Skip to content

chore(deps): update terraform aws to v6 - #99

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/aws-6.x
Open

chore(deps): update terraform aws to v6#99
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/aws-6.x

Conversation

@renovate

@renovate renovate Bot commented Jun 18, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider major ~> 5.94.0 → ~> 6.60.0

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.60.0

Compare Source

FEATURES:

  • New List Resource: aws_db_parameter_group (#​49418)
  • New List Resource: aws_resiliencehubv2_input_source (#​48327)
  • New Resource: aws_resiliencehubv2_input_source (#​48327)

ENHANCEMENTS:

  • resource/aws_db_parameter_group: Add Resource Identity support (#​49418)

BUG FIXES:

  • resource/aws_bedrockagentcore_gateway_target: Prevent state inconsistencies caused by the service-managed policy session header (#​49447)
  • resource/aws_network_acl_rule: Fix Missing Resource Identity After Read errors. This fixes a regression introduced in v6.59.0 (#​49470)

v6.59.0

Compare Source

FEATURES:

  • New Data Source: aws_rds_snapshots (#​49259)
  • New Data Source: aws_resiliencehubv2_policy (#​48324)
  • New Data Source: aws_resiliencehubv2_service (#​48326)
  • New Data Source: aws_resiliencehubv2_system (#​48325)
  • New Data Source: aws_vpclattice_service_network_service_associations (#​42680)
  • New List Resource: aws_backup_plan (#​49329)
  • New List Resource: aws_backup_selection (#​49283)
  • New List Resource: aws_backup_vault (#​49423)
  • New List Resource: aws_bedrockagentcore_gateway_rule (#​48804)
  • New List Resource: aws_mailmanager_ingress_point (#​49322)
  • New List Resource: aws_neptunegraph_private_graph_endpoint (#​45929)
  • New List Resource: aws_networkfirewall_container_association (#​49321)
  • New List Resource: aws_pinpointsmsvoicev2_resource_policy (#​48771)
  • New List Resource: aws_pinpointsmsvoicev2_sender_id (#​46472)
  • New List Resource: aws_resiliencehubv2_service (#​48323)
  • New List Resource: aws_resiliencehubv2_system (#​48322)
  • New List Resource: aws_ssm_patch_baseline (#​49332)
  • New Resource: aws_bedrockagentcore_gateway_rule (#​48804)
  • New Resource: aws_mailmanager_ingress_point (#​49322)
  • New Resource: aws_neptunegraph_private_graph_endpoint (#​45929)
  • New Resource: aws_networkfirewall_container_association (#​49321)
  • New Resource: aws_pinpointsmsvoicev2_resource_policy (#​48771)
  • New Resource: aws_pinpointsmsvoicev2_sender_id (#​46472)
  • New Resource: aws_resiliencehubv2_service (#​48323)
  • New Resource: aws_resiliencehubv2_system (#​48322)

ENHANCEMENTS:

  • data-source/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config attributes (#​49420)
  • data-source/aws_eks_cluster_versions: Add control_plane_component_config and control_plane_scaling_tiers attributes (#​49421)
  • resource/aws_arcregionswitch_plan: Add step.aurora_provisioned_scaling_config, step.aurora_serverless_scaling_config, step.neptune_global_database_config, and step.lambda_event_source_mapping_config arguments (#​48392)
  • resource/aws_arcregionswitch_plan: Add provider-side validation restricting report_configuration and report_configuration.report_output.s3_configuration to a single block each (#​46758)
  • resource/aws_backup_plan: Add resource identity support (#​49329)
  • resource/aws_backup_selection: Add resource identity support (#​49283)
  • resource/aws_backup_vault: Add resource identity support (#​49423)
  • resource/aws_bedrockagentcore_gateway_target: Add target_configuration.mcp.mcp_server.mcp_tool_schema configuration block and target_configuration.mcp.mcp_server.resource_priority argument (#​48703)
  • resource/aws_bedrockagentcore_harness: Adds computed attribute memory_actual (#​49383)
  • resource/aws_bedrockagentcore_harness: Adds support for memory.disabled (#​49334)
  • resource/aws_bedrockagentcore_harness: Adds support for memory.managed_memory_configuration (#​49285)
  • resource/aws_dlm_lifecycle_policy: Add policy_details.parameters.exclude_data_volume_tags argument (#​45113)
  • resource/aws_ec2_client_vpn_route: Add transit_gateway_attachment_id attribute (#​49274)
  • resource/aws_ec2_client_vpn_route: Change target_vpc_subnet_id to Optional (#​49274)
  • resource/aws_ec2_client_vpn_route: Increase default timeouts values to 30m (#​49274)
  • resource/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config arguments (#​49412)
  • resource/aws_prometheus_scraper: Add exporter configuration block with OpenSearch exporter support (#​49346)
  • resource/aws_wafv2_rule_group: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#​49381)
  • resource/aws_wafv2_web_acl: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#​49381)

BUG FIXES:

  • data-source/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#​49398)
  • data-source/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#​49340)
  • resource/aws_bedrockagentcore_gateway_target: Remove client-side count validation for metadata_configuration request and response headers (#​49374)
  • resource/aws_bedrockagentcore_gateway_target: Treat OAuth CREATE_PENDING_AUTH and UPDATE_PENDING_AUTH statuses as successful terminal states (#​48703)
  • resource/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#​49398)
  • resource/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#​49340)
  • resource/aws_rds_cluster: Fix InvalidParameterCombination error when engine_version is updated externally (#​49396)
  • resource/aws_route53domains_registered_domain: Fix UpdateDomainContactPrivacy being incorrectly triggered when billing_contact changes (#​49314)
  • resource/aws_ssm_parameter: Fixes error where name with a leading slash and no other slashes was stripping the leading slash. (#​49339)

v6.58.0

Compare Source

FEATURES:

  • New List Resource: aws_mailmanager_rule_set (#​49257)
  • New List Resource: aws_prometheus_anomaly_detector (#​49139)
  • New List Resource: aws_prometheus_scraper (#​47466)
  • New List Resource: aws_prometheus_scraper_logging_configuration (#​47466)
  • New List Resource: aws_resiliencehubv2_policy (#​48321)
  • New Resource: aws_mailmanager_rule_set (#​49257)
  • New Resource: aws_prometheus_anomaly_detector (#​49139)
  • New Resource: aws_prometheus_scraper_logging_configuration (#​47466)
  • New Resource: aws_resiliencehubv2_policy (#​48321)

ENHANCEMENTS:

  • resource/aws_api_gateway_rest_api: Add configurable resource timeouts. (#​49205)
  • resource/aws_dx_connection: Add state attribute (#​42150)
  • resource/aws_ecs_capacity_provider: Add RESERVED as a valid value for managed_instances_provider.instance_launch_template.capacity_option_type (#​48816)
  • resource/aws_ecs_capacity_provider: Add local_storage_configuration attribute to managed_instances_provider.instance_launch_template (#​47513)
  • resource/aws_ecs_capacity_provider: Add managed_instances_provider.instance_launch_template.capacity_reservations argument (#​48816)
  • resource/aws_glue_catalog_table_optimizer: Add configuration.compaction_configuration argument (#​43868)
  • resource/aws_prometheus_scraper: Add Resource Identity support (#​47466)
  • resource/aws_prometheus_scraper: Add destination.cloudwatch configuration block for CloudWatch Metrics destination support (#​49088)

BUG FIXES:

  • resource/aws_api_gateway_rest_api: Wait for the REST API to reach an available state on create and update, and to be fully deleted on delete, preventing intermittent BadRequestException: There is already an update in progress errors (#​49205)
  • resource/aws_appstream_stack: Fix embed_host_domains not being sent to the AWS API on update, which caused a permanent plan diff when the argument was added or changed on an existing stack (#​49015)
  • resource/aws_bedrockagent_data_source: Fix validator incorrectly requiring bedrock_data_automation_configuration when parsing_strategy = "BEDROCK_DATA_AUTOMATION", a regression introduced in v6.56.0 (#​49111)
  • resource/aws_bedrockagentcore_agent_runtime: Allow : (colon) in the match_value_string and match_value_string_list attributes of authorizer_configuration.custom_jwt_authorizer.custom_claim.authorizing_claim_match_value.claim_match_value (#​48437)
  • resource/aws_bedrockagentcore_memory_strategy: Fix Value Conversion Error ... Received null value, however the target type cannot handle null values errors (#​49188)
  • resource/aws_bedrockagentcore_memory_strategy: Fix too many results: wanted 1, got 2 error when creating or updating a strategy on a memory that already has another strategy of a different type (#​49250)
  • resource/aws_bedrockagentcore_memory_strategy: Replace resource rather than erroring when configuration.consolidation, configuration.extraction, or configuration.reflection blocks are removed (#​49188)
  • resource/aws_ecs_service: Fix sigint_rollback falsely rolling back healthy deployments during wait_for_steady_state (#​49077)
  • resource/aws_ecs_service: Prevent non-EBS deployment volume configurations from being written to state (#​48947)
  • resource/aws_elasticache_replication_group: Fix perpetual diff when changes are pending for the next maintenance window (apply_immediately = false) (#​48246)
  • resource/aws_glue_catalog_table: Fix InvalidInputException: StorageDescriptor is not allowed error when creating or updating ATHENA-dialect views (#​49156)
  • resource/aws_glue_catalog_table: Fix InvalidInputException error when creating or updating SPARK-dialect views without an explicit storage_descriptor block (#​49156)
  • resource/aws_glue_catalog_table: Fix perpetual diff on view_definition.representations fields (validation_connection, view_original_text, view_expanded_text) that AWS Glue does not echo back for validated ATHENA views (#​49156)
  • resource/aws_iam_user: Retry destroying users when there are conflicts, and ignore non-errors during destroy (#​49260)
  • resource/aws_route53recoverycontrolconfig_safety_rule: Fix crash when the create operation returns an error (#​49155)
  • resource/aws_ssm_parameter: Correctly imports when passing ARN value. (#​49134)
  • resource/aws_ssm_parameter: Prevents errors when importing specific version. (#​49134)

v6.57.1

Compare Source

NOTES:

  • resource/aws_bedrockagentcore_memory_strategy: The memory_execution_role_arn attribute has been deprecated. This attribute should be removed from configurations (#​49140)
  • resource/aws_bedrockagentcore_memory_strategy: The namespaces attribute has been deprecated. All configurations using namespaces should be updated to use the namespace_templates attribute instead (#​49140)

FEATURES:

  • New Data Source: aws_eks_access_policies (#​49090)
  • New List Resource: aws_bedrock_evaluation_job (#​49044)
  • New List Resource: aws_eks_access_entry (#​49090)
  • New List Resource: aws_eks_access_policy_association (#​49121)
  • New List Resource: aws_eks_node_group (#​49073)
  • New List Resource: aws_flow_log (#​49086)
  • New List Resource: aws_mailmanager_traffic_policy (#​49043)
  • New List Resource: aws_osis_pipeline (#​49157)
  • New List Resource: aws_osis_pipeline_endpoint (#​44383)
  • New List Resource: aws_osis_resource_policy (#​44383)
  • New List Resource: aws_rekognition_collection (#​49135)
  • New Resource: aws_bedrock_evaluation_job (#​49044)
  • New Resource: aws_cloudwatch_log_storage_tier_policy (#​49076)
  • New Resource: aws_mailmanager_traffic_policy (#​49043)
  • New Resource: aws_osis_pipeline_endpoint (#​44383)
  • New Resource: aws_osis_resource_policy (#​44383)

ENHANCEMENTS:

  • data-source/aws_launch_template: Add ena_queue_count attribute to network_interfaces configuration block (#​48892)
  • data-source/aws_secretsmanager_secret: Add type attribute (#​46414)
  • data-source/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn attributes (#​46414)
  • data-source/aws_vpc: Adds support for ipv6_cidr_block_associations. (#​46918)
  • data-source/aws_vpc: Deprecates ipv6_association_id and ipv6_cidr_block. (#​46918)
  • resource/aws_autoscaling_group: Add reservations-then-balanced valid value for availability_zone_distribution.capacity_distribution_strategy (#​48934)
  • resource/aws_bedrockagentcore_memory: Add timeouts.update with a default value of 30m (#​49140)
  • resource/aws_bedrockagentcore_memory_strategy: Add configuration.reflection configuration block for EPISODIC_OVERRIDE strategy type (#​49140)
  • resource/aws_bedrockagentcore_memory_strategy: Add namespace_templates argument (#​49140)
  • resource/aws_bedrockagentcore_memory_strategy: Add reflection_configuration configuration block for EPISODIC strategy type (#​49140)
  • resource/aws_bedrockagentcore_memory_strategy: Increase default timeouts values to 45m (#​49140)
  • resource/aws_codepipeline: Add stage.action.commands and stage.action.output_artifacts_for_compute_action arguments to support Compute action types (#​42507)
  • resource/aws_codepipeline: stage.action.output_artifacts_for_compute_action and stage.action.output_artifacts now conflict (#​42507)
  • resource/aws_eks_pod_identity_association: Add policy argument to support inline session policies (#​48869)
  • resource/aws_fis_experiment_template: Support MultiRegionClusters as a value for action.target.key (#​48781)
  • resource/aws_flow_log: Add resource identity support (#​49086)
  • resource/aws_launch_template: Add ena_queue_count argument to network_interfaces configuration block (#​48892)
  • resource/aws_rekognition_collection: Add Resource Identity support (#​49022)
  • resource/aws_rekognition_project: Add Resource Identity support (#​49022)
  • resource/aws_rekognition_stream_processor: Add Resource Identity support (#​49022)
  • resource/aws_secretsmanager_secret: Add type argument in support of managed external secrets (#​46414)
  • resource/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn arguments in support of managed external secrets (#​46414)

BUG FIXES:

  • provider: Fixes api error UnknownError: UnknownError introduced in release 6.57.0 (#​49175)
  • resource/aws_dynamodb_table: No longer replace resource when decreasing warm_throughput values (#​49032)

v6.56.0

Compare Source

FEATURES:

  • New Action: aws_elasticache_apply_service_update (#​48963)
  • New Data Source: aws_elasticache_service_update_actions (#​48958)
  • New Data Source: aws_s3_buckets (#​48965)
  • New List Resource: aws_eks_addon (#​49067)
  • New List Resource: aws_s3_bucket_notification (#​48974)
  • New List Resource: aws_secretsmanager_secret_policy (#​49058)

ENHANCEMENTS:

  • data-source/aws_eks_node_group: Add warm_pool_config attribute (#​48977)
  • data-source/aws_msk_bootstrap_brokers: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#​48975)
  • data-source/aws_opensearchserverless_security_config: Add iam_federation_options block (#​48495)
  • data-source/aws_opensearchserverless_security_config: Add iam_identity_center_options block (#​48495)
  • provider: Web identity tokens can be configured via the TF_AWS_WEB_IDENTITY_TOKEN environment variable. Any value configured via assume_role_with_web_identity.web_identity_token takes precedence (#​48736)
  • resource/aws_autoscaling_group: Add instance_lifecycle_policy configuration block (#​48973)
  • resource/aws_bedrockagent_data_source: Add data_source_configuration.managed_knowledge_base_connector_configuration block (#​48904)
  • resource/aws_bedrockagent_data_source: Add timeouts.update with a default value of 30m (#​48904)
  • resource/aws_bedrockagent_knowledge_base: Add vector_knowledge_base_configuration.bedrock_embedding_model_configuration.audio and vector_knowledge_base_configuration.bedrock_embedding_model_configuration.video configuration blocks (#​48538)
  • resource/aws_bedrockagent_knowledge_base: Add support for Managed Knowledge Base type (type = "MANAGED") with managed_knowledge_base_configuration block (#​48904)
  • resource/aws_cloudwatch_log_subscription_filter: Add @source.log as a valid value for emit_system_fields (#​48956)
  • resource/aws_eks_node_group: Add warm_pool_config configuration block (#​48977)
  • resource/aws_flow_log: Add tag_field_specification configuration block (#​48913)
  • resource/aws_guardduty_detector_feature: Support AI_PROTECTION and AI_ANALYST feature names (#​48972)
  • resource/aws_guardduty_organization_configuration_feature: Support AI_PROTECTION and AI_ANALYST feature names (#​48972)
  • resource/aws_msk_cluster: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#​48975)
  • resource/aws_opensearch_package_association: Add import support (#​46690)
  • resource/aws_opensearchserverless_security_config: Add iam_federation_options configuration block (#​48495)
  • resource/aws_opensearchserverless_security_config: Add iam_identity_center_options configuration block (#​48495)
  • resource/aws_s3tables_table: Add metadata.iceberg.properties argument (#​48635)

BUG FIXES:

  • provider: Fix "one of assume_role_with_web_identity.0.web_identity_token,assume_role_with_web_identity.0.web_identity_token_file must be specified" errors, allowing any AWS_WEB_IDENTITY_TOKEN_FILE environment variable value to be used (#​48736)
  • resource/aws_bedrockagent_data_source: Short-circuit waiting for creation if the resource reaches a FAILED state (#​48904)
  • resource/aws_datazone_domain: Fixed AccessDeniedException error when deleting (#​48516)
  • resource/aws_fsx_lustre_file_system: Fix perpetual diff in data_read_cache_configuration.size when sizing_mode is PROPORTIONAL_TO_THROUGHPUT_CAPACITY and size is not specified (#​49023)
  • resource/aws_mq_broker: Fix perpetual shared_resources diffs for ActiveMQ brokers (#​48962)
  • resource/aws_mq_configuration: Retry ConflictException: Configuration ID [...] is in use errors on delete (#​48962)
  • resource/aws_sagemaker_endpoint: Prevents Cannot create already existing endpoint error when retrying creation. (#​48966)
  • resource/aws_subnet: Wait for IPAM to release its CIDR on delete (#​46523)
  • resource/aws_vpc_ipam_pool: Fix "Error: reading EC2 VPC" when creating an IPAM VPC resource planning pool for a VPC in another account. (#​46483)

v6.55.0

Compare Source

6.55.0 (July 15, 2026)

FEATURES:

  • New Data Source: aws_elasticache_service_updates (#​44608)
  • New List Resource: aws_autoscaling_group (#​48928)
  • New List Resource: aws_cloudwatch_log_stream (#​48878)
  • New List Resource: aws_kinesis_firehose_delivery_stream (#​48946)
  • New List Resource: aws_network_interface (#​48887)
  • New List Resource: aws_rds_cluster (#​48948)
  • New List Resource: aws_sfn_state_machine (#​48840)

ENHANCEMENTS:

  • resource/aws_bedrock_guardrail: Add updated_at attribute (#​48881)
  • resource/aws_bedrockagentcore_agent_runtime: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer, and the read-only require_service_s3_endpoint attribute to network_configuration.network_mode_config (#​48654)
  • resource/aws_bedrockagentcore_gateway: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#​48654)
  • resource/aws_bedrockagentcore_harness: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#​48654)
  • resource/aws_bedrockagentcore_harness: Add require_service_s3_endpoint argument to network_configuration.network_mode_config (#​48654)
  • resource/aws_bedrockagentcore_registry: Add allowed_workload_configuration, private_endpoint, and private_endpoint_overrides configuration blocks to authorizer_configuration.custom_jwt_authorizer (#​48654)
  • resource/aws_msk_replicator: Add consumer_group_offset_sync_mode attribute to consumer_group_replication block (#​47670)
  • resource/aws_network_interface: Add resource identity support (#​48887)
  • resource/aws_rds_cluster: Add resource identity support (#​48948)

BUG FIXES:

  • resource/aws_bedrockagentcore_harness: Fix Unsupported Type errors when no memory is configured (#​48654)
  • resource/aws_config_organization_managed_rule: Fix interface conversion: interface {} is nil, not *configservice.DescribeOrganizationConfigRuleStatusesOutput panics on delete (#​48845)

v6.54.0

Compare Source

NOTES:

  • resource/aws_sagemaker_endpoint_configuration: Because we cannot easily test the behavior of capacity_reservation_config, it is best effort and we ask for community help in testing (#​45926)
  • resource/aws_ssoadmin_region: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#​48126)

FEATURES:

  • New Data Source: aws_route53profiles_profile (#​48780)
  • New List Resource: aws_bedrockagentcore_browser_profile (#​46862)
  • New List Resource: aws_codepipeline (#​48808)
  • New List Resource: aws_lambda_function_scaling_config (#​48229)
  • New List Resource: aws_scheduler_schedule (#​48828)
  • New List Resource: aws_ssoadmin_region (#​48126)
  • New List Resource: aws_workspaces_pool (#​42678)
  • New Resource: aws_bedrockagentcore_browser_profile (#​46862)
  • New Resource: aws_lambda_function_scaling_config (#​48229)
  • New Resource: aws_ssoadmin_region (#​48126)
  • New Resource: aws_workspaces_pool (#​42678)

ENHANCEMENTS:

  • action/aws_codebuild_start_build: Add host_kernel_override argument (#​48777)
  • data-source/aws_mq_broker: Add resource_share_arns and shared_resources attributes (#​48729)
  • resource/aws_cloudfront_key_value_store: Add tags and tags_all attributes (#​48458)
  • resource/aws_cloudwatch_event_api_destination: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_archive: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_bus: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_bus_policy: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_connection: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_endpoint: Add Resource Identity support (#​48819)
  • resource/aws_cloudwatch_event_permission: Add Resource Identity support (#​48819)
  • resource/aws_codebuild_project: Add host_kernel argument to the environment configuration block (#​48777)
  • resource/aws_codepipeline: Add resource identity support (#​48808)
  • resource/aws_iam_policy_attachment: Add resource identity support (#​48639)
  • resource/aws_lambda_event_source_mapping: Add use_resource_timeout_for_propagation argument (#​46405)
  • resource/aws_lambda_event_source_mapping: Add configurable resource timeouts. Defaults to 10m for create and update, 5m for delete. (#​46405)
  • resource/aws_lambda_function: Add use_resource_timeout_for_propagation argument (#​46405)
  • resource/aws_lambda_permission: Add configurable resource timeouts. Defaults to 5m for create, read, and delete. (#​46405)
  • resource/aws_lambda_permission: Hard-coded timeouts to account for eventual consistency have been replaced with configurable resource timeouts (#​46405)
  • resource/aws_mq_broker: Add resource_share_arns argument and shared_resources attribute (#​48729)
  • resource/aws_prometheus_workspace_configuration: Add out_of_order_time_window_in_seconds and rule_query_offset_in_seconds arguments (#​48659)
  • resource/aws_rds_cluster: Add support for auto_minor_version_upgrade argument (#​42472)
  • resource/aws_sagemaker_endpoint_configuration: Add Resource Identity support (#​45926)
  • resource/aws_sagemaker_endpoint_configuration: Add production_variants.capacity_reservation_config and shadow_production_variants.capacity_reservation_config configuration blocks (#​45926)
  • resource/aws_scheduler_schedule: Add resource identity support (#​48828)

BUG FIXES:

  • resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding content_policy_config block. (#​48772)
  • resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding topic_policy_config block. (#​48772)
  • resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.input_modalities values. (#​48772)
  • resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.output_modalities values. (#​48772)
  • resource/aws_cloudfront_multitenant_distribution: Correctly handles default tags. (#​48783)
  • resource/aws_cloudfront_multitenant_distribution: Correctly taints resource if Create fails. (#​48782)
  • resource/aws_cloudfront_multitenant_distribution: Sets etag on Import. (#​48782)
  • resource/aws_cloudfront_multitenant_distribution: Updates etag when only tags updated. (#​48782)
  • resource/aws_cloudfront_multitenant_distribution: Waits for deployment on Update. (#​48782)
  • resource/aws_directory_service_directory: Fix UnsupportedOperationException error when reading enable_directory_data_access in regions where Directory Service Data is not available (e.g. GovCloud) (#​47660)

v6.53.0

Compare Source

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#​48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#​48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#​48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#​48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#​47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#​47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#​48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#​48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#​47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#​47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#​48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#​47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#​48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#​47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#​47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#​47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#​48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#​48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#​48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#​48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#​48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#​48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#​48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#​48679)
  • resource/aws_default_vpc: Add resource identity support (#​47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#​48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#​48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#​48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#​48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#​48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#​48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#​48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#​47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#​48156)
  • resource/aws_iam_user: Handle InvalidAction errors in partitions where access key cleanup operations are not supported (#​48473)
  • resource/aws_instance: Fix perpetual diff when instance_market_options.market_type is set to capacity-block (#​48701)
  • resource/aws_lightsail_bucket_access_key: Mark secret_access_key as sensitive (#​48577)
  • resource/aws_lightsail_key_pair: Mark private_key as sensitive (#​48577)

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the bump:patch label Jun 18, 2025
@github-actions

github-actions Bot commented Jun 18, 2025

Copy link
Copy Markdown
Contributor

🏷️ [bumpr] Next version:v1.13.11 Changes:v1.13.10...reviewdog:renovate/aws-6.x

@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 55bfdd6 to 1614cfd Compare July 2, 2025 23:24
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 1614cfd to 991042a Compare July 10, 2025 22:31
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 69a5972 to b90774e Compare July 24, 2025 19:25
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from c615de2 to 474aa4b Compare August 1, 2025 01:32
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from e6c8ce9 to e65c8a6 Compare August 14, 2025 20:27
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from e65c8a6 to 768f62d Compare August 21, 2025 22:41
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 48e5ec2 to 88d5123 Compare September 4, 2025 20:54
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 88d5123 to baaea6d Compare September 11, 2025 21:07
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from baaea6d to 9ea5338 Compare September 18, 2025 22:51
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 9ea5338 to 4b8d04d Compare October 2, 2025 21:09
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 4b8d04d to 00f7194 Compare October 9, 2025 21:11
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 00f7194 to b060a23 Compare October 16, 2025 22:51
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from b060a23 to 56821b8 Compare October 24, 2025 04:35
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from ef51296 to cf1104a Compare November 7, 2025 01:44
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from cf1104a to e71fe4b Compare November 13, 2025 23:42
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from f98261d to d793932 Compare November 26, 2025 20:29
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 4b2e083 to 50ad29d Compare December 5, 2025 05:32
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from e81625b to ed5b0a1 Compare December 18, 2025 02:34
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from ed5b0a1 to b604ef7 Compare January 8, 2026 19:48
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from b604ef7 to 5267b68 Compare January 29, 2026 00:40
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 02e1bd8 to 264fdcd Compare March 4, 2026 21:26
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 656595d to 7ab1c0e Compare March 18, 2026 21:27
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 7ab1c0e to ff0fb1f Compare March 25, 2026 21:09
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from b661cfe to 124725c Compare April 8, 2026 23:29
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 82930f6 to d2db4e9 Compare April 23, 2026 03:05
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 9ec292e to 6272bd8 Compare May 7, 2026 01:43
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 6272bd8 to 8cd7652 Compare May 13, 2026 22:02
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 8cd7652 to fc1fd75 Compare May 21, 2026 00:44
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from bd10c6f to 5fb22fc Compare June 3, 2026 23:29
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 377a88a to a22f68b Compare June 10, 2026 21:43
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 49a35e9 to e943e37 Compare June 24, 2026 22:00
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from e943e37 to 0eb6a8d Compare July 1, 2026 22:02
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from 2fd7169 to 09a3088 Compare July 15, 2026 22:09
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 4 times, most recently from ee9b2ec to 009391e Compare July 29, 2026 21:54
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from 009391e to 1d81304 Compare August 5, 2026 17:57
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch 2 times, most recently from d61839b to bfa1ecf Compare August 13, 2026 20:27
@renovate
renovate Bot force-pushed the renovate/aws-6.x branch from bfa1ecf to aee374e Compare August 18, 2026 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bump:patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants