v3.47.0

FEATURES:

• New Resource: aws_cloudwatch_event_bus_policy (#16874)
• New Resource: aws_efs_backup_policy (#18006)
• New Resource: aws_elasticsearch_domain_saml_options (#19497)
• New Resource: aws_neptune_cluster_endpoint (#19898)

ENHANCEMENTS:

• resource/aws_default_route_table: Add retries when creating, deleting and replacing routes (#19426)
• resource/aws_default_route_table: Add retries when creating, deleting and replacing routes (#19426)
• resource/aws_ecs_capacity_provider: Allow updates to the auto_scaling_group_provider argument without recreating the resource (#16942)
• resource/aws_eks_cluster: Allow updates to encryption_config (#19144)
• resource/aws_lb_target_group: Add support for app_cookie stickiness type and cookie_name argument (#18102)
• resource/aws_main_route_table_association: Wait for association to reach the required state (#19426)
• resource/aws_neptune_cluster: Add copy_snapshot_to_tags argument (#19899)
• resource/aws_route: Add retries when creating, deleting and replacing routes (#19426)
• resource/aws_route_table: Add retries when creating, deleting and replacing routes (#19426)
• resource/aws_route_table_association: Wait for association to reach the required state (#19426)

BUG FIXES:

• resource/aws_backup_vault_policy: Correctly handle deleting policy of deleted vault (#19854)
• resource/aws_backup_vault_policy: Correctly handle reading policy of deleted vault (#19749)
• resource/aws_glue_catalog_database: Set location_uri as compute to prevent drift when target_table has location_uri set. (#19743)
• resource/aws_glue_catalog_table: Fix updating schema_reference when columns are present. (#19742)

v3.46.0

FEATURES:

• New Data Source: aws_appmesh_virtual_service (#19774)
• New Data Source: aws_servicecatalog_portfolio (#19500)
• New Resource: aws_budgets_budget_action (#19554)
• New Resource: aws_route53_resolver_firewall_config (#18733)

ENHANCEMENTS:

• resource/aws_cloudwatch_log_metric_filter: Add support for unit in the metric_transformation block. (#19804)
• resource/aws_datasync_location_nfs: Add mount_options argument. (#19767)
• resource/aws_datasync_location_nfs: Add plan time validation for on_prem_config.agent_arns, server_hostname, and subdirectory. (#19767)
• resource/aws_datasync_location_nfs: Add support for updating. (#19767)
• resource/aws_ecs_cluster: Add plan time validation for name. (#19785)
• resource/aws_ecs_cluster: Add support for configuration. (#19785)
• resource/aws_eks_node_group: Allow minimum value of 0 for desired_size and min_size in the scaling_config configuration block (#19810)
• resource/aws_spot_fleet_request: Add on_demand_allocation_strategy, on_demand_max_total_price, and on_demand_target_capacity arguments (#13127)

BUG FIXES:

• data-source/aws_directory_service_directory: Check VpcSettings and ConnectSettings for nil values (#19820)
• data-source/aws_lakeformation_permissions: Fix diffs resulting from order of column names and exclude column names (#19817)
• resource/aws_cognito_identity_provider: Fix updating idp_identifiers crash. (#19819)
• resource/aws_glue_trigger: Fix default timeouts for Create and Delete operations (#19827)
• resource/aws_lakeformation_permissions: Fix bug preventing updates (inconsistent result) (#19817)
• resource/aws_lakeformation_permissions: Fix bug where resource is not properly removed from state (#19817)
• resource/aws_lakeformation_permissions: Fix diffs resulting only from order of column names and exclude column names (#19817)
• resource/aws_lambda_event_source_mapping: Enhance handling of IAM eventual consistency errors during create (#19831)
• resource/aws_sqs_queue: Correctly handle the default kms_data_key_reuse_period_seconds value of 300 for unencrypted queues (#19834)

v3.45.0

FEATURES:

• New Data Source: aws_appmesh_mesh (#19577)
• New Data Source: aws_globalaccelerator_accelerator (#19647)

ENHANCEMENTS:

• data-source/aws_nat_gateway: Add connectivity_type attribute (#19758)
• data-source/aws_transfer_server: Add domain attribute. (#19691)
• resource/aws_cognito_user_pool: Add custom_domain, domain, and estimated_number_of_users attributes (#16502)
• resource/aws_cognito_user_pool: Add custom_email_sender, custom_sms_sender, and kms_key_id to lambda_config (#16502)
• resource/aws_cognito_user_pool: Add plan time validation for name (#16502)
• resource/aws_cognito_user_pool_client: Add plan time validation for id_token_validity and access_token_validity. (#19702)
• resource/aws_cur_report_definition: Add arn attribute. (#19705)
• resource/aws_cur_report_definition: Add plan time validation for report_name. (#19705)
• resource/aws_cur_report_definition: Support updating definition. (#19705)
• resource/aws_datasync_location_smb: Add plan time validation for domain, agent_arns, password, server_hostname, subdirectory, and user. (#19753)
• resource/aws_datasync_location_smb: Add support for updating. (#19753)
• resource/aws_default_vpc_dhcp_options: Add owner_id argument. (#19656)
• resource/aws_ecs_task_definition: Add plan time validation for family and requires_compatibilities. (#19670)
• resource/aws_ecs_task_definition: Add support for ephemeral_storage. (#19694)
• resource/aws_ecs_task_definition: Add support for fsx_windows_file_server_volume_configuration. (#19670)
• resource/aws_fsx_lustre_filesystem: Add data_compression_type argument. (#19664)
• resource/aws_nat_gateway: Add connectivity_type argument (#19758)
• resource/aws_sqs_queue: Add deduplication_scope and fifo_throughput_limit arguments (#19639)
• resource/aws_sqs_queue: Add url attribute (#19639)
• resource/aws_transfer_server: Add domain argument. (#19691)
• resource/aws_transfer_user: Add posix_profile argument. (#19693)

BUG FIXES:

• data-source/aws_acmpca_certificate_authority: Fix error setting tags (#19681)
• data-source/aws_servicequotas_service_quota: Correctly handle errors embedded in API struct (#19722)
• resource/aws_batch_job_definition: Suppress differences for empty linuxParameters.devices and linuxParameters.tmpfs arrays in the container_properties argument (#19666)
• resource/aws_cloudwatch_event_target: Increase the maximum allowed value for the input_transformer input_paths argument to 100 (#19703)
• resource/aws_cloudwatch_metric_alarm: Allow extended statistics in the stat argument of the metric configuration block (#19668)
• resource/aws_cognito_user_pool: Suppress diff for empty account_recovery_setting. (#19704)
• resource/aws_cognito_user_pool_client: Fix plan time validation for refresh_token_validity (#19702)
• resource/aws_iot_topic_rule: Allow tags containing @ character (#19677)
• resource/aws_lambda_function: Prevents perpetual diff in vpc_config (#17610)
• resource/aws_servicequotas_service_quota: Correctly handle errors embedded in API struct (#19722)
• resource/aws_sqs_queue: Allow visibility_timeout_seconds to be 0 when creating queue (#19639)
• resource/aws_sqs_queue: Ensure that queue attributes propagate completely during Create and Update (#19639)

v3.44.0

FEATURES:

• New Resource: aws_amplify_branch (#11937)
• New Resource: aws_amplify_domain_association (#11938)
• New Resource: aws_amplify_webhook (#11939)
• New Resource: aws_servicecatalog_principal_portfolio_association (#19470)

ENHANCEMENTS:

• data-source/aws_launch_configuration: Add throughput attribute to ebs_block_device and root_block_device configuration blocks to support GP3 volumes (#19632)
• resource/aws_acmpca_certificate_authority: Add s3_object_acl argument to revocation_configuration.crl_configuration configuration block (#19578)
• resource/aws_cloudwatch_log_metric_filter: Add dimensions argument to metric_transformation configuration block (#19625)
• resource/aws_cloudwatch_metric_alarm: Add plan time validation to metric_query.metric.stat. (#19571)
• resource/aws_devicefarm_project: Add default_job_timeout_minutes and tags argument (#19574)
• resource/aws_devicefarm_project: Add plan time validation for name (#19574)
• resource/aws_fsx_lustre_filesystem: Allow updating storage_capacity. (#19568)
• resource/aws_launch_configuration: Add throughput argument to ebs_block_device and root_block_device configuration blocks to support GP3 volumes (#19632)

BUG FIXES:

• resource/aws_amplify_app: Mark the enable_performance_mode argument in the auto_branch_creation_config configuration block as ForceNew (#11937)
• resource/aws_cloudwatch_event_api_destination: Fix crash on resource update (#19654)
• resource/aws_elasticache_cluster: Fix provider-level default_tags support for resource (#19615)
• resource/aws_iam_access_key: Fix status not defaulting to Active (#19606)

v3.43.0

FEATURES:

• New Data Source: aws_cloudwatch_event_connection (#18905)
• New Resource: aws_amplify_app (#15966)
• New Resource: aws_amplify_backend_environment (#11936)
• New Resource: aws_cloudwatch_event_api_destination (#18905)
• New Resource: aws_cloudwatch_event_connection (#18905)
• New Resource: aws_schemas_discoverer (#19100)
• New Resource: aws_schemas_registry (#19100)
• New Resource: aws_schemas_schema (#19100)
• New Resource: aws_servicecatalog_budget_resource_association (#19452)
• New Resource: aws_servicecatalog_provisioning_artifact (#19316)
• New Resource: aws_servicecatalog_tag_option_resource_association (#19448)

ENHANCEMENTS:

• data-source/aws_msk_cluster: Add bootstrap_brokers_sasl_iam attribute (#19404)
• resource/aws_cloudfront_distribution: Add connection_attempts, connection_timeout, and origin_shield. (#16049)
• resource/aws_cloudtrail: Add AWS::DynamoDB::Table as an option for event_selector.data_resource.type (#19559)
• resource/aws_ec2_capacity_reservation: Add outpost_arn argument (#19535)
• resource/aws_ecs_service: Add support for ECS Anywhere with the launch_type EXTERNAL (#19557)
• resource/aws_eks_node_group: Add taint argument (#19482)
• resource/aws_elasticache_parameter_group: Add tags argument and arn and tags_all attributes (#19551)
• resource/aws_msk_cluster: Add bootstrap_brokers_sasl_iam attribute (#19404)
• resource/aws_msk_cluster: Add iam argument to client_authentication.sasl configuration block (#19404)
• resource/aws_msk_configuration: kafka_versions argument is optional (#17571)
• resource/aws_sns_topic: Add firehose_success_feedback_role_arn, firehose_success_feedback_sample_rate and firehose_failure_feedback_role_arn arguments. (#19528)
• resource/aws_sns_topic: Add owner attribute. (#19528)
• resource/aws_sns_topic: Add plan time validation for application_success_feedback_role_arn, application_failure_feedback_role_arn, http_success_feedback_role_arn, http_failure_feedback_role_arn, lambda_success_feedback_role_arn, lambda_failure_feedback_role_arn, sqs_success_feedback_role_arn, sqs_failure_feedback_role_arn. (#19528)

BUG FIXES:

• data-source/aws_launch_template: Add interface_type to network_interfaces attribute (#19492)
• data-source/aws_mq_broker: Correct type for logs.audit attribute (#19502)
• resource/aws_apprunner_service: Correctly configure authentication_configuration, code_configuration, and image_configuration nested arguments in API requests (#19471)
• resource/aws_apprunner_service: Handle asynchronous IAM eventual consistency error on creation (#19483)
• resource/aws_apprunner_service: Suppress instance_configuration cpu and memory differences (#19483)
• resource/aws_batch_job_definition: Don't crash when setting timeout.attempt_duration_seconds to null (#19505)
• resource/aws_cloudformation_stack: Avoid conflicts with on_failure and disable_rollback (#10539)
• resource/aws_cloudwatch_event_api_destination: Reduce the maximum allowed value for the invocation_rate_limit_per_second argument to 300 (#19594)
• resource/aws_ec2_managed_prefix_list: Fix crash with multiple description-only updates (#19517)
• resource/aws_eks_addon: Use service_account_role_arn, if set, on updates (#19454)
• resource/aws_glue_connection: connection_properties are optional (#19375)
• resource/aws_lb_listener_rule: Allow blank string for action.redirect.query nested argument (#19496)
• resource/aws_synthetics_canary: Change minimum timeout_in_seconds in run_config from 60 to 3 (#19515)
• resource/aws_vpn_connection: Allow local_ipv4_network_cidr, remote_ipv4_network_cidr, local_ipv6_network_cidr, and remote_ipv6_network_cidr to be CIDRs of any size (#17573)

v3.42.0

FEATURES:

• New Data Source: aws_service_discovery_dns_namespace (#6856)
• New Resource: aws_cloudwatch_metric_stream (#18870)
• New Resource: aws_servicecatalog_constraint (#19385)
• New Resource: aws_servicecatalog_product_portfolio_association (#19385)
• New Resource: aws_servicecatalog_service_action (#19369)

ENHANCEMENTS:

• resource/aws_autoscaling_policy: Add PredictiveScaling policy_type and predictive_scaling_configuration argument (#19447)

BUG FIXES:

• resource/aws_networkfirewall_rule_group: Correctly update resource on rules change (#19430)

v3.41.0

FEATURES:

• New Data Source: aws_cloudfront_function (#19315)
• New Data Source: aws_glue_connection (#18802)
• New Data Source: aws_glue_data_catalog_encryption_settings (#18802)
• New Data Source: aws_organizations_delegated_administrators (#19389)
• New Data Source: aws_organizations_delegated_services (#19389)
• New Resource: aws_apprunner_auto_scaling_configuration_version (#19432)
• New Resource: aws_apprunner_connection (#19432)
• New Resource: aws_apprunner_custom_domain_association (#19432)
• New Resource: aws_apprunner_service (#19432)
• New Resource: aws_cloudfront_function (#19315)
• New Resource: aws_macie2_invitation_accepter (#19304)
• New Resource: aws_macie2_member (#19304)
• New Resource: aws_macie2_organization_admin_account (#19303)
• New Resource: aws_organizations_delegated_administrator (#19389)
• New Resource: aws_servicecatalog_organizations_access (#19278)
• New Resource: aws_servicecatalog_portfolio_share (#19278)

ENHANCEMENTS:

• data-source/aws_outposts_outpost: owner_id is now an optional argument (#17585)
• data-source/aws_outposts_outposts: Add owner_id argument (#17585)
• resource/aws_cloudfront_distribution: Add function_association argument to ordered_cache_behavior and default_cache_behavior configuration blocks (#19315)
• resource/aws_glue_catalog_database: Add target_database argument (#19371)
• resource/aws_glue_catalog_table: Add target_table argument (#19372)
• resource/aws_launch_template: Add interface_type argument to network_interfaces configuration block (#18841)
• resource/aws_network_interface: Add interface_type argument (#18841)

BUG FIXES:

• resource/aws_lambda_function: Wait for successful completion of function code update (#19386)
• resource/aws_pinpoint_email_channel: role_arn argument is optional (#19361)

v3.40.0

FEATURES:

• New Resource: aws_macie2_custom_data_identifier (#19254)
• New Resource: aws_macie2_findings_filter (#19283)
• New Resource: aws_servicecatalog_tag_option (#19300)
• New Resource: aws_timestreamwrite_database (#15463)
• New Resource: aws_timestreamwrite_table (#19354)

ENHANCEMENTS:

• data-source/aws_codestarconnections_connection: Add host_arn attribute (#19284)
• data-source/aws_lb_listener: Add tags attribute. (#19286)
• resource/aws_ami_copy: Add destination_outpost_arn argument (#17735)
• resource/aws_cloudwatch_event_target: Add http_target argument (#19337)
• resource/aws_codestarconnections_connection: Add host_arn argument (#19284)
• resource/aws_datasync_location_s3: Add agent_arns argument (#18547)
• resource/aws_datasync_option: Add private_link_endpoint, security_group_arns, subnet_arns and vpc_endpoint_id arguments (#16207)
• resource/aws_datasync_task: Add excludes argument and overwrite_mode, task_queueing, and transfer_mode to the options configuration block (#16204)
• resource/aws_datasync_task: Add schedule argument (#14452)
• resource/aws_datasync_task: Add plan time validation to cloudwatch_log_group_arn, destination_location_arn and source_location_arn (#14452)
• resource/aws_eks_node_group: Add node_group_name_prefix argument (#13938)
• resource/aws_lambda_event_source_mapping: Support reading starting_position and starting_position_timestamp attributes (#19253)
• resource/aws_lb_listener: Add tags argument & tags_all attribute. (#19286)
• resource/aws_lb_listener_rule: Add plan time validation to listener_arn, action.target_group_arn, action.forward.target_group.arn, action.redirect.host, action.redirect.path, action.redirect.query, action.redirect.status_code, action.fixed_response.message_body, action.authenticate_cognito.user_pool_arn. (#19285)
• resource/aws_lb_listener_rule: Add tagging support. (#19285)

v3.39.0

FEATURES:

• New Data Source: aws_cloudwatch_event_source (#19219)
• New Resource: aws_dynamodb_kinesis_streaming_destination (#16743)
• New Resource: aws_macie2_classification_job (#19165)

ENHANCEMENTS:

• data-source/aws_transfer_server: Add certificate, endpoint_type, protocols and security_policy_name attributes (#13371)
• resource/aws_cloudwatch_event_bus: Support partner event bus creation (#19072)
• resource/aws_cloudwatch_event_rule: Support partner event bus names (#18491)
• resource/aws_cloudwatch_event_target: Support partner event bus names (#18491)
• resource/aws_codebuild_project: Add file_system_locations argument (#12130)
• resource/aws_cognito_identity_pool: Add allow_classic_flow argument (#19176)
• resource/aws_datasync_location_s3: Add s3_storage_class argument (#19190)
• resource/aws_glue_connection: Add plan time validation for connection_properties, description, match_criteria, name, and physical_connection_requirements.security_group_id_list (#19172)
• resource/aws_msk_cluster: Support in-place instance_type updates (#17447)
• resource/aws_sfn_state_machine: Add tracing_configuration attribute (#15434)
• resource/aws_shield_protection: Add tags argument (#19168)
• resource/aws_transfer_server: Add protocols argument (#13371)
• resource/aws_transfer_server: Add security_policy_name argument (#15375)

BUG FIXES:

• aws_batch_compute_environment: Allow update of just service_role for managed compute environments (#19205)
• aws_batch_compute_environment: service_role argument is optional (#19205)
• provider: Prevent Provider produced inconsistent final plan errors when lifecycle arguments apply to resource tags not known until apply (#19251)
• resource/aws_appautoscaling_target: Ignore ObjectNotFoundException on deletion (#18115)
• resource/aws_batch_job_definition: Prevent diff with default value of fargatePlatformConfiguration (#19207)
• resource/aws_lakeformation_permissions: Fix issues related to permissions not being revoked and attempts to revoke non-existent permissions (#18505)
• resource/aws_mwaa_environment: Correctly apply plugins_s3_object_version change (#19266)
• resource/aws_sfn_state_machine: Handle eventual consistency of state machine updates (#15434)
• resource/aws_ssoadmin_managed_policy_attachment: Retry attachment/detachment when other permission-set attachment event was not yet propagated, to avoid ConflictException. (#19216)

v3.38.0

NOTES:

• provider: default_tags support generally available to all provider resources that support tags with the exception of aws_autoscaling_group (#19084)

FEATURES:

• New Data Source: aws_cloudformation_type (#18579)
• New Data Source: aws_kms_public_key (#18873)
• New Data Source: aws_resourcegroupstaggingapi_resources (#17804)
• New Resource: aws_cloudformation_type (#18579)
• New Resource: aws_codestarconnections_host (#16918)
• New Resource: aws_macie2_account (#19069)
• New Resource: aws_rds_proxy_endpoint (#18881)
• New Resource: aws_route53_resolver_firewall_rule (#18712)
• New Resource: aws_route53_resolver_firewall_rule_group_association (#19164)
• New Resource: aws_servicecatalog_product (#19122)

ENHANCEMENTS:

• data-source/aws_efs_mount_target: Add access_point_id, file_system_id arguments (#18918)
• data-source/aws_iam_policy: Add support for lookup by arn, name, and/or path_prefix (#6084)
• data-source/aws_launch_template: Add placement host_resource_group_arn attribute (#15785)
• data/source_aws_eks_addon: added validation for cluster_name (#19078)
• data/source_aws_eks_cluster: added validation for cluster_name (#19078)
• resource/aws_appsync_resolver: Mark request_template and response_template as optional (support Lambda) (#14710)
• resource/aws_batch_compute_environment: Additional supported value FARGATE and FARGATE_SPOT for the type argument in the compute_resources configuration block (#16819)
• resource/aws_batch_compute_environment: The instance_role, instance_type and min_vcpus arguments in the compute_resources configuration block are now optional (#16819)
• resource/aws_batch_compute_environment: The security_group_ids and subnets arguments in the compute_resources configuration block can now be updated in-place for Fargate compute resources (#16819)
• resource/aws_batch_job_definition: Add propagate_tags argument (#18336)
• resource/aws_codebuild_project: Add build_batch_config argument (#14534)
• resource/aws_codebuild_project: Add build_status_config attribute to source and secondary_sources configuration blocks (#15442)
• resource/aws_codebuild_project: Add concurrent_build_limit argument to specify build concurrency. (#18320)
• resource/aws_codebuild_project: Add plan time validation for secondary_artifacts, secondary_sources, service_role (#18843)
• resource/aws_eip: Add address argument to recover or an IPv4 address from an address pool, supporting BYOIP (#8876)
• resource/aws_eks_addon: added validation for cluster_name (#19078)
• resource/aws_eks_cluster: added validation for name (#19078)
• resource/aws_eks_fargate_profile: added validation for cluster_name (#19078)
• resource/aws_eks_node_group: added validation for cluster_name (#19078)
• resource/aws_elasticache_global_replication_group: Adds parameter engine_version_actual to match other ElastiCache resources (#18920)
• resource/aws_elasticache_subnet_group: Add tags argument (#19119)
• resource/aws_instance: Make instance_initiated_shutdown_behavior also computed, allowing value to be read (#18880)
• resource/aws_lambda_event_source_mapping: Don't incorrectly update unspecified maximum_batching_window_in_seconds, maximum_record_age_in_seconds and maximum_retry_attempts arguments from their default values (#17933)
• resource/aws_lambda_event_source_mapping: Fix update of batch_size for MSK event source mappings (#17933)
• resource/aws_launch_template: Add placement host_resource_group_arn argument (#15785)
• resource/aws_organizations_organizational_unit: Add tags argument (#18861)
• resource/aws_rds_global_cluster: Allow engine_version to be upgraded in place. (#18598)
• resource/aws_s3outposts_endpoint: Extends creation timeout to 20 minutes (#18454)
• resource/aws_ses_configuration_set: Adds reputation_metrics_enabled and sending_enabled arguments and last_fresh_start attribute (#17608)
• resource/aws_ses_receipt_rule: Add encoding argument to sns_action configuration block. (#17654)
• resource/aws_sns_topic_policy: Add owner attribute (#14123)
• resource/aws_sns_topic_policy: Add plan time validation to arn (#14123)
• resource/aws_wafv2_web_acl_logging_configuration: Add logging_filter argument (#19051)

BUG FIXES:

• provider: Prevent Provider produced inconsistent final plan errors when resource tags are not known until apply (#18958)
• resource/aws_batch_job_definition: Treat empty container_properties.logConfiguration.secretOptions array as null to prevent continual diffs (#16120)
• resource/aws_batch_job_queue: Recreate batch job queue if the name changes (#19121)
• resource/aws_codebuild_project: Allow fetching submodules for bitbucket source types (#18843)
• resource/aws_codebuild_project: Fix removing secondary_sources and secondary_artifacts (#18843)
• resource/aws_ec2_managed_prefix_list: Prevent entry description update errors (#19095)
• resource/aws_elasticache_cluster: Allows specifying Redis 6.x (#18920)
• resource/aws_elasticache_replication_group: Allows specifying Redis 6.x (#18920)
• resource/aws_glue_crawler: Allow '/' in name argument (#19160)
• resource/aws_lambda_event_source_mapping: Support -1 (forever) as a valid value for maximum_record_age_in_seconds (#16113)
• resource/aws_lambda_event_source_mapping: Support -1 (forever) as a valid value for maximum_retry_attempts (#16113)
• resource/aws_ram_principal_association: Improve handling of eventual consistency (#17032)
• resource/aws_ram_resource_share: Improve handling of eventual consistency (#17032)
• resource/aws_ram_resource_share_accepter: Improve handling of eventual consistency (#17032)
• resource/aws_storagegateway_gateway: Correctly handle additional error message returned in some regions (#19116)
• resource/aws_vpc_endpoint: F...