d use reusable workflow and use more files

.changelog/25362.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Add `policy_option` attribute for `security_service_policy_data` block
+```

.changelog/26614.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appflow_flow: Fix tasks not updating properly due to empty task being processed
+```

.changelog/30242.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_resourcegroups_group: `resource_query` no longer conflicts with `configuration`
+```
+
+```release-note:bug
+resource/aws_resourcegroups_resource: Fix crash when resource Create fails
+```

.changelog/30817.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ssm_parameter: Add `insecure_value` attribute
+```

.changelog/30916.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket_logging: Retry on empty read of logging config
+```

.changelog/31111.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_wafv2_web_acl: Fixed error handling `response_inspection` parameters
+```

.changelog/31607.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_pipes_pipe: Add `enrichment_parameters` argument
+```
+
+```release-note:enhancement
+resource/aws_pipes_pipe: Add `activemq_broker_parameters`, `dynamodb_stream_parameters`, `kinesis_stream_parameters`, `managed_streaming_kafka_parameters`, `rabbitmq_broker_parameters`, `self_managed_kafka_parameters` and `sqs_queue_parameters` attributes to the `source_parameters` configuration block. NOTE: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing
+```
+
+```release-note:enhancement
+resource/aws_pipes_pipe: Add `batch_job_parameters`, `cloudwatch_logs_parameters`, `ecs_task_parameters`, `eventbridge_event_bus_parameters`, `http_parameters`, `kinesis_stream_parameters`, `lambda_function_parameters`, `redshift_data_parameters`, `sagemaker_pipeline_parameters`, `sqs_queue_parameters` and `step_function_state_machine_parameters` attributes to the `target_parameters` configuration block. NOTE: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing
+```

.changelog/31680.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cleanrooms_collaboration
+```

.changelog/31858.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_instance_connect_endpoint
+```

.changelog/31915.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_secretsmanager_secret_rotation: Fix `InvalidParameterException: You cannot specify both rotation frequency and schedule expression together` errors on resource Update
+```

.changelog/31931.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: The `queues` argument has changed from a set to a list with a maximum of one element.
+```

.changelog/32007.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_config_configuration_recorder: Add `exclusion_by_resource_types` and `recording_strategy` attributes to the `recording_group` configuration block
+```

.changelog/32026.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_sesv2_email_identity
+```
+
+```release-note:new-data-source
+aws_sesv2_email_identity_mail_from_attributes
+```

.changelog/32102.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `log_configuration` configuration block
+```

.changelog/32108.txt

@@ -0,0 +1,11 @@
+```release-note:note
+provider: Updates to Go 1.20, the last release that will run on macOS 10.13 High Sierra or 10.14 Mojave. A future release will update to Go 1.21, and these platforms will no longer be supported.
+```
+
+```release-note:note
+provider: Updates to Go 1.20, the last release that will run on any release of Windows 7, 8, Server 2008 and Server 2012. A future release will update to Go 1.21, and these platforms will no longer be supported.
+```
+
+```release-note:note
+provider: Updates to Go 1.20. The provider will now notice the `trust-ad` option in `/etc/resolv.conf` and, if set, will set the "authentic data" option in outgoing DNS requests in order to better match the behavior of the GNU libc resolver.
+```

.changelog/32148.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_vpc_security_group_egress_rule: `security_group_id` is Required
+```
+
+```release-note:bug
+resource/aws_vpc_security_group_ingress_rule: `security_group_id` is Required
+```

.changelog/32152.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add support for `Pods` and `Tasks` to `action.*.target`
+```

.changelog/32160.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `parameters` attribute to the `target` configuration block
+```

.changelog/32169.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_api_gateway_rest_api: Fix crash when `binary_media_types` is `null`
+```

.changelog/32171.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_storagegateway_smb_file_share: Fix update error when `kms_encrypted` is `true` but `kms_key_arn` is not sent in the request
+```

.changelog/32174.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Mask all sensitive values that appear when `TF_LOG` level is `TRACE`
+```

.changelog/32176.txt

@@ -0,0 +1,15 @@
+```release-note:new-resource
+aws_sfn_alias
+```
+
+```release-note:new-data-source
+aws_sfn_alias
+```
+
+```release-note:new-data-source
+aws_sfn_state_machine_versions
+```
+
+```release-note:enhancement
+resource/aws_sfn_state_machine: Add `description`, `publish`, `revision_id`, `state_machine_version_arn` and `version_description` attributes
+```

.changelog/32196.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route: Fix `reading Route in Route Table (rtb-1234abcd) with destination (1.2.3.4/5): couldn't find resource` errors when reading new resource
+```

.changelog/32200.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_batch_compute_environment: Add `placement_group` attribute to the `compute_resources` configuration block
+```

.changelog/32203.txt

@@ -0,0 +1,15 @@
+```release-note:new-resource
+aws_transfer_profile
+```
+
+```release-note:new-resource
+aws_transfer_certificate
+```
+
+```release-note:new-resource
+aws_transfer_agreement
+```
+
+```release-note:new-resource
+aws_transfer_connector
+```

.changelog/32226.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_opensearchserverless_security_policy
+```

.changelog/32231.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_opensearchserverless_access_policy
+```

.changelog/32247.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_opensearchserverless_collection
+```

.changelog/32276.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_opensearchserverless_vpc_endpoint
+```

.changelog/32278.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_emrserverless_application: Do not recreate the resource if `release_label` changes
+```

.changelog/32283.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_catalog_database: Add `target_database.region` argument
+```

.changelog/32285.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_quicksight_analysis: Correctly expand comparison method
+```

.changelog/32287.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: Fix resource Create returning instances not in the `available` state when `identifier_prefix` is specified
+```

.changelog/32297.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Prevent resource recreation if `tags` or `tags_all` are updated
+```

.changelog/32317.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket: Fix `InvalidArgument: Invalid attribute name specified` errors when listing S3 Bucket objects, caused by an [AWS SDK for Go regression](https://github.com/aws/aws-sdk-go/issues/4897)
+```

.changelog/32321.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_opensearchserverless_security_config
+```

.changelog/32327.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_function: Support `code_signing_config_arn` in the `ap-east-1` AWS Region
+```

.changelog/32329.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_wafregional_web_acl_association: Increase creation timeout value from 2 to 5 minutes to prevent WAFUnavailableEntityException
+```

.changelog/32332.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_crawler: Add `iceberg_target` configuration block
+```

.changelog/32339.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_aws_keyspaces_table: Add `client_side_timestamps` configuration block
+```

.changelog/32342.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_service_discovery_private_dns_namespace: Allow `description` to be updated in-place
+```
+
+```release-note:enhancement
+resource/aws_service_discovery_public_dns_namespace: Allow `description` to be updated in-place
+```

.changelog/32343.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_internetmonitor_monitor: Add `health_events_config` configuration block
+```

.changelog/32345.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_qldb_stream: Add configurable Create and Delete timeouts
+```

.changelog/32352.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Correctly handle `forbidden_account_ids`
+```

.changelog/32354.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_timestreamwrite_table: Add `schema` configuration block
+```

.changelog/32355.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_vpc_endpoint: Fix `InvalidParameter: PrivateDnsOnlyForInboundResolverEndpoint not supported for this service` errors creating S3 _Interface_ VPC endpoints
+```

.changelog/32371.txt

@@ -0,0 +1,15 @@
+```release-note:bug
+resource/aws_kms_external_key: Correctly remove all tags
+```
+
+```release-note:bug
+resource/aws_kms_key: Correctly remove all tags
+```
+
+```release-note:bug
+resource/aws_kms_replica_external_key: Correctly remove all tags
+```
+
+```release-note:bug
+resource/aws_kms_replica_key: Correctly remove all tags
+```

.changelog/32372.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_parameter: Skip Update if only `overwrite` parameter changes
+```

.changelog/32414.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_signer_signing_profile: Update `platform_id` validation.
+```
+
+```release-note:enhancement
+resource/aws_signer_signing_profile: Add `signing_material` attribute.
+```

.changelog/32432.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_pipes_pipe: Fix `Error: setting target_parameters: Invalid address to set` errors when creating pipes with ecs task targets
+```

.changelog/32439.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_config_config_rule: Prevent crash on nil describe output
+```

.changelog/32454.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_mq_broker: default `replication_user` to `false`
+```

.changelog/32462.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_virtual_mfa_device: Add `enable_date` and `user_name` attributes
+```

.changelog/32464.txt

@@ -0,0 +1,35 @@
+```release-note:bug
+resource/aws_quicksight_template: Fix exception thrown when specifying `definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range`
+```
+
+```release-note:bug
+resource/aws_quicksight_template: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility`
+```
+
+```release-note:bug
+resource/aws_quicksight_template: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows`
+```
+
+```release-note:bug
+resource/aws_quicksight_dashboard: Fix exception thrown when specifying `definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range`
+```
+
+```release-note:bug
+resource/aws_quicksight_dashboard: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility`
+```
+
+```release-note:bug
+resource/aws_quicksight_dashboard: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows`
+```
+
+```release-note:bug
+resource/aws_quicksight_analysis: Fix exception thrown when specifying `definition.sheets.visuals.bar_chart_visual.chart_configuration.category_axis.scrollbar_options.visible_range`
+```
+
+```release-note:bug
+resource/aws_quicksight_analysis: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_options.selected_field_options.visibility`
+```
+
+```release-note:bug
+resource/aws_quicksight_analysis: Fix exception thrown when specifying `definition.sheets.visuals.pivot_table_visual.chart_configuration.field_wells.pivot_table_aggregated_field_wells.rows`
+```

.changelog/32477.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_db_instance: Add `max_allocated_storage` attribute
+```

.changelog/32494.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_quicksight_group_membership: Allow non `default` value for namespace
+```

.changelog/32517.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_vpc_endpoint: Add `dns_options.private_dns_only_for_inbound_resolver_endpoint`
+````

.changelog/32520.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_config_config_rule: Prevent crash from unhandled read error
+```

.changelog/32538.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_connect_queue: add delete function
+```

.changelog/32540.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_connect_routing_profile: add delete function
+```

.changelog/32546.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_datasync_agent: Prevent persistent diffs when `private_link_endpoint` is not explicitly configured.
+```

.ci/.golangci2.yml

@@ -38,6 +38,10 @@ issues:
         - staticcheck
       path: internal/service/batch/
       text: "SA1019: apiObject.ImageId is deprecated: This field is deprecated"
+    - linters:
+        - staticcheck
+      path: internal/service/chime/
+      text: "SA1019: conn.\\w+ is deprecated: Replaced by \\w+ in the Amazon Chime SDK Voice Namespace"
     - linters:
         - staticcheck
       path: "internal/service/cloudfront"