chore(deps): update terraform#514
Conversation
|
Caution [High Risk] Replacement API server will remain directly internet-reachable in a public subnet The change replaces the existing Because AWS applies the union of all attached security-group rules, the replacement instance will simultaneously inherit customer-facing SignalsRoutine → Multiple AWS compute and access resources showing unusual and infrequent changes at 1-2 events/week for the last 3 months, with related load balancer attachment updates at 1 event/week for the last 5 weeks, which is infrequent compared to typical patterns. Additional Change Details: |
ba884cb to
12213ca
Compare
12213ca to
97c66a8
Compare
97c66a8 to
602c793
Compare
602c793 to
0f43049
Compare
0f43049 to
a110d8e
Compare
a110d8e to
23a5eca
Compare
68cb654 to
23ab534
Compare
3241f7e to
b2a3f42
Compare
b2a3f42 to
9b4ae74
Compare

This PR contains the following updates:
< 6.38→< 6.456.37.0→6.44.07.25.0→7.31.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
hashicorp/terraform-provider-aws (aws)
v6.44.0Compare Source
NOTES:
FEATURES:
aws_glue_catalog(#43583)aws_alb_target_group_attachment(#47724)aws_appautoscaling_policy(#47718)aws_arczonalshift_zonal_autoshift_configuration(#46114)aws_dynamodb_global_secondary_index(#47785)aws_dynamodb_table(#47518)aws_ecr_repository_policy(#47763)aws_glue_catalog(#43583)aws_lb_target_group_attachment(#47724)aws_s3_bucket_logging(#47766)aws_securityhub_standards_control(#47702)aws_vpc_endpoint_route_table_association(#47751)aws_arczonalshift_zonal_autoshift_configuration(#46114)aws_glue_catalog(#43583)aws_outposts_capacity_task(#47681)aws_redshift_namespace_registration(#43583)ENHANCEMENTS:
authentication_configurationattribute (#43583)transit_gateway_configurationblock (#47635)file_system_type_version(#47703)self_managed_active_directory.password_woandself_managed_active_directory.password_wo_versionarguments (#47752)authentication_configurationargument (#43583)maintenance_scheduleconfiguration block (#47354)BUG FIXES:
Deleteto use the file system prefix when resetting the synchronization configuration (#47760)waiting for Security Hub Configuration Policy Association (...) success: timeout while waiting for state to become 'SUCCESS' (last state: 'PENDING', timeout: 5m0s)errors on Create. This fixes a regression introduced in v6.34.0 (#47783)db_parameter_group_identifier(#47052)v6.43.0Compare Source
FEATURES:
aws_securityhub_enabled_standards(#43947)aws_securityhub_security_controls(#43947)aws_db_subnet_group(#47637)aws_ec2_network_insights_access_scope(#47582)aws_iam_group_policy_attachment(#47667)aws_lambda_event_source_mapping(#47686)aws_securityhub_insight(#47622)aws_arczonalshift_autoshift_observer_notification_status(#46343)aws_ec2_network_insights_access_scope(#47582)aws_securityhub_account_v2(#47356)ENHANCEMENTS:
EPISODICas a valid value fortype(#47589)current_deployment. (#47694)SELF_MANAGED_SECURITY_HUBas apolicy_idvalue (#47078)arnattribute (#47543)arnattribute (#47543)terraform destroywhen they block subnet deletion (#46953)terraform destroywhen they block VPC deletion (#46953)BUG FIXES:
One of 'metric_name', 'metric_query', or 'evaluation_criteria' must be set for a cloudwatch metric alarmplan-time errors. This fixes a regression introduced in v6.42.0 (#47666)current_deploymentchanges. (#47694)INACTIVEinstead ofDRAINING. (#47568)runtime error: invalid memory address or nil pointer dereferencepanics when removingresourceblocks (#47625)limits.messages_per_secondfrom 50 to 1 to match the AWS API. (#47636)MalformedXMLerrors during tag-on-create andCreateBucketConfigurationoperations (#47530)v6.42.0Compare Source
BREAKING CHANGES:
mq:DeleteConfigurationIAM permission. To restore the previous no-op behavior, setskip_destroytotrue. (#47273)NOTES:
FEATURES:
aws_ec2_service_link_virtual_interface(#47478)aws_ec2_service_link_virtual_interfaces(#47478)aws_apigatewayv2_api(#47472)aws_cloudwatch_log_metric_filter(#47495)aws_config_remediation_configuration(#47514)aws_ebs_volume(#47551)aws_ebs_volume_attachment(#47561)aws_eip(#47557)aws_iam_user_policy_attachment(#47467)aws_internet_gateway(#47529)aws_lambda_layer_version(#47496)aws_launch_template(#47540)aws_route53_zone(#47494)aws_sagemaker_hyper_parameter_tuning_job(#47138)aws_sqs_queue_policy(#47489)aws_cloudwatch_otel_enrichment(#47275)aws_ebs_volume_copy(#47311)aws_sagemaker_hyper_parameter_tuning_job(#47138)ENHANCEMENTS:
user_statusattribute (#47323)user_statusattribute (#47323)ena_srd_specificationattribute (#46669)evaluation_criteriaandevaluation_intervalarguments in support of PromQL queries. Changecomparison_operatorandevaluation_periodsto Optional (#47449)namespace_configargument (#44087)identity_provider_config_nameattribute (#47428)user_statusattribute (#47323)resource_selection.recipe.semantic_version(#47443)skip_destroyargument (#47273)ena_srd_specificationargument to support ENA Express (#46669)routing_policy_labelargument. This functionality requires thenetworkmanager: PutAttachmentRoutingPolicyLabelandnetworkmanager: RemoveAttachmentRoutingPolicyLabelIAM permissions (#47541)integration_identifierattribute (#45632)data_filterandintegration_name(#45632)storage_lens_configuration.expanded_prefixes_data_exportandstorage_lens_configuration.prefix_delimiterarguments (#47205)accept_bucket_warningargument (#47510)peer_network_cidrsargument. (#46207)BUG FIXES:
source_uriregular expression validation (#47498)topic_policy_config.topics_config.definitionfrom 200 to 1000 to support standard tier. (#47574)mute_targets.alarm_namesordering causing "Provider produced inconsistent result after apply" errors (#47507)UnsupportedOperationerrors in isolated regions (#47091)broker_node_group_info.vpc_connectivityconfiguration block. This fixes a regression introduced in v6.40.0 (#47515)runtime error: invalid memory address or nil pointer dereferencepanic instatusManagedService()andstatusNetwork()whenFindOracleDBNetworkResourceByIDreturns a nil result during resource creation (#47159)emailif returned by AWS API and don't recomputeinvitefrommember_status. This prevents drift for organization members (#47106)v6.41.0Compare Source
FEATURES:
aws_api_gateway_integration(#47370)aws_api_gateway_integration_response(#47388)aws_api_gateway_method(#47365)aws_api_gateway_method_response(#47387)aws_api_gateway_resource(#47382)aws_api_gateway_rest_api(#47404)aws_apigatewayv2_route(#47452)aws_cloudfront_distribution(#47459)aws_cloudwatch_alarm_mute_rule(#46750)aws_cloudwatch_log_subscription_filter(#47451)aws_nat_gateway(#47349)aws_sns_topic_policy(#47445)aws_cloudwatch_alarm_mute_rule(#46750)ENHANCEMENTS:
volume.s3files_volume_configurationattribute (#47363)deployment_strategy_optionsblock (#47401)topic_arn(#47381)metricsattribute (#47047)enable_directory_data_accessargument (#44736)volume.s3files_volume_configurationargument (#47363)passwords_woandpasswords_wo_versionwrite-only arguments (#45988)deployment_strategy_optionsconfiguration block (#47401)BUG FIXES:
ComputeAttributesorAssetLocation(#47450)traffic_sourceto Required (#47381)response_completion_timeoutfor Origins, by removing its default value (#46329)function_associationandlambda_function_associationblock ordering producing inconsistent result after apply when multiple associations are configured (#46378)originblock ordering producing inconsistent result after apply when multiple origins are configured (#47199)key_typeis unknown during plan-time. (#47456)range_keyis set to empty string (#47427)MySQLengine types triggered by upstream changes to the API error response text (#47448)MySQLengine types triggered by upstream changes to the API error response text (#47448)v6.40.0Compare Source
FEATURES:
aws_opensearchserverless_collection_group(#46308)aws_opensearchserverless_collection_groups(#46308)aws_s3files_access_point(#47352)aws_s3files_file_system(#47344)aws_s3files_file_systems(#47344)aws_s3files_mount_target(#47347)aws_config_config_rule(#47319)aws_glue_job(#47266)aws_opensearchserverless_collection_group(#46308)aws_s3files_access_point(#47352)aws_s3files_file_system(#47325)aws_s3files_file_system_policy(#47355)aws_s3files_mount_target(#47347)aws_s3files_synchronization_configuration(#47353)aws_ssm_association(#47321)aws_ssm_patch_group(#47329)aws_opensearchserverless_collection_group(#46308)aws_s3files_access_point(#47352)aws_s3files_file_system(#47325)aws_s3files_file_system_policy(#47355)aws_s3files_mount_target(#47347)aws_s3files_synchronization_configuration(#47353)aws_servicequotas_auto_management(#45968)ENHANCEMENTS:
broker_node_group_info.connectivity_info.network_typeattribute (#47279)depends_on_stack_setstoauto_deploymentconfiguration block (#47269)remediation_typesattribute (#46549)FLINK-2_2as a valid value forruntime_environment(#47207)broker_node_group_info.connectivity_info.network_typeargument (#47279)storage_lens_configuration.data_export.storage_lens_table_destinationargument (#47152)BUG FIXES:
export.data_query.table_configurations(#47261)patternlength in UTF-8 characters (#47287)nameas asForceNew(#47286)AccountAlreadyClosedExceptionerror when deleting an account that has already been closed withclose_on_deletionset totrue(#46627)rule.apply_server_side_encryption_by_default.kms_master_key_id,rule.blocked_encryption_types, andrule.bucket_key_enabledto Optional and Computed, preventings diffs once SSE-C is disabled for all new general purpose buckets (#47359)visible_regionsorvisible_servicesis set to an explicit empty set ([]) (#47290)v6.39.0Compare Source
NOTES:
tags_allattribute is deprecated and will be removed in a future major version (#47133)FEATURES:
aws_iam_role_policies(#46936)aws_iam_role_policy_attachments(#47119)aws_networkmanager_core_network(#45798)aws_uxc_services(#47115)aws_eks_cluster(#47133)aws_organizations_aws_service_access(#46993)aws_sagemaker_training_job(#46892)aws_workmail_group(#47131)aws_workmail_user(#47131)aws_organizations_aws_service_access(#46993)aws_sagemaker_training_job(#46892)aws_uxc_account_customizations(#47115)aws_workmail_group(#47131)aws_workmail_user(#47131)ENHANCEMENTS:
instance_familiesattribute (#47153)tier-8xlas a valid value forcontrol_plane_scaling_config.tier(#46976)source.source_logs_configuration.data_source_selection_criteriaargument. Changesource.source_logs_configuration.log_group_selection_criteriato Optional (#47154)source.vpcargument. Changesource.eksto Optional (#47155)storage_lens_configuration.account_level.advanced_performance_metricsandstorage_lens_configuration.account_level.bucket_level.advanced_performance_metricsarguments (#46865)BUG FIXES:
aws-cnpartition (#47141)Error: waiting for creation AWS DynamoDB Table (xxxxx): couldn't find resourcein highly active accounts by restoring5sdelay before polling for table status. This fixes a regression introduced in v6.28.0. (#47143)bootstrap_self_managed_addonstotruewhen importing (#47133)InvalidParameterCombinationerror whencache_usage_limitsis removed (#46134)v6.38.0Compare Source
FEATURES:
aws_dms_start_replication_task_assessment_run(#47058)aws_dynamodb_backups(#47036)aws_msk_topic(#46490)aws_savingsplans_offerings(#47081)aws_msk_cluster(#46490)aws_msk_serverless_cluster(#46490)aws_msk_topic(#46490)aws_route53_resolver_rule(#47063)aws_sagemaker_algorithm(#47051)aws_ssm_document(#46974)aws_ssoadmin_account_assignment(#47067)aws_vpc_endpoint(#46977)aws_workmail_domain(#46931)aws_msk_topic(#46490)aws_observabilityadmin_telemetry_enrichment(#47089)aws_sagemaker_algorithm(#47051)aws_workmail_default_domain(#46931)aws_workmail_domain(#46931)ENHANCEMENTS:
firewall_policy.enable_tls_session_holdingattribute (#47065)authorizer_configuration.custom_jwt_authorizer.custom_claimconfiguration block (#47049)authorizer_configuration.custom_jwt_authorizer.custom_claimconfiguration block (#47049)target_configuration.mcp.api_gatewayconfiguration block (#46916)restore_backup_arnargument (#47068)KinesisStreamsas a value foraction.target.key(#47010)VPCEndpointsas a value foraction.target.key(#47045)userblock to Optional (#46883)Configuration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.