chore(deps): update terraform aws to ~> 5.72.0 #58
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~> 5.66.0
->~> 5.72.0
Release Notes
hashicorp/terraform-provider-aws (aws)
v5.72.0
Compare Source
NOTES:
managed_policy_arns
argument is deprecated. Use theaws_iam_role_policy_attachments_exclusive
resource instead. (#39718)FEATURES:
aws_iam_role_policy_attachments_exclusive
(#39718)ENHANCEMENTS:
saml_properties
attribute (#39060)source_flow_config.source_connector_properties.sapo_data.pagination_config
andsource_flow_config.source_connector_properties.sapo_data.parallelism_config
attributes (#38932)aws:RequestTag
conditions (#39648)appsync_target
configuration block (#37773)on_demand_throughput
andglobal_secondary_index.on_demand_throughput
arguments (#37799)serverlessv2_scaling_configuration.max_capacity
andserverlessv2_scaling_configuration.min_capacity
from128
to256
(#39697)storage-optimization
status as success when creating or updating cluster DB instances (#39691)saml_properties
configuration block (#39060)BUG FIXES:
arn
for automation documents (#39705)schema
has emptystring_attribute_constraints
ornumber_attribute_constraints
(#20386)arn
for automation documents (#39705)v5.71.0
Compare Source
This Terraform AWS Provider version has been removed from the Terraform Registry due to
archive has incorrect checksum
errors while installing the provider on some platforms.The next planned Terraform AWS Provider release is v5.72.0, scheduled for the morning (EST) of October 17, 2024.
FEATURES:
aws_bedrock_inference_profile
(#39342)aws_bedrock_inference_profiles
(#39342)aws_elasticache_serverless_cache
(#39590)aws_prometheus_default_scraper_configuration
(#35280)aws_route53profiles_profiles
(#38172)aws_backup_restore_testing_plan
(#37039)aws_backup_restore_testing_selection
(#37039)aws_datazone_user_profile
(#38810)aws_pinpointsmsvoicev2_configuration_set
(#39620)aws_route53profiles_association
(#38172)aws_route53profiles_profile
(#38172)aws_route53profiles_resource_association
(#38172)ENHANCEMENTS:
rule.schedule_expression_timezone
attribute (#33653)ipam_pool_id
attribute (#39604)private_dns_names
attribute (#39659)rule.schedule_expression_timezone
argument (#33653)update_policy.job_execution_timeout_minutes
(#39583)container_properties.environment
(#21834)ipam_pool_id
argument in support of public IPAM pools (#39604)resolver_endpoint_type
argumentresource/aws_route53_resolver_rule: Add
ipv6
optional argument to thetarget_ip
object (#30167)enable_private_gua
argument (#39600)ip_source
andipv6_address_attribute
attributes (#39600)BUG FIXES:
empty result
errors reading vaults in certain Regions (#39670)security_group_names
causing resource replacement after import (#39591)volume_tags
,root_block_device.*.tags
, andebs_block_device.*.tags
where tags overlapped with default tags. These are now handled consistently with top-level tags throughout the provider. Specifically, tags defined in both locations are no longer removed, preventing erroneous differences. (#37441)workforce_name
as Optional (#39630)criteria.aws_account_id
,criteria.generator_id
,criteria.resource_id
, andcriteria.title
max length from20
to100
(#39616)publicly_advertisable
to ForceNew (#39600)InvalidParameterCombination: The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip
errors (#39600)v5.70.0
Compare Source
NOTES:
aws_simpledb_domain
resource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead (#39536)aws_worklink_fleet
resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)aws_worklink_website_certificate_authority_association
resource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)FEATURES:
aws_backup_logically_air_gapped_vault
(#39098)aws_ec2_transit_gateway_default_route_table_association
(#39496)aws_ec2_transit_gateway_default_route_table_propagation
(#39517)aws_iam_group_policies_exclusive
(#39554)aws_iam_user_policies_exclusive
(#39544)aws_securityhub_standards_control_association
(#39511)ENHANCEMENTS:
start_time
attribute (#39557)prepare_agent
argument (#39486)vector_ingestion_configuration.custom_transformation_configuration
argument (#39556)endpoint_configuration.attachment_arn
argument (#39507)tags
argument andtags_all
attribute (#39535)arn
attribute (#39535)tags
argument andtags_all
attribute (#39535)transition_default_minimum_object_size
argument (#39578)BUG FIXES:
customer_encryption_key_arn
not being passed during update (#39565)prompt_override_configuration
not being passed when not modified (#39565)knowledge_base_configuration
andstorage_configuration
to ForceNew (#39567)security_group_referencing_support
argument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) (#39519)policy_version
computed attribute changing (#39528)policy_version
computed attribute changing (#39528)sheets.filter_controls.list.cascading_control_configuration
andsheets.parameter_controls.list.cascading_control_configuration
attributes (#39453)v5.69.0
Compare Source
NOTES:
(account-id).ddb.(region).amazonaws.com
instead ofdynamodb.(region).amazonaws.com
. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by settingaccount_id_endpoint_mode = disabled
in a shared config file or setting theAWS_ACCOUNT_ID_ENDPOINT_MODE
environment variable todisabled
(#39505)1.23.1
. The issue with AWS Network Firewall dropping TLS handshakeClientHello
messages after the v5.65.0 upgrade to Go1.23.0
, temporarily resolved by the v5.67.0 downgrade to Go1.22.7
, has been addressed by removing theX25519Kyber768Draft00
key exchange mechanism from the HTTP client used to make AWS API calls (#39432)ENHANCEMENTS:
tags
attribute (#39402)security_group_referencing_support
attribute (#34542)security_group_referencing_support
attribute (#34542)failure_code
andfailure_reason
attributes (#38995)guardrail_configuration
argument (#39440)tags
argument andtags_all
attribute (#39402)security_group_referencing_support
argument (#34542)security_group_referencing_support
argument (#34542)security_group_referencing_support
argument (#34542)volume_configuration.managed_ebs_volume.tag_specifications
attribute (#38662)display_name
to be updated in-place (#39416)credentials.secret_arn
argument (#29034)BUG FIXES:
security_group_ids
. This requires a call to the EC2DescribeVpcEndpoints
API (#39454)ap-southeast-5
Region (#39389)name
attribute. (#38993)name
attribute. (#38993)ConcurrentModificationException
s during role creation (#39429)AccessDeniedException: Lambda code scanning is not supported in ...
errors (#38254)AccessDeniedException
errors during creation (#38254)name
andvpc_id
to ForceNew (#39454)security_group_ids
. This requires a call to the EC2DescribeVpcEndpoints
API (#39454)v5.68.0
Compare Source
NOTES:
inline_policy
argument is deprecated. Use theaws_iam_role_policy
resource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use theaws_iam_role_policies_exclusive
resource as well. (#39203)composite_slot_type_setting
block, thesubslots
argument has been renamedsub_slots
. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39353)FEATURES:
aws_elasticache_reserved_cache_node_offering
(#29832)aws_securityhub_standards_control_associations
(#39334)aws_synthetics_runtime_version
(#39180)aws_synthetics_runtime_versions
(#39180)aws_appsync_source_api_association
(#39323)aws_elasticache_reserved_cache_node
(#29832)aws_iam_role_policies_exclusive
(#39203)aws_pinpointsmsvoicev2_opt_out_list
(#25036)aws_pinpointsmsvoicev2_phone_number
(#25036)aws_sesv2_account_suppression_attributes
(#39325)ENHANCEMENTS:
iam_role_arn
argument tos3_action
configuration block (#39364)name
length to 255 characters (#39315)BUG FIXES:
assume_role.role_arn
to be an empty string when there is a singleassume_role
entry. (#39328)environment_variables
argument (#39397)Managed by DynamoDB
encryption setting (#31284)engine_version
mismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above (#39024)endpoint_management = "CUSTOMER"
(#39394)policy
(#39322)v5.67.0
Compare Source
BREAKING CHANGES:
value_selection_setting.advanced_recognition_setting
block, theaudio_recognition_setting
argument has been renamedaudio_recognition_strategy
(#39254)NOTES:
1.22.6
. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go1.23.0
(v5.65.0
). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go1.22.6
for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. (#39256)value_selection_setting.advanced_recognition_setting
block, theaudio_recognition_setting
argument has been renamedaudio_recognition_strategy
. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39254)FEATURES:
aws_codebuild_fleet
(#39237)aws_cloudformation_stack_instances
(#36794)aws_codebuild_fleet
(#39237)aws_computeoptimizer_enrollment_status
(#35349)aws_computeoptimizer_recommendation_preferences
(#35349)aws_costoptimizationhub_enrollment_status
(#36440)aws_costoptimizationhub_preferences
(#36526)aws_datazone_asset_type
(#38812)aws_datazone_environment_profile
(#38581)aws_lambda_function_recursion_config
(#39153)ENHANCEMENTS:
domain
andtags
as Optional. This enables certificates to be matched based on tags (#31453)encryption_type
andkms_key_id
attributes (#39212)user_pool_tags
in favor of standardtags
. (#39260)assume_role
now accepts multiple elements. (#39255)cache_config
argument (#39215)mode
argument (#39206)hsm2m.medium
as a valid value forhsm_type
(#39206)fleet
attribute inenvironment
configuration block (#39237)snowflake_configuration.buffering_internal
andsnowflake_configuration.buffering_size
arguments (#39214)READER_PRO
,AUTHOR_PRO
, andADMIN_PRO
as valid values for theuser_role
argument (#39220)default_user_settings.domain_settings.docker_settings
configuration block (#35416)default_user_settings.studio_web_portal_settings
,default_space_settings.jupyter_lab_app_settings
,default_space_settings.space_storage_settings
,default_space_settings.custom_posix_user_config
, anddefault_space_settings.custom_file_system_config
configuration blocks (#38457)production_variants.managed_instance_scaling
andshadow_production_variants.managed_instance_scaling
configuration blocks (#35479)primary_container.inference_specification_name
andcontainer.inference_specification_name
arguments (#35873)primary_container.model_data_source.s3_data_source.model_access_config
,primary_container.multi_model_config
,container.model_data_source.s3_data_source.model_access_config
, andcontainer.multi_model_config
configuration blocks (#35873)user_settings.studio_web_portal_settings
configuration block (#38567)definition
using the AWS Step Functions Validation API (#39229)BUG FIXES:
created_at
as an RFC3339 formatted timestamp (#24183)created_at
as an RFC3339 formatted timestamp (#24183)check_certificate_revovation_status
is ignored due to bad autoflex field mapping (#39211)aggregation_period
not set. (#39279)permissions.actions
MaxItems
from16
to20
. This fixes a regression introduced in v5.66.0 (#39226)vpc_connection_id
regular expression validator. This fixes a regression introduced in v5.66.0 (#39231)default_user_settings.domain_settings
to include missingsecurity_group_ids
andr_studio_server_pro_domain_settings
values (#35416)suppression_options.suppressed_reasons
to be an empty list ([]
) in order to disable the suppression list (#29671)event_destination.matching_event_types
fromTypeList
toTypeSet
as order is not significant (#36897)load_balancer_options.subnet_ids
(#39196)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.