Update Terraform aws to v6.61.0 by citygeo-bot[bot] · Pull Request #102 · CityOfPhiladelphia/mulesoft-flex-gateway-iac

citygeo-bot · 2026-02-12T11:25:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	`6.31.0` → `6.61.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

hashicorp/terraform-provider-aws (aws)

`v6.61.0`

Compare Source

FEATURES:

New Data Source: aws_odb_iam_role_association (#46794)
New List Resource: aws_ec2_ami_launch_permission (#49461)
New List Resource: aws_iam_instance_profile (#49576)
New List Resource: aws_lambdacore_network_connector (#49387)
New List Resource: aws_mailmanager_relay (#49394)
New List Resource: aws_resiliencehubv2_assertion (#48329)
New List Resource: aws_resiliencehubv2_service_function (#48328)
New List Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_dsql_cluster_policy (#47748)
New Resource: aws_lambdacore_network_connector (#49387)
New Resource: aws_lambdamicrovms_image (#48950)
New Resource: aws_mailmanager_relay (#49394)
New Resource: aws_odb_iam_role_association (#46794)
New Resource: aws_resiliencehubv2_assertion (#48329)
New Resource: aws_resiliencehubv2_service_function (#48328)
New Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_securityhub_feature_v2 (#49503)

ENHANCEMENTS:

data-source/aws_fsx_ontap_file_system: Add network_type attribute (#49512)
data-source/aws_fsx_windows_file_system: Add network_type attribute (#49514)
data-source/aws_lb_listener_rule: Add condition.source_ip.ip_address_type attribute (#49476)
data-source/aws_resiliencehubv2_service: Add associated_system attribute (#49498)
data-source/aws_vpclattice_service: Add idle_timeout_seconds attribute (#49540)
resource/aws_bedrockagentcore_harness: Adds attribute environment_actual (#48815)
resource/aws_ec2_ami_launch_permission: Add resource identity support (#49461)
resource/aws_fsx_ontap_file_system: Add network_type argument (#49512)
resource/aws_fsx_openzfs_file_system: Add network_type argument (#49513)
resource/aws_fsx_windows_file_system: Add network_type argument (#49514)
resource/aws_lb_listener_rule: Add condition.source_ip.ip_address_type argument (#49476)
resource/aws_lb_listener_rule: Change condition.source_ip.values to Optional (#49476)
resource/aws_medialive_channel: Add resource identity (#49532)
resource/aws_medialive_input: Add resource identity support (#49534)
resource/aws_medialive_input_security_group: Add resource identity support (#49537)
resource/aws_medialive_multiplex: Add resource identity support (#49557)
resource/aws_medialive_multiplex_program: Add resource identity (#49561)
resource/aws_observabilityadmin_centralization_rule_for_organization: Add encryption_scope argument to the logs_encryption_configuration configuration block (#49563)
resource/aws_pinpointsmsvoicev2_phone_number: Add status attribute (#49485)
resource/aws_pinpointsmsvoicev2_phone_number: Add wait_for_active argument to allow create and update to return without waiting for the phone number to reach ACTIVE status. Number types gated on carrier or registration approval (for example TEN_DLC, TOLL_FREE, or any number submitted with registration_id) can remain PENDING for days to weeks, which previously caused terraform apply to time out (#49485)
resource/aws_resiliencehubv2_service: Add associated_system configuration block (#49498)
resource/aws_vpclattice_service: Add idle_timeout_seconds argument (#49540)

BUG FIXES:

list-resource/aws_bedrockagentcore_harness: Prevents error when remote resource disappears during List (#49446)
list-resource/aws_bedrockagentcore_online_evaluation_config: Prevents error when remote resource disappears during List (#49479)
list-resource/aws_bedrockagentcore_policy_engine: Prevents error when remote resource disappears during List (#49478)
list-resource/aws_bedrockagentcore_registry: Prevents error when remote resource disappears during List (#49480)
list-resource/aws_bedrockagentcore_resource_policy: Prevents error when remote resource disappears during List (#49481)
resource/aws_bedrockagentcore_harness: Fix Provider produced inconsistent result after apply error for environment (#48815)
resource/aws_bedrockagentcore_online_evaluation_config: Retries additional IAM propagation errors on creation (#49479)
resource/aws_mailmanager_ingress_point: Include FAILED as a pending state while an ingress point is deleting (#49502)
resource/aws_nat_gateway: Allow updating secondary_private_ip_address_count in-place for private NAT gateways (#47477)
resource/aws_observabilityadmin_telemetry_enrichment: Prevent couldn't find resource (21 retries) errors on delete if enrichment has never been started in the Region (#49502)
resource/aws_observabilityadmin_telemetry_evaluation: Include NOT_STARTED as a target state while the resource is deleting (#49502)

`v6.60.0`

Compare Source

FEATURES:

New List Resource: aws_db_parameter_group (#49418)
New List Resource: aws_resiliencehubv2_input_source (#48327)
New Resource: aws_resiliencehubv2_input_source (#48327)

ENHANCEMENTS:

resource/aws_db_parameter_group: Add Resource Identity support (#49418)

BUG FIXES:

resource/aws_bedrockagentcore_gateway_target: Prevent state inconsistencies caused by the service-managed policy session header (#49447)
resource/aws_network_acl_rule: Fix Missing Resource Identity After Read errors. This fixes a regression introduced in v6.59.0 (#49470)

`v6.59.0`

Compare Source

FEATURES:

New Data Source: aws_rds_snapshots (#49259)
New Data Source: aws_resiliencehubv2_policy (#48324)
New Data Source: aws_resiliencehubv2_service (#48326)
New Data Source: aws_resiliencehubv2_system (#48325)
New Data Source: aws_vpclattice_service_network_service_associations (#42680)
New List Resource: aws_backup_plan (#49329)
New List Resource: aws_backup_selection (#49283)
New List Resource: aws_backup_vault (#49423)
New List Resource: aws_bedrockagentcore_gateway_rule (#48804)
New List Resource: aws_mailmanager_ingress_point (#49322)
New List Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New List Resource: aws_networkfirewall_container_association (#49321)
New List Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New List Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New List Resource: aws_resiliencehubv2_service (#48323)
New List Resource: aws_resiliencehubv2_system (#48322)
New List Resource: aws_ssm_patch_baseline (#49332)
New Resource: aws_bedrockagentcore_gateway_rule (#48804)
New Resource: aws_mailmanager_ingress_point (#49322)
New Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New Resource: aws_networkfirewall_container_association (#49321)
New Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New Resource: aws_resiliencehubv2_service (#48323)
New Resource: aws_resiliencehubv2_system (#48322)

ENHANCEMENTS:

data-source/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config attributes (#49420)
data-source/aws_eks_cluster_versions: Add control_plane_component_config and control_plane_scaling_tiers attributes (#49421)
resource/aws_arcregionswitch_plan: Add step.aurora_provisioned_scaling_config, step.aurora_serverless_scaling_config, step.neptune_global_database_config, and step.lambda_event_source_mapping_config arguments (#48392)
resource/aws_arcregionswitch_plan: Add provider-side validation restricting report_configuration and report_configuration.report_output.s3_configuration to a single block each (#46758)
resource/aws_backup_plan: Add resource identity support (#49329)
resource/aws_backup_selection: Add resource identity support (#49283)
resource/aws_backup_vault: Add resource identity support (#49423)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.mcp.mcp_server.mcp_tool_schema configuration block and target_configuration.mcp.mcp_server.resource_priority argument (#48703)
resource/aws_bedrockagentcore_harness: Adds computed attribute memory_actual (#49383)
resource/aws_bedrockagentcore_harness: Adds support for memory.disabled (#49334)
resource/aws_bedrockagentcore_harness: Adds support for memory.managed_memory_configuration (#49285)
resource/aws_dlm_lifecycle_policy: Add policy_details.parameters.exclude_data_volume_tags argument (#45113)
resource/aws_ec2_client_vpn_route: Add transit_gateway_attachment_id attribute (#49274)
resource/aws_ec2_client_vpn_route: Change target_vpc_subnet_id to Optional (#49274)
resource/aws_ec2_client_vpn_route: Increase default timeouts values to 30m (#49274)
resource/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config arguments (#49412)
resource/aws_prometheus_scraper: Add exporter configuration block with OpenSearch exporter support (#49346)
resource/aws_wafv2_rule_group: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#49381)
resource/aws_wafv2_web_acl: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#49381)

BUG FIXES:

data-source/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#49398)
data-source/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#49340)
resource/aws_bedrockagentcore_gateway_target: Remove client-side count validation for metadata_configuration request and response headers (#49374)
resource/aws_bedrockagentcore_gateway_target: Treat OAuth CREATE_PENDING_AUTH and UPDATE_PENDING_AUTH statuses as successful terminal states (#48703)
resource/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#49398)
resource/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#49340)
resource/aws_rds_cluster: Fix InvalidParameterCombination error when engine_version is updated externally (#49396)
resource/aws_route53domains_registered_domain: Fix UpdateDomainContactPrivacy being incorrectly triggered when billing_contact changes (#49314)
resource/aws_ssm_parameter: Fixes error where name with a leading slash and no other slashes was stripping the leading slash. (#49339)

`v6.58.0`

Compare Source

FEATURES:

New List Resource: aws_mailmanager_rule_set (#49257)
New List Resource: aws_prometheus_anomaly_detector (#49139)
New List Resource: aws_prometheus_scraper (#47466)
New List Resource: aws_prometheus_scraper_logging_configuration (#47466)
New List Resource: aws_resiliencehubv2_policy (#48321)
New Resource: aws_mailmanager_rule_set (#49257)
New Resource: aws_prometheus_anomaly_detector (#49139)
New Resource: aws_prometheus_scraper_logging_configuration (#47466)
New Resource: aws_resiliencehubv2_policy (#48321)

ENHANCEMENTS:

resource/aws_api_gateway_rest_api: Add configurable resource timeouts. (#49205)
resource/aws_dx_connection: Add state attribute (#42150)
resource/aws_ecs_capacity_provider: Add RESERVED as a valid value for managed_instances_provider.instance_launch_template.capacity_option_type (#48816)
resource/aws_ecs_capacity_provider: Add local_storage_configuration attribute to managed_instances_provider.instance_launch_template (#47513)
resource/aws_ecs_capacity_provider: Add managed_instances_provider.instance_launch_template.capacity_reservations argument (#48816)
resource/aws_glue_catalog_table_optimizer: Add configuration.compaction_configuration argument (#43868)
resource/aws_prometheus_scraper: Add Resource Identity support (#47466)
resource/aws_prometheus_scraper: Add destination.cloudwatch configuration block for CloudWatch Metrics destination support (#49088)

BUG FIXES:

resource/aws_api_gateway_rest_api: Wait for the REST API to reach an available state on create and update, and to be fully deleted on delete, preventing intermittent BadRequestException: There is already an update in progress errors (#49205)
resource/aws_appstream_stack: Fix embed_host_domains not being sent to the AWS API on update, which caused a permanent plan diff when the argument was added or changed on an existing stack (#49015)
resource/aws_bedrockagent_data_source: Fix validator incorrectly requiring bedrock_data_automation_configuration when parsing_strategy = "BEDROCK_DATA_AUTOMATION", a regression introduced in v6.56.0 (#49111)
resource/aws_bedrockagentcore_agent_runtime: Allow : (colon) in the match_value_string and match_value_string_list attributes of authorizer_configuration.custom_jwt_authorizer.custom_claim.authorizing_claim_match_value.claim_match_value (#48437)
resource/aws_bedrockagentcore_memory_strategy: Fix Value Conversion Error ... Received null value, however the target type cannot handle null values errors (#49188)
resource/aws_bedrockagentcore_memory_strategy: Fix too many results: wanted 1, got 2 error when creating or updating a strategy on a memory that already has another strategy of a different type (#49250)
resource/aws_bedrockagentcore_memory_strategy: Replace resource rather than erroring when configuration.consolidation, configuration.extraction, or configuration.reflection blocks are removed (#49188)
resource/aws_ecs_service: Fix sigint_rollback falsely rolling back healthy deployments during wait_for_steady_state (#49077)
resource/aws_ecs_service: Prevent non-EBS deployment volume configurations from being written to state (#48947)
resource/aws_elasticache_replication_group: Fix perpetual diff when changes are pending for the next maintenance window (apply_immediately = false) (#48246)
resource/aws_glue_catalog_table: Fix InvalidInputException: StorageDescriptor is not allowed error when creating or updating ATHENA-dialect views (#49156)
resource/aws_glue_catalog_table: Fix InvalidInputException error when creating or updating SPARK-dialect views without an explicit storage_descriptor block (#49156)
resource/aws_glue_catalog_table: Fix perpetual diff on view_definition.representations fields (validation_connection, view_original_text, view_expanded_text) that AWS Glue does not echo back for validated ATHENA views (#49156)
resource/aws_iam_user: Retry destroying users when there are conflicts, and ignore non-errors during destroy (#49260)
resource/aws_route53recoverycontrolconfig_safety_rule: Fix crash when the create operation returns an error (#49155)
resource/aws_ssm_parameter: Correctly imports when passing ARN value. (#49134)
resource/aws_ssm_parameter: Prevents errors when importing specific version. (#49134)

`v6.57.1`

Compare Source

NOTES:

resource/aws_bedrockagentcore_memory_strategy: The memory_execution_role_arn attribute has been deprecated. Use the memory_execution_role_arn attribute on the aws_bedrockagentcore_memory resource instead (#49140)
resource/aws_bedrockagentcore_memory_strategy: The namespaces attribute has been deprecated. All configurations using namespaces should be updated to use the namespace_templates attribute instead (#49140)

FEATURES:

New Data Source: aws_eks_access_policies (#49090)
New List Resource: aws_bedrock_evaluation_job (#49044)
New List Resource: aws_eks_access_entry (#49090)
New List Resource: aws_eks_access_policy_association (#49121)
New List Resource: aws_eks_node_group (#49073)
New List Resource: aws_flow_log (#49086)
New List Resource: aws_mailmanager_traffic_policy (#49043)
New List Resource: aws_osis_pipeline (#49157)
New List Resource: aws_osis_pipeline_endpoint (#44383)
New List Resource: aws_osis_resource_policy (#44383)
New List Resource: aws_rekognition_collection (#49135)
New Resource: aws_bedrock_evaluation_job (#49044)
New Resource: aws_cloudwatch_log_storage_tier_policy (#49076)
New Resource: aws_mailmanager_traffic_policy (#49043)
New Resource: aws_osis_pipeline_endpoint (#44383)
New Resource: aws_osis_resource_policy (#44383)

ENHANCEMENTS:

data-source/aws_launch_template: Add ena_queue_count attribute to network_interfaces configuration block (#48892)
data-source/aws_secretsmanager_secret: Add type attribute (#46414)
data-source/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn attributes (#46414)
data-source/aws_vpc: Adds support for ipv6_cidr_block_associations. (#46918)
data-source/aws_vpc: Deprecates ipv6_association_id and ipv6_cidr_block. (#46918)
resource/aws_autoscaling_group: Add reservations-then-balanced valid value for availability_zone_distribution.capacity_distribution_strategy (#48934)
resource/aws_bedrockagentcore_memory: Add timeouts.update with a default value of 30m (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add configuration.reflection configuration block for EPISODIC_OVERRIDE strategy type (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add namespace_templates argument (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add reflection_configuration configuration block for EPISODIC strategy type (#49140)
resource/aws_bedrockagentcore_memory_strategy: Increase default timeouts values to 45m (#49140)
resource/aws_codepipeline: Add stage.action.commands and stage.action.output_artifacts_for_compute_action arguments to support Compute action types (#42507)
resource/aws_codepipeline: stage.action.output_artifacts_for_compute_action and stage.action.output_artifacts now conflict (#42507)
resource/aws_eks_pod_identity_association: Add policy argument to support inline session policies (#48869)
resource/aws_fis_experiment_template: Support MultiRegionClusters as a value for action.target.key (#48781)
resource/aws_flow_log: Add resource identity support (#49086)
resource/aws_launch_template: Add ena_queue_count argument to network_interfaces configuration block (#48892)
resource/aws_rekognition_collection: Add Resource Identity support (#49022)
resource/aws_rekognition_project: Add Resource Identity support (#49022)
resource/aws_rekognition_stream_processor: Add Resource Identity support (#49022)
resource/aws_secretsmanager_secret: Add type argument in support of managed external secrets (#46414)
resource/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn arguments in support of managed external secrets (#46414)

BUG FIXES:

provider: Fixes api error UnknownError: UnknownError introduced in release 6.57.0 (#49175)
resource/aws_dynamodb_table: No longer replace resource when decreasing warm_throughput values (#49032)

`v6.56.0`

Compare Source

FEATURES:

New Action: aws_elasticache_apply_service_update (#48963)
New Data Source: aws_elasticache_service_update_actions (#48958)
New Data Source: aws_s3_buckets (#48965)
New List Resource: aws_eks_addon (#49067)
New List Resource: aws_s3_bucket_notification (#48974)
New List Resource: aws_secretsmanager_secret_policy (#49058)

ENHANCEMENTS:

data-source/aws_eks_node_group: Add warm_pool_config attribute (#48977)
data-source/aws_msk_bootstrap_brokers: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#48975)
data-source/aws_opensearchserverless_security_config: Add iam_federation_options block (#48495)
data-source/aws_opensearchserverless_security_config: Add iam_identity_center_options block (#48495)
provider: Web identity tokens can be configured via the TF_AWS_WEB_IDENTITY_TOKEN environment variable. Any value configured via assume_role_with_web_identity.web_identity_token takes precedence (#48736)
resource/aws_autoscaling_group: Add instance_lifecycle_policy configuration block (#48973)
resource/aws_bedrockagent_data_source: Add data_source_configuration.managed_knowledge_base_connector_configuration block (#48904)
resource/aws_bedrockagent_data_source: Add timeouts.update with a default value of 30m (#48904)
resource/aws_bedrockagent_knowledge_base: Add vector_knowledge_base_configuration.bedrock_embedding_model_configuration.audio and vector_knowledge_base_configuration.bedrock_embedding_model_configuration.video configuration blocks (#48538)
resource/aws_bedrockagent_knowledge_base: Add support for Managed Knowledge Base type (type = "MANAGED") with managed_knowledge_base_configuration block (#48904)
resource/aws_cloudwatch_log_subscription_filter: Add @source.log as a valid value for emit_system_fields (#48956)
resource/aws_eks_node_group: Add warm_pool_config configuration block (#48977)
resource/aws_flow_log: Add tag_field_specification configuration block (#48913)
resource/aws_guardduty_detector_feature: Support AI_PROTECTION and AI_ANALYST feature names (#48972)
resource/aws_guardduty_organization_configuration_feature: Support AI_PROTECTION and AI_ANALYST feature names (#48972)
resource/aws_msk_cluster: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#48975)
resource/aws_opensearch_package_association: Add import support (#46690)
resource/aws_opensearchserverless_security_config: Add iam_federation_options configuration block (#48495)
resource/aws_opensearchserverless_security_config: Add iam_identity_center_options configuration block (#48495)
resource/aws_s3tables_table: Add metadata.iceberg.properties argument (#48635)

BUG FIXES:

provider: Fix "one of assume_role_with_web_identity.0.web_identity_token,assume_role_with_web_identity.0.web_identity_token_file must be specified" errors, allowing any AWS_WEB_IDENTITY_TOKEN_FILE environment variable value to be used (#48736)
resource/aws_bedrockagent_data_source: Short-circuit waiting for creation if the resource reaches a FAILED state (#48904)
resource/aws_datazone_domain: Fixed AccessDeniedException error when deleting (#48516)
resource/aws_fsx_lustre_file_system: Fix perpetual diff in data_read_cache_configuration.size when sizing_mode is PROPORTIONAL_TO_THROUGHPUT_CAPACITY and size is not specified (#49023)
resource/aws_mq_broker: Fix perpetual shared_resources diffs for ActiveMQ brokers (#48962)
resource/aws_mq_configuration: Retry ConflictException: Configuration ID [...] is in use errors on delete (#48962)
resource/aws_sagemaker_endpoint: Prevents Cannot create already existing endpoint error when retrying creation. (#48966)
resource/aws_subnet: Wait for IPAM to release its CIDR on delete (#46523)
resource/aws_vpc_ipam_pool: Fix "Error: reading EC2 VPC" when creating an IPAM VPC resource planning pool for a VPC in another account. (#46483)

`v6.55.0`

Compare Source

FEATURES:

New Data Source: aws_elasticache_service_updates (#44608)
New List Resource: aws_autoscaling_group (#48928)
New List Resource: aws_cloudwatch_log_stream (#48878)
New List Resource: aws_kinesis_firehose_delivery_stream (#48946)
New List Resource: aws_network_interface (#48887)
New List Resource: aws_rds_cluster (#48948)
New List Resource: aws_sfn_state_machine (#48840)

ENHANCEMENTS:

resource/aws_bedrock_guardrail: Add updated_at attribute (#48881)
resource/aws_bedrockagentcore_agent_runtime: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer, and the read-only require_service_s3_endpoint attribute to network_configuration.network_mode_config (#48654)
resource/aws_bedrockagentcore_gateway: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#48654)
resource/aws_bedrockagentcore_harness: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#48654)
resource/aws_bedrockagentcore_harness: Add require_service_s3_endpoint argument to network_configuration.network_mode_config (#48654)
resource/aws_bedrockagentcore_registry: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#48654)
resource/aws_msk_replicator: Add consumer_group_offset_sync_mode attribute to consumer_group_replication block (#47670)
resource/aws_network_interface: Add resource identity support (#48887)
resource/aws_rds_cluster: Add resource identity support (#48948)

BUG FIXES:

resource/aws_bedrockagentcore_harness: Fix Unsupported Type errors when no memory is configured (#48654)
resource/aws_config_organization_managed_rule: Fix interface conversion: interface {} is nil, not *configservice.DescribeOrganizationConfigRuleStatusesOutput panics on delete (#48845)

`v6.54.0`

Compare Source

NOTES:

resource/aws_sagemaker_endpoint_configuration: Because we cannot easily test the behavior of capacity_reservation_config, it is best effort and we ask for community help in testing (#45926)
resource/aws_ssoadmin_region: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#48126)

FEATURES:

New Data Source: aws_route53profiles_profile (#48780)
New List Resource: aws_bedrockagentcore_browser_profile (#46862)
New List Resource: aws_codepipeline (#48808)
New List Resource: aws_lambda_function_scaling_config (#48229)
New List Resource: aws_scheduler_schedule (#48828)
New List Resource: aws_ssoadmin_region (#48126)
New List Resource: aws_workspaces_pool (#42678)
New Resource: aws_bedrockagentcore_browser_profile (#46862)
New Resource: aws_lambda_function_scaling_config (#48229)
New Resource: aws_ssoadmin_region (#48126)
New Resource: aws_workspaces_pool (#42678)

ENHANCEMENTS:

action/aws_codebuild_start_build: Add host_kernel_override argument (#48777)
data-source/aws_mq_broker: Add resource_share_arns and shared_resources attributes (#48729)
resource/aws_cloudfront_key_value_store: Add tags and tags_all attributes (#48458)
resource/aws_cloudwatch_event_api_destination: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_archive: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_bus: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_bus_policy: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_connection: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_endpoint: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_permission: Add Resource Identity support (#48819)
resource/aws_codebuild_project: Add host_kernel argument to the environment configuration block (#48777)
resource/aws_codepipeline: Add resource identity support (#48808)
resource/aws_iam_policy_attachment: Add resource identity support (#48639)
resource/aws_lambda_event_source_mapping: Add use_resource_timeout_for_propagation argument (#46405)
resource/aws_lambda_event_source_mapping: Add configurable resource timeouts. Defaults to 10m for create and update, 5m for delete. (#46405)
resource/aws_lambda_function: Add use_resource_timeout_for_propagation argument (#46405)
resource/aws_lambda_permission: Add configurable resource timeouts. Defaults to 5m for create, read, and delete. (#46405)
resource/aws_lambda_permission: Hard-coded timeouts to account for eventual consistency have been replaced with configurable resource timeouts (#46405)
resource/aws_mq_broker: Add resource_share_arns argument and shared_resources attribute (#48729)
resource/aws_prometheus_workspace_configuration: Add out_of_order_time_window_in_seconds and rule_query_offset_in_seconds arguments (#48659)
resource/aws_rds_cluster: Add support for auto_minor_version_upgrade argument (#42472)
resource/aws_sagemaker_endpoint_configuration: Add Resource Identity support (#45926)
resource/aws_sagemaker_endpoint_configuration: Add production_variants.capacity_reservation_config and shadow_production_variants.capacity_reservation_config configuration blocks (#45926)
resource/aws_scheduler_schedule: Add resource identity support (#48828)

BUG FIXES:

resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding content_policy_config block. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding topic_policy_config block. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.input_modalities values. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.output_modalities values. (#48772)
resource/aws_cloudfront_multitenant_distribution: Correctly handles default tags. (#48783)
resource/aws_cloudfront_multitenant_distribution: Correctly taints resource if Create fails. (#48782)
resource/aws_cloudfront_multitenant_distribution: Sets etag on Import. (#48782)
resource/aws_cloudfront_multitenant_distribution: Updates etag when only tags updated. ([#&#820

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

github-actions · 2026-02-12T11:25:31Z

Terraform plan output for `./terraform/common`

Contains changes: `no`

Show Plan

data.aws_caller_identity.current: Reading...
data.aws_caller_identity.current: Read complete after 0s [id=975050025792]
aws_kms_key.common: Refreshing state... [id=3d75e1a1-78eb-42a2-80fe-9efc9e5a64b4]
aws_kms_alias.common: Refreshing state... [id=alias/mulesoft]
aws_ssm_parameter.kms_id: Refreshing state... [id=/mulesoft/common/kms_id]
aws_ssm_parameter.kms_arn: Refreshing state... [id=/mulesoft/common/kms_arn]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

Pusher: @citygeo-bot[bot]

github-actions · 2026-02-12T11:25:39Z

Terraform plan output for `./terraform/env/dev`

Contains changes: `yes`

Show Plan

Terraform will perform the following actions:

  # module.flex_gateway.aws_s3_object.registration will be updated in-place
  ~ resource "aws_s3_object" "registration" {
      ~ content_base64                = (sensitive value)
        id                            = "phl-citygeo-flex-gateway-dev/registration.yaml"
        tags                          = {}
      + version_id                    = (known after apply)
        # (25 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pusher: @citygeo-bot[bot]

github-actions · 2026-02-12T11:25:41Z

Terraform plan output for `./terraform/env/test`

Contains changes: `yes`

Show Plan

Terraform will perform the following actions:

  # module.flex_gateway.aws_autoscaling_attachment.main will be created
  + resource "aws_autoscaling_attachment" "main" {
      + autoscaling_group_name = (known after apply)
      + id                     = (known after apply)
      + lb_target_group_arn    = (known after apply)
      + region                 = "us-east-1"
    }

  # module.flex_gateway.aws_autoscaling_group.main will be created
  + resource "aws_autoscaling_group" "main" {
      + arn                              = (known after apply)
      + availability_zones               = (known after apply)
      + default_cooldown                 = (known after apply)
      + desired_capacity                 = (known after apply)
      + force_delete                     = false
      + force_delete_warm_pool           = false
      + health_check_grace_period        = 300
      + health_check_type                = (known after apply)
      + id                               = (known after apply)
      + ignore_failed_scaling_activities = false
      + load_balancers                   = (known after apply)
      + max_size                         = 0
      + metrics_granularity              = "1Minute"
      + min_size                         = 0
      + name                             = "flex-gateway-test"
      + name_prefix                      = (known after apply)
      + predicted_capacity               = (known after apply)
      + protect_from_scale_in            = false
      + region                           = "us-east-1"
      + service_linked_role_arn          = (known after apply)
      + target_group_arns                = (known after apply)
      + vpc_zone_identifier              = [
          + "subnet-0d5478758a826841e",
          + "subnet-0ff7f0642b438fbeb",
        ]
      + wait_for_capacity_timeout        = "10m"
      + warm_pool_size                   = (known after apply)

      + availability_zone_distribution (known after apply)

      + capacity_reservation_specification (known after apply)

      + launch_template {
          + id      = (known after apply)
          + name    = (known after apply)
          + version = "$Default"
        }

      + mixed_instances_policy (known after apply)

      + traffic_source (known after apply)
    }

  # module.flex_gateway.aws_cloudwatch_log_group.waf_logs will be created
  + resource "aws_cloudwatch_log_group" "waf_logs" {
      + arn                         = (known after apply)
      + deletion_protection_enabled = (known after apply)
      + id                          = (known after apply)
      + log_group_class             = (known after apply)
      + name                        = "aws-waf-logs-test-flex-gateway"
      + name_prefix                 = (known after apply)
      + region                      = "us-east-1"
      + retention_in_days           = 14
      + skip_destroy                = false
      + tags_all                    = (known after apply)
    }

  # module.flex_gateway.aws_elasticache_replication_group.main will be created
  + resource "aws_elasticache_replication_group" "main" {
      + apply_immediately              = true
      + arn                            = (known after apply)
      + at_rest_encryption_enabled     = (known after apply)
      + auth_token                     = (sensitive value)
      + auth_token_update_strategy     = "ROTATE"
      + auto_minor_version_upgrade     = (known after apply)
      + automatic_failover_enabled     = false
      + cluster_enabled                = (known after apply)
      + cluster_mode                   = "disabled"
      + configuration_endpoint_address = (known after apply)
      + data_tiering_enabled           = (known after apply)
      + description                    = "flex-gateway-test"
      + durability                     = (known after apply)
      + engine                         = "valkey"
      + engine_version                 = "8.1"
      + engine_version_actual          = (known after apply)
      + global_replication_group_id    = (known after apply)
      + id                             = (known after apply)
      + ip_discovery                   = (known after apply)
      + kms_key_id                     = (sensitive value)
      + maintenance_window             = (known after apply)
      + member_clusters                = (known after apply)
      + multi_az_enabled               = false
      + network_type                   = (known after apply)
      + node_type                      = "cache.t4g.micro"
      + num_cache_clusters             = 1
      + num_node_groups                = (known after apply)
      + parameter_group_name           = "default.valkey8"
      + primary_endpoint_address       = (known after apply)
      + reader_endpoint_address        = (known after apply)
      + region                         = "us-east-1"
      + replicas_per_node_group        = (known after apply)
      + replication_group_id           = "flex-gateway-test"
      + security_group_ids             = (known after apply)
      + security_group_names           = (known after apply)
      + snapshot_window                = (known after apply)
      + subnet_group_name              = "flex-gateway-test"
      + tags                           = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + tags_all                       = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + transit_encryption_enabled     = true
      + transit_encryption_mode        = "required"

      + node_group_configuration (known after apply)
    }

  # module.flex_gateway.aws_elasticache_subnet_group.main will be created
  + resource "aws_elasticache_subnet_group" "main" {
      + arn         = (known after apply)
      + description = "Managed by Terraform"
      + id          = (known after apply)
      + name        = "flex-gateway-test"
      + region      = "us-east-1"
      + subnet_ids  = [
          + "subnet-0d5478758a826841e",
          + "subnet-0ff7f0642b438fbeb",
        ]
      + tags        = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + tags_all    = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + vpc_id      = (known after apply)
    }

  # module.flex_gateway.aws_iam_instance_profile.ec2 will be created
  + resource "aws_iam_instance_profile" "ec2" {
      + arn         = (known after apply)
      + create_date = (known after apply)
      + id          = (known after apply)
      + name        = "flex-gateway-test-ec2"
      + name_prefix = (known after apply)
      + path        = "/"
      + role        = "flex-gateway-test-ec2"
      + tags_all    = (known after apply)
      + unique_id   = (known after apply)
    }

  # module.flex_gateway.aws_iam_role.ec2 will be created
  + resource "aws_iam_role" "ec2" {
      + arn                   = (known after apply)
      + assume_role_policy    = jsonencode(
            {
              + Statement = [
                  + {
                      + Action    = "sts:AssumeRole"
                      + Effect    = "Allow"
                      + Principal = {
                          + Service = "ec2.amazonaws.com"
                        }
                      + Sid       = ""
                    },
                ]
              + Version   = "2012-10-17"
            }
        )
      + create_date           = (known after apply)
      + force_detach_policies = false
      + id                    = (known after apply)
      + managed_policy_arns   = (known after apply)
      + max_session_duration  = 3600
      + name                  = "flex-gateway-test-ec2"
      + name_prefix           = (known after apply)
      + path                  = "/"
      + tags                  = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + tags_all              = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + unique_id             = (known after apply)

      + inline_policy (known after apply)
    }

  # module.flex_gateway.aws_iam_role_policy_attachments_exclusive.ec2 will be created
  + resource "aws_iam_role_policy_attachments_exclusive" "ec2" {
      + policy_arns = [
          + "arn:aws:iam::975050025792:policy/flex-gateway-test-kms",
          + "arn:aws:iam::975050025792:policy/flex-gateway-test-s3",
          + "arn:aws:iam::975050025792:policy/flex-gateway-test-ssm",
          + "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore",
          + "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess",
        ]
      + role_name   = "flex-gateway-test-ec2"
    }

  # module.flex_gateway.aws_launch_template.main will be created
  + resource "aws_launch_template" "main" {
      + arn                    = (known after apply)
      + default_version        = (known after apply)
      + id                     = (known after apply)
      + image_id               = "ami-024ee5112d03921e2"
      + instance_type          = "t3.small"
      + key_name               = "dev-key"
      + latest_version         = (known after apply)
      + name                   = "flex-gateway-test"
      + name_prefix            = (known after apply)
      + region                 = "us-east-1"
      + tags                   = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test"
          + "TfEnv"       = "test"
        }
      + tags_all               = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test"
          + "TfEnv"       = "test"
        }
      + update_default_version = true
      + user_data              = "IyEvYmluL2Jhc2gKZXhlYyA+ID4odGVlIC92YXIvbG9nL3VzZXItZGF0YS5sb2d8bG9nZ2VyIC10IHVzZXItZGF0YSAtcyAyPi9kZXYvY29uc29sZSkgMj4mMQpkbmYgaW5zdGFsbCAteSBnaXQKc3VkbyAtdSBlYzItdXNlciBiYXNoIC1jICdjZCB+OyBnaXQgY2xvbmUgaHR0cHM6Ly9naXRodWIuY29tL0NpdHlPZlBoaWxhZGVscGhpYS9tdWxlc29mdC1mbGV4LWdhdGV3YXktaWFjLmdpdCcKc3VkbyAtdSBlYzItdXNlciBiYXNoIC1jICdjZCB+L211bGVzb2Z0LWZsZXgtZ2F0ZXdheS1pYWM7IGdpdCBjaGVja291dCBtYWluOyBiYXNoIHNlcnZlci9idWlsZC5zaCBmbGV4LWdhdGV3YXkgdGVzdCcK"
      + vpc_security_group_ids = [
          + "sg-000ccbe97e4b2845c",
          + "sg-0014e8d551f6d514b",
        ]

      + block_device_mappings {
          + device_name = "/dev/xvda"

          + ebs {
              + delete_on_termination      = "true"
              + encrypted                  = "true"
              + iops                       = (known after apply)
              + kms_key_id                 = (sensitive value)
              + throughput                 = (known after apply)
              + volume_initialization_rate = (known after apply)
              + volume_size                = 10
              + volume_type                = "gp3"
            }
        }

      + iam_instance_profile {
          + arn = (known after apply)
        }

      + metadata_options (known after apply)

      + tag_specifications {
          + resource_type = "instance"
          + tags          = {
              + "Application" = "flex-gateway"
              + "ManagedBy"   = "Terraform"
              + "Name"        = "flex-gateway-test"
              + "TfEnv"       = "test"
            }
        }
      + tag_specifications {
          + resource_type = "network-interface"
          + tags          = {
              + "Application" = "flex-gateway"
              + "ManagedBy"   = "Terraform"
              + "Name"        = "flex-gateway-test"
              + "TfEnv"       = "test"
            }
        }
      + tag_specifications {
          + resource_type = "volume"
          + tags          = {
              + "Application" = "flex-gateway"
              + "ManagedBy"   = "Terraform"
              + "Name"        = "flex-gateway-test"
              + "TfEnv"       = "test"
            }
        }
    }

  # module.flex_gateway.aws_lb.main will be created
  + resource "aws_lb" "main" {
      + arn                                                          = (known after apply)
      + arn_suffix                                                   = (known after apply)
      + client_keep_alive                                            = 3600
      + desync_mitigation_mode                                       = "defensive"
      + dns_name                                                     = (known after apply)
      + drop_invalid_header_fields                                   = false
      + enable_deletion_protection                                   = false
      + enable_http2                                                 = true
      + enable_prefix_for_ipv6_source_nat                            = (known after apply)
      + enable_tls_version_and_cipher_suite_headers                  = false
      + enable_waf_fail_open                                         = false
      + enable_xff_client_port                                       = false
      + enable_zonal_shift                                           = false
      + enforce_security_group_inbound_rules_on_private_link_traffic = (known after apply)
      + id                                                           = (known after apply)
      + idle_timeout                                                 = 60
      + internal                                                     = false
      + ip_address_type                                              = (known after apply)
      + load_balancer_type                                           = "application"
      + name                                                         = "flex-gateway-test"
      + name_prefix                                                  = (known after apply)
      + preserve_host_header                                         = false
      + region                                                       = "us-east-1"
      + secondary_ips_auto_assigned_per_subnet                       = (known after apply)
      + security_groups                                              = (known after apply)
      + subnets                                                      = [
          + "subnet-021a798c801a6de15",
          + "subnet-04befa32beadb1606",
        ]
      + tags                                                         = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + tags_all                                                     = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "TfEnv"       = "test"
        }
      + vpc_id                                                       = (known after apply)
      + xff_header_processing_mode                                   = "append"
      + zone_id                                                      = (known after apply)

      + subnet_mapping (known after apply)
    }

  # module.flex_gateway.aws_lb_listener.http will be created
  + resource "aws_lb_listener" "http" {
      + arn                                                                   = (known after apply)
      + id                                                                    = (known after apply)
      + load_balancer_arn                                                     = (known after apply)
      + port                                                                  = 80
      + protocol                                                              = "HTTP"
      + region                                                                = "us-east-1"
      + routing_http_request_x_amzn_mtls_clientcert_header_name               = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_issuer_header_name        = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_leaf_header_name          = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_subject_header_name       = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_validity_header_name      = (known after apply)
      + routing_http_request_x_amzn_tls_cipher_suite_header_name              = (known after apply)
      + routing_http_request_x_amzn_tls_version_header_name                   = (known after apply)
      + routing_http_response_access_control_allow_credentials_header_value   = (known after apply)
      + routing_http_response_access_control_allow_headers_header_value       = (known after apply)
      + routing_http_response_access_control_allow_methods_header_value       = (known after apply)
      + routing_http_response_access_control_allow_origin_header_value        = (known after apply)
      + routing_http_response_access_control_expose_headers_header_value      = (known after apply)
      + routing_http_response_access_control_max_age_header_value             = (known after apply)
      + routing_http_response_content_security_policy_header_value            = (known after apply)
      + routing_http_response_server_enabled                                  = (known after apply)
      + routing_http_response_strict_transport_security_header_value          = (known after apply)
      + routing_http_response_x_content_type_options_header_value             = (known after apply)
      + routing_http_response_x_frame_options_header_value                    = (known after apply)
      + ssl_policy                                                            = (known after apply)
      + tags_all                                                              = (known after apply)
      + tcp_idle_timeout_seconds                                              = (known after apply)

      + default_action {
          + order = (known after apply)
          + type  = "redirect"

          + redirect {
              + host        = "#{host}"
              + path        = "/#{path}"
              + port        = "443"
              + protocol    = "HTTPS"
              + query       = "#{query}"
              + status_code = "HTTP_301"
            }
        }

      + mutual_authentication (known after apply)
    }

  # module.flex_gateway.aws_lb_listener.https will be created
  + resource "aws_lb_listener" "https" {
      + arn                                                                   = (known after apply)
      + certificate_arn                                                       = "arn:aws:acm:us-east-1:975050025792:certificate/dc0c25c0-84e6-45aa-90b5-590f8bd8296c"
      + id                                                                    = (known after apply)
      + load_balancer_arn                                                     = (known after apply)
      + port                                                                  = 443
      + protocol                                                              = "HTTPS"
      + region                                                                = "us-east-1"
      + routing_http_request_x_amzn_mtls_clientcert_header_name               = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_issuer_header_name        = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_leaf_header_name          = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_subject_header_name       = (known after apply)
      + routing_http_request_x_amzn_mtls_clientcert_validity_header_name      = (known after apply)
      + routing_http_request_x_amzn_tls_cipher_suite_header_name              = (known after apply)
      + routing_http_request_x_amzn_tls_version_header_name                   = (known after apply)
      + routing_http_response_access_control_allow_credentials_header_value   = (known after apply)
      + routing_http_response_access_control_allow_headers_header_value       = (known after apply)
      + routing_http_response_access_control_allow_methods_header_value       = (known after apply)
      + routing_http_response_access_control_allow_origin_header_value        = (known after apply)
      + routing_http_response_access_control_expose_headers_header_value      = (known after apply)
      + routing_http_response_access_control_max_age_header_value             = (known after apply)
      + routing_http_response_content_security_policy_header_value            = (known after apply)
      + routing_http_response_server_enabled                                  = (known after apply)
      + routing_http_response_strict_transport_security_header_value          = (known after apply)
      + routing_http_response_x_content_type_options_header_value             = (known after apply)
      + routing_http_response_x_frame_options_header_value                    = (known after apply)
      + ssl_policy                                                            = "ELBSecurityPolicy-TLS13-1-2-Res-2021-06"
      + tags_all                                                              = (known after apply)
      + tcp_idle_timeout_seconds                                              = (known after apply)

      + default_action {
          + order            = (known after apply)
          + target_group_arn = (known after apply)
          + type             = "forward"
        }

      + mutual_authentication (known after apply)
    }

  # module.flex_gateway.aws_lb_target_group.flex_gateway will be created
  + resource "aws_lb_target_group" "flex_gateway" {
      + arn                                = (known after apply)
      + arn_suffix                         = (known after apply)
      + connection_termination             = (known after apply)
      + deregistration_delay               = "300"
      + id                                 = (known after apply)
      + ip_address_type                    = (known after apply)
      + lambda_multi_value_headers_enabled = false
      + load_balancer_arns                 = (known after apply)
      + load_balancing_algorithm_type      = (known after apply)
      + load_balancing_anomaly_mitigation  = (known after apply)
      + load_balancing_cross_zone_enabled  = (known after apply)
      + name                               = "flex-gateway-test-flex-gateway"
      + name_prefix                        = (known after apply)
      + port                               = 8081
      + preserve_client_ip                 = (known after apply)
      + protocol                           = "HTTP"
      + protocol_version                   = (known after apply)
      + proxy_protocol_v2                  = false
      + region                             = "us-east-1"
      + slow_start                         = 0
      + tags_all                           = (known after apply)
      + target_type                        = "instance"
      + vpc_id                             = "vpc-0003c2fc508cbdab4"

      + health_check {
          + enabled             = true
          + healthy_threshold   = 3
          + interval            = 30
          + matcher             = (known after apply)
          + path                = "/custom-health-check.html"
          + port                = "80"
          + protocol            = "HTTP"
          + timeout             = (known after apply)
          + unhealthy_threshold = 3
        }

      + stickiness (known after apply)

      + target_failover (known after apply)

      + target_group_health (known after apply)

      + target_health_state (known after apply)
    }

  # module.flex_gateway.aws_s3_bucket_public_access_block.main will be created
  + resource "aws_s3_bucket_public_access_block" "main" {
      + block_public_acls       = true
      + block_public_policy     = true
      + bucket                  = "phl-citygeo-flex-gateway-test"
      + id                      = (known after apply)
      + ignore_public_acls      = true
      + region                  = "us-east-1"
      + restrict_public_buckets = true
    }

  # module.flex_gateway.aws_s3_bucket_server_side_encryption_configuration.main will be created
  + resource "aws_s3_bucket_server_side_encryption_configuration" "main" {
      + bucket = "phl-citygeo-flex-gateway-test"
      + id     = (known after apply)
      + region = "us-east-1"

      + rule {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.flex_gateway.aws_s3_object.registration will be created
  + resource "aws_s3_object" "registration" {
      + acl                    = (known after apply)
      + arn                    = (known after apply)
      + bucket                 = "phl-citygeo-flex-gateway-test"
      + bucket_key_enabled     = (known after apply)
      + checksum_crc32         = (known after apply)
      + checksum_crc32c        = (known after apply)
      + checksum_crc64nvme     = (known after apply)
      + checksum_sha1          = (known after apply)
      + checksum_sha256        = (known after apply)
      + content_base64         = (sensitive value)
      + content_type           = (known after apply)
      + etag                   = (known after apply)
      + force_destroy          = false
      + id                     = (known after apply)
      + key                    = "registration.yaml"
      + kms_key_id             = (known after apply)
      + region                 = "us-east-1"
      + server_side_encryption = (known after apply)
      + storage_class          = (known after apply)
      + tags_all               = (known after apply)
      + version_id             = (known after apply)
    }

  # module.flex_gateway.aws_security_group.alb will be created
  + resource "aws_security_group" "alb" {
      + arn                    = (known after apply)
      + description            = "SG for ALB"
      + egress                 = (known after apply)
      + id                     = (known after apply)
      + ingress                = (known after apply)
      + name                   = "flex-gateway-test-alb"
      + name_prefix            = (known after apply)
      + owner_id               = (known after apply)
      + region                 = "us-east-1"
      + revoke_rules_on_delete = false
      + tags                   = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test-alb"
          + "TfEnv"       = "test"
        }
      + tags_all               = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test-alb"
          + "TfEnv"       = "test"
        }
      + vpc_id                 = "vpc-0003c2fc508cbdab4"
    }

  # module.flex_gateway.aws_security_group.redis will be created
  + resource "aws_security_group" "redis" {
      + arn                    = (known after apply)
      + description            = "SG for Elasticache Redis"
      + egress                 = (known after apply)
      + id                     = (known after apply)
      + ingress                = (known after apply)
      + name                   = "flex-gateway-test-redis"
      + name_prefix            = (known after apply)
      + owner_id               = (known after apply)
      + region                 = "us-east-1"
      + revoke_rules_on_delete = false
      + tags                   = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test-redis"
          + "TfEnv"       = "test"
        }
      + tags_all               = {
          + "Application" = "flex-gateway"
          + "ManagedBy"   = "Terraform"
          + "Name"        = "flex-gateway-test-redis"
          + "TfEnv"       = "test"
        }
      + vpc_id                 = "vpc-0003c2fc508cbdab4"
    }

  # module.flex_gateway.aws_ssm_parameter.flex_gateway_tag will be created
  + resource "aws_ssm_parameter" "flex_gateway_tag" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/flex-gateway/test/flex_gateway_tag"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "String"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.loki_pw will be created
  + resource "aws_ssm_parameter" "loki_pw" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (sensitive value)
      + name           = "/flex-gateway/test/loki_pw"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.loki_user will be created
  + resource "aws_ssm_parameter" "loki_user" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (sensitive value)
      + name           = "/flex-gateway/test/loki_user"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.prometheus_pw will be created
  + resource "aws_ssm_parameter" "prometheus_pw" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (sensitive value)
      + name           = "/flex-gateway/test/prometheus_pw"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.prometheus_user will be created
  + resource "aws_ssm_parameter" "prometheus_user" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (sensitive value)
      + name           = "/flex-gateway/test/prometheus_user"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.redis_endpoint will be created
  + resource "aws_ssm_parameter" "redis_endpoint" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/flex-gateway/test/redis_endpoint"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "String"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.redis_pw will be created
  + resource "aws_ssm_parameter" "redis_pw" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (sensitive value)
      + name           = "/flex-gateway/test/redis_pw"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.registration_s3_key will be created
  + resource "aws_ssm_parameter" "registration_s3_key" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/flex-gateway/test/registration_s3_key"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "String"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_ssm_parameter.s3_name will be created
  + resource "aws_ssm_parameter" "s3_name" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + has_value_wo   = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/flex-gateway/test/s3_name"
      + region         = "us-east-1"
      + tags_all       = (known after apply)
      + tier           = (known after apply)
      + type           = "String"
      + value          = (sensitive value)
      + value_wo       = (write-only attribute)
      + version        = (known after apply)
    }

  # module.flex_gateway.aws_vpc_security_group_egress_rule.alb_outbound_all_to_ec2 will be created
  + resource "aws_vpc_security_group_egress_rule" "alb_outbound_all_to_ec2" {
      + arn                          = (known after apply)
      + description                  = "Full outbound access to ec2"
      + id                           = (known after apply)
      + ip_protocol                  = "-1"
      + referenced_security_group_id = "sg-000ccbe97e4b2845c"
      + region                       = "us-east-1"
      + security_group_id            = (known after apply)
      + security_group_rule_id       = (known after apply)
      + tags_all                     = {}
    }

  # module.flex_gateway.aws_vpc_security_group_egress_rule.ec2_outbound_all_to_everywhere will be created
  + resource "aws_vpc_security_group_egress_rule" "ec2_outbound_all_to_everywhere" {
      + arn                    = (known after apply)
      + cidr_ipv4              = "0.0.0.0/0"
      + description            = "Full outbound access"
      + id                     = (known after apply)
      + ip_protocol            = "-1"
      + region                 = "us-east-1"
      + security_group_id      = "sg-000ccbe97e4b2845c"
      + security_group_rule_id = (known after apply)
      + tags_all               = {}
    }

  # module.flex_gateway.aws_vpc_security_group_ingress_rule.alb_inbound_http_from_anywhere will be created
  + resource "aws_vpc_security_group_ingress_rule" "alb_inbound_http_from_anywhere" {
      + arn                    = (known after apply)
      + cidr_ipv4              = "0.0.0.0/0"
      + description            = "Inbound http access from anywhere"
      + from_port              = 80
      + id                     = (known after apply)
      + ip_protocol            = "tcp"
      + region                 = "us-east-1"
      + security_group_id      = (known after apply)
      + security_group_rule_id = (known after apply)
      + tags_all               = {}
      + to_port                = 80
    }

  # module.flex_gateway.aws_vpc_security_group_ingress_rule.alb_inbound_https_from_anywhere will be created
  + resource "aws_vpc_security_group_ingress_rule" "alb_inbound_https_from_anywhere" {
      + arn                    = (known after apply)
      + cidr_ipv4              = "0.0.0.0/0"
      + description            = "Inbound https access from anywhere"
      + from_port              = 443
      + id                     = (known after apply)
      + ip_protocol            = "tcp"
      + region                 = "us-east-1"
      + security_group_id      = (known after apply)
      + security_group_rule_id = (known after apply)
      + tags_all               = {}
      + to_port                = 443
    }

  # module.flex_gateway.aws_vpc_security_group_ingress_rule.ec2_inbound_flex_gateway_from_alb will be created
  + resource "aws_vpc_security_group_ingress_rule" "ec2_inbound_flex_gateway_from_alb" {
      + arn                          = (known after apply)
      + description                  = "Inbound http access from ALB"
      + from_port                    = 8081
      + id                           = (known after apply)
      + ip_protocol                  = "tcp"
      + referenced_security_group_id = (known after apply)
      + region                       = "us-east-1"
      + security_group_id            = "sg-000ccbe97e4b2845c"
      + security_group_rule_id       = (known after apply)
      + tags_all                     = {}
      + to_port                      = 8081
    }

  # module.flex_gateway.aws_vpc_security_group_ingress_rule.ec2_inbound_http_from_alb will be created
  + resource "aws_vpc_security_group_ingress_rule" "ec2_inbound_http_from_alb" {
      + arn                          = (known after apply)
      + description                  = "Inbound http access from ALB"
      + from_port                    = 80
      + id                           = (known after apply)
      + ip_protocol                  = "tcp"
      + referenced_security_group_id = (known after apply)
      + region                       = "us-east-1"
      + security_group_id            = "sg-000ccbe97e4b2845c"
      + security_group_rule_id       = (known after apply)
      + tags_all                     = {}
      + to_port                      = 80
    }

  # module.flex_gateway.aws_vpc_security_group_ingress_rule.redis_inbound_redis_from_ec2 will be created
  + resource "aws_vpc_security_group_ingress_rule" "redis_inbound_redis_from_ec2" {
      + arn                          = (known after apply)
      + description                  = "Inbound REDIS access from EC2"
      + from_port                    = 6379
      + id                           = (known after apply)
      + ip_protocol                  = "tcp"
      + referenced_security_group_id = "sg-000ccbe97e4b2845c"
      + region                       = "us-east-1"
      + security_group_id            = (known after apply)
      + security_group_rule_id       = (known after apply)
      + tags_all                     = {}
      + to_port                      = 6379
    }

  # module.flex_gateway.aws_wafv2_web_acl.main will be created
  + resource "aws_wafv2_web_acl" "main" {
      + application_integration_url = (known after apply)
      + arn                         = (known after apply)
      + capacity                    = (known after apply)
      + description                 = "Flex gateway WAF for rate limiting, bot control, and anonymous IP CAPTCHA"
      + id                          = (known after apply)
      + lock_token                  = (known after apply)
      + name                        = "flex-gateway-test-flex-waf"
      + name_prefix                 = (known after apply)
      + region                      = "us-east-1"
      + scope                       = "REGIONAL"
      + tags_all                    = (known after apply)

      + custom_response_body {
          + content      = jsonencode(
                {
                  + error   = "Too Many Requests"
                  + message = "You have exceeded the rate limit for /carto-legacy/"
                }
            )
          + content_type = "APPLICATION_JSON"
          + key          = "CartoRateLimitError"
        }

      + default_action {
          + allow {
            }
        }

      + rule {
          + name     = "Atlas-carto-rate-limit"
          + priority = 4

          + action {
              + block {
                  + custom_response {
                      + custom_response_body_key = "CartoRateLimitError"
                      + response_code            = 429
                    }
                }
            }

          + statement {
              + rate_based_statement {
                  + aggregate_key_type    = "IP"
                  + evaluation_window_sec = 300
                  + limit                 = 200

                  + scope_down_statement {
                      + and_statement {
                          + statement {
                              + byte_match_statement {
                                  + positional_constraint = "EXACTLY"
                                  + search_string         = "https://atlas.phila.gov/"

                                  + field_to_match {
                                      + single_header {
                                          + name = "origin"
                                        }
                                    }

                                  + text_transformation {
                                      + priority = 0
                                      + type     = "LOWERCASE"
                                    }
                                }
                            }
                          + statement {
                              + byte_match_statement {
                                  + positional_constraint = "STARTS_WITH"
                                  + search_string         = "/carto-legacy/"

                                  + field_to_match {
                                      + uri_path {}
                                    }

                                  + text_transformation {
                                      + priority = 0
                                      + type     = "NONE"
                                    }
                                }
                            }
                        }
                    }
                }
            }

          + visibility_config {
              + cloudwatch_metrics_enabled = true
              + metric_name                = "FlexCartoAtlasRateLimit"
              + sampled_requests_enabled   = true
            }
        }
      + rule {
          + name     = "RateLimit-Carto-Aggressive"
          + priority = 5

          + action {
              + block {
                  + custom_response {
                      + custom_response_body_key = "CartoRateLimitError"
                      + response_code            = 429
                    }
                }
            }

          + statement {
              + rate_based_statement {
                  + aggregate_key_type    = "IP"
                  + evaluation_window_sec = 300
                  + limit                 = 10

                  + scope_down_statement {
                      + byte_match_statement {
                          + positional_constraint = "STARTS_WITH"
                          + search_string         = "/carto-legacy/"

                          + field_to_match {
                              + uri_path {}
                            }

                          + text_transformation {
                              + priority = 0
                              + type     = "NONE"
                            }
                        }
                    }
                }
            }

          + visibility_config {
              + cloudwatch_metrics_enabled = true
              + metric_name                = "FlexCartoBotControl"
              + sampled_requests_enabled   = true
            }
        }
      + rule {
          + name     = "RateLimit-DDoS"
          + priority = 10

          + action {
              + block {
                }
            }

          + statement {
              + rate_based_statement {
                  + aggregate_key_type    = "IP"
                  + evaluation_window_sec = 300
                  + limit                 = 5000
                }
            }

          + visibility_config {
              + cloudwatch_metrics_enabled = true
              + metric_name                = "FlexRateLimit"
              + sampled_requests_enabled   = true
            }
        }
      + rule {
          + name     = "AWS-AnonymousIP"
          + priority = 20

          + override_action {
              + none {}
            }

          + statement {
              + managed_rule_group_statement {
                  + name        = "AWSManagedRulesAnonymousIpList"
                  + vendor_name = "AWS"
                    # (1 unchanged attribute hidden)

                  + rule_action_override {
                      + name = "AnonymousIPList"

                      + action_to_use {
                          + captcha {
                            }
                        }
                    }
                }
            }

          + visibility_config {
              + cloudwatch_metrics_enabled = true
              + metric_name                = "FlexAnonymousIP"
              + sampled_requests_enabled   = true
            }
        }
      + rule {
          + name     = "AWS-BotControl"
          + priority = 30

          + override_action {
              + none {}
            }

          + statement {
              + managed_rule_group_statement {
                  + name        = "AWSManagedRulesBotControlRuleSet"
                  + vendor_name = "AWS"
                    # (1 unchanged attribute hidden)

                  + rule_action_override {
                      + name = "CategoryBot"

                      + action_to_use {
                          + captcha {
                            }
                        }
                    }

                  + scope_down_statement {
                      + byte_match_statement {
                          + positional_constraint = "STARTS_WITH"
                          + search_string         = "/carto-legacy/"

                          + field_to_match {
                              + uri_path {}
                            }

                          + text_transformation {
                              + priority = 0
                              + type     = "NONE"
                            }
                        }
                    }
                }
            }

          + visibility_config {
              + cloudwatch_metrics_enabled = true
              + metric_name                = "FlexBotControl"
              + sampled_requests_enabled   = true
            }
        }

      + visibility_config {
          + cloudwatch_metrics_enabled = true
          + metric_name                = "flex_waf"
          + sampled_requests_enabled   = true
        }
    }

  # module.flex_gateway.aws_wafv2_web_acl_association.main will be created
  + resource "aws_wafv2_web_acl_association" "main" {
      + id           = (known after apply)
      + region       = "us-east-1"
      + resource_arn = (known after apply)
      + web_acl_arn  = (known after apply)
    }

  # module.flex_gateway.aws_wafv2_web_acl_logging_configuration.main will be created
  + resource "aws_wafv2_web_acl_logging_configuration" "main" {
      + id                      = (known after apply)
      + log_destination_configs = (known after apply)
      + region                  = "us-east-1"
      + resource_arn            = (known after apply)

      + logging_filter {
          + default_behavior = "DROP"

          + filter {
              + behavior    = "KEEP"
              + requirement = "MEETS_ANY"

              + condition {
                  + action_condition {
                      + action = "BLOCK"
                    }
                }
            }
        }
    }

Plan: 37 to add, 0 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pusher: @citygeo-bot[bot]

github-actions · 2026-02-12T11:25:42Z

Terraform plan output for `./terraform/env/prod`

Contains changes: `yes`

Show Plan

Terraform will perform the following actions:

  # module.flex_gateway.aws_s3_object.registration will be updated in-place
  ~ resource "aws_s3_object" "registration" {
      ~ content_base64                = (sensitive value)
        id                            = "phl-citygeo-flex-gateway-prod/registration.yaml"
        tags                          = {}
      + version_id                    = (known after apply)
        # (25 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pusher: @citygeo-bot[bot]

citygeo-bot Bot assigned Weastie Feb 12, 2026

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.32.0~~ Update Terraform aws to v6.32.1 Feb 13, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from a9f0d04 to 24d16cd Compare February 18, 2026 21:20

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.32.1~~ Update Terraform aws to v6.33.0 Feb 18, 2026

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.33.0~~ Update Terraform aws to v6.34.0 Feb 25, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 24d16cd to f4d34da Compare February 25, 2026 23:16

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.34.0~~ Update Terraform aws to v6.35.0 Mar 4, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from f4d34da to 01ef5e0 Compare March 4, 2026 21:16

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.35.0~~ Update Terraform aws to v6.35.1 Mar 5, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 01ef5e0 to 7ff32eb Compare March 5, 2026 20:03

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.35.1~~ Update Terraform aws to v6.36.0 Mar 11, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 7ff32eb to 8b5e532 Compare March 11, 2026 20:17

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.36.0~~ Update Terraform aws to v6.37.0 Mar 18, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 8b5e532 to 295cc11 Compare March 18, 2026 21:19

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.37.0~~ Update Terraform aws to v6.38.0 Mar 25, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 295cc11 to f8c719a Compare March 25, 2026 21:19

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.38.0~~ Update Terraform aws to v6.39.0 Apr 1, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from f8c719a to 7d863e5 Compare April 1, 2026 21:23

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 7d863e5 to c887cd6 Compare April 8, 2026 23:21

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.39.0~~ Update Terraform aws to v6.40.0 Apr 8, 2026

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.40.0~~ Update Terraform aws to v6.41.0 Apr 15, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from c887cd6 to efa6249 Compare April 15, 2026 20:26

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.41.0~~ Update Terraform aws to v6.42.0 Apr 23, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 179f158 to e1f205b Compare April 23, 2026 16:46

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.48.0~~ Update Terraform aws to v6.49.0 Jun 5, 2026

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.49.0~~ Update Terraform aws to v6.50.0 Jun 10, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from ece1ad9 to e6aadfc Compare June 17, 2026 21:20

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.50.0~~ Update Terraform aws to v6.51.0 Jun 17, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from e6aadfc to fc11612 Compare June 24, 2026 19:08

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.51.0~~ Update Terraform aws to v6.52.0 Jun 24, 2026

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.52.0~~ Update Terraform aws to v6.53.0 Jul 1, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from fc11612 to ebb01b4 Compare July 1, 2026 17:20

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from ebb01b4 to 31ae749 Compare July 8, 2026 20:35

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.53.0~~ Update Terraform aws to v6.54.0 Jul 8, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 31ae749 to dfcf528 Compare July 15, 2026 18:32

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.54.0~~ Update Terraform aws to v6.55.0 Jul 15, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from dfcf528 to 5f04c8f Compare July 22, 2026 22:27

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.55.0~~ Update Terraform aws to v6.56.0 Jul 22, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 5f04c8f to 77f486f Compare July 29, 2026 11:49

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.56.0~~ Update Terraform aws to v6.57.0 Jul 29, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 77f486f to 8171516 Compare July 29, 2026 15:42

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.57.0~~ Update Terraform aws to v6.56.0 Jul 29, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 8171516 to 956d254 Compare July 29, 2026 20:26

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.56.0~~ Update Terraform aws to v6.57.1 Jul 29, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 956d254 to 7042104 Compare August 5, 2026 14:53

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.57.1~~ Update Terraform aws to v6.58.0 Aug 5, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 7042104 to 449a475 Compare August 12, 2026 19:28

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.58.0~~ Update Terraform aws to v6.59.0 Aug 12, 2026

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 449a475 to 87f27f9 Compare August 13, 2026 19:27

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.59.0~~ Update Terraform aws to v6.60.0 Aug 13, 2026

Update Terraform aws to v6.61.0

94871e6

citygeo-bot Bot force-pushed the renovate/aws-6.x branch from 87f27f9 to 94871e6 Compare August 19, 2026 22:09

citygeo-bot Bot changed the title ~~Update Terraform aws to v6.60.0~~ Update Terraform aws to v6.61.0 Aug 19, 2026

Navigation Menu

Uh oh!

Update Terraform aws to v6.61.0 - #102

Update Terraform aws to v6.61.0#102
citygeo-bot[bot] wants to merge 1 commit into
mainfrom
renovate/aws-6.x

citygeo-bot Bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

citygeo-bot Bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

github-actions Bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform plan output for ./terraform/common

Contains changes: no

Uh oh!

github-actions Bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform plan output for ./terraform/env/dev

Contains changes: yes

Uh oh!

github-actions Bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform plan output for ./terraform/env/test

Contains changes: yes

Uh oh!

github-actions Bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform plan output for ./terraform/env/prod

Contains changes: yes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

citygeo-bot Bot commented Feb 12, 2026 •

edited

Loading

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Terraform plan output for `./terraform/common`

Contains changes: `no`

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Terraform plan output for `./terraform/env/dev`

Contains changes: `yes`

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Terraform plan output for `./terraform/env/test`

Contains changes: `yes`

github-actions Bot commented Feb 12, 2026 •

edited

Loading

Terraform plan output for `./terraform/env/prod`

Contains changes: `yes`