Update Terraform aws to v5.98.0 #181
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9e2a174 to
1e1b29e
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
1e1b29e to
4abaa25
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
4abaa25 to
9e91bf8
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9e91bf8 to
1fbb8b4
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
1fbb8b4 to
444c4da
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
444c4da to
7fadb39
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
7fadb39 to
3c0d7df
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
3c0d7df to
50e44ab
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
50e44ab to
ff907ff
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
3 times, most recently
from
a432f96 to
de36880
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
de36880 to
5f75460
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9126a29 to
d33db10
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d33db10 to
49c9c16
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
49c9c16 to
5c911b8
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
5c911b8 to
eefe32c
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
eefe32c to
5e164f0
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
518c579 to
4dcd659
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
4dcd659 to
250e66e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
250e66e to
3bfa258
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
3bfa258 to
0ce04da
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
0ce04da to
93a0297
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
93a0297 to
bb0ab86
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
bb0ab86 to
926232c
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
926232c to
b357541
Compare
renovate
bot
changed the title
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.68.0->5.98.05.94.1->5.98.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
hashicorp/terraform-provider-aws (aws)
v5.98.0Compare Source
FEATURES:
aws_account_primary_contact(#42526)aws_dynamodb_tables(#42339)aws_bedrockagent_prompt(#42211)aws_cloudfrontkeyvaluestore_keys_exclusive(#42246)aws_dataexchange_revision_assets(#42272)aws_inspector2_filter(#42374)aws_wafv2_api_key(#42525)ENHANCEMENTS:
dead_letter_configattribute (#42471)kms_key_identifierattribute (#42385)refresh_token_rotationattribute (#42430)user_pool_add_onsattribute (#42470)point_in_time_recovery.recovery_period_in_daysattribute (#41484)client_route_enforcement_optionsattribute (#42424)distribution.ssm_parameter_configurationattribute (#42604)track_nameattribute (#42451)active_directory_config,user_identity_type,workspace_directory_description,workspace_directory_name, andworkspace_typeattributes (#42330)destination_flow_config.destination_connector_properties.salesforce.data_transfer_apiargument (#42479)capacity_reservation_specificationargument (#42380)prepared_atattribute. (#42586)instructionmax length for validation to 20000 (#42596)dead_letter_configargument (#42471)kms_key_identifierargument (#42385)refresh_token_rotationargument (#42430)refresh_token_rotationargument (#42430)user_pool_add_ons.advanced_security_additional_flowsargument (#42470)manage_master_user_passwordargument andmaster_user_secretattribute (#42563)point_in_time_recovery.recovery_period_in_daysargument (#41484)client_route_enforcement_optionsargument (#42424)defaultLogDriverModevalue inNameargument (#42418)distribution.ssm_parameter_configurationargument (#42604)application_protocolandauthentication_typearguments (#42534)bootstrap_brokers_sasl_iamattribute. This functionality requires thekafka:GetBootstrapBrokersIAM permission (#42148)track_nameargument (#42451)domain_listargument (#42456)domainas Optional (#42456)encryption_configurationargument. This functionality requires thes3tables:GetTableEncryptionIAM permission (#42356)encryption_configurationargument. This functionality requires thes3tables:GetTableBucketEncryptionIAM permission (#42356)NO_REGIONSas a valid value forlinking_mode(#42574)fifo_throughput_scopeargument (#42508)uri_fragmenttofield_to_matchconfiguration blocks (#42407)data_protection_configargument (#42404)uri_fragmenttofield_to_matchconfiguration blocks (#42407)active_directory_config,user_identity_type,workspace_directory_description,workspace_directory_name, andworkspace_typearguments in support of WorkSpaces Pools (#42330)directory_idas Optional (#42330)BUG FIXES:
ValidationException: The provided MLflow version is not supportederrors (#42435)firewall_policy.policy_variablesconfiguration block (#42473)routing_configurationso we only send it on update when explicility configured. This allows updates to aliases to create new versions. (#42603)20as a valid value formetric_query.metric.period,metric_query.period, andperiod(#42390)ResourceNotFoundexceptions during delete (#42494)parametersblock removal (#42494)filter_at_source.source_addressis unspecified. (#42369)InvalidNetworkInterface.InUseerrors on Create (#42623)false,0or"") for unconfigured listener attributes on Create (#41846)InvalidParameterValue: collation_server '..' is not valid for character_set '...'errors on Create (#42559)v5.97.0Compare Source
FEATURES:
aws_ec2_default_credit_specification(#42345)ENHANCEMENTS:
athena_propertiesattribute (#42262)placementattribute (#42347)enabled_analysis_typesattribute (#42160)certificate_based_auth_propertiesattribute (#42269)configuration.unused_access.analysis_ruleargument (#42332)ManagedResourcestoaction.*.target(#42376)athena_propertiesargument and allowDYNAMODBconnection type. (#42262)DYNAMODBas a valid value forconnection_type(#42262)placementargument (#42347)enabled_analysis_typesargument (#42160)certificate_based_auth_propertiesconfiguration block (#42269)BUG FIXES:
listener_identifierto ARN. (#42215)service_identifierto ARN. (#42215)match.http_match. (#42215)action.fixed_responseoraction.forward. (#42215)v5.96.0Compare Source
FEATURES:
aws_fis_experiment_templates(#37060)aws_vpc_endpoint_associations(#41918)ENHANCEMENTS:
endpoint_configuration.ip_address_typeattribute (#42146)endpoint_configuration.ip_address_typeattribute (#42146)ip_address_typeattribute (#42145)kinesis_settings.use_large_integer_valueattribute (#42300)arnattribute (#42344)tagsattribute (#42344)endpoint_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42146)endpoint_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42146)ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42145)domain_name_configuration.ip_address_typeargument to support dual-stack (IPv4 and IPv6) endpoints (#42145)kinesis_settings.use_large_integer_valueargument (#42300)experiment_report_configurationargument (#41120)BUG FIXES:
malformed versionerror when parsing 7.x redis engine versions (#42346)ConcurrentModificationExceptions during user creation (#42081)InvalidParameterValue: SecondsUntilAutoPause can only be specified when minimum capacity is 0errors when removingserverlessv2_scaling_configuration.seconds_until_auto_pause(#41180)v5.95.0Compare Source
NOTES:
invoke_urlandexecution_arnare deprecated. Use theinvoke_urlandexecution_arnattributes of theaws_api_gateway_stageresource instead. (#42244)FEATURES:
aws_redshift_integration(#42105)ENHANCEMENTS:
filter_at_destinationandfilter_at_sourceattributes (#42214)compute_role_arnargument (#41650)manual_creationargument (#40155)managed_login_versionargument (#40855)filter_at_destinationandfilter_at_sourceconfiguration blocks (#42214)force_update_versionargument (#42134)alias,destination,role_configuration, andscrape_configurationto be updated in-place (#42109)price_performance_targetargument (#40946)horovod,job_type,ml_framework,processor,programming_lang,release_notes, andvendor_guidancearguments (#42143)tagsargument andtags_allattribute (#42141)TransferSecurityPolicy-2025-03,TransferSecurityPolicy-FIPS-2025-03, andTransferSecurityPolicy-SshAuditCompliant-2025-02as valid values forsecurity_policy_name(#42164)BUG FIXES:
engineis changed fromredistovalkey(#42208)panic: runtime error: invalid memory address or nil pointer dereferencewhen noXksProxyConfigurationis returned (#42241)rulefrom top of list (#42228)rule.filter.and.tags(#42041)default_user_settings.custom_file_system_configanddefault_space_settings.custom_file_system_configto be removed on Update (#42144)user_settings.custom_file_system_configto be removed on Update (#42144)v5.94.1Compare Source
BUG FIXES:
AuthorizationErrorexceptions forListSubscriptionByTopicoperations. This fixes a regression introduced inv5.94.0. (#42117)v5.94.0Compare Source
NOTES:
overwriteargument is no longer deprecated (#42030)ENHANCEMENTS:
last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)last_launched_timeattribute (#42049)source_control_detailsargument (#42046)ruby3.4runtimevalue (#42052)ruby3.4compatible_runtimesvalue (#42052)role_configurationargument (#42039)rule.expirationare set (#42036)rule.prefixnorrule.filteris set (#42036)rule.transition.datenorrule.transition.daysis set and error if both are set (#42036)BUG FIXES:
CFNRegistryException: Version '...' is the default version and cannot be deregisterederrors when deregistering an extension and thecreate_before_destroymeta-argument istrue(#38855)volume_configurationandservice_connect_configurationsvalues from state read/refresh (#41998)service_connect_configuration.service.discovery_nameandservice_connect_configuration.service.client_alias.dns_nameas Computed (#41998)Provider produced inconsistent final planerrors whenconfiguration_info.revisionis unknown (#42037)refresh_propertiesis not configured (#42076)rule.filter(#42036)waiting for SQS Queue... attributes create: timeout while waitingerrors whensqs_managed_sse_enabled = falseor omitted andkms_master_key_idis not set butkms_data_key_reuse_period_secondsis set to a non-default value. (#42062)workspace_properties.running_mode_auto_stop_timeout_in_minuteswhen modified (#40953)v5.93.0Compare Source
FEATURES:
aws_api_gateway_rest_api_put(#41375)ENHANCEMENTS:
custom_role_arnandupstream_repository_prefixattributes (#41933)memory_configurationconfiguration block (#39970)trigger_allattribute (#42008)triggerargument now properly removes custom trigger definitions (#42008)username_configurationandusername_configuration.case_sensitivearguments as optional and computed. This will future proof the provider against upstream API changes which may return a default value for the block when omitted during create operations. (#35439)task_modeargument (#39979)custom_role_arnandupstream_repository_prefixarguments (#41933)ecr_repository_prefixto support a value of"ROOT"(#41933)runtime_environmentto be updated in-place (#41935)cidr_options,load_balancer.port_range,network_interface_options.port_range, andrds_optionsarguments (#41957)application_domain,domain_certificate_arnandendpoint_domain_prefixas Optional (#41957)cidrandrdsas valid values forendpoint_type(#41957)cidr_endpoint_custom_subdomainargument andname_serversattribute (#41957)native_application_oidc_optionsandsse_specificationarguments (#41957)BUG FIXES:
InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing instances (#41960)InvalidReplicationGroupStateexceptions during tagging operations (#41954)domain_nameto Computed (#41985)resource_data.table_wildcardattribute (#41939)v5.92.0Compare Source
NOTES:
configuration.s3_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the upgraded Amazon S3 connector. Amazon has ended support for the older architecture as of June 2024, and resources created with this argument cannot be edited or updated. See the Amazon Kendra documentation for additional details. (#35437)configuration.web_crawler_configurationargument is deprecated. Useconfiguration.template_configurationinstead, which supports the Amazon Kendra Web Crawler connector v2.0. See the Amazon Kendra documentation for additional details. (#35437)FEATURES:
aws_api_gateway_api_keys(#39335)aws_eks_cluster_versions(#40741)aws_identitystore_group_memberships(#31589)aws_identitystore_users(#31688)aws_athena_capacity_reservation(#41858)ENHANCEMENTS:
identity_info.secondary_emailattribute (#41001)database_insights_modeattribute (#41607)create_timeattribute (#41839)ipam_poolsattribute (#41822)aws-marketplaceas a valid account ID in ARNs (#41867)extension_arnandresource_arn(#41907)identity_info.secondary_emailattribute (#41001)database_insights_modeargument (#41607)create_timeattribute (#41839)configuration.template_configurationargument (#35437)ipam_poolsconfiguration block (#41822)BUG FIXES:
vpc_endpoint_ids(#41836)instructionvalidator to consider multi-byte chars so not to artificially limit instruction length (#41921)compute_config.node_role_arnto update in place when previously unset (#41925)performance_insights_enabledtakes effect when creating a cluster that is a member of a global cluster (#41737)InvalidParameterCombination: To enable the Advanced mode of Database Insights, modify your cluster to enable Performance Insights and set the retention period for Performance Insights to at least 465 dayserrors when enablingdatabase_insights_modeon existing clusters (#41737)secondary_availability_zoneattribute when changingdeployment_type(#41849)v5.91.0Compare Source
NOTES:
FEATURES:
aws_network_interface_permission(#40797)aws_route53_records_exclusive(#41741)ENHANCEMENTS:
secondary_sources.authconfiguration block (#40191)msk_source_configuration.read_from_timestampargument (#41794)network_typeandportattributes. The following can now be updated in place:allocated_storage,db_instance_type,db_storage_typeanddeployment_type(#40661)ipv4_ipam_pool_idandipv4_netmask_lengthattributes (#41779)ipv6_ipam_pool_idandipv6_netmask_lengthattributes (#41779)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument and plan-time validation ofname(#40889)name_prefixargument (#40889)rule.challenge_configargument (#40123)BUG FIXES:
storage_modeupdates are actually applied to the cluster (#41773)v5.90.1Compare Source
NOTES:
godebug tlskyber=0directive ingo.mod. This disables the experimental the post-quantum key exchange mechanismX25519Kyber768Draft00, fixing failed or hanging network connections to various AWS services. This fixes a regression introduced in v5.90.0 (#41740)FEATURES:
aws_datazone_domain(#41480)ENHANCEMENTS:
stage.before_entry,stage.on_successandstage.on_failureconfiguration blocks (#41663)connector_configurationto be updated in-place (#41685)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)ja3_fingerprintandja4_fingerprinttocustom_keyconfiguration blocks (#41719)ja4_fingerprinttofield_to_matchconfiguration blocks (#41719)v5.90.0Compare Source
BREAKING CHANGES:
rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required (#40796)NOTES:
elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)X25519Kyber768Draft00. Previously, in environments using AWS Network Firewall, the Provider would hang due to a handshake issue between Go 1.23 and Network Firewall, which supported Suricata 6.0.9. We had disabled the post-quantum key exchange to resolve the issue. Since November 2024, AWS Network Firewall has upgraded to Suricata 7.0, which no longer has this issue. However, if you use AWS Network Firewall, we’d appreciate your help in identifying any remaining issues related to this change. (#41655)overrides.inference_accelerator_overridesis deprecated. AWS no longer provides the Elastic Inference service. (#41676)elastic_gpu_specificationsandelastic_inference_acceleratorare deprecated. AWS no longer supports Elastic Graphics or Elastic Inference. (#41677)accelerator_typesis deprecated and will be removed in a future version. Useinstance_typeinstead. (#41673)FEATURES:
aws_dataexchange_event_action(#40552)aws_lakeformation_opt_in(#41611)ENHANCEMENTS:
arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)stateattribute (#41575)cluster_config.node_optionsattribute (#40181)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)arnattribute (#41660)disconnect_on_session_timeoutattribute (#41621)max_webserversandmin_webserversarguments from2to1in support of Amazon MWAA micro environments (#40244)cluster_config.node_optionsconfiguration block in support of dedicated coordinator nodes (#40181)vpc_options.vpc_endpoint_managementargument (#38001)arnattribute (#41645)tagsargument andtags_allattribute (#41645)arnattribute (#41660)arnattribute (#41660)rule.filter(#41662)rule.noncurrent_version_expiration.noncurrent_daysandrule.noncurrent_version_transition.noncurrent_daysare Required. Technically this is a breaking change, but failure to configure this attribute would have led toInvalidArgumentorMalformedXMLerrors (#40796)arnattribute (#41660)arnattribute (#41660)BUG FIXES:
exclude_charactersfromBooltoString(#41546)vpc_lattice_configurationsblocks (#41594)ruleconfiguration fromfilter.prefixtofilter.and.prefix(#41662)ruleconfiguration fromprefixtofilter.prefixorfilter.and.prefix(#41662)ConflictExceptionerrors on delete (#41594)v5.89.0Compare Source
FEATURES:
aws_macie2_organization_configuration(#41475)aws_neptunegraph_graph(#41216)aws_quicksight_role_membership([#4Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.