-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Terraform aws to v5.93.0 #11
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/aws-5.x
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
afa6757
to
7f2baf0
Compare
7f2baf0
to
c015532
Compare
2ca2c41
to
1511b98
Compare
1511b98
to
b11029a
Compare
b11029a
to
1b7426e
Compare
1b7426e
to
4bbafb5
Compare
e15b6f8
to
a582e36
Compare
a582e36
to
8a4b9fc
Compare
8a4b9fc
to
2ca7360
Compare
2ca7360
to
56430a2
Compare
56430a2
to
b10f410
Compare
b10f410
to
168990e
Compare
a818465
to
afa9051
Compare
afa9051
to
a94170f
Compare
a94170f
to
d410ec3
Compare
d410ec3
to
baf2113
Compare
dbbfaa7
to
c66540e
Compare
c66540e
to
16504f5
Compare
16504f5
to
83ca624
Compare
83ca624
to
4f12acd
Compare
4f12acd
to
6c34317
Compare
6c34317
to
bba8456
Compare
bba8456
to
255f026
Compare
255f026
to
219459f
Compare
219459f
to
4a5f413
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.31.0
->5.93.0
Release Notes
hashicorp/terraform-provider-aws (aws)
v5.93.0
Compare Source
FEATURES:
aws_api_gateway_rest_api_put
(#41375)ENHANCEMENTS:
custom_role_arn
andupstream_repository_prefix
attributes (#41933)trigger_all
attribute (#42008)trigger
argument now properly removes custom trigger definitions (#42008)username_configuration
andusername_configuration.case_sensitive
arguments as optional and computed. This will future proof the provider against upstream API changes which may return a default value for the block when omitted during create operations. (#35439)task_mode
argument (#39979)custom_role_arn
andupstream_repository_prefix
arguments (#41933)ecr_repository_prefix
to support a value of"ROOT"
(#41933)runtime_environment
to be updated in-place (#41935)cidr_options
,load_balancer.port_range
,network_interface_options.port_range
, andrds_options
arguments (#41957)application_domain
,domain_certificate_arn
andendpoint_domain_prefix
as Optional (#41957)cidr
andrds
as valid values forendpoint_type
(#41957)cidr_endpoint_custom_subdomain
argument andname_servers
attribute (#41957)native_application_oidc_options
andsse_specification
arguments (#41957)BUG FIXES:
InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 days
errors when enablingdatabase_insights_mode
on existing instances (#41960)InvalidReplicationGroupState
exceptions during tagging operations (#41954)domain_name
to Computed (#41985)resource_data.table_wildcard
attribute (#41939)v5.92.0
Compare Source
NOTES:
configuration.s3_configuration
argument is deprecated. Useconfiguration.template_configuration
instead, which supports the upgraded Amazon S3 connector. Amazon has ended support for the older architecture as of June 2024, and resources created with this argument cannot be edited or updated. See the Amazon Kendra documentation for additional details. (#35437)configuration.web_crawler_configuration
argument is deprecated. Useconfiguration.template_configuration
instead, which supports the Amazon Kendra Web Crawler connector v2.0. See the Amazon Kendra documentation for additional details. (#35437)FEATURES:
aws_api_gateway_api_keys
(#39335)aws_eks_cluster_versions
(#40741)aws_identitystore_group_memberships
(#31589)aws_identitystore_users
(#31688)aws_athena_capacity_reservation
(#41858)ENHANCEMENTS:
identity_info.secondary_email
attribute (#41001)database_insights_mode
attribute (#41607)create_time
attribute (#41839)ipam_pools
attribute (#41822)aws-marketplace
as a valid account ID in ARNs (#41867)extension_arn
andresource_arn
(#41907)identity_info.secondary_email
attribute (#41001)database_insights_mode
argument (#41607)create_time
attribute (#41839)configuration.template_configuration
argument (#35437)ipam_pools
configuration block (#41822)BUG FIXES:
vpc_endpoint_ids
(#41836)instruction
validator to consider multi-byte chars so not to artificially limit instruction length (#41921)compute_config.node_role_arn
to update in place when previously unset (#41925)performance_insights_enabled
takes effect when creating a cluster that is a member of a global cluster (#41737)InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 days
errors when enablingdatabase_insights_mode
on existing clusters (#41737)secondary_availability_zone
attribute when changingdeployment_type
(#41849)v5.91.0
Compare Source
NOTES:
FEATURES:
aws_network_interface_permission
(#40797)aws_route53_records_exclusive
(#41741)ENHANCEMENTS:
secondary_sources.auth
configuration block (#40191)msk_source_configuration.read_from_timestamp
argument (#41794)network_type
andport
attributes. The following can now be updated in place:allocated_storage
,db_instance_type
,db_storage_type
anddeployment_type
(#40661)ipv4_ipam_pool_id
andipv4_netmask_length
attributes (#41779)ipv6_ipam_pool_id
andipv6_netmask_length
attributes (#41779)name_prefix
argument and plan-time validation ofname
(#40889)name_prefix
argument and plan-time validation ofname
(#40889)name_prefix
argument (#40889)rule.challenge_config
argument (#40123)BUG FIXES:
storage_mode
updates are actually applied to the cluster (#41773)v5.90.1
Compare Source
NOTES:
godebug tlskyber=0
directive ingo.mod
. This disables the experimental the post-quantum key exchange mechanismX25519Kyber768Draft00
, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in v5.90.0 (#41740)FEATURES:
aws_datazone_domain
(#41480)ENHANCEMENTS:
stage.before_entry
,stage.on_success
andstage.on_failure
configuration blocks (#41663)connector_configuration
to be updated in-place (#41685)ja3_fingerprint
andja4_fingerprint
tocustom_key
configuration blocks (#41719)ja4_fingerprint
tofield_to_match
configuration blocks (#41719)ja3_fingerprint
andja4_fingerprint
tocustom_key
configuration blocks (#41719)ja4_fingerprint
tofield_to_match
configuration blocks (#41719)v5.90.0
Compare Source
BREAKING CHANGES:
rule.noncurrent_version_expiration.noncurrent_days
andrule.noncurrent_version_transition.noncurrent_days
are Required (#40796)NOTES:
elastic_gpu_specifications
andelastic_inference_accelerator
are deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)X25519Kyber768Draft00
. Previously, in environments using AWS Network Firewall, the Provider would hang due to a handshake issue between Go 1.23 and Network Firewall, which supported Suricata 6.0.9. We had disabled the post-quantum key exchange to resolve the issue. Since November 2024, AWS Network Firewall has upgraded to Suricata 7.0, which no longer has this issue. However, if you use AWS Network Firewall, we’d appreciate your help in identifying any remaining issues related to this change. (#41655)overrides.inference_accelerator_overrides
is deprecated. AWS no longer provides the Elastic Inference service. (#41676)elastic_gpu_specifications
andelastic_inference_accelerator
are deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)accelerator_types
is deprecated and will be removed in a future version. Useinstance_type
instead. (#41673)FEATURES:
aws_dataexchange_event_action
(#40552)aws_lakeformation_opt_in
(#41611)ENHANCEMENTS:
arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)state
attribute (#41575)cluster_config.node_options
attribute (#40181)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)arn
attribute (#41660)disconnect_on_session_timeout
attribute (#41621)max_webservers
andmin_webservers
arguments from2
to1
in support of Amazon MWAA micro environments (#40244)cluster_config.node_options
configuration block in support of dedicated coordinator nodes (#40181)vpc_options.vpc_endpoint_management
argument (#38001)arn
attribute (#41645)tags
argument andtags_all
attribute (#41645)arn
attribute (#41660)arn
attribute (#41660)rule.filter
(#41662)rule.noncurrent_version_expiration.noncurrent_days
andrule.noncurrent_version_transition.noncurrent_days
are Required. Technically this is a breaking change, but failure to configure this attribute would have led toInvalidArgument
orMalformedXML
errors (#40796)arn
attribute (#41660)arn
attribute (#41660)BUG FIXES:
exclude_characters
fromBool
toString
(#41546)vpc_lattice_configurations
blocks (#41594)rule
configuration fromfilter.prefix
tofilter.and.prefix
(#41662)rule
configuration fromprefix
tofilter.prefix
orfilter.and.prefix
(#41662)ConflictException
errors on delete (#41594)v5.89.0
Compare Source
FEATURES:
aws_macie2_organization_configuration
(#41475)aws_neptunegraph_graph
(#41216)aws_quicksight_role_membership
(#41589)aws_rds_shard_group
(#41254)aws_xray_resource_policy
(#41517)ENHANCEMENTS:
configuration
argument (#41524)cluster_scalability_type
attribute (#41254)database_insights_mode
attribute (#41254)application/yaml
to the list ofContent-Type
s that return a body (#41443)application/yaml
to the list ofContent-Type
s that return a body (#41443)checksum_crc64nvme
attribute (#41015)target_tracking_configuration.customized_metric_specification.period
argument to support high-resolution metrics (#41385)RequiredWith
validationpassword_wo
andpassword_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)RequiredWith
validationmaster_password_wo
andmaster_password_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)25Gbps
and400Gbps
as supportedbandwidth
values (#41547)25Gbps
as a supportedbandwidth
value (#41547)400Gbps
as a supportedconnections_bandwidth
value (#41547)network_interfaces.ena_srd_specification
configuration block (#41367)enable_zonal_shift
support for Application Load Balancers (#41335)tags
to be updated in-place (#41266)tags
to be updated in-place (#41266)tags
to be updated in-place (#41266)tags
to be updated in-place (#41266)secondary_private_ip_address_count
tosecondary_private_ip_addresses
for private NAT Gateways (#41403)RequiredWith
validationmaster_password_wo
andmaster_password_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)cluster_scalability_type
argument (#41254)database_insights_mode
argument (#41254)""
as a valid value forengine_mode
(#41254)iam-db-auth-error
as a valid value forenabled_cloudwatch_logs_exports
(#41408)RequiredWith
validationmaster_password_wo
andmaster_password_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)RequiredWith
validationadmin_user_password_wo
andadmin_user_password_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)data_redundancy
isSingleLocalZone
iflocation.type
isLocalZone
(#40944)checksum_crc64nvme
attribute (#41015)checksum_crc64nvme
attribute (#41015)RequiredWith
validationsecret_string_wo
andsecret_string_wo_version
. RemovePreferWriteOnlyAttribute
validation (#41562)PreferWriteOnlyAttribute
validation (#41562)BUG FIXES:
s3_delivery_configuration.suffix_path
(#41497)spot_options.max_total_price
,spot_options.min_target_capacity
,spot_options.single_instance_type
, andspot_options.single_availability_zone
arguments (#41272)routing_http_response_server_enabled
,routing_http_response_strict_transport_security_header_value
,routing_http_response_access_control_allow_origin_header_value
,routing_http_response_access_control_allow_methods_header_value
,routing_http_response_access_control_allow_headers_header_value
,routing_http_response_access_control_allow_credentials_header_value
,routing_http_response_access_control_expose_headers_header_value
,routing_http_response_access_control_max_age_header_value
,routing_http_response_content_security_policy_header_value
,routing_http_response_x_content_type_options_header_value
,routing_http_response_x_frame_options_header_value
,routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name
,routing_http_request_x_amzn_mtls_clientcert_issuer_header_name
,routing_http_request_x_amzn_mtls_clientcert_subject_header_name
,routing_http_request_x_amzn_mtls_clientcert_validity_header_name
,routing_http_request_x_amzn_mtls_clientcert_leaf_header_name
,routing_http_request_x_amzn_mtls_clientcert_header_name
,routing_http_request_x_amzn_tls_version_header_name
, androuting_http_request_x_amzn_tls_cipher_suite_header_name
are updated iftcp_idle_timeout_seconds
does not change (#41299)status
andtags
can be updated in-place (#41266)secondary_allocation_ids
to be updated in-place (#41403)master_username
validation (#41556)InvalidRequest
error whenrule.and.object_size_less_than
not set. (#41542)v5.88.0
Compare Source
NOTES:
rule.expiration.expired_object_delete_marker
is set with eitherrule.expiration.date
orrule.expiration.days
. While historically the provider allowed this invalid configuration, the migration of this resource to the Terraform Plugin Framework inv5.86.0
resulted in this misconfiguration surfacing as a hardinconsistent result after apply
error. This diagnostic aims to direct users how to resolve the issue at plan time. See this issue comment for additional context. (#41462)FEATURES:
aws_cloudwatch_contributor_managed_insight_rules
(#41472)aws_cloudwatch_contributor_managed_insight_rule
(#41449)aws_qbusiness_application
(#35249)ENHANCEMENTS:
video_data_delivery_enabled
argument (#41317)password_wo
write-only attribute (#41366)master_password_wo
write-only attribute (#41413)storage_descriptor.additional_locations
argument (#41434)master_password_wo
write-only attribute (#41411)admin_user_password_wo
write-only attribute (#41412)secret_string_wo
write-only attribute (#41371)BUG FIXES:
scaling_configuration
is not empty. (#41377)sub_domain
(#36961)embedding_data_delivery_enabled
,image_data_delivery_enabled
, andtext_data_delivery_enabled
arguments as optional with default value oftrue
(#41317)v5.87.0
Compare Source
FEATURES:
aws_cloudwatch_contributor_insight_rule
(#41373)ENHANCEMENTS:
export_type
andincremental_export_specification
arguments (#41303)parameters.s3.role_arn
argument to allow override an account-wide role for a specific S3 data source (#41284)master_password_wo
write-only attribute (#41314)stream_processor_arn
in favor ofarn
. (#41271)value_wo
write-only attribute (#40952)service_network_log_type
argument (#41304)BUG FIXES:
on_demand_throughput
andglobal_secondary_index.*.on_demand_throughput
attributes to resolve read error (#41350)OperationInProgress
errors (#41388)v5.86.1
Compare Source
BUG FIXES:
AccessDeniedError
attempting to list tags (#41295)AccessDeniedError
attempting to list tags (#41295)sns_topic_name
shows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)rule[*].prefix
is an empty string. (#41296)v5.86.0
Compare Source
NOTES:
prefix
, the Terraform plan will show the removal ofprefix
from state. This is expected, and should not occur on subsequent plans. (#41159)ENHANCEMENTS:
monitoring_interval
andmonitoring_role_arn
attributes (#41002)us-isof-east-1
andus-isof-south-1
as valid AWS Regions (#41243)security_service_policy_data.policy_option.network_acl_common_policy
argument to allow creation of FMS-managed NACL rules (#41219)monitoring_interval
andmonitoring_role_arn
arguments (#41002)timeouts
. (#41232)BUG FIXES:
tags_all
value (#41256)instance_lifecycle
isspot
(#41206)panic: runtime error: invalid memory address or nil pointer dereference
when deleting the resource would otherwise return an error (#41260)transition_default_minimum_object_size
(#41159)rule
during import (#41205)v5.85.0
Compare Source
NOTES:
FEATURES:
aws_vpc_ipam
(#40459)aws_vpc_ipams
(#40459)aws_secretsmanager_random_password
(#41106)aws_guardduty_member_detector_feature
(#35625)aws_route53domains_domain
(#37885)aws_timestreamquery_scheduled_query
(#41145)aws_vpclattice_resource_configuration
(#41019)aws_vpclattice_service_network_resource_association
(#41057)ENHANCEMENTS:
arn
attribute (#41086)arn
attribute (#41087)arn
attribute (#41084)network_interfaces.connection_tracking_specification
attribute (#41184)connector_profile_config.connector_profile_properties.salesforce.use_privatelink_for_metadata_and_authorization
argument (#41175)target_tracking_configuration.customized_metric_specification.metrics.metric_stat.period
argument to support high-resolution metrics (#41066)data_source_configuration.confluence_configuration
,data_source_configuration.salesforce_configuration
,data_source_configuration.share_point_configuration
, anddata_source_configuration.web_configuration
arguments (#40711)knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration
andknowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration
arguments (#40737)sns_topic_arn
attribute (#41168)suspend
argument (#40607)invocation_connectivity_parameters
argument (#41144)arn
attribute (#41087)arn
attribute (#41084)enable_fault_injection
argument (#41078)network_interfaces.connection_tracking_specification
argument (#41184)concurrent_jobs
argument (#41012)create
timeout (#40972)orchestration_sending_role_arn
argument (#41043)kms_key_identifier
argument (#41082)instance
as a valid value forenabled_cloudwatch_logs_exports
(#41111)tags
argument andtags_all
attribute (#41192)resource_configuration_arn
andservice_network_arn
arguments to support creating VPC Endpoints of typeResource
andServiceNetwork
(#41116)BUG FIXES:
created_date
andlast_modified_date
attributes (#41105)sort_ascending
to sort in ascending order (#40529)role_arn
argument (#41072)Provider produced inconsistent result after apply
errors fors3_delivery_configuration.enable_hive_compatible_path
(#41122)field_delimiter
as Computed (#41122)provider_name
to count UTF-8 characters properly (#41187)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.