Update Terraform aws to v6 #131
Open
+2
−2
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
cafe57e to
d2ead51
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
aa51074 to
7df9fa7
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
459da00 to
8c25d38
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
8c25d38 to
147d574
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
147d574 to
15f6a3f
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
98fa7a1 to
881a62b
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
7b1bc64 to
ce92779
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
ce92779 to
37b3243
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
37b3243 to
4057af7
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
4057af7 to
934b53c
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
6fe3a88 to
3e63460
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
061a2b7 to
89a0a54
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
89a0a54 to
cc816be
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
3 times, most recently
from
87140ff to
a319618
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
2 times, most recently
from
a1ae2e8 to
8451b84
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
8451b84 to
3b1723d
Compare
renovate
bot
force-pushed
the
renovate-aws-6.x
branch
from
3b1723d to
7d6b32c
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.100.0->6.27.03.76.1->6.27.0Release Notes
hashicorp/terraform-provider-aws (aws)
v6.27.0Compare Source
FEATURES:
aws_organizations_account(#45543)user_agent(#45464)aws_kms_key(#45514)aws_cloudfront_trust_store(#45534)ENHANCEMENTS:
root_domain_unit_idattribute (#44964)routing_policiesandattachment_routing_policy_rulesarguments (#45246)rni_enhanced_metrics_enabledattribute (#45630)target_name_server_metrics_enabledattribute (#45630)user_agentargument (#45464)provider_metablock is now supported. Theuser_agentargument enables module authors to include additional product information in theUser-Agentheader sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)knowledge_base_configuration.kendra_knowledge_base_configurationargument (#44388)knowledge_base_configuration.sql_knowledge_base_configurationandstorage_configuration.neptune_analytics_configurationarguments (#45465)storage_configuration.mongo_db_atlas_configurationargument (#37220)storage_configuration.opensearch_managed_cluster_configurationargument (#44060)storage_configuration.s3_vectors_configurationblock (#45468)knowledge_base_configuration.vector_knowledge_base_configurationand ``storage_configuration` optional (#44388)cache.cache_namespaceargument (#45584)root_domain_unit_idargument (#44964)code_sha256is now optional and computed (#45618)routing_policy_labelargument (#45246)bgp_options.peer_asn(#45246)configuration.bgp_configurations.peer_asn(#45639)routing_policy_labelargument (#45246)routing_policy_labelargument (#45246)routing_policy_labelargument (#45246)routing_policy_labelargument (#45246)rni_enhanced_metrics_enabledargument (#45630)target_name_server_metrics_enabledargument (#45630)private_dns_enabledanddns_optionsarguments (#45619)BUG FIXES:
attachment_policies.conditions.typeto allowaccountinstead ofaccount-id(#45246)knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configurationandknowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configurationasForceNew(#45465)global_secondary_indexwhen usingignore_changeslifecycle meta-argument (#41113)NoSuchEntityerrors whennameandtagsarguments are both updated (#45608)excluded_column_namesordering causing "Provider produced inconsistent result after apply" errors (#45453)bgp_optionsandbgp_options.peer_asnto Optional, Computed and ForceNew (#45639)endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-`errors when the provider is configured withskip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)v6.26.0Compare Source
FEATURES:
aws_batch_job_definition(#45401)aws_codebuild_project(#45400)aws_lambda_capacity_provider(#45467)aws_ssm_parameter(#45512)aws_iam_outbound_web_identity_federation(#45217)ENHANCEMENTS:
upgrade_rollout_orderattribute (#45527)update_configblock includingupdate_strategyattribute (#41487)upgrade_rollout_orderattribute (#45527)session_summary_configuration.max_recent_sessionsargument (#45449)upgrade_rollout_orderattribute (#45527)update_config.update_strategyattribute (#41487)application_configuration.application_encryption_configurationargument (#45356)FLINK-1_20as a valid value forruntime_environment(#45356)odb_network_arnfor resource sharing model. (#45509)upgrade_rollout_orderattribute (#45527)encryption_configurationblock (#45470)metadata_configurationblock (#45470)BUG FIXES:
encryption_support. This addresses a regression introduced in v6.25.0. (#45462)timeout_millisecondsvalidation to allow up to 900,000 ms whenresponse_transfer_modeisSTREAM(#45482)logging_config.s3_config.bucket_name,logging_config.cloudwatch_config.log_group_name,logging_config.cloudwatch_config.role_arn, andlogging_config.cloudwatch_config.large_data_delivery_s3_config.bucket_nameas Required (#45469)encryption_support. This addresses a regression introduced in v6.25.0. (#45462)image_confighasnullvalues set in config (#45511)event_patternargument is not specified in config (#45524)vpc_config.security_group_idsandvpc_config.subnetsasForceNew(#45491)v6.25.0Compare Source
FEATURES:
aws_cloudwatch_log_transformer(#44300)aws_eks_capability(#45326)ENHANCEMENTS:
rule.scan_actionandscan_settingattributes (#45392)deletion_protection_enabledattribute (#45298)encryption_supportattribute (#45317)durable_configattribute (#45359)health_check_logsattribute (#45269)target_control_portattribute (#45270)enable_accelerated_recoveryattribute (#45302)egress_configattribute to expose VPC Lattice connectivity configuration (#45314)tenancyattribute (#43134)integration_targetargument (#45311)response_transfer_modeargument (#45329)configuration.managed_query_results_configurationblock (#44273)rule.scan_actionandscan_settingconfiguration blocks (#45392)interceptor_configurationargument (#45344)deletion_protection_enabledargument (#45298)encryption_supportargument (#45317)regional_nat_gateway_idargument (#45380)plaintext_woandplaintext_wo_versionarguments to support write-only input (#43592)durable_configargument (#45359)health_check_logsconfiguration block (#45269)target_control_portargument to support the ALB Target Optimizer (#45270)accept_role_session_nameargument (#45391)managed_policy_arnsandrole_arns(#45391)enable_accelerated_recoveryargument (#45302)calendar_namesargument (#45363)egress_configargument to support VPC Lattice connectivity for SFTP connectors (#45314)urlargument optional to support VPC Lattice connectors (#45314)tenancyargument (#43134)v6.24.0Compare Source
FEATURES:
aws_lambda_capacity_provider(#45342)aws_s3tables_table_bucket_replication(#45360)aws_s3tables_table_replication(#45360)aws_s3vectors_index(#43393)aws_s3vectors_vector_bucket(#43393)aws_s3vectors_vector_bucket_policy(#43393)ENHANCEMENTS:
capacity_provider_configattribute (#45342)auto_provision_zones,auto_scaling_ips,availability_mode,availability_zone_address,regional_nat_gateway_address, androute_table_idattributes (#45420)target_logically_air_gapped_backup_vault_arnargument toruleblock (#45321)capacity_provider_configandpublish_toarguments (#45342)id. Usearninstead. (#45345)id. Usearninstead. (#45345)subnet_idargument optional to support regional NAT Gateways (#45420)availability_mode,availability_zone_address, andvpc_idarguments, andauto_provision_zones,auto_scaling_ips,regional_nat_gateway_address, androute_table_idattributes. This functionality requires theec2:DescribeAvailabilityZonesIAM permission (#45420)bgp_log_enabled,bgp_log_group_arn, andbgp_log_stream_arnarguments totunnel1_log_options.cloudwatch_log_optionsandtunnel2_log_options.cloudwatch_log_optionsblocks (#45271)v6.23.0Compare Source
NOTES:
TagResource,UntagResource, andListTagsForResourcefor read and update operations. The calling principal must have the correspondings3:TagResource,s3:UntagResource, ands3:ListTagsForResourceIAM permissions. If the principal lacks the appropriate permissions, the provider will fall back to tagging after creation and using the S3 tagging APIsPutBucketTagging,DeleteBucketTagging, andGetBucketTagginginstead. With ABAC enabled, tag modifications may fail with the fall back behavior. See the AWS documentation for additional details on enabling ABAC in general purpose buckets. (#45251)FEATURES:
aws_ecs_express_gateway_service(#45235)aws_s3_bucket_abac(#45251)aws_vpc_encryption_control(#45263)aws_vpn_concentrator(#45175)ENHANCEMENTS:
tenant_idargument (#45170)control_plane_scaling_configattribute (#45258)tenancy_configattribute (#45170)tenant_idargument (#45170)vpn_concentrator_idattribute (#45175)managed_instances_provider.infrastructure_optimizationargument (#45142)network_typeargument (#45140)supported_network_typesattribute (#45140)control_plane_scaling_configconfiguration block to support EKS Provisioned Control Plane (#45258)tenancy_configargument (#45170)tenant_idargument (#45170)s3:TagResourcepermission is present (#45251)s3:TagResource,s3:UntagResource, ands3:ListTagsForResourcepermissions are present (#45251)vpn_concentrator_idargument to support Site-to-Site VPN Concentrator (#45175)v6.22.1Compare Source
ENHANCEMENTS:
INTELLIGENT_TIERINGstorage type and addread_cache_configurationargument (#45159)rebalancingconfiguration block to support intelligent rebalancing for Express broker clusters (#45073)BUG FIXES:
interface conversion: interface {} is nil, not map[string]interface {}panics whenconfiguration.unused_access.analysis_rule.exclusion.resource_tagscontainsnullvalues (#45202)v6.22.0Compare Source
NOTES:
blocked_encryption_typesargument to manage this behavior for specific buckets. (#45105)FEATURES:
aws_ecr_authorization_token(#44949)Tag Policy Compliance(#45143)aws_billing_view(#45097)aws_vpclattice_domain_verification(#45085)ENHANCEMENTS:
default_action.jwt_validationattribute (#45089)action.jwt_validationattribute (#45089)tagsonly or byvpc_idonly (#39671)tag_policy_complianceprovider argument, or theTF_AWS_TAG_POLICY_COMPLIANCEenvironment variable. When enabled, the principal executing Terraform must have thetags:ListRequiredTagsIAM permission. (#45143)encryption_key_arnargument (#45020)input_action,input_enabled,input_modalities,output_action,output_enabled, andoutput_modalitiesarguments to thecontent_policy_config.filters_configblock (#45104)storage_configuration.rds_configuration.field_mapping.custom_metadata_fieldargument (#45075)agent_runtime_artifact.code_configurationblock (#45091)agent_runtime_artifact.container_configurationblock optional (#45091)global_table_witnessargument (#43908)scaling_strategyandutilization_performance_indexarguments (#45132)log_configuration.cloudwatch_logs_configuration.log_group_arn(#35941)Functionstoaction.*.target(#41209)jwt-validationas a validdefault_action.typeand adddefault_action.jwt_validationconfiguration block (#45089)jwt-validationas a validaction.typeand addaction.jwt_validationconfiguration block (#45089)SECURITYHUB_POLICYas a valid value forenabled_policy_typesargument (#45135)destination.cloudwatch_logs.log_group_arn(#35941)logging_configuration.log_group_arn(#35941)rule.blocked_encryption_typesargument (#45105)container.additional_model_data_sourceandprimary_container.additional_model_data_sourcearguments (#44407)logging_configuration.log_destination(#35941)engine_typeattribute (#44899)timestream-influxdb:GetDbParameterGroupIAM permission (#44899)custom_domain_nameanddomain_verification_idarguments anddomain_verification_arnanddomain_verification_statusattributes to support custom domain names for resource configurations (#45085)tunnel_bandwidthargument to support higher bandwidth tunnels (#45070)BUG FIXES:
storage-config-upgradeandstorage-initializationstatuses (#41275)ResourceNamefor option settings and preventing duplicate add/remove operations (#45077)regionargument (#45083)AWS resource not found during refreshwarnings causing resource replacement whenReadOnlys3express:SessionModeis enforced (#45086)target_typeargument to required (#45092)allocated_storage,bucket,organization,username, andpasswordoptional to support InfluxDB V3 clusters (#44899)v6.21.0Compare Source
BREAKING CHANGES:
network_configuration.network_mode_configtonetwork_configuration.vpc_config(#44828)FEATURES:
aws_dynamodb_create_backup(#45001)aws_networkflowmonitor_monitor(#44782)aws_networkflowmonitor_scope(#44782)aws_observabilityadmin_centralization_rule_for_organization(#44806)ENHANCEMENTS:
capacity_provider_strategy,created_at,created_by,deployment_configuration,deployment_controller,deployments,enable_ecs_managed_tags,enable_execute_command,events,health_check_grace_period_seconds,iam_role,network_configuration,ordered_placement_strategy,pending_count,placement_constraints,platform_family,platform_version,propagate_tags,running_count,service_connect_configuration,service_registries,status, andtask_setsattributes (#44842)target_configuration.mcp.mcp_serverblock (#44991)credential_provider_configurationblock optional (#44991)delivery_destination_typeanddelivery_destination_configurationoptional to support AWS X-Ray as a destination (#44995)LINEARandCANARYdeployment strategies withdeployment_configuration.linear_configurationanddeployment_configuration.canary_configurationblocks (#44842)java25runtimevalue (#45024)nodejs24.xruntimevalue (#45024)python3.14runtimevalue (#45024)java25compatible_runtimesvalue (#45024)nodejs24.xcompatible_runtimesvalue (#45024)python3.14compatible_runtimesvalue (#45024)execution_role_arnargument and makemodel_nameoptional inproduction_variantsandshadow_production_variantsblocks to support Inference Components (#44977)AuthorizationError ... is not authorized to perform: iam:PassRole on resource ...IAM eventual consistency errors on Create and Update (#45018)BUG FIXES:
regionargument (#45023)regionargument (#45064)ValidationException: Value null at 'jobTemplateData.configurationOverrides.monitoringConfiguration.cloudWatchMonitoringConfiguration.logGroupName' failed to satisfy constraint: Member must not be nullerror (#45029)setting job_template_data: job_template_data.0.configuration_overrides.0.application_configuration.0: '' expected a map, got 'slice'error (#45029)job_template_data.job_driver.configuration_overrides.monitoring_configuration.persistent_app_uiargument as computed (#45029)Provider returned invalid result object after applyerror occurred when updating the resource (#45030)domain_nametodomain_nameandaccountseparated by a comma (#44982)endpoint_config_namewas not correctly updated, causing the endpoint to retain the old configuration (#42843)redacted_fields.single_header.name(#44987)v6.20.0Compare Source
FEATURES:
aws_ec2_allowed_images_settings(#44800)aws_fis_target_account_configuration(#44875)aws_invoicing_invoice_unit(#44892)ENHANCEMENTS:
media_concurrencies.cross_channel_behaviorattribute (#44934)node_group_configurationattribute to expose node group details including availability zones, replica counts, and slot ranges (#44879)max_record_size_in_kibattribute (#44915)identity_center_optionsattribute (#44626)us-isob-west-1as a valid AWS Region (#44944)logging_v1_enabledattribute (#44838)media_concurrencies.cross_channel_behaviorargument (#44934)destination_cidr_block(#44926)ip_address_typeargument (#44616)max_parallel_nodes_repaired_count,max_parallel_nodes_repaired_percentage,max_unhealthy_node_threshold_count,max_unhealthy_node_threshold_percentage, andnode_repair_config_overridesto thenode_repair_configschema (#44894)node_group_configurationblock to support availability zone specification and snapshot restoration for cluster mode enabled replication groups (#44879)timeoutis unconfigured for Ray jobs (#35012)max_record_size_in_kibargument to support for Kinesis 10MiB payloads. This functionality requires thekinesis:UpdateMaxRecordSizeIAM permission (#44915)identity_center_optionsconfiguration block (#44626)TransferSecurityPolicy-AS2Restricted-2025-07security_policy_namevalue (#44865)TransferSecurityPolicy-AS2Restricted-2025-07as a valid value forsecurity_policy_name(#44652)BUG FIXES:
Source type "...cloudfront.stagingDistributionDNSNamesModel" does not implement attr.Valueerror. This fixes a regression introduced in v6.17.0 (#44972)logging_config.bucketargument fromRequiredtoOptional(#44838)logging_config.include_cookiesargument while keeping V1 logging disabled (#44838)Source type "...cloudfront.originSSLProtocolsModel" does not implement attr.Valueandmissing required field, CreateVpcOriginInput.VpcOriginEndpointConfigerrors. This fixes a regression introduced in v6.17.0 (#44861)0) value fortimeoutfor Apache Spark streaming ETL jobs. This allows the job to be configured with no timeout (#44920)catalog_id,database.catalog_id,table.catalog_id, andtable_with_columns.catalog_idarguments (#44890)"") value forblock_device_mappings.ebs.kms_key_id. This fixes a regression introduced in v6.16.0 (#44708)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.