v5.79.0

Compare Source

FEATURES:

• New Resource: aws_vpc_block_public_access_exclusion (#​40235)
• New Resource: aws_vpc_block_public_access_options (#​40233)

ENHANCEMENTS:

• resource/aws_eks_cluster: Add compute_config, storage_config, and kubernetes_network_config.elastic_load_balancing arguments for EKS Auto Mode (#​40370)
• resource/aws_eks_cluster: Add remote_network_config argument for EKS Auto Mode (#​40371)
• resource/aws_lambda_event_source_mapping: Add metrics_config argument (#​40322)
• resource/aws_lambda_event_source_mapping: Add provisioned_poller_config argument (#​40303)
• resource/aws_rds_cluster: Add ability to promote read replica cluster to standalone (#​40337)
• resource/aws_vpc_endpoint_service: Add supported_regions argument (#​40346)

BUG FIXES:

• resource/aws_fsx_openzfs_file_system: Increase maximum value of disk_iops_configuration.iops from 350000 to 400000 for deployment_type = "SINGLE_AZ_2" (#​40359)

v5.78.0

Compare Source

NOTES:

• resource/aws_s3_bucket_lifecycle_configuration: Lifecycle configurations can now be applied to directory buckets (#​40268)

FEATURES:

• New Resource: aws_iam_organizations_features (#​40164)

ENHANCEMENTS:

• data-source/aws_memorydb_cluster: Add engine attribute (#​40224)
• data-source/aws_memorydb_snapshot: Add cluster_configuration.engine attribute (#​40224)
• resource/aws_memorydb_cluster: Add engine argument (#​40224)
• resource/aws_memorydb_snapshot: Add cluster_configuration.engine attribute (#​40224)

BUG FIXES:

• data-source/aws_rds_reserved_instance_offering: When product_description (e.g., "postgresql") is a substring of multiple products, fix Error: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering (#​40281)
• provider: Suppress Warning: AWS account ID not found for provider when skip_requesting_account_id is true (#​40264)
• resource/aws_batch_job_definition: Fix crash when specifying eksProperties or ecsProperties block (#​40172)
• resource/aws_bedrock_guardrail: Fix perpetual diff if multiple content_policy_config.filters_configs are specified. (#​40304)
• resource/aws_chatbot_slack_channel_configuration: Fix inconsistent provider result when order of sns_topic_arnschanges (#​40253)
• resource/aws_chatbot_teams_channel_configuration: Fix inconsistent provider result when order of sns_topic_arnschanges (#​40291)
• resource/aws_db_instance: When changing storage_type from io1 or io2 to gp3, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#​37257)
• resource/aws_db_instance: When changing a gp3 volume's allocated_storage to a value larger than the threshold value for engine, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#​28847)

v5.77.0

Compare Source

NOTES:

• New ephemeral resources aws_kms_secrets, aws_lambda_invocation, and aws_secretsmanager_secret_version now support ephemeral values. (#​40009)

FEATURES:

• New Ephemeral Resource: aws_kms_secrets (#​40009)
• New Ephemeral Resource: aws_lambda_invocation (#​39988)
• New Ephemeral Resource: aws_secretsmanager_secret_version (#​40009)
• New Resource: aws_rds_instance_state (#​40180)

ENHANCEMENTS:

• data-source/aws_ami: Add warning diagnostic when most_recent is true and certain filter criteria are missing (#​40211)
• data-source/aws_ecs_service: Add availability_zone_rebalancing attribute (#​40225)
• resource/aws_ecs_service: Add availability_zone_rebalancing attribute (#​40225)
• resource/aws_ecs_service: Add vpc_lattice_configurations argument (#​40177)
• resource/aws_ecs_task_definition: Add versionConsistency argument to container_definitions (#​40216)
• resource/aws_lambda_function: Add support for nodejs22.x runtime value (#​40277)
• resource/aws_lambda_layer_version: Add support for nodejs22.x compatible_runtimes value (#​40277)
• resource/aws_rds_global_cluster: Add endpoint argument to point to the writer DB instance in the current primary cluster (#​39960)

BUG FIXES:

• data-source/aws_subnet: Set tags from the DescribeSubnets response, removing the need for the ec2:DescribeTags IAM permission (#​40144)
• resource/aws_cognito_user_pool: Fix crash when hashing nil schema element (#​40195)
• resource/aws_eks_addon: Fix crash when pod_identity_association is modified (#​40168)
• resource/aws_eks_addon: Fix to prevent persistent differences when pod_identity_association is changed (#​40168)

v5.76.0

Compare Source

FEATURES:

• New Resource: aws_vpc_security_group_vpc_association (#​40069)

ENHANCEMENTS:

• resource/aws_lambda_function: Add support for python3.13 runtime value (#​40277)
• resource/aws_lambda_layer_version: Add support for python3.13 compatible_runtimes value (#​40277)
• resource/aws_medialive_channel: Add missing h265 codec settings (#​40071)

BUG FIXES:

• resource/aws_api_gateway_integration: Fix BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters and/or cache_key_parameters (#​40124)
• resource/aws_api_gateway_method: Fix BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters (#​40124)
• resource/aws_autoscaling_group: Handle eventual consistency issues that occur when using a launch_template that is updated causing ValidationError: You must use a valid fully-formed launch template. (#​40088)
• resource/aws_eip: Properly surface errors during deletion when ipam_pool_id is set (#​40082)
• resource/aws_elasticache_reserved_cache_node: Fix Provider returned invalid result object after apply errors (#​40090)
• resource/aws_iam_group_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
• resource/aws_iam_group_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
• resource/aws_iam_instance_profile: Handle eventual consistency issues that occur when this resource is updated and has dependents (#​40088)
• resource/aws_iam_role_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
• resource/aws_iam_role_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
• resource/aws_iam_user_policies_exclusive: Add validation to prevent null values in policy_names (#​40076)
• resource/aws_iam_user_policy_attachments_exclusive: Add validation to prevent null values in policy_arns (#​40076)
• resource/aws_launch_template: Handle eventual consistency issues that occur when this resource is updated and has dependents (#​40088)

v5.75.1

Compare Source

ENHANCEMENTS:

• data-source/aws_cloudwatch_event_bus: Add description attribute (#​39980)
• resource/aws_api_gateway_account: Add attribute reset_on_delete to properly reset CloudWatch Role ARN on deletion. (#​40004)
• resource/aws_cloudwatch_event_bus: Add description argument (#​39980)

BUG FIXES:

• resource/aws_api_gateway_deployment: Rolls back validation of canary_settings and stage_description when stage_name not set. (#​40067)
• resource/aws_dynamodb_table: Allow table TTL to be disabled by allowing ttl[0].attribute_name to be set when ttl[0].enabled is false (#​40046)
• resource/aws_sagemaker_domain: Fix issue causing a ValidationException on updates when RStudio is disabled on the domain (#​40049)

v5.75.0

Compare Source

BREAKING CHANGES:

• resource/aws_api_gateway_stage: Add canary_settings.deployment_id attribute as required (#​39929)

NOTES:

• provider: validation of arguments implementing the custom ARNType will properly surface validation errors (#​40008)
• resource/aws_api_gateway_stage: deployment_id was added to canary_settings as a required attribute. This breaking change was necessary to make canary_settings functional. Without this change all canary traffic was routed to the main deployment (#​39929)

FEATURES:

• New Data Source: aws_spot_datafeed_subscription (#​39647)

ENHANCEMENTS:

• data-source/aws_batch_job_definition: Add init_containers, share_process_namespace, and image_pull_secrets attributes (#​40019)
• resource/aws_batch_job_definition: Add init_containers and share_process_namespace arguments (#​40019)
• resource/aws_batch_job_definition: Increase maximum number of containers arguments to 10 (#​40019)
• resource/aws_eks_addon: Add pod_identity_association argument (#​38357)
• resource/aws_iam_user_login_profile: Mark the password argument as sensitive (#​39991)

BUG FIXES:

• resource/aws_api_gateway_deployment: Fix destroy error when canary stage still exists on resource (#​39929)
• resource/aws_codedeploy_deployment_group: Remove maximum items limit on the alarm_configuration.alarms argument (#​39971)
• resource/aws_eks_addon: Handle ResourceNotFound exceptions during resource destruction (#​38357)
• resource/aws_elasticache_reserved_cache_node: Fix Value Conversion Error during resource creation (#​39945)
• resource/aws_lb_listener: Fix errors when updating the tcp_idle_timeout_seconds argument for gateway load balancers (#​40039)
• resource/aws_lb_listener: Remove the default tcp_idle_timeout_seconds value, preventing ModifyListenerAttributes API calls when a value is not explicitly configured (#​40039)
• resource/aws_vpc_ipam_pool: Fix bug when public_ip_source = "amazon": The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip. (#​40042)