog/22339.txt

@@ -4,4 +4,4 @@ resource/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dn
 
 ```release-note:enhancement
 data-source/aws_subnet: Add `enable_dns64`, `ipv6_native`, `enable_resource_name_dns_aaaa_record_on_launch`, `enable_resource_name_dns_a_record_on_launch` and `private_dns_hostname_type_on_launch` attributes
-```
+```

.changelog/23154.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_datasync_location_object_storage
+```

.changelog/23317.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ssoadmin_instance_access_control_attributes
+```

.changelog/24350.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_organizations_organizational_unit_child_accounts
+```
+
+```release-note:new-data-source
+aws_organizations_organizational_unit_descendant_accounts
+```

.changelog/26274.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_dx_macsec_key_association
+```
+
+```release-note:enhancement
+resource/aws_dx_connection: Add `encryption_mode` and `request_macsec` arguments and `macsec_capable` and `port_encryption_status` attributes in support of [MACsec](https://docs.aws.amazon.com/directconnect/latest/UserGuide/MACsec.html)
+```
+
+```release-note:enhancement
+resource/aws_dx_connection: Add `skip_destroy` argument
+```

.changelog/26677.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_appstream_image_builder: Fix IAM eventual consistency error for optional role
+```
+
+```release-note:bug
+resource/aws_appstream_image_builder: Fix refresh error when `domain_join_info` and `vpc_config` are not empty
+```

.changelog/26766.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appflow_connector_profile: Add support for `connector_type` CustomConnector. Add `cluster_identifier`, `database_name`, and `data_api_role_arn` attributes for `redshift` `connection_profile_properties`
+```

.changelog/26857.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_ecr_image: Add `most_recent` argument to return the most recently pushed image
+```
+
+```release-note:enhancement
+data-source/aws_ecr_repository: Add `most_recent_image_tags` attribute containing the most recently pushed image tag(s) in an ECR repository
+```

.changelog/26977.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: When creating a new target group, return an error if there is an existing target group with the same name. Use [`terraform import`](https://developer.hashicorp.com/terraform/cli/commands/import) for existing target groups
+```

.changelog/27161.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_lbs
+```

.changelog/27261.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_lb_target_group: Support querying by `tags`
+```

.changelog/27472.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_prometheus_workspace: Create a logging configuration on resource update if none existed previously
+```

.changelog/27563.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_transfer_user: Fix bug preventing removal of all `home_directory_mappings` due to empty list validation error
+```
+
+```release-note:enhancement
+resource/aws_transfer_user: Add configurable timeout for Delete
+```

.changelog/27565.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_sesv2_configuration_set_event_destination
+```

.changelog/27704.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_s3_object: Expand content types that can be read from S3 to include some human-readable application types (e.g., `application/xml`, `application/atom+xml`)
+```
+
+```release-note:enhancement
+data-source/aws_s3_bucket_object: Expand content types that can be read from S3 to include some human-readable application types (e.g., `application/xml`, `application/atom+xml`)
+```

.changelog/27730.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add support for `on_partial_upload` block on the `workflow_details` attribute.
+```
+
+```release-note:bug
+resource/aws_transfer_server: Allow the removal of `workflow_details` attribute.
+```

.changelog/27778.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudfront_response_headers_policy: Allow `server_timing_headers_config.0.sampling_rate` to be `0`
+```

.changelog/27799.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_appmesh_virtual_node: Add the functionality to be able specify multi listeners
+```
+
+```release-note:enhancement
+resource/aws_appmesh_virtual_gateway: Add the functionality to be able specify multi listeners
+```
+
+```release-note:enhancement
+resource/aws_appmesh_virtual_router: Add the functionality to be able specify multi listeners
+```
+
+```release-note:enhancement
+resource/aws_appmesh_gateway_route: Add `port` on the `match` attribute for routes
+```
+
+```release-note:enhancement
+resource/aws_appmesh_route: Add `port` on the `weighted_target` attribute
+```

.changelog/27991.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_opsworks_permission: `stack_id` and `user_arn` are both Required and ForceNew
+```
+
+```release-note:enhancement
+resource/aws_efs_mount_target: Add configurable timeouts for Create and Delete
+```

.changelog/28047.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_replication_task: Allow updates to `aws_dms_replication_task` even when `migration_type` and `table_mappings` have not changed
+```

.changelog/28051.txt

@@ -0,0 +1,15 @@
+```release-note:bug
+resource/aws_neptune_cluster: Fix major version upgrade
+```
+
+```release-note:enhancement
+resource/aws_neptune_cluster: Add `neptune_instance_parameter_group_name` argument, used only when upgrading major version
+```
+
+```release-note:enhancement
+resource/aws_neptune_global_cluster: Increase Update timeout to 120 minutes (per global cluster member)
+```
+
+```release-note:bug
+resource/aws_neptune_cluster: Fix [restore-from-snapshot functionality](https://docs.aws.amazon.com/neptune/latest/userguide/backup-restore-restore-snapshot.html) using the `snapshot_identifier` argument on resource Create
+```

.changelog/28305.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Add `rule.action.challenge` argument
+```

.changelog/27421.txt → .changelog/28335.txt

@@ -1,3 +1,3 @@
-```release-note:feature
+```release-note:enhancement
 resource/aws_networkfirewall_rule_group: Add `reference_sets` configuration block
 ```

.changelog/28373.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_s3control_multi_region_access_point
+```

.changelog/28376.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lightsail_instance_public_ports: Add `cidr_list_aliases` argument
+```

.changelog/28420.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_athena_workgroup: Add `configuration.execution_role` argument
+```

.changelog/28431.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rum_app_monitor: Add `custom_events` argument
+```

.changelog/28432.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_proxy: Add `auth.client_password_auth_type` attribute
+```

.changelog/28435.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_rule_group: Add `rule.action.captcha` argument
+```

.changelog/28436.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_appsync_resolver: Add `runtime` and `code` arguments
+```
+
+```release-note:enhancement
+resource/aws_appsync_resolver: Add plan time validation for `caching_config.ttl`
+```

.changelog/28437.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appsync_type
+```

.changelog/28439.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_function_url: Fix removal of `cors` configuration block
+```

.changelog/28444.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_autoscaling_policy: Fix type of target_value for predictive scaling
+```

.changelog/28445.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_node_group: Add support for `WINDOWS_CORE_2019_x86_64`, `WINDOWS_FULL_2019_x86_64`, `WINDOWS_CORE_2022_x86_64`, and `WINDOWS_FULL_2022_x86_64` `ami_type` values
+```

.changelog/28450.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_networkmanager_vpc_attachment: Add `options.appliance_mode_support` argument
+```

.changelog/28469.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_firehose_delivery_stream: Add configurable timeouts for create, update, and delete
+```

.changelog/28492.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudwatch_log_group: Restore use of `ListTagsLogGroup`, `TagLogGroup` and `UntagLogGroup` APIs
+```
+
+```release-note:bug
+data-source/aws_cloudwatch_log_group: Restore use of `ListTagsLogGroup` API
+```

.changelog/28521.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add `alarms` argument
+```

.changelog/28530.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Accept 'NoSuchTagSetError' responses from S3-compatible services
+```
+
+```release-note:enhancement
+resource/aws_s3_object: Accept 'NoSuchTagSetError' responses from S3-compatible services
+```

.changelog/28550.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appflow_connector_profile: Fix bug in connector_profile_config.0.connector_profile_properties.0.sapo_data.0.logon_language validation regex
+```

.changelog/28560.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_autoscaling_policy: Add `metrics` to the `target_tracking_configuration.customized_metric_specification` configuration block in support of [metric math](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-target-tracking-metric-math.html)
+```

.changelog/28561.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sagemaker_app: Correctly list all apps so as not to lose track in an environment where there are many apps
+```

.changelog/28564.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_s3control_storage_lens_configuration: Add `advanced_cost_optimization_metrics`, `advanced_data_protection_metrics`, and `detailed_status_code_metrics` arguments to the `storage_lens_configuration.account_level` and `storage_lens_configuration.account_level.bucket_level` configuration blocks
+```
+
+```release-note:enhancement
+resource/aws_s3_access_point: Add `bucket_account_id` argument
+```

.changelog/28567.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/aws_fsx_ontap_storage_virtual_machine: The `subtype` attribute is no longer deprecated
+```

.changelog/28569.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_grafana_workspace: Fix updating `vpc_configuration`
+```
+
+```release-note:enhancement
+resource/aws_grafana_workspace: Add `configuration` argument
+```

.changelog/28572.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sns_topic_subscription: Fix `filter_policy_scope` update from `MessageAttributes` to `MessageBody` with nested objects in `filter_policy`
+```

.changelog/28573.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ce_anomaly_subscription: Add `threshold_expression` argument
+```
+
+```release-note:note
+resource/aws_ce_anomaly_subscription: Deprecate `threshold` argument in favour of `threshold_expression`
+```

.changelog/28578.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Change `s3_settings` `cdc_min_file_size` default to 32000 in order to align with AWS's change from megabytes to kilobytes for this setting
+```
+
+```release-note:note
+resource/aws_dms_endpoint: For `s3_settings` `cdc_min_file_size`, AWS changed the multiplier to kilobytes instead of megabytes. In other words, prior to the change, a value of `32` represented 32 MiB. After the change, a value of `32` represents 32 KB. Change your configuration accordingly.
+```

.changelog/28579.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_endpoint: Add s3 setting `ignore_header_rows` and deprecate misspelled `ignore_headers_row`.
+```

.changelog/28581.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sagemaker_user_profile: Change `user_settings.0.jupyter_server_app_settings.0.default_resource_spec` to be optional
+```

.changelog/28585.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_lightsail_bucket
+```

.changelog/28590.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lightsail_database: The `availability_zone` attribute is now optional/computed to support HA `bundle_id`s
+```

.changelog/28593.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lightsail_disk_attachment: Resolves a panic when an attachment fails and attempts to display the error returned by AWS.
+```

.changelog/28594.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Add support for ManagedRuleGroupConfig
+```

.changelog/28600.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appflow_flow: Fix misspelled `source_connector_properties.0.sapo_data.0.object`, which never worked, to be `object_path`
+```

.changelog/28602.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lightsail_instance: Add `add_on` configuration block.
+```

.changelog/28619.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_servicecatalog_portfolio_share: Add `share_principals` argument
+```

.changelog/28620.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_apprunner_service: `observability_configuration_arn` is optional
+```

.changelog/28636.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kms_key: Increase `policy propagation` eventual consistency timeouts from 5 minutes to 10 minutes
+```

.changelog/28639.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_instance_state
+```

.changelog/28643.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_auditmanager_assessment
+```