chore(deps): update terraform aws to v6 by renovate[bot] · Pull Request #2 · telekom-mms/terraform-aws-alb

renovate · 2025-08-04T13:49:28Z

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	major	`~> 5.0` -> `~> 6.0`

Release Notes

hashicorp/terraform-provider-aws (aws)

`v6.7.0`

Compare Source

FEATURES:

New Resource: aws_quicksight_ip_restriction (#43596)
New Resource: aws_quicksight_key_registration (#43587)

ENHANCEMENTS:

data-source/aws_codebuild_fleet: Add instance_type attribute in compute_configuration block (#43449)
data-source/aws_ebs_volume: Add volume_initialization_rate attribute (#43565)
data-source/aws_ecs_service: Support load_balancer attribute (#43582)
data-source/aws_s3_access_point: Add tags attribute. This functionality requires the s3:ListTagsForResource IAM permission (#43630)
data-source/aws_verifiedpermissions_policy_store: Add deletion_protection attribute (#43452)
resource/aws_athena_workgroup: Add configuration.identity_center_configuration argument (#38717)
resource/aws_cleanrooms_collaboration: Add analytics_engine argument (#43614)
resource/aws_codebuild_fleet: Add instance_type argument in compute_configuration block to support custom instance types (#43449)
resource/aws_ebs_volume: Add volume_initialization_rate argument (#43565)
resource/aws_s3_access_point: Add tags argument and tags_all attribute. This functionality requires the s3:ListTagsForResource, s3:TagResource, and s3:UntagResource IAM permissions (#43630)
resource/aws_verifiedpermissions_policy_store: Add deletion_protection argument (#43452)

BUG FIXES:

resource/aws_bedrockagent_flow: Fix missing required field, CreateFlowInput.Definition.Nodes[0].Configuration[prompt].SourceConfiguration[resource].PromptArn errors on Create (#43595)
resource/aws_s3_bucket: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
resource/aws_s3_object: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
resource/aws_servicequotas_service_quota: Fix error when updating a pending service quota request (#43606)
resource/aws_ssm_parameter: Fix Provider produced inconsistent final plan errors when changing from using value to using value_wo (#42877)
resource/aws_ssm_parameter: Fix version not being updated when description changes (#42595)

`v6.6.0`

Compare Source

FEATURES:

New Resource: aws_connect_phone_number_contact_flow_association (#43557)
New Resource: aws_nat_gateway_eip_association (#42591)

ENHANCEMENTS:

data-source/aws_cloudwatch_event_bus: Add log_config attribute (#43453)
data-source/aws_ssm_patch_baseline: Add available_security_updates_compliance_status argument (#43560)
feature/aws_bedrock_guardrail: Add cross_region_config, content_policy_config.tier_config, and topic_policy_config.tier_config arguments (#43517)
resource/aws_athena_database: Add workgroup argument (#36628)
resource/aws_batch_compute_environment: Add compute_resources.ec2_configuration.image_kubernetes_version argument (#43454)
resource/aws_cloudwatch_event_bus: Add log_config argument (#43453)
resource/aws_cognito_resource_server: Allow name to be updated in-place (#41702)
resource/aws_cognito_user_pool: Allow name to be updated in-place (#42639)
resource/aws_globalaccelerator_custom_routing_endpoint_group: Add resource identity support (#43539)
resource/aws_globalaccelerator_custom_routing_listener: Add resource identity support (#43539)
resource/aws_globalaccelerator_endpoint_group: Add resource identity support (#43539)
resource/aws_globalaccelerator_listener: Add resource identity support (#43539)
resource/aws_imagebuilder_container_recipe: Add resource identity support (#43540)
resource/aws_imagebuilder_distribution_configuration: Add resource identity support (#43540)
resource/aws_imagebuilder_image: Add resource identity support (#43540)
resource/aws_imagebuilder_image_pipeline: Add resource identity support (#43540)
resource/aws_imagebuilder_image_recipe: Add resource identity support (#43540)
resource/aws_imagebuilder_infrastructure_configuration: Add resource identity support (#43540)
resource/aws_imagebuilder_workflow: Add resource identity support (#43540)
resource/aws_inspector_assessment_target: Add resource identity support (#43542)
resource/aws_inspector_assessment_template: Add resource identity support (#43542)
resource/aws_inspector_resource_group: Add resource identity support (#43542)
resource/aws_nat_gateway: Change secondary_allocation_ids to Optional and Computed (#42591)
resource/aws_ssm_patch_baseline: Add available_security_updates_compliance_status argument (#43560)
resource/aws_ssm_service_setting: Support short format (with /ssm/ prefix) for setting_id (#43562)

BUG FIXES:

resource/aws_appsync_api_cache: Fix "missing required field" error during update (#43523)
resource/aws_cloudwatch_log_delivery_destination: Fix update failure when tags are set (#43576)
resource/aws_ecs_service: Fix unspecified test_listener_rule incorrectly being set as empty string in load_balancer.advanced_configuration block (#43558)

`v6.5.0`

Compare Source

NOTES:

resource/aws_cognito_log_delivery_configuration: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#43396)
resource/aws_ecs_service: Acceptance tests cannot fully reproduce scenarios with deployments older than 3 months. Community feedback on this fix is appreciated, particularly for long-running ECS services with in-place updates (#43502)

FEATURES:

New Data Source: aws_ecr_images (#42577)
New Resource: aws_cognito_log_delivery_configuration (#43396)
New Resource: aws_networkfirewall_firewall_transit_gateway_attachment_accepter (#43430)
New Resource: aws_s3_bucket_metadata_configuration (#41364)

ENHANCEMENTS:

data-source/aws_dms_endpoint: Add postgres_settings.authentication_method and postgres_settings.service_access_role_arn attributes (#43440)
data-source/aws_networkfirewall_firewall: Add availability_zone_change_protection, availability_zone_mapping, firewall_status.sync_states.attachment.status_message, firewall_status.transit_gateway_attachment_sync_states, transit_gateway_id, and transit_gateway_owner_account_id attributes (#43430)
resource/aws_alb_listener: Add resource identity support (#43161)
resource/aws_alb_listener_rule: Add resource identity support (#43155)
resource/aws_alb_target_group: Add resource identity support (#43171)
resource/aws_dms_endpoint: Add oracle_settings configuration block for authentication method (#43125)
resource/aws_dms_endpoint: Add postgres_settings.authentication_method and postgres_settings.service_access_role_arn arguments (#43440)
resource/aws_dms_endpoint: Add plan-time validation of postgres_settings.database_mode, postgres_settings.map_long_varchar_as, and postgres_settings.plugin_name arguments (#43440)
resource/aws_dms_replication_instance: Add dns_name_servers attribute and kerberos_authentication_settings configuration block for Kerberos authentication settings (#43125)
resource/aws_dx_gateway_association: Add transit_gateway_attachment_id attribute. This functionality requires the ec2:DescribeTransitGatewayAttachments IAM permission (#43436)
resource/aws_globalaccelerator_accelerator: Add resource identity support (#43200)
resource/aws_globalaccelerator_custom_routing_accelerator: Add resource identity support (#43423)
resource/aws_glue_registry: Add resource identity support (#43450)
resource/aws_glue_schema: Add resource identity support (#43450)
resource/aws_iam_openid_connect_provider: Add resource identity support (#43503)
resource/aws_iam_policy: Add resource identity support (#43503)
resource/aws_iam_saml_provider: Add resource identity support (#43503)
resource/aws_iam_service_linked_role: Add resource identity support (#43503)
resource/aws_inspector2_enabler: Support CODE_REPOSITORY as a valid value for resource_types (#43525)
resource/aws_inspector2_organization_configuration: Add auto_enable.code_repository argument (#43525)
resource/aws_lb_listener: Add resource identity support (#43161)
resource/aws_lb_listener_rule: Add resource identity support (#43155)
resource/aws_lb_target_group: Add resource identity support (#43171)
resource/aws_lb_trust_store: Add resource identity support (#43186)
resource/aws_networkfirewall_firewall: Add availability_zone_change_protection, availability_zone_mapping, and transit_gateway_id arguments and firewall_status.transit_gateway_attachment_sync_states and transit_gateway_owner_account_id attributes (#43430)
resource/aws_networkfirewall_firewall: Mark subnet_mapping and vpc_id as Optional (#43430)
resource/aws_quicksight_account_subscription: Add import support. This resource can now be imported via the aws_account_id argument. (#43501)
resource/aws_sns_topic: Add resource identity support (#43202)
resource/aws_wafv2_rule_group: Add rules_json argument (#43397)
resource/aws_wafv2_web_acl: Add statement.rate_based_statement.custom_key.asn argument (#43506)

BUG FIXES:

provider: Prevent planned forces replacement on region for numerous resource types when upgrading from a pre-v6.0.0 provider version and -refresh=false is in effect (#43516)
resource/aws_api_gateway_resource: Recompute path when path_part is updated (#43215)
resource/aws_bedrockagent_flow: Remove definition.connection and definition.node list length limits (#43471)
resource/aws_ecs_service: Improve stabilization logic to handle both new deployments and in-place updates correctly. This fixes a regression introduced in v6.4.0 (#43502)
resource/aws_instance: Recompute ipv6_addresses when ipv6_address_count is updated (#43158)

`v6.4.0`

Compare Source

FEATURES:

New Data Source: aws_s3_access_point (#43391)
New Resource: aws_bedrockagent_flow (#42201)
New Resource: aws_fsx_s3_access_point_attachment (#43391)

ENHANCEMENTS:

data-source/aws_bedrock_inference_profiles: Add type argument (#43150)
data-source/aws_lakeformation_resource: Support hybrid_access_enabled, with_federation and with_privileged_access attributes (#43377)
resource/aws_acm_certificate: Support options.export argument to issue an exportable certificate (#43207)
resource/aws_cloudwatch_log_metric_filter: Add apply_on_transformed_logs argument (#43381)
resource/aws_datasync_location_object_storage: Make agent_arns optional (#43400)
resource/aws_ecs_service: Add deployment_configuration argument (#43434)
resource/aws_ecs_service: Add load_balancer.advanced_configuration argument (#43434)
resource/aws_ecs_service: Add service.client_alias.test_traffic_rules argument (#43434)
resource/aws_ecs_service: deployment_controller.type changes no longer force a replacement (#43434)
resource/aws_lakeformation_resource: Support with_privileged_access argument (#43377)
resource/aws_s3_bucket_public_access_block: Add skip_destroy argument (#43415)

BUG FIXES:

resource/aws_bedrockagent_agent_action_group: Correctly set parent_action_group_signature on Read (#43355)
resource/aws_datazone_environment_blueprint_configuration: Fix Inappropriate value for attribute "regional_parameters" errors during planning. This fixes a regression introduced in v6.0.0 (#43382)
resource/aws_ec2_transit_gateway_route_table_propagation: Don't mark transit_gateway_attachment_id as ForceNew if the value is known not to change (#43405)
resource/aws_lambda_function: Fix waiting for Lambda Function (...) version publish: unexpected state '', wanted target 'Successful' errors on Update. This fixes a regression introduced in v6.2.0 (#43416)
resource/aws_lexv2models_slot: Fix error when sub_slot_setting.slot_specification.value_elicitation_setting.prompt_specification.prompt_attempts_specification and value_elicitation_setting.prompt_specification.prompt_attempts_specification have default values (#43358)
resource/aws_securitylake_data_lake: Allow meta_store_role_arn to be updated in-place (#36874)

`v6.3.0`

Compare Source

FEATURES:

New Resource: aws_prometheus_query_logging_configuration (#43222)

ENHANCEMENTS:

data-source/aws_cloudfront_distribution: Add anycast_ip_list_id attribute (#43196)
data-source/aws_networkmanager_core_network_policy_document: Add core_network_configuration.dns_support and core_network_configuration.security_group_referencing_support arguments (#43277)
resource/aws_cloudfront_distribution: Add anycast_ip_list_id argument (#43196)
resource/aws_dynamodb_table: Add replica.consistency_mode argument in support of multi-Region strong consistency for Amazon DynamoDB global tables (#43236)

BUG FIXES:

provider: Fix runtime error: invalid memory address or nil pointer dereference panics for numerous resource types when modifying tags (#43324)
resource/aws_bedrockagent_agent_action_group: Add missing prepare agent call when deleting an action group (#43232)
resource/aws_bedrockagent_agent_action_group: Retry operation can't be performed on Agent when it is in Preparing state. errors during agent action group base creation, update, and deletion. (#43232)
resource/aws_bedrockagent_agent_knowledge_base_association: Add missing prepare agent call when deleting a knowledge base association (#43232)
resource/aws_bedrockagent_agent_knowledge_base_association: Retry operation can't be performed on Agent when it is in Preparing state. errors during agent knowledge base creation and disassociation (#43232)
resource/aws_cloudfrontkeyvaluestore_keys_exclusive: Fix errant deletion of key value pairs when a value is changed (#43208)
resource/aws_cognito_user_pool_domain: Correctly update managed_login_version for custom Cognito domains (#43252)
resource/aws_db_instance_role_association: Retry InvalidDBInstanceState errors on delete (#43303)
resource/aws_medialive_channel: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when configuration blocks are empty (#43308)
resource/aws_rds_cluster_role_association: Retry InvalidDBClusterStateFault errors on delete (#43303)
resource/aws_redshift_cluster: Correctly set availability_zone_relocation_enabled (#43270)
resource/aws_route53profiles_resource_association: Change resource_properties to Computed to enable vpc_endpoint associations (#42562)
resource/aws_ssoadmin_application: Updates value of arn when refreshing state. (#43273)

`v6.2.0`

Compare Source

NOTES:

resource/aws_s3_bucket_object: The format of the id attribute has changed from key to bucket/key. All configurations using id should be updated to use the key attribute instead (#43119)
resource/aws_s3_object: The format of the id attribute has changed from key to bucket/key. All configurations using id should be updated to use the key attribute instead (#43119)

ENHANCEMENTS:

data-source/aws_kinesis_stream_consumer: Add tags attribute. This functionality requires the kinesis:ListTagsForResource IAM permission (#43173)
data-source/aws_networkfirewall_firewall_policy: Add firewall_policy.stateful_rule_group_reference.deep_threat_inspection attribute (#43137)
resource/aws_accessanalyzer_analyzer: Add configuration.internal_access argument (#43138)
resource/aws_amplify_app: Add job_config argument (#43136)
resource/aws_amplify_branch: Add enable_skew_protection argument (#43218)
resource/aws_cloudtrail: Support errorCode, eventType, sessionCredentialFromConsole, and vpcEndpointId as valid values for advanced_event_selector.field_selector.field (#43091)
resource/aws_cloudtrail_event_data_store: Support errorCode, eventType, sessionCredentialFromConsole, and vpcEndpointId as valid values for advanced_event_selector.field_selector.field (#43091)
resource/aws_cloudwatch_event_archive: Add kms_key_identifier argument (#43139)
resource/aws_cloudwatch_log_group: Support DELIVERY as a valid value for log_group_class (#42658)
resource/aws_codebuild_project: Add environment.docker_server configuration block (#42982)
resource/aws_eks_pod_identity_association: Add disable_session_tags and target_role_arn arguments and external_id attribute (#42979)
resource/aws_emr_cluster: Add os_release_label argument (#43018)
resource/aws_fms_policy: Add resource_tag_logical_operator argument (#43031)
resource/aws_glue_job: Support job_mode argument (#42607)
resource/aws_kinesis_stream_consumer: Add tags argument and tags_all attribute. This functionality requires the kinesis:ListTagsForResource, kinesis:TagResource, and kinesis:UntagResource IAM permissions (#43173)
resource/aws_kms_key: Support HMAC_224, HMAC_384, HMAC_512, ML_DSA_44, ML_DSA_65, and ML_DSA_87 as valid values for customer_master_key_spec (#43128)
resource/aws_lightsail_instance_public_ports: -1 is now a valid value for port_info.from_port and port_info.to_port (#37703)
resource/aws_networkfirewall_firewall_policy: Add firewall_policy.stateful_rule_group_reference.deep_threat_inspection argument (#43137)
resource/aws_rbin_rule: Add exclude_resource_tags argument (#43189)
resource/aws_s3_directory_bucket: Add tags argument and tags_all attribute. This functionality requires the s3express:ListTagsForResource, s3express:TagResource, and s3express:UntagResource IAM permissions (#43256)
resource/aws_s3tables_table: Add metadata argument (#43112)
resource/aws_wafv2_web_acl: Add aws_managed_rules_anti_ddos_rule_set to managed_rule_group_configs configuration block in support of L7 DDoS protection (#43149)

BUG FIXES:

provider: Fix Unexpected Identity Change errors for numerous resource types when refreshing resources created or refreshed by Terraform AWS Provider v6.0.0 (#43221)
resource/aws_appflow_connector_profile: Fixes error refreshing resource state (#43221)
resource/aws_bcmdataexports_export: Fixes error when refreshing state with resources created before v6.0.0 (#43090)
resource/aws_bedrockagent_agent: Retry Exceeded the number of retries on OptLock failure. Too many concurrent requests. errors during update (#43179)
resource/aws_bedrockagent_agent: Retry Prepare operation can't be performed on Agent when it is in Preparing state. errors during prepare (#43179)
resource/aws_bedrockagent_agent: Retry Update operation can't be performed on Agent when it is in Preparing state. errors during update (#43179)
resource/aws_bedrockagent_agent_collaborator: Retry operation can't be performed on Agent when it is in Preparing state. errors during agent collaborator update and disassociation (#43179)
resource/aws_cloudwatch_query_definition: Support ARNs as valid values for log_group_names (#43183)
resource/aws_cur_report_definition: Allow an empty ("") value for s3_prefix. This fixes a regression introduced in v6.0.0 (#43159)
resource/aws_elasticsearch_domain: Disable publishing for log_publishing_options removed on Update. This prevents a perpetual diff (#43033)
resource/aws_elasticsearch_domain: Fix ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log stream IAM eventual consistency errors on Create (#43033)
resource/aws_lambda_function: Fix perpetual logging_config diffs when log_format is set to JSON and publish = true (#42660)
resource/aws_lexv2models_intent: Add semantic equality check for confirmation_setting.prompt_specification.prompt_attempts_specification defaults (#43147)
resource/aws_opensearch_domain: Disable publishing for log_publishing_options removed on Update. This prevents a perpetual diff (#43033)
resource/aws_opensearch_domain: Fix ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log stream IAM eventual consistency errors on Create (#43033)
resource/aws_quicksight_analysis: WHOLE is now a valid value for definition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness (#37116)
resource/aws_quicksight_dashboard: WHOLE is now a valid value for definition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness (#37116)
resource/aws_quicksight_template: WHOLE is now a valid value for definition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness (#37116)
resource/aws_quicksight_user: Remove ForceNew from email (#43014)
resource/aws_verifiedpermissions_schema: Fix Value Conversion Error errors when upgrading existing resources to Terraform AWS Provider v6.0.0 (#43116)

`v6.0.0`

Compare Source

BREAKING CHANGES:

data-source/aws_ami: The severity of the diagnostic returned when most_recent is true and owner and image ID filter criteria has been increased to an error. Existing configurations which were previously receiving a warning diagnostic will now fail to apply. To prevent this error, set the owner argument or include a filter block with an image-id or owner-id name/value pair. To continue using unsafe filter values with most_recent set to true, set the new allow_unsafe_filter argument to true. This is not recommended. (#42114)
data-source/aws_ecs_task_definition: Remove inference_accelerator attribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)
data-source/aws_ecs_task_execution: Remove inference_accelerator_overrides attribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)
data-source/aws_elbv2_listener_rule: The action.authenticate_cognito, action.authenticate_oidc, action.fixed_response, action.forward, action.forward.stickiness, action.redirect, condition.host_header, condition.http_header, condition.http_request_method, condition.path_pattern, condition.query_string, and condition.source_ip attributes are now list nested blocks instead of single nested blocks (#42283)
data-source/aws_identitystore_user: filter has been removed (#42325)
data-source/aws_launch_template: Remove elastic_inference_accelerator attribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)
data-source/aws_launch_template: elastic_gpu_specifications has been removed (#42312)
data-source/aws_opensearch_domain: kibana_endpoint has been removed (#42268)
data-source/aws_opensearchserverless_security_config: saml_options is now a list nested block instead of a single nested block (#42270)
data-source/aws_service_discovery_service: Remove tags_all attribute (#42136)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_application resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_custom_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_ecs_cluster_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_ganglia_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_haproxy_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_instance resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_java_app_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_memcached_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_mysql_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_nodejs_app_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_permission resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_php_app_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_rails_app_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_rds_db_instance resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_stack resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_static_web_layer resource has been removed (#41948)
provider: As the AWS OpsWorks Stacks service has reached End Of Life, the aws_opsworks_user_profile resource has been removed (#41948)
provider: As the AWS SDK for Go v2 does not support Amazon SimpleDB the aws_simpledb_domain resource has been removed. Add a constraint to v5 of the Terraform AWS Provider for continued use of this resource (#41775)
provider: As the AWS SDK for Go v2 does not support Amazon Worklink, the aws_worklink_fleet resource has been removed (#42059)
provider: As the AWS SDK for Go v2 does not support Amazon Worklink, the aws_worklink_website_certificate_authority_association resource has been removed (#42059)
provider: The aws_redshift_service_account resource has been removed. AWS recommends that a service principal name should be used instead of an AWS account ID in any relevant IAM policy (#41941)
provider: The endpoints.iotanalytics and endpoints.iotevents configuration arguments have been removed (#42703)
provider: The endpoints.opsworks configuration argument has been removed (#41948)
provider: The endpoints.simpledb and endpoints.sdb configuration arguments have been removed (#41775)
provider: The endpoints.worklink configuration argument has been removed (#42059)
resource/aws_accessanalyzer_archive_rule: filter.exists now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_alb_target_group: preserve_client_ip now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_api_gateway_account: The reset_on_delete argument has been removed (#42226)
resource/aws_api_gateway_deployment: Remove canary_settings, execution_arn, invoke_url, stage_description, and stage_name arguments. Instead, use the aws_api_gateway_stage resource to manage stages. (#42249)
resource/aws_batch_compute_environment: Rename compute_environment_name to name
resource/aws_batch_compute_environment: Rename compute_environment_name_prefix to name_prefix (#38050)
resource/aws_batch_compute_environment_data_source: Rename compute_environment_name to name (#38050)
resource/aws_batch_job_queue: Remove deprecated parameter compute_environments in place of compute_environment_order (#40751)
resource/aws_bedrock_model_invocation_logging_configuration: logging_config, logging_config.cloudwatch_config, logging_config.cloudwatch_config.large_data_delivery_s3_config, and logging_config.s3_config are now list nested blocks instead of single nested blocks (#42307)
resource/aws_cloudfront_key_value_store: Attribute id is now set to remote object's Id instead of name (#42230)
resource/aws_cloudfront_response_headers_policy: The etag argument is now computed only (#38448)
resource/aws_cloudtrail_event_data_store: suspend now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_cognito_user_in_group: The id attribute is now a comma-delimited string concatenating the user_pool_id, group_name, and username arguments (#34082)
resource/aws_cur_report_definition: The s3_prefix argument is now required (#38446)
resource/aws_db_instance: character_set_name now cannot be set with replicate_source_db, restore_to_point_in_time, s3_import, or snapshot_identifier. (#42348)
resource/aws_dms_endpoint: Remove s3_settings attribute. Use aws_dms_s3_endpoint instead (#42379)
resource/aws_dx_gateway_association: vpn_gateway_id has been removed (#42323)
resource/aws_ec2_spot_instance_fleet: terminate_instances_on_delete now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_ec2_spot_instance_request: Remove block_duration_minutes attribute (#42060)
resource/aws_ecs_task_definition: Remove inference_accelerator attribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)
resource/aws_eip: vpc has been removed. Use domain instead. (#42340)
resource/aws_eks_addon: resolve_conflicts has been removed. Use resolve_conflicts_on_create and resolve_conflicts_on_update instead. (#42318)
resource/aws_elasticache_cluster: auto_minor_version_upgrade now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_elasticache_replication_group: at_rest_encryption_enabled and auto_minor_version_upgrade now only accept one of "" (empty string), true, or false (#42434)
resource/aws_elasticache_replication_group: auth_token_update_strategy no longer has a default value. If auth_token is set, auth_token_update_strategy must also be explicitly configured. (#42336)
resource/aws_evidently_feature: variations.value.bool_value now only accepts one of "" (empty string), true, or false (#42434)
resource/aws_flow_log: log_group_name has been removed. Use log_destination instead. (#42333)
resource/aws_globalaccelerator_accelerator: The id attribute is now computed only (#42097)
resource/aws_guardduty_detector: Deprecates datasources. Use aws_guardduty_detector_feature resources instead. (#42436)
resource/aws_guardduty_organization_configuration: The auto_enable attribute has been removed (#42251)
resource/aws_identitystore_group: filter has been removed (#42325)
resource/aws_imagebuilder_container_recipe: instance_configuration.block_device_mapping.ebs.delete_on_termination and instance_configuration.block_device_mapping.ebs.encrypted now only accept one of "" (empty string), true, or false (#42434)
resource/aws_imagebuilder_image_recipe: block_device_mapping.ebs.delete_on_termination and block_device_mapping.ebs.encrypted now only accept one of "" (empty string), true, or false (#42434)
resource/aws_instance: Remove cpu_core_count and cpu_threads_per_core. Instead, use cpu_options. (#42280)
resource/aws_instance: user_data now displays cleartext instead of a hash. Base64 encoded content should use user_data_base64 instead. (#42078)
resource/aws_launch_template: block_device_mappings.ebs.delete_on_termination, block_device_mappings.ebs.encrypted, ebs_optimized, network_interfaces.associate_carrier_ip_address, network_interfaces.associate_public_ip_address, network_interfaces.delete_on_termination, and network_interfaces.primary_ipv6 now only accept one of "" (empty string), true, or false (#42434)
resource/aws_launch_template: Remove elastic_inference_accelerator attribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)
resource/aws_launch_template: elastic_gpu_specifications has been removed (#42312)
resource/aws_lb_listener: mutual_authentication

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update terraform aws to v6

421d336

MaStr79 merged commit 042dd59 into main Aug 7, 2025
3 of 5 checks passed

renovate bot deleted the renovate/aws-6.x branch August 7, 2025 05:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update terraform aws to v6#2

chore(deps): update terraform aws to v6#2
MaStr79 merged 1 commit intomainfrom
renovate/aws-6.x

renovate bot commented Aug 4, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Aug 4, 2025

Release Notes

v6.7.0

v6.6.0

v6.5.0

v6.4.0

v6.3.0

v6.2.0

v6.0.0

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v6.7.0`

`v6.6.0`

`v6.5.0`

`v6.4.0`

`v6.3.0`

`v6.2.0`

`v6.0.0`