Merge branch 'main' into b_aws_ssm_parameter_arn

.changelog/11600.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add `delivery_options` argument
+```

.changelog/11687.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_log_destination: Add plan time validation to `role_arn`, `name` and `target_arn`.
+```

.changelog/11770.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sns_topic_subscription: Add `redrive_policy` argument
+```

.changelog/11772.txt

@@ -0,0 +1,12 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Adds plan time validation for `name`, `description`, `global_filter.key`, `global_filter.values`,
+`approved_patches`, `rejected_patches`, `approval_rule.approve_after_days`, `approval_rule.patch_filter.key`, and `approval_rule.patch_filter.values`.
+```
+
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Add `approved_patches_enable_non_security` and `rejected_patches_action` arguments
+```
+
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Adds `arn` attribute.
+```

.changelog/11774.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ssm_maintenance_window_task: Add `task_invocation_parameters` `run_command_parameters` block `cloudwatch_config` and `document_version` arguments
+```
+
+```release-note:enhancement
+resource/aws_ssm_maintenance_window_task: Add plan time validation to `max_concurrency`, `max_errors`, `priority`, `service_role_arn`, `targets`, `targets.notification_arn`, `targets.service_role_arn`, `task_type`, `task_invocation_parameters.run_command_parameters.comment`, `task_invocation_parameters.run_command_parameters.document_hash`, `task_invocation_parameters.run_command_parameters.timeout_seconds`, and `task_invocation_parameters.run_command_parameters.notification_config.notification_events` arguments
+```

.changelog/11879.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Add `source` configuration block
+```

.changelog/12055.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_iam_policy_document: Support merging policy documents by adding `source_policy_documents` and `override_policy_documents` arguments
+```

.changelog/12200.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_maintenance_window_task: Make `service_role_arn` optional
+```

.changelog/12645.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+resource/aws_glacier_vault: Prevent crash with `GetVaultAccessPolicy` API errors
+```
+
+```release-note:bug
+resource/aws_glacier_vault: Properly remove from state when resource does not exist
+```
+
+```release-note:enhancement
+resource/aws_glacier_vault: Add plan-time validation for `notification` configuration block `events` and `sns_topic_arn` arguments
+```

.changelog/13139.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_budgets_budget: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_budgets_budget: Add plan time validation for `budget_type`, `time_unit`, and `subscriber_sns_topic_arns` arguments
+```

.changelog/13420.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_vpc_peering_connection: Add `cidr_block_set` and `peer_cidr_block_set` attributes
+```

.changelog/13850.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Add `approval_rule` block `approve_until_date` argument
+```

.changelog/13948.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter: Add `arn` attribute.
+```

.changelog/13949.txt

@@ -0,0 +1,8 @@
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter_rule: Add arn attribute.
+```
+
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter_rule: Add plan time validation to `destination_port_range.from_port`, 
+`destination_port_range.to_port`, `source_port_range.from_port`, and `source_port_range.to_port`.
+```

.changelog/13960.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_receipt_rule: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_receipt_rule: Add plan time validations for `name`, `tls_policy`, `add_header_action.header_name`, `add_header_action.header_value`, `bounce_action.topic_arn`, `lambda_action.function_arn`, `lambda_action.topic_arn`, `lambda_action.invocation_type`, `s3_action,topic_arn`, `sns_action.topic_arn`, `stop_action.scope`, `stop_action.topic_arn`, `workmail_action.topic_arn`, and `workmail_action.organization_arn` attributes
+```

.changelog/13962.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_active_receipt_rule_set: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_active_receipt_rule_set: Add plan time validation for `rule_set_name` argument
+```

.changelog/13963.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ses_template: Add `arn` attribute
+```

.changelog/13964.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_event_destination: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_event_destination: Add plan time validation for `name`, `cloudwatch_destination.default_value`, `cloudwatch_destination.default_name`, `kinesis_destination.role_arn`, `kinesis_destination.stream_arn`, and `sns_destination.topic_arn` attributes
+```

.changelog/13972.txt

@@ -0,0 +1,8 @@
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add `arn` attribute.
+```
+
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add plan time validation to `name`.
+```
+

.changelog/13973.txt

@@ -0,0 +1,5 @@
+```release-note:enhancement
+resource/aws_elastictranscoder_pipeline: Add plan time validations to `content_config.storage_class`, `content_config_permissions.access`, `content_config_permissions.grantee_type`,
+`notifications.completed`, `notifications.error`, `notifications.progressing`, `notifications.warning`,
+`thumbnail_config.storage_class`, `thumbnail_config_permissions.access`, `thumbnail_config_permissions.grantee_type`
+```

.changelog/14128.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_document: Add `version_name` argument
+```

.changelog/14673.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_log_group: Add plan time validation for `retention_in_days` argument
+```

.changelog/14746.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `topics` attribute to support Amazon MSK as an event source
+```

.changelog/14765.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_event_source_mapping: Wait for create and update operations to complete
+```

.changelog/14786.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_customer_gateway: Add `device_name` attribute
+```
+
+```release-note:enhancement
+resource/aws_customer_gateway: Add `device_name` argument
+```

.changelog/14974.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_cloudfront_realtime_log_config
+```
+
+```release-note:enhancement
+resource/aws_cloudfront_distribution: Add `realtime_log_config_arn` attribute to `default_cache_behavior` and `ordered_cache_behavior` configuration blocks
+```

.changelog/15038.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_association: Add `apply_only_at_cron_interval` argument
+```

.changelog/15348.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_elasticache_replication_group: Adds `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Adds `arn` attribute
+```

.changelog/16188.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_instance_profile: Detach role when role doesn't exist + remove when deleted from state.
+```

.changelog/16474.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_listener_certificate: Add import support
+```

.changelog/16656.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_vpc_endpoint: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion
+```
+
+```release-note:bug
+resource/aws_vpc_endpoint_service: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion
+```

.changelog/16676.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_subnet: Add `customer_owned_ipv4_pool` and `map_customer_owned_ip_on_launch` attributes
+```
+
+```release-note:enhancement
+resource/aws_subnet: Add `customer_owned_ipv4_pool` and `map_customer_owned_ip_on_launch` attributes
+```

.changelog/16710.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_imagebuilder_image
+```
+
+```release-note:new-resource
+aws_imagebuilder_image
+```

.changelog/16823.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_transit_gateway_prefix_list_reference
+```

.changelog/16835.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codestarconnections_connection: Add `tags` argument
+```

.changelog/16840.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_route53_key_signing_key
+```

.changelog/16882.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_prometheus_workspace
+```

.changelog/17002.txt

@@ -0,0 +1,7 @@
+```release-note:note
+data-source/aws_route53_zone: The Route 53 `ListResourceRecordSets` API call has been implemented to support the `name_servers` attribute for private Hosted Zones similar to the resource implementation. Environments using restrictive IAM permissions may require updates.
+```
+
+```release-note:bug
+data-source/aws_route53_zone: Ensure `name_servers` is populated for private Hosted Zones
+```

.changelog/17030.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudwatch_event_rule: Prevent perpetual differences with `name_prefix` argument values beginning with `terraform-`
+```
+
+```release-note:bug
+resource/aws_security_group: Prevent perpetual differences with `name_prefix` argument values beginning with `terraform-`
+```

.changelog/17044.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudfront_public_key: Add import support
+```

.changelog/17082.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_function: Prevent crash when using `Image` package type
+```

.changelog/17129.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add `owner_id` attribute
+```

.changelog/17142.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_partition: Correct `reverse_dns_prefix` value in AWS China, C2S, and SC2S
+```

.changelog/17160.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_licensemanager_license_configuration: Add `arn` and `owner_account_id` attributes
+```

.changelog/17189.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/lakeformation_permissions: Handle resources with multiple permissions
+```
+
+```release-note:bug
+resource/lakeformation_data_lake_settings: Avoid unnecessary resource cycling
+```

.changelog/17201.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Correctly update computed `member_clusters` values
+```

.changelog/17221.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_sagemaker_app_image_config
+```
+
+```release-note:bug
+resource/aws_sagemaker_code_repository: fix doc name
+```

.changelog/17226.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_elb_hosted_zone_id: Correct values for `cn-north-1` and `cn-northwest-1` regions
+```

.changelog/17234.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_api_gateway_method_settings: Prevent confusing Terraform error on resource disappearance during creation
+```
+
+```release-note:bug
+resource/aws_api_gateway_method_settings: Ignore non-existent resource errors during deletion
+```

.changelog/17238.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_lb_listener: Prevent error when retrieving a listener whose default action contains weighted target groups
+```

.changelog/17243.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ebs_volume: Allow both `size` and `snapshot_id` attributes to be specified
+```

.changelog/17254.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kinesis_firehose_delivery_stream: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation access errors
+```

.changelog/17256.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_crawler: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation permissions errors
+```

.changelog/17262.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codeartifact_domain: Make `encryption_key` optional
+```

.changelog/17286.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_recipe: Add `gp3` as a valid value for the `volume_type` attribute
+```

.changelog/17301.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Allow changing `cluster_mode.replica_count` without re-creation
+```

.changelog/17313.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_config_conformance_pack
+```

.changelog/17318.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_access_key: Add `create_date` attribute
+```

.changelog/17320.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_elasticache_replication_group: Add `multi_az_enabled` argument
+```
+
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add `multi_az_enabled` argument
+```

.changelog/17321.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_access_key: Support resource import
+```

.changelog/17322.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_access_key: Ensure `Inactive` `status` is properly configured during resource creation
+```

.changelog/17335.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_catalog_table: Adds support for specifying schema from schema registry.
+```

.changelog/17336.txt

@@ -0,0 +1,11 @@
+```release-note:new-data-source
+aws_cloudfront_cache_policy
+```
+
+```release-note:new-resource
+aws_cloudfront_cache_policy
+```
+
+```release-note:enhancement
+resource/aws_cloudfront_distribution: Add `cache_policy_id` attribute
+```

.changelog/17338.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codebuild_report_group: Add `delete_reports` argument
+```

.changelog/17340.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Support AWS Single-Sign On (SSO) cached credentials
+```

.changelog/17344.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_partition: Fix `partition_values` to preserve order.
+```

.changelog/17366.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_sagemaker_model_package_group
+```

.changelog/17380.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Fix use of `throughput` and `iops` for `gp3` volumes at the same time
+```

.changelog/17418.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Allow use of `resource_type` or `resource_type_list` attributes
+```

.changelog/17423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssoadmin_permission_set: Properly update resource with `relay_state` argument
+```

.changelog/17469.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Only validate AWS shared configuration profile SSO configuration when attempting to use SSO cached credentials
+```