Update Terraform aws to v5.94.1 #56
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
a171d51 to
cf8a592
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
cf8a592 to
0d413df
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
0d413df to
dd6b3b5
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
dd6b3b5 to
381574e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
ff4ecd9 to
f9abf1e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
f9abf1e to
21117b3
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
21117b3 to
f672bb3
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
f672bb3 to
9d80da2
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
0be3488 to
d1ec459
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d1ec459 to
6af86ae
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
6af86ae to
d7aef1e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d7aef1e to
2f01072
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
2f01072 to
7752c50
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
cc4efb1 to
19c9ecf
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
19c9ecf to
c9c4899
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
c9c4899 to
4fdffdb
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
4fdffdb to
58db33f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
58db33f to
e623eff
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
e623eff to
753259b
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
753259b to
d13486e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d13486e to
1ef954f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
1ef954f to
f1c6d43
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
f1c6d43 to
661c470
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
661c470 to
ed6ec07
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
ed6ec07 to
8cc9577
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
8cc9577 to
56ba5a5
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
56ba5a5 to
22f9ed8
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.46.0->5.94.1Release Notes
hashicorp/terraform-provider-aws (aws)
v5.94.1Compare Source
BUG FIXES:
AuthorizationErrorexceptions forListSubscriptionByTopicoperations. This fixes a regression introduced inv5.94.0. (#42117)v5.94.0Compare Source
NOTES:
overwriteargument is no longer deprecated (#42030)ENHANCEMENTS:
last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)source_control_detailsargument (#42046)ruby3.4runtimevalue (#42052)ruby3.4compatible_runtimesvalue (#42052)role_configurationargument (#42039)rule.expirationare set (#42036)rule.prefixnorrule.filteris set (#42036)rule.transition.datenorrule.transition.daysis set and error if both are set (#42036)BUG FIXES:
CFNRegistryException: Version '...' is the default version and cannot be deregisterederrors when deregistering an extension and thecreate_before_destroymeta-argument istrue(#38855)volume_configurationandservice_connect_configurationsvalues from state read/refresh (#41998)service_connect_configuration.service.discovery_nameandservice_connect_configuration.service.client_alias.dns_nameas Computed (#41998)Provider produced inconsistent final planerrors whenconfiguration_info.revisionis unknown (#42037)refresh_propertiesis not configured (#42076)rule.filter(#42036)waiting for SQS Queue... attributes create: timeout while waitingerrors whensqs_managed_sse_enabled = falseor omitted andkms_master_key_idis not set butkms_data_key_reuse_period_secondsis set to a non-default value. (#42062)workspace_properties.running_mode_auto_stop_timeout_in_minuteswhen modified (#40953)v5.93.0Compare Source
FEATURES:
aws_api_gateway_rest_api_put(#41375)ENHANCEMENTS:
custom_role_arnandupstream_repository_prefixattributes (#41933)memory_configurationconfiguration block (#39970)trigger_allattribute (#42008)triggerargument now properly removes custom trigger definitions (#42008)username_configurationandusername_configuration.case_sensitivearguments as optional and computed. This will future proof the provider against upstream API changes which may return a default value for the block when omitted during create operations. (#35439)task_modeargument (#39979)custom_role_arnandupstream_repository_prefixarguments (#41933)ecr_repository_prefixto support a value of"ROOT"(#41933)runtime_environmentto be updated in-place (#41935)cidr_options,load_balancer.port_range,network_interface_options.port_range, andrds_optionsarguments (#41957)application_domain,domain_certificate_arnandendpoint_domain_prefixas Optional (#41957)cidrandrdsas valid values forendpoint_type(#41957)cidr_endpoint_custom_subdomainargument andname_serversattribute (#41957)native_application_oidc_optionsandsse_specificationarguments (#41957)BUG FIXES:
InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing instances (#41960)InvalidReplicationGroupStateexceptions during tagging operations (#41954)domain_nameto Computed (#41985)resource_data.table_wildcardattribute (#41939)v5.92.0Compare Source
NOTES:
configuration.s3_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the upgraded Amazon S3 connector. Amazon has ended support for the older architecture as of June 2024, and resources created with this argument cannot be edited or updated. See the Amazon Kendra documentation for additional details. (#35437)configuration.web_crawler_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the Amazon Kendra Web Crawler connector v2.0. See the Amazon Kendra documentation for additional details. (#35437)FEATURES:
aws_api_gateway_api_keys(#39335)aws_eks_cluster_versions(#40741)aws_identitystore_group_memberships(#31589)aws_identitystore_users(#31688)aws_athena_capacity_reservation(#41858)ENHANCEMENTS:
identity_info.secondary_emailattribute (#41001)database_insights_modeattribute (#41607)create_timeattribute (#41839)ipam_poolsattribute (#41822)aws-marketplaceas a valid account ID in ARNs (#41867)extension_arnandresource_arn(#41907)identity_info.secondary_emailattribute (#41001)database_insights_modeargument (#41607)create_timeattribute (#41839)configuration.template_configurationargument (#35437)ipam_poolsconfiguration block (#41822)BUG FIXES:
vpc_endpoint_ids(#41836)instructionvalidator to consider multi-byte chars so not to artificially limit instruction length (#41921)compute_config.node_role_arnto update in place when previously unset (#41925)performance_insights_enabledtakes effect when creating a cluster that is a member of a global cluster (#41737)InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing clusters (#41737)secondary_availability_zoneattribute when changingdeployment_type(#41849)v5.91.0Compare Source
NOTES:
FEATURES:
aws_network_interface_permission(#40797)aws_route53_records_exclusive(#41741)ENHANCEMENTS:
secondary_sources.authconfiguration block (#40191)msk_source_configuration.read_from_timestampargument (#41794)network_typeandportattributes. The following can now be updated in place:allocated_storage,db_instance_type,db_storage_typeanddeployment_type(#40661)ipv4_ipam_pool_idandipv4_netmask_lengthattributes (#41779)ipv6_ipam_pool_idandipv6_netmask_lengthattributes (#41779)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument (#40889)rule.challenge_configargument (#40123)BUG FIXES:
storage_modeupdates are actually applied to the cluster (#41773)v5.90.1Compare Source
NOTES:
godebug tlskyber=0directive ingo.mod. This disables the experimental the post-quantum key exchange mechanismX25519Kyber768Draft00, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in v5.90.0 (#41740)FEATURES:
aws_datazone_domain(#41480)ENHANCEMENTS:
stage.before_entry,stage.on_successandstage.on_failureconfiguration blocks (#41663)connector_configurationto be updated in-place (#41685)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)v5.90.0Compare Source
BREAKING CHANGES:
rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required (#40796)NOTES:
elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)X25519Kyber768Draft00. Previously, in environments using AWS Network Firewall, the Provider would hang due to a handshake issue between Go 1.23 and Network Firewall, which supported Suricata 6.0.9. We had disabled the post-quantum key exchange to resolve the issue. Since November 2024, AWS Network Firewall has upgraded to Suricata 7.0, which no longer has this issue. However, if you use AWS Network Firewall, we’d appreciate your help in identifying any remaining issues related to this change. (#41655)overrides.inference_accelerator_overridesis deprecated. AWS no longer provides the Elastic Inference service. (#41676)elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)accelerator_typesis deprecated and will be removed in a future version. Useinstance_typeinstead. (#41673)FEATURES:
aws_dataexchange_event_action(#40552)aws_lakeformation_opt_in(#41611)ENHANCEMENTS:
arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)stateattribute (#41575)cluster_config.node_optionsattribute (#40181)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)disconnect_on_session_timeoutattribute (#41621)max_webserversandmin_webserversarguments from2to1in support of Amazon MWAA micro environments (#40244)cluster_config.node_optionsconfiguration block in support of dedicated coordinator nodes (#40181)vpc_options.vpc_endpoint_managementargument (#38001)arnattribute (#41645)tagsargument andtags_allattribute (#41645)arnattribute (#41660)arnattribute (#41660)rule.filter(#41662)rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required. Technically this is a breaking change, but failure to configure this attribute would have led toInvalidArgumentorMalformedXMLerrors (#40796)arnattribute (#41660)arnattribute (#41660)BUG FIXES:
exclude_charactersfromBooltoString(#41546)vpc_lattice_configurationsblocks (#41594)ruleconfiguration fromfilter.prefixtofilter.and.prefix(#41662)ruleconfiguration fromprefixtofilter.prefixorfilter.and.prefix(#41662)ConflictExceptionerrors on delete (#41594)v5.89.0Compare Source
FEATURES:
aws_macie2_organization_configuration(#41475)aws_neptunegraph_graph(#41216)aws_quicksight_role_membership(#41589)aws_rds_shard_group(#41254)aws_xray_resource_policy(#41517)ENHANCEMENTS:
configurationargument (#41524)cluster_scalability_typeattribute (#41254)database_insights_modeattribute (#41254)application/yamlto the list ofContent-Types that return a body (#41443)application/yamlto the list ofContent-Types that return a body (#41443)checksum_crc64nvmeattribute (#41015)target_tracking_configuration.customized_metric_specification.periodargument to support high-resolution metrics (#41385)RequiredWithvalidationpassword_woandpassword_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)25Gbpsand400Gbpsas supportedbandwidthvalues (#41547)25Gbpsas a supportedbandwidthvalue (#41547)400Gbpsas a supportedconnections_bandwidthvalue (#41547)network_interfaces.ena_srd_specificationconfiguration block (#41367)enable_zonal_shiftsupport for Application Load Balancers (#41335)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)tagsto be updated in-place (#41266)secondary_private_ip_address_counttosecondary_private_ip_addressesfor private NAT Gateways (#41403)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)cluster_scalability_typeargument (#41254)database_insights_modeargument (#41254)""as a valid value forengine_mode(#41254)iam-db-auth-erroras a valid value forenabled_cloudwatch_logs_exports(#41408)RequiredWithvalidationmaster_password_woandmaster_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)RequiredWithvalidationadmin_user_password_woandadmin_user_password_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)data_redundancyisSingleLocalZoneiflocation.typeisLocalZone(#40944)checksum_crc64nvmeattribute (#41015)checksum_crc64nvmeattribute (#41015)RequiredWithvalidationsecret_string_woandsecret_string_wo_version. RemovePreferWriteOnlyAttributevalidation (#41562)PreferWriteOnlyAttributevalidation (#41562)BUG FIXES:
s3_delivery_configuration.suffix_path(#41497)spot_options.max_total_price,spot_options.min_target_capacity,spot_options.single_instance_type, andspot_options.single_availability_zonearguments (#41272)routing_http_response_server_enabled,routing_http_response_strict_transport_security_header_value,routing_http_response_access_control_allow_origin_header_value,routing_http_response_access_control_allow_methods_header_value,routing_http_response_access_control_allow_headers_header_value,routing_http_response_access_control_allow_credentials_header_value,routing_http_response_access_control_expose_headers_header_value,routing_http_response_access_control_max_age_header_value,routing_http_response_content_security_policy_header_value,routing_http_response_x_content_type_options_header_value,routing_http_response_x_frame_options_header_value,routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name,routing_http_request_x_amzn_mtls_clientcert_issuer_header_name,routing_http_request_x_amzn_mtls_clientcert_subject_header_name,routing_http_request_x_amzn_mtls_clientcert_validity_header_name,routing_http_request_x_amzn_mtls_clientcert_leaf_header_name,routing_http_request_x_amzn_mtls_clientcert_header_name,routing_http_request_x_amzn_tls_version_header_name, androuting_http_request_x_amzn_tls_cipher_suite_header_nameare updated iftcp_idle_timeout_secondsdoes not change (#41299)statusandtagscan be updated in-place (#41266)secondary_allocation_idsto be updated in-place (#41403)master_usernamevalidation (#41556)InvalidRequesterror whenrule.and.object_size_less_thannot set. (#41542)v5.88.0Compare Source
NOTES:
rule.expiration.expired_object_delete_markeris set with eitherrule.expiration.dateorrule.expiration.days. While historically the provider allowed this invalid configuration, the migration of this resource to the Terraform Plugin Framework inv5.86.0resulted in this misconfiguration surfacing as a hardinconsistent result after applyerror. This diagnostic aims to direct users how to resolve the issue at plan time. See this issue comment for additional context. (#41462)FEATURES:
aws_cloudwatch_contributor_managed_insight_rules(#41472)aws_cloudwatch_contributor_managed_insight_rule(#41449)aws_qbusiness_application(#35249)ENHANCEMENTS:
video_data_delivery_enabledargument (#41317)password_wowrite-only attribute (#41366)master_password_wowrite-only attribute (#41413)storage_descriptor.additional_locationsargument (#41434)master_password_wowrite-only attribute (#41411)admin_user_password_wowrite-only attribute (#41412)secret_string_wowrite-only attribute (#41371)BUG FIXES:
scaling_configurationis not empty. (#41377)sub_domain(#36961)embedding_data_delivery_enabled,image_data_delivery_enabled, andtext_data_delivery_enabledarguments as optional with default value oftrue(#41317)v5.87.0Compare Source
FEATURES:
aws_cloudwatch_contributor_insight_rule(#41373)ENHANCEMENTS:
export_typeandincremental_export_specificationarguments (#41303)parameters.s3.role_arnargument to allow override an account-wide role for a specific S3 data source (#41284)master_password_wowrite-only attribute (#41314)stream_processor_arnin favor ofarn. (#41271)value_wowrite-only attribute (#40952)service_network_log_typeargument (#41304)BUG FIXES:
on_demand_throughputandglobal_secondary_index.*.on_demand_throughputattributes to resolve read error (#41350)OperationInProgresserrors (#41388)v5.86.1Compare Source
BUG FIXES:
AccessDeniedErrorattempting to list tags (#41295)AccessDeniedErrorattempting to list tags (#41295)sns_topic_nameshows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)rule[*].prefixis an empty string. (#41296)v5.86.0Compare Source
NOTES:
prefix, the Terraform plan will show the removal ofprefixfrom state. This is expected, and should not occur on subsequent plans. (#41159)ENHANCEMENTS:
monitoring_intervalandmonitoring_role_arnattributes (#41002)us-isof-east-1andus-isof-south-1as valid AWS Regions (#41243)security_service_policy_data.policy_option.network_acl_common_policyargument to allow creation of FMS-managed NACL rules (#41219)monitoring_intervalandmonitoring_role_arnarguments (#41002)timeouts. (#41232)BUG FIXES:
tags_allvalue (#41256)instance_lifecycleisspot(#41206)panic: runtime error: invalid memory address or nil pointer dereferencewhen deleting the resource would otherwise return an error (#41260)transition_default_minimum_object_size(#41159)ruleduring import (#41205)v5.85.0Compare Source
NOTES:
FEATURES:
aws_vpc_ipam(#40459)aws_vpc_ipams(#40459)aws_secretsmanager_random_password(#41106)aws_guardduty_member_detector_feature(#35625)aws_route53domains_domain(#37885)aws_timestreamquery_scheduled_query(#41145)aws_vpclattice_resource_configuration(#41019)aws_vpclattice_service_network_resource_association(#41057)ENHANCEMENTS:
arnattribute (#41086)arnattribute (#41087)arnattribute (#41084)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.