Update Terraform aws to v5 #21
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
5b9e65e to
d038964
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
457d74e to
94332f1
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
b09c2ff to
7294981
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
5f1a529 to
67b0825
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
67b0825 to
7a7858d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
82b778e to
0066389
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
0327b2c to
7faccd0
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
ccabe63 to
8882369
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
8882369 to
2831cd0
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
4 times, most recently
from
6bb4c21 to
a1812ab
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
a1812ab to
5c18e28
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
6b79fd1 to
2536c4b
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
52b5b33 to
a0a94b2
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
4bf960f to
8666898
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
c550546 to
1e7e935
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
7df4aea to
fdd256e
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
fdd256e to
a94ef2d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
edbb28f to
7977a60
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
7977a60 to
861b044
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
c2b6f7f to
ceca942
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
ceca942 to
af7003d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
af7003d to
7f59dbd
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
8feef52 to
fc25676
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
fc25676 to
63518a4
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
63518a4 to
8ede168
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
8ede168 to
778c23f
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
90655b2 to
48dd76e
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
48dd76e to
fd307f1
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
fd307f1 to
0125d6d
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
bf9d6b9 to
02ec2b6
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
7eb3daf to
0f8dde1
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
9fe977f to
668e325
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
668e325 to
feb75d8
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.64.0->5.81.0Release Notes
hashicorp/terraform-provider-aws (aws)
v5.81.0Compare Source
FEATURES:
aws_servicecatalogappregistry_attribute_group(#38188)aws_ssm_parameter(#40313)aws_bedrock_inference_profile(#40294)aws_cloudwatch_log_anomaly_detector(#40437)aws_ecr_account_setting(#40219)aws_msk_single_scram_secret_association(#37056)aws_servicecatalogappregistry_attribute_group(#38183)aws_servicecatalogappregistry_attribute_group_association(#38290)ENHANCEMENTS:
policyanddomain_name_idattributes (#40364)tagsattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyattributes (#40194)domain_name_idargument (#40447)policyargument anddomain_name_idattribute (#40364)PRIVATEas a valid value forendpoint_configuration.typesargument, enabling custom domain name support for private REST API endpoints (#40364)completion_duration_minutesargument (#40336)configuration.retention_configurationandconfiguration.orphan_file_deletion_configurationattributes. (#40199)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses on EC2 instances (#36425)shard_countwould not exceed the AWS account's shard quota when the data stream capacity mode isPROVISIONED, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires thekinesis:DescribeLimitsIAM permission (#40499)kinesis:DescribeLimitsIAM permission (#40499)topic_replication.topic_name_configurationargument (#40101)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses for network interfaces (#36425)stateful_engine_options.flow_timeoutsargument (#39996)serverlessv2_scaling_configuration.seconds_until_auto_pauseargument (#40441)tagsargument andtags_allattribute (#40470)notebook-al2-v3value forplatform_identifier(#40484)tagsargument andtags_allattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyarguments (#40194)BUG FIXES:
InvalidArgumentException: NextToken and StreamName cannot be provided togethererrors when the data stream has more than 1000 shards (#40499)rulefromTypeSettoTypeListas order is significant (#40521)throughput_capacityvalidation to allow values up to12228(#40468)logging_configuration.log_destination_configs (#40092)InvalidDBClusterStateFaulterrors when deleting clusters that are members of a global cluster (#40333)InvalidParameterValue: Serverless v2 maximum capacity 0.0 isn't valid. The maximum capacity must be at least 1.0.errors when removingserverlessv2_scaling_configurationin an update (#40511)storage_typewhen restoring from S3 (#40471)storage_typewhen restoring from snapshot (#40471)storage_typewhen restoring to a point in time (#40471)database_nameas Computed. This prevents resource recreation when the source cluster specifies adatabase_name(#40469)v5.80.0Compare Source
FEATURES:
aws_codeconnections_connection(#40300)aws_codeconnections_host(#40300)aws_s3tables_namespace(#40420)aws_s3tables_table(#40420)aws_s3tables_table_bucket(#40420)aws_s3tables_table_bucket_policy(#40420)aws_s3tables_table_policy(#40420)ENHANCEMENTS:
instructionmax length for validation to 8000 (#40279)deletion_protection_enabledargument (#35359)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityminimum values to0to support Amazon Aurora Serverless v2 scaling to 0 ACUs (#40230)LocalZoneas a valid value forlocation.type, enabling support for Amazon S3 Express One Zone in AWS Dedicated Local Zones (#40339)BUG FIXES:
tags_allwhen planning. (#40305)deserialization failed, failed to decode response body with invalid JSONerrors on Read (#40419)v5.79.0Compare Source
FEATURES:
aws_vpc_block_public_access_exclusion(#40235)aws_vpc_block_public_access_options(#40233)ENHANCEMENTS:
compute_config,storage_config, andkubernetes_network_config.elastic_load_balancingarguments for EKS Auto Mode (#40370)remote_network_configargument for EKS Auto Mode (#40371)metrics_configargument (#40322)provisioned_poller_configargument (#40303)supported_regionsargument (#40346)BUG FIXES:
disk_iops_configuration.iopsfrom350000to400000fordeployment_type = "SINGLE_AZ_2"(#40359)v5.78.0Compare Source
NOTES:
FEATURES:
aws_iam_organizations_features(#40164)ENHANCEMENTS:
engineattribute (#40224)cluster_configuration.engineattribute (#40224)engineargument (#40224)cluster_configuration.engineattribute (#40224)BUG FIXES:
product_description(e.g., "postgresql") is a substring of multiple products, fixError: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering(#40281)Warning: AWS account ID not found for providerwhenskip_requesting_account_idistrue(#40264)eksPropertiesorecsPropertiesblock (#40172)content_policy_config.filters_configs are specified. (#40304)sns_topic_arnschanges (#40253)sns_topic_arnschanges (#40291)storage_typefromio1orio2togp3, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#37257)gp3volume'sallocated_storageto a value larger than the threshold value forengine, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#28847)v5.77.0Compare Source
NOTES:
aws_kms_secrets,aws_lambda_invocation, andaws_secretsmanager_secret_versionnow support ephemeral values. (#40009)FEATURES:
aws_kms_secrets(#40009)aws_lambda_invocation(#39988)aws_secretsmanager_secret_version(#40009)aws_rds_instance_state(#40180)ENHANCEMENTS:
most_recentis true and certain filter criteria are missing (#40211)availability_zone_rebalancingattribute (#40225)availability_zone_rebalancingattribute (#40225)versionConsistencyargument tocontainer_definitions(#40216)nodejs22.xruntimevalue (#40277)nodejs22.xcompatible_runtimesvalue (#40277)endpointargument to point to the writer DB instance in the current primary cluster (#39960)BUG FIXES:
tagsfrom theDescribeSubnetsresponse, removing the need for theec2:DescribeTagsIAM permission (#40144)schemaelement (#40195)pod_identity_associationis modified (#40168)pod_identity_associationis changed (#40168)v5.76.0Compare Source
FEATURES:
aws_vpc_security_group_vpc_association(#40069)ENHANCEMENTS:
python3.13runtimevalue (#40277)python3.13compatible_runtimesvalue (#40277)BUG FIXES:
BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parametersand/orcache_key_parameters(#40124)BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parameters(#40124)launch_templatethat is updated causingValidationError: You must use a valid fully-formed launch template.(#40088)ipam_pool_idis set (#40082)Provider returned invalid result object after applyerrors (#40090)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)v5.75.1Compare Source
ENHANCEMENTS:
descriptionattribute (#39980)reset_on_deleteto properly reset CloudWatch Role ARN on deletion. (#40004)descriptionargument (#39980)BUG FIXES:
canary_settingsandstage_descriptionwhenstage_namenot set. (#40067)ttl[0].attribute_nameto be set whenttl[0].enabledis false (#40046)ValidationExceptionon updates when RStudio is disabled on the domain (#40049)v5.75.0Compare Source
BREAKING CHANGES:
canary_settings.deployment_idattribute asrequired(#39929)NOTES:
ARNTypewill properly surface validation errors (#40008)deployment_idwas added tocanary_settingsas arequiredattribute. This breaking change was necessary to makecanary_settingsfunctional. Without this change all canary traffic was routed to the main deployment (#39929)FEATURES:
aws_spot_datafeed_subscription(#39647)ENHANCEMENTS:
init_containers,share_process_namespace, andimage_pull_secretsattributes (#40019)init_containersandshare_process_namespacearguments (#40019)containersarguments to 10 (#40019)pod_identity_associationargument (#38357)passwordargument as sensitive (#39991)BUG FIXES:
alarm_configuration.alarmsargument (#39971)ResourceNotFoundexceptions during resource destruction (#38357)Value Conversion Errorduring resource creation (#39945)tcp_idle_timeout_secondsargument for gateway load balancers (#40039)tcp_idle_timeout_secondsvalue, preventingModifyListenerAttributesAPI calls when a value is not explicitly configured (#40039)public_ip_source = "amazon":The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip.(#40042)v5.74.0Compare Source
FEATURES:
aws_lb_listener_rule(#39865)aws_opensearch_authorize_vpc_endpoint_access(#39846)aws_ssmquicksetup_configuration_manager(#39931)ENHANCEMENTS:
distribution.s3_export_configurationattribute (#35492)block_device_mapping.0.ebs.0.delete_on_termination: '' expected type 'bool', got unconvertible type 'string'errors (#39928)termination_hook_enabledargument (#35482)zonal_shift_configargument (#39852)distribution.s3_export_configurationargument (#35492)container_recipe_arnandimage_recipe_arnto be updated in-place (#39117)replication_specificationargument (#36331)efa-onlyas a valid value fornetwork_interfaces.interface_type(#39882)TransferSecurityPolicy-Restricted-2024-06as a valid value forsecurity_policy_name(#39871)BUG FIXES:
master_passwordon resource Create whensnapshot_identifieris configured (#38193)component.parameter.name,component.parameter.value,target_repository.repository_name, andtarget_repository.serviceto ForceNew (#39117)interface conversion: interface {} is nil, not map[string]interface {}panic whengeolocation_routing_policyis empty (#39944)approval_rule.approve_after_daysvalidation to allow a maximum value of360(#39949)decoding JSON: unexpected end of JSON inputerrors when updating from usingrule_jsonto usingrule(#39283)rule_json(#39878)v5.73.0Compare Source
FEATURES:
aws_ssm_patch_baselines(#39779)aws_imagebuilder_lifecycle_policy(#35674)aws_resiliencehub_resiliency_policy(#38913)aws_sagemaker_hub(#39807)aws_sagemaker_mlflow_tracking_server(#39796)ENHANCEMENTS:
valkeyas valid value forproduct_description(#39745)parametersmap attribute to readCROSS_ACCOUNT_VERSION(#39826)enable_zonal_shiftattribute (#39585)min_sizeandmax_size(#39843)zonal_configargument (#34850)approximate_creation_date_time_precisionargument (#38098)valkeyas valid value forengine(#39745)engine_version(#39745)engine_version(#39745)valkeyas valid value forengine(#39745)valkeyas valid value forengine(#39745)iceberg_configurationargument (#39844)parametersmap argument enablingCROSS_ACCOUNT_VERSIONto be set (#39826)enable_zonal_shiftargument (#39585)tcp_idle_timeout_secondsargument (#39585)nameargument (#39798)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)kms:DescribeKeyfor the S3 default AWS managed key (alias/aws/s3) on Read (#39782)default_user_settings.jupyter_lab_app_settings.app_lifecycle_management,default_user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_user_settings.jupyter_lab_app_settings.emr_settings,default_space_settings.jupyter_lab_app_settings.app_lifecycle_management,default_space_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,default_space_settings.jupyter_lab_app_settings.emr_settings,default_user_settings.auto_mount_home_efs,default_user_settings.canvas_app_settings.emr_serverless_settings,default_user_settings.studio_web_portal_settings.hidden_instance_types,default_user_settings.code_editor_app_settings.app_lifecycle_management,default_user_settings.code_editor_app_settings.built_in_lifecycle_config_arn, andtag_propagationarguments (#39774)app_network_access_typeandapp_security_group_managementto be updated in-place (#39774)feature_definition.collection_config,feature_definition.collection_type, andthroughput_configarguments (#39805)space_settings.code_editor_app_settings.app_lifecycle_managementandspace_settings.jupyter_lab_app_settings.app_lifecycle_managementarguments (#39800)user_settings.auto_mount_home_efs,user_settings.canvas_app_settings.emr_serverless_settings,user_settings.code_editor_app_settings.app_lifecycle_management,user_settings.code_editor_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.app_lifecycle_management,user_settings.jupyter_lab_app_settings.built_in_lifecycle_config_arn,user_settings.jupyter_lab_app_settings.emr_settingsanduser_settings.studio_web_portal_settings.hidden_instance_typesarguments (#39774)BUG FIXES:
name. This fixes a regression introduced in v5.72.0 causingmultiple WorkSpaces Bundles matched; use additional constraints to reduce matches to a single WorkSpaces Bundleerrors (#39777)on_demand_throughputis excluded (#39784)policycontent is written to state (#39842)InvalidParameterValue: This API supports only cross-engine upgrades to Valkey engine currentlyerrors on Update (#39745)policycontent is written to state (#39842)policycontent is written to state (#39842)policycontent is written to state (#39842)InvalidParameterValueException: Invalid RowLevelPermissionDataSet. Namespace parameter should not be specified for Version 2errors on Create and Update (#39778)ttl=0(#39728)policycontent is written to state (#39842)policycontent is written to state (#39842)v5.72.1Compare Source
FEATURES:
aws_iam_group_policy_attachments_exclusive(#39732)aws_iam_user_policy_attachments_exclusive(#39731)ENHANCEMENTS:
scopeargument (#39744)BUG FIXES:
billing_modeis set toPAY_PER_REQUESTwithoutglobal_secondary_indexupdates (#39752)AGGREGATORindexes as tainted on Create (#39744)v5.72.0Compare Source
NOTES:
managed_policy_arnsargument is deprecated. Use theaws_iam_role_policy_attachments_exclusiveresource instead. (#39718)FEATURES:
aws_iam_role_policy_attachments_exclusive(#39718)ENHANCEMENTS:
saml_propertiesattribute (#39060)source_flow_config.source_connector_properties.sapo_data.pagination_configandsource_flow_config.source_connector_properties.sapo_data.parallelism_configattributes (#38932)aws:RequestTagconditions (#39648)appsync_targetconfiguration block (#37773)on_demand_throughputandglobal_secondary_index.on_demand_throughputarguments (#37799)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityfrom128to256(#39697)storage-optimizationstatus as success when creating or updating cluster DB instances (#39691)saml_propertiesconfiguration block (#39060)BUG FIXES:
arnfor automation documents (#39705)schemahas emptystring_attribute_constraintsornumber_attribute_constraints(#20386)arnfor automation documents (#39705)v5.70.0Compare Source
NOTES:
aws_simpledb_domainresource has been deprecated and will be removed in a future version. Use Amazon DynamoDB instead (#39536)aws_worklink_fleetresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)aws_worklink_website_certificate_authority_associationresource has been deprecated and will be removed in a future version. Use Amazon WorkSpaces Secure Browser instead (#39538)FEATURES:
aws_backup_logically_air_gapped_vault(#39098)aws_ec2_transit_gateway_default_route_table_association(#39496)aws_ec2_transit_gateway_default_route_table_propagation(#39517)aws_iam_group_policies_exclusive(#39554)aws_iam_user_policies_exclusive(#39544)aws_securityhub_standards_control_association(#39511)ENHANCEMENTS:
start_timeattribute (#39557)prepare_agentargument (#39486)vector_ingestion_configuration.custom_transformation_configurationargument (#39556)endpoint_configuration.attachment_arnargument (#39507)tagsargument andtags_allattribute (#39535)arnattribute (#39535)tagsargument andtags_allattribute (#39535)transition_default_minimum_object_sizeargument (#39578)BUG FIXES:
customer_encryption_key_arnnot being passed during update (#39565)prompt_override_configurationnot being passed when not modified (#39565)knowledge_base_configurationandstorage_configurationto ForceNew (#39567)security_group_referencing_supportargument and mark as Computed. This suppresses the diffs shown for resources created with v5.68.0 (or earlier) (#39519)policy_versioncomputed attribute changing (#39528)policy_versioncomputed attribute changing (#39528)sheets.filter_controls.list.cascading_control_configurationandsheets.parameter_controls.list.cascading_control_configurationattributes (#39453)v5.69.0Compare Source
NOTES:
(account-id).ddb.(region).amazonaws.cominstead ofdynamodb.(region).amazonaws.com. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by settingaccount_id_endpoint_mode = disabledin a shared config file or setting theAWS_ACCOUNT_ID_ENDPOINT_MODEenvironment variable todisabled(#39505)1.23.1. The issue with AWS Network Firewall dropping TLS handshakeClientHellomessages after the v5.65.0 upgrade to Go1.23.0, temporarily resolved by the v5.67.0 downgrade to Go1.22.7, has been addressed by removing theX25519Kyber768Draft00key exchange mechanism from the HTTP client used to make AWS API calls (#39432)ENHANCEMENTS:
tagsattribute (#39402)security_group_referencing_supportattribute (#34542)security_group_referencing_supportattribute (#34542)failure_codeandfailure_reasonattributes (#38995)guardrail_configurationargument (#39440)tagsargument andtags_allattribute (#39402)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument ([#34542](https://redirect.github.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.