v3.28.0

FEATURES:

• New Data Source: aws_cloudfront_cache_policy (#17336)
• New Resource: aws_cloudfront_cache_policy (#17336)
• New Resource: aws_cloudfront_realtime_log_config (#14974)
• New Resource: aws_config_conformance_pack (#17313)
• New Resource: aws_sagemaker_model_package_group (#17366)
• New Resource: aws_securityhub_organization_admin_account (#17501)
• New Resource: aws_synthetics_canary (#13140)

ENHANCEMENTS:

• data-source/aws_customer_gateway: Add device_name attribute (#14786)
• data-source/aws_iam_policy_document: Support merging policy documents by adding source_policy_documents and override_policy_documents arguments (#12055)
• provider: Add terraform-provider-aws version to HTTP User-Agent header (#17486)
• resource/aws_budgets_budget: Add arn attribute (#13139)
• resource/aws_budgets_budget: Add plan time validation for budget_type, time_unit, and subscriber_sns_topic_arns arguments (#13139)
• resource/aws_cloudfront_distribution: Add cache_policy_id attribute (#17336)
• resource/aws_cloudfront_distribution: Add realtime_log_config_arn attribute to default_cache_behavior and ordered_cache_behavior configuration blocks (#14974)
• resource/aws_cloudfront_public_key: Add import support (#17044)
• resource/aws_cloudwatch_log_destination: Add plan time validation to role_arn, name and target_arn. (#11687)
• resource/aws_cloudwatch_log_group: Add plan time validation for retention_in_days argument (#14673)
• resource/aws_codebuild_report_group: Add delete_reports argument (#17338)
• resource/aws_codestarconnections_connection: Add tags argument (#16835)
• resource/aws_customer_gateway: Add device_name argument (#14786)
• resource/aws_dynamodb_table: Add plan-time validation for indexes on undefined attributes (#6364)
• resource/aws_ec2_capacity_reservation: Add owner_id attribute (#17129)
• resource/aws_ec2_traffic_mirror_filter: Add arn attribute. (#13948)
• resource/aws_ec2_traffic_mirror_filter_rule: Add arn attribute. (#13949)
• resource/aws_ec2_traffic_mirror_filter_rule: Add plan time validation to destination_port_range.from_port,
  destination_port_range.to_port, source_port_range.from_port, and source_port_range.to_port. (#13949)
• resource/aws_elastictranscoder_pipeline: Add plan time validations to content_config.storage_class, content_config_permissions.access, content_config_permissions.grantee_type,
  notifications.completed, notifications.error, notifications.progressing, notifications.warning,
  thumbnail_config.storage_class, thumbnail_config_permissions.access, thumbnail_config_permissions.grantee_type (#13973)
• resource/aws_fms_policy: Allow use of resource_type or resource_type_list attributes (#17418)
• resource/aws_imagebuilder_image_recipe: Add gp3 as a valid value for the volume_type attribute (#17286)
• resource/aws_lambda_event_source_mapping: Add topics attribute to support Amazon MSK as an event source (#14746)
• resource/aws_lb_listener_certificate: Add import support (#16474)
• resource/aws_licensemanager_license_configuration: Add arn and owner_account_id attributes (#17160)
• resource/aws_ses_active_receipt_rule_set: Add arn attribute (#13962)
• resource/aws_ses_active_receipt_rule_set: Add plan time validation for rule_set_name argument (#13962)
• resource/aws_ses_configuration_set: Add arn attribute. (#13972)
• resource/aws_ses_configuration_set: Add delivery_options argument (#11600)
• resource/aws_ses_configuration_set: Add plan time validation to name. (#13972)
• resource/aws_ses_event_destination: Add arn attribute (#13964)
• resource/aws_ses_event_destination: Add plan time validation for name, cloudwatch_destination.default_value, cloudwatch_destination.default_name, kinesis_destination.role_arn, kinesis_destination.stream_arn, and sns_destination.topic_arn attributes (#13964)
• resource/aws_ses_receipt_rule: Add arn attribute (#13960)
• resource/aws_ses_receipt_rule: Add plan time validations for name, tls_policy, add_header_action.header_name, add_header_action.header_value, bounce_action.topic_arn, lambda_action.function_arn, lambda_action.topic_arn, lambda_action.invocation_type, s3_action,topic_arn, sns_action.topic_arn, stop_action.scope, stop_action.topic_arn, workmail_action.topic_arn, and workmail_action.organization_arn attributes (#13960)
• resource/aws_ses_template: Add arn attribute (#13963)
• resource/aws_sns_topic_subscription: Add redrive_policy argument (#11770)
• resource/aws_ssm_association: Add apply_only_at_cron_interval argument (#15038)
• resource/aws_ssm_document: Add version_name argument (#14128)
• resource/aws_ssm_maintenance_window_task: Add task_invocation_parameters run_command_parameters block cloudwatch_config and document_version arguments (#11774)
• resource/aws_ssm_maintenance_window_task: Add plan time validation to max_concurrency, max_errors, priority, service_role_arn, targets, targets.notification_arn, targets.service_role_arn, task_type, task_invocation_parameters.run_command_parameters.comment, task_invocation_parameters.run_command_parameters.document_hash, task_invocation_parameters.run_command_parameters.timeout_seconds, and task_invocation_parameters.run_command_parameters.notification_config.notification_events arguments (#11774)
• resource/aws_ssm_maintenance_window_task: Make service_role_arn optional (#12200)
• resource/aws_ssm_patch_baseline: Add approval_rule block approve_until_date argument (#13850)
• resource/aws_ssm_patch_baseline: Add approved_patches_enable_non_security and rejected_patches_action arguments (#11772)
• resource/aws_ssm_patch_baseline: Add source configuration block (#11879)
• resource/aws_ssm_patch_baseline: Adds arn attribute. (#11772)
• resource/aws_ssm_patch_baseline: Adds plan time validation for name, description, global_filter.key, global_filter.values,
  approved_patches, rejected_patches, approval_rule.approve_after_days, approval_rule.patch_filter.key, and approval_rule.patch_filter.values. (#11772)

BUG FIXES:

• resource/aws_glue_catalog_database: Use Catalog Id when deleting Databases. (#17489)
• resource/aws_iam_instance_profile: Detac...

v3.27.0

FEATURES:

• New Data Source: aws_cloudfront_origin_request_policy (#17342)
• New Resource: aws_ec2_transit_gateway_prefix_list_reference (#16823)
• New Resource: aws_route53_key_signing_key (#16840)
• New Resource: aws_cloudfront_origin_request_policy (#17342)

ENHANCEMENTS:

• data-source/resource_aws_lb_target_group: Add protocol_version attribute (#17260)
• data-source/aws_subnet: Add customer_owned_ipv4_pool and map_customer_owned_ip_on_launch attributes (#16676)
• resource/aws_glacier_vault: Add plan-time validation for notification configuration block events and sns_topic_arn arguments (#12645)
• resource/aws_glue_catalog_table: Adds support for specifying schema from schema registry. (#17335)
• resource/aws_iam_access_key: Add create_date attribute (#17318)
• resource/aws_iam_access_key: Support resource import (#17321)
• resource/resource_aws_lb_target_group: Add protocol_version (#17260)
• resource/aws_subnet: Add customer_owned_ipv4_pool and map_customer_owned_ip_on_launch attributes (#16676)
• resource/aws_lb: Add ipv6_address attribute (#17229)
• resource/aws_sfn_state_machine: Add support for EXPRESS state machine type (#12249)
• resource/aws_cloudfront_distribution: Add cloudfront_origin_request_policy_id attribute (#17342)

BUG FIXES:

• data-source/aws_partition: Correct reverse_dns_prefix value in AWS China, C2S, and SC2S (#17142)
• provider: Only validate AWS shared configuration profile SSO configuration when attempting to use SSO cached credentials (#17469)
• resource/aws_api_gateway_method_settings: Ignore non-existent resource errors during deletion (#17234)
• resource/aws_api_gateway_method_settings: Prevent confusing Terraform error on resource disappearance during creation (#17234)
• resource/aws_cloudwatch_event_rule: Prevent perpetual differences with name_prefix argument values beginning with terraform- (#17030)
• resource/aws_glacier_vault: Prevent crash with GetVaultAccessPolicy API errors (#12645)
• resource/aws_glacier_vault: Properly remove from state when resource does not exist (#12645)
• resource/aws_glue_crawler: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation permissions errors (#17256)
• resource/aws_glue_partition: Fix partition_values to preserve order. (#17344)
• resource/aws_iam_access_key: Ensure Inactive status is properly configured during resource creation (#17322)
• resource/aws_kinesis_firehose_delivery_stream: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation access errors (#17254)
• resource/aws_security_group: Prevent perpetual differences with name_prefix argument values beginning with terraform- (#17030)
• resource/aws_ssoadmin_permission_set: Properly update resource with relay_state argument (#17423)
• resource/aws_vpc_endpoint: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion (#16656)
• resource/aws_vpc_endpoint_service: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion (#16656)

v3.26.0

NOTES:

• data-source/aws_route53_zone: The Route 53 ListResourceRecordSets API call has been implemented to support the name_servers attribute for private Hosted Zones similar to the resource implementation. Environments using restrictive IAM permissions may require updates. (#17002)

FEATURES:

• New Data Source: aws_imagebuilder_image (#16710)
• New Resource: aws_imagebuilder_image (#16710)
• New Resource: aws_prometheus_workspace (#16882)
• New Resource: aws_sagemaker_app_image_config (#17221)

ENHANCEMENTS:

• data-source/aws_elasticache_replication_group: Add multi_az_enabled argument (#17320)
• data-source/aws_vpc_peering_connection: Add cidr_block_set and peer_cidr_block_set attributes (#13420)
• provider: Support AWS Single-Sign On (SSO) cached credentials (#17340)
• resource/aws_codeartifact_domain: Make encryption_key optional (#17262)
• resource/aws_elasticache_replication_group: Add multi_az_enabled argument (#17320)
• resource/aws_elasticache_replication_group: Allow changing cluster_mode.replica_count without re-creation (#17301)

BUG FIXES:

• data-source/aws_elb_hosted_zone_id: Correct values for cn-north-1 and cn-northwest-1 regions (#17226)
• data-source/aws_lb_listener: Prevent error when retrieving a listener whose default action contains weighted target groups (#17238)
• data-source/aws_route53_zone: Ensure name_servers is populated for private Hosted Zones (#17002)
• resource/aws_ebs_volume: Allow both size and snapshot_id attributes to be specified (#17243)
• resource/aws_elasticache_replication_group: Correctly update computed member_clusters values (#17201)
• resource/aws_sagemaker_code_repository: fix doc name (#17221)

v3.25.0

NOTES

• resource/aws_lightsail_instance: The ipv6_address attribute has been deprecated. Use the ipv6_addresses attribute instead. This is due to a backwards incompatible change in the Lightsail API. (#17155)

FEATURES

• New Resource: aws_backup_global_settings (#16475)
• New Resource: aws_sagemaker_feature_group (#16728)
• New Resource: aws_sagemaker_image_version (#17141)
• New Resource: aws_sagemaker_user_profile (#17123)

ENHANCEMENTS

• data-source/aws_ami: Add throughput attribute to block_device_mappings ebs attribute (#16631)
• data-source/aws_ebs_volume: Add throughput attribute (#16517)
• data-source/aws_elasticache_replication_group: Adds arn attribute (#15348)
• data-source/aws_iam_user: Add tags attribute (#13287)
• resource/aws_ami: Support volume_type value of gp3 and add throughput argument to ebs_block_device configuration block (#16631)
• resource/aws_ami_copy: Add throughput argument to ebs_block_device configuration block (#16631)
• resource/aws_ami_from_instance: Add throughput argument to ebs_block_device configuration block (#16631)
• resource/aws_ebs_volume: Add throughput argument (#16517)
• resource/aws_elasticache_replication_group: Adds arn attribute (#15348)
• resource/aws_lightsail_instance: Add ipv6_addresses attribute (#17155)
• resource/aws_sagemaker_domain: Delete implicit EFS file system (#17123)

BUG FIXES

• data-source/aws_lambda_function: Prevent error when getting Code Signing Config for container image based lambdas during read (#17180)
• provider: Fix error messages for missing required blocks not including the block name (#17211)
• provider: Prevent panic when sending Ctrl-C (SIGINT) to Terraform (#17211)
• resource/aws_api_gateway_authorizer: Ensure authorizer_credentials are configured when type is COGNITO_USER_POOLS (#16614)
• resource/aws_api_gateway_rest_api: Allow api_key_source, binary_media_types, and description arguments to be omitted from configuration with OpenAPI specification import (body argument) (#17099)
• resource/aws_api_gateway_rest_api: Ensure api_key_source, binary_media_types, description, minimum_compression_size, name, and policy configuration values are correctly applied as an override after OpenAPI specification import (body argument) (#17099)
• resource/aws_api_gateway_rest_api: Fix disable_execute_api_endpoint and endpoint_configuration vpc_endpoint_ids handling with OpenAPI specification import (body argument) (#17209)
• resource/aws_lakeformation_data_lake_settings: Avoid unnecessary resource cycling (#17189)
• resource/aws_lakeformation_permissions: Handle resources with multiple permissions (#17189)
• resource/aws_lambda_function: Prevent panic with missing FunctionConfiguration PackageType attribute in API response (#16544)
• resource/aws_lambda_function: Prevent panic with missing environment variable value (#17056)
• resource/aws_sagemaker_image: Fix catching image not found on read error (#17141)

v3.24.1

BUG FIXES

• data-source/instance: Fix EBS and root block device tags issue with "Invalid address to set" (#17136)

v3.24.0

FEATURES

• New Data Source: aws_api_gateway_domain_name (#12489)
• New Data Source: aws_identitystore_group (#15322)
• New Data Source: aws_identitystore_user (#15322)
• New Resource: aws_cloudwatch_composite_alarm (#15023)
• New Resource: aws_fms_policy (#9594)
• New Resource: aws_route53_resolver_dnssec_config (#17012)
• New Resource: aws_sagemaker_domain (#16077)
• New Resource: aws_ssoadmin_account_assignment (#15322)

ENHANCEMENTS

• data-source/aws_workspaces_directory: Add access properties (#16688)
• resource/aws_api_gateway_base_path_mapping: Support in-place updates for api_id, base_path, and stage_name (#16147)
• resource/aws_api_gateway_domain_name: Add mutual_tls_authentication configuration block (#15258)
• resource/aws_api_gateway_integration: Add tls_config configuration block (#15499)
• resource/aws_api_gateway_method: Add operation_name argument (#13282)
• resource/aws_api_gateway_rest_api: Add disable_execute_api_endpoint argument (#16198)
• resource/aws_api_gateway_rest_api: Add parameters argument (#7374)
• resource/aws_apigatewayv2_integration: Add response_parameters attribute (#17043)
• resource/aws_codepipeline: Deprecates GitHub v1 (OAuth token) authentication and removes hashing of GitHub token (#16959)
• resource/aws_codepipeline: Adds GitHub v2 (CodeStar Connetion) authentication (#16959)
• resource/aws_dms_endpoint: Add s3_settings date_partition_enabled argument (#16827)
• resource/aws_elasticache_cluster: Add support for final snapshot with Redis engine (#15592)
• resource/aws_elasticache_replication_group: Add support for final snapshot (#15592)
• resource/aws_globalaccelerator_accelerator: Add custom timeouts (#17112)
• resource/aws_globalaccelerator_endpoint_group: Add custom timeouts (#17112)
• resource/aws_globalaccelerator_endpoint_listener: Add custom timeouts (#17112)
• resource/aws_instance: Add tags parameter to root_block_device, ebs_block_device blocks.(#15474)
• resource/aws_workspaces_directory: Add access properties (#16688)

BUG FIXES

• resource/aws_appmesh_route: Allow an empty match attribute to specified for a grpc_route, indicating that any service should be matched (#16867)
• resource/aws_db_instance: Correctly validate final_snapshot_identifier argument at plan-time (#16885)
• resource/aws_dms_endpoint: Support extra_connection_attributes for all engine names during create and read (#16827)
• resource/aws_instance: Prevent volume_tags from improperly interfering with tags in aws_ebs_volume (#15474)
• resource/aws_networkfirewall_rule_group: Prevent resource recreation due to stateful_rule changes after creation (#16884)
• resource/aws_route53_zone_association: Prevent deletion errors for missing Hosted Zone or VPC association (#17023)
• resource/aws_sagemaker_image - fix error on wait for delete when image does not exist (#16077)
• resource/aws_s3_bucket_inventory: Prevent crashes with empty destination, filter, and schedule configuration blocks (#17055)
• service/apigateway: All operations will now automatically retry on ConflictException: Unable to complete operation due to concurrent modification. Please try again later. errors.

v3.23.0

• New Data Source: aws_ssoadmin_instances (#15808)
• New Data Source: aws_ssoadmin_permission_set (#15808)
• New Resource: aws_sagemaker_image (#16082)
• New Resource: aws_ssoadmin_managed_policy_attachment (#15808)
• New Resource: aws_ssoadmin_permission_set (#15808)
• New Resource: aws_ssoadmin_permission_set_inline_policy (#15808)

ENHANCEMENTS

• data-source/aws_imagebuilder_image_recipe: Add working_directory attribute (#16947)
• data-source/aws_elasticache_replication_group: Add reader_endpoint_address attribute (#9979)
• resource/aws_elasticache_replication_group: Add reader_endpoint_address attribute (#9979)
• resource/aws_elasticache_replication_group: Allows configuring replicas_per_node_group for "Redis (cluster mode disabled)" (#16829)
• resource/aws_imagebuilder_image_recipe: Add working_directory argument (#16947)
• resource/aws_glue_crawler: add support for lineage_configuration and recrawl_policy (#16714)
• resource/aws_glue_crawler: add plan time validations to name, description and table_prefix (#16714)
• resource/aws_kinesis_stream: Update retention_period argument plan-time validation to include up to 8760 hours (#16608)
• resource/aws_msk_cluster: Support PER_TOPIC_PER_PARTITION value for enhanced_monitoring argument plan-time validation (#16914)
• resource/aws_route53_zone: Add length validations for delegation_set_id and name arguments (#12340)
• resource/aws_vpc_endpoint_service: Make private_dns_name configurable and add private_dns_name_configuration attribute (#16495)

BUG FIXES

• resource/aws_emr_cluster: Remove from state instead of returning an error on long terminated cluster (#16924)
• resource/aws_glue_catalog_table: Glue table partition keys should be set to empty list instead of being unset (#16727)
• resource/aws_imagebuilder_distribution_configuration: Remove user_ids argument maximum limit (#16905)
• resource/aws_transfer_user: Update user_name argument validation to support 100 characters (#16938)

v3.22.0

FEATURES

• New Data Source: aws_ec2_managed_prefix_list (#16738)
• New Data Source: aws_lakeformation_data_lake_settings (#13250)
• New Data Source: aws_lakeformation_permissions (#13396)
• New Data Source: aws_lakeformation_resource (#13396)
• New Resource: aws_codestarconnections_connection (#15990)
• New Resource: aws_ec2_managed_prefix_list (#14068)
• New Resource: aws_lakeformation_data_lake_settings (#13250)
• New Resource: aws_lakeformation_permissions (#13396)
• New Resource: aws_lakeformation_resource (#13267)

ENHANCEMENTS

• data-source/aws_autoscaling_group: Adds launch_template attribute (#16297)
• data-source/aws_availability_zone: Add parent_zone_id, parent_zone_name, and zone_type attributes (additional support for Local and Wavelength Zones) (#16770)
• data-source/aws_eip: Add carrier_ip attribute (#16724)
• data-source/aws_instance: Add enclave_options attribute (Nitro Enclaves) (#16361)
• data-source/aws_instance: Add ebs_block_device and root_block_device configuration block throughput attribute (#16620)
• data-source/aws_launch_configuration: Add metadata_options attribute (#14637)
• data-source/aws_launch_template: Add enclave_options attribute (Nitro Enclaves) (#16361)
• data-source/aws_network_interface: Add association carrier_ip and customer_owned_ip attributes (#16723)
• resource/aws_autoscaling_group: Adds support for Instance Refresh (#16678)
• resource/aws_eip: Add carrier_ip attribute (#16724)
• resource/aws_instance: Add enclave_options configuration block (Nitro Enclaves) (#16361)
• resource/aws_instance: Add ebs_block_device and root_block_device configuration block throughput attribute (#16620)
• resource/aws_kinesis_firehose_delivery_stream: Mark http_endpoint_configuration access_key as sensitive (#16684)
• resource/aws_launch_configuration: Add metadata_options configuration block (#14637)
• resource/aws_launch_template: Add enclave_options configuration block (Nitro Enclaves) (#16361)
• resource/aws_vpn_connection: Add support for VPN tunnel options and enable acceleration, DPDTimeoutAction, StartupAction, local/remote IPv4/IPv6 network CIDR and tunnel inside IP version. (#14740)

BUG FIXES

• data-source/aws_ec2_coip_pools: Ensure all results from large environments are returned (#16669)
• data-source/aws_ec2_local_gateways: Ensure all results from large environments are returned (#16669)
• data-source/aws_ec2_local_gateway_route_tables: Ensure all results from large environments are returned (#16669)
• data-source/aws_ec2_local_gateway_virtual_interface_groups: Ensure all results from large environments are returned (#16669)
• data-source/aws_prefix_list: Using name argument no longer overrides other arguments (#16739)
• resource/aws_db_instance: Fix missing db_subnet_group_name in API request when using restore_to_point_in_time (#16830)
• resource/aws_eip_association: Handle eventual consistency when creating resource (#16808)
• resource/aws_main_route_table_association: Prevent crash on creation when VPC main route table association is not found (#16680)
• resource/aws_workspaces_workspace: Prevent panic from terminated WorkSpace (#16692)

v3.21.0

NOTES

• resource/aws_imagebuilder_image_recipe: Previously the ordering of component configuration blocks was not properly handled by the resource, which could cause unexpected behavior with multiple Components. These configurations may see the ordering difference being fixed after upgrade. (#16566)

FEATURES

• New Resource: aws_ec2_carrier_gateway (#16252)
• New Resource: aws_glue_schema (#16612)

ENHANCEMENTS

• data-source/aws_launch_template: Add associate_carrier_ip_address attribute to network_interfaces configuration block (#16707)
• data-source/aws_launch_template: Add throughput attribute to block_device_mappings.ebs configuration block (#16649)
• data-source/aws_launch_template: Support id as argument (#16457)
• resource/aws_appmesh_virtual_node: Add listener.connection_pool attribute (#16167)
• resource/aws_appmesh_virtual_node: Add listener.outlier_detection attribute (#16167)
• resource/aws_launch_template: Add associate_carrier_ip_address attribute to network_interfaces configuration block (#16707)
• resource/aws_launch_template: Add throughput attribute to block_device_mappings.ebs configuration block (#16649)
• resource/aws_spot_fleet_request: Add throughput attribute to launch_specification.ebs_block_device and launch_specification.root_block_device configuration blocks (#16652)
• resource/aws_ssm_maintenance_window: Add schedule_offset argument (#16569)
• resource/aws_workspaces_workspace: Add failed request error code along with message (#16459)

BUG FIXES

• data-source/aws_customer_gateway: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_ec2_transit_gateway: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_ec2_transit_gateway_peering_attachment: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_ec2_transit_gateway_route_table: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_ec2_transit_gateway_vpc_attachment: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_guardduty_detector: Prevent missing id attribute when not configured as argument (#16667)
• data-source/aws_imagebuilder_image_recipe: Ensure proper ordering of component attribute (#16566)
• resource/aws_backup_plan: Prevent plan-time validation error for pre-existing resources with lifecycle delete_after and/or copy_action lifecycle delete_after arguments configured (#16605)
• resource/aws_imagebuilder_image_recipe: Ensure proper ordering of component configuration blocks (#16566)
• resource/aws_workspaces_directory: Fix empty custom_security_group_id & default_ou (#16589)

v3.20.0

ENHANCEMENTS

• resource/aws_backup_plan: Add plan-time validation for various arguments (#16476)
• resource/aws_eks_node_group: Make capacity_type a Computed attribute (#16552)
• resource/aws_lambda_event_source_mapping: Add support for updating maximum_batching_window_in_seconds for SQS queue event sources (#16518)
• resource/aws_ssm_maintenance_window_target: Add plan-time validation for owner_information and targets arguments (#16478)
• resource/aws_storagegateway_gateway - add timeout_in_seconds, organizational_unit, domain_controllers arguments for smb_active_directory_settings block. (#16472)
• resource/aws_storagegateway_gateway - add smb_active_directory_settings. active_directory_status, ec2_instance_id, endpoint_type, host_environment, and gateway_network_interface attributes. (#16472)
• resource/aws_storagegateway_gateway - add plan time validations for smb_guest_password, smb_active_directory_settings. username, smb_active_directory_settings. password, smb_active_directory_settings. domain_name, gateway_timezone, and gateway_name. (#16472)
• resource/aws_storagegateway_gateway - add support for medium_changer_type value medium_changer_type. (#16472)

BUG FIXES

• resource/aws_backup_plan: Retry on eventual consistency error during deletion (#16476)
• resource/aws_cloudwatch_event_target: Prevent potential panic and prevent recreation after state upgrade with custom event_bus_name value (#16484)
• resource/aws_ec2_client_vpn_network_association: Increase associate and disassociate timeouts from 10min to 30min (#16522)
• resource/aws_instance: Automatically retry instance restart on eventual consistency error during instance_type in-place update (#16443)
• resource/aws_lambda_function: Prevent error during deletion when resource not found (#16183)
• resource/aws_ssm_maintenance_window_target: Remove from state if not found (#16478)