Update Terraform aws to v5.69.0 #10
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d36acac
to
57aa552
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
57aa552
to
81abe61
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
81abe61
to
275da68
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
275da68
to
57633aa
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
57633aa
to
2088eee
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
2088eee
to
e453914
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
e453914
to
79dcf64
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
79dcf64
to
9955f06
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9955f06
to
d5dafbc
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
d5dafbc
to
ee5302d
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
ee5302d
to
f778a6a
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
2 times, most recently
from
7f9c9e7
to
da7355c
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
da7355c
to
59dc078
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
59dc078
to
613b582
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
613b582
to
a8825db
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
a8825db
to
9d3f086
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9d3f086
to
5b866bf
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
5b866bf
to
9ac111f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
9ac111f
to
a08d938
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/aws-5.x-lockfile
branch
from
a08d938
to
b847e3f
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.50.0->5.69.0Release Notes
hashicorp/terraform-provider-aws (aws)
v5.69.0Compare Source
NOTES:
(account-id).ddb.(region).amazonaws.cominstead ofdynamodb.(region).amazonaws.com. If your network configuration blocks outgoing traffic to DynamoDB based on DNS names or endpoint URLs, you must adjust your configuration, because the service's DNS name will change. You may instead disable account-based endpoints for DynamoDB by settingaccount_id_endpoint_mode = disabledin a shared config file or setting theAWS_ACCOUNT_ID_ENDPOINT_MODEenvironment variable todisabled(#39505)1.23.1. The issue with AWS Network Firewall dropping TLS handshakeClientHellomessages after the v5.65.0 upgrade to Go1.23.0, temporarily resolved by the v5.67.0 downgrade to Go1.22.7, has been addressed by removing theX25519Kyber768Draft00key exchange mechanism from the HTTP client used to make AWS API calls (#39432)ENHANCEMENTS:
tagsattribute (#39402)security_group_referencing_supportattribute (#34542)security_group_referencing_supportattribute (#34542)failure_codeandfailure_reasonattributes (#38995)guardrail_configurationargument (#39440)tagsargument andtags_allattribute (#39402)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)security_group_referencing_supportargument (#34542)volume_configuration.managed_ebs_volume.tag_specificationsattribute (#38662)display_nameto be updated in-place (#39416)credentials.secret_arnargument (#29034)BUG FIXES:
security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)ap-southeast-5Region (#39389)nameattribute. (#38993)nameattribute. (#38993)ConcurrentModificationExceptions during role creation (#39429)AccessDeniedException: Lambda code scanning is not supported in ...errors (#38254)AccessDeniedExceptionerrors during creation (#38254)nameandvpc_idto ForceNew (#39454)security_group_ids. This requires a call to the EC2DescribeVpcEndpointsAPI (#39454)v5.68.0Compare Source
NOTES:
inline_policyargument is deprecated. Use theaws_iam_role_policyresource instead. If Terraform should exclusively manage all inline policy associations (the current behavior of this argument), use theaws_iam_role_policies_exclusiveresource as well. (#39203)composite_slot_type_settingblock, thesubslotsargument has been renamedsub_slots. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39353)FEATURES:
aws_elasticache_reserved_cache_node_offering(#29832)aws_securityhub_standards_control_associations(#39334)aws_synthetics_runtime_version(#39180)aws_synthetics_runtime_versions(#39180)aws_appsync_source_api_association(#39323)aws_elasticache_reserved_cache_node(#29832)aws_iam_role_policies_exclusive(#39203)aws_pinpointsmsvoicev2_opt_out_list(#25036)aws_pinpointsmsvoicev2_phone_number(#25036)aws_sesv2_account_suppression_attributes(#39325)ENHANCEMENTS:
iam_role_arnargument tos3_actionconfiguration block (#39364)namelength to 255 characters (#39315)BUG FIXES:
assume_role.role_arnto be an empty string when there is a singleassume_roleentry. (#39328)environment_variablesargument (#39397)Managed by DynamoDBencryption setting (#31284)engine_versionmismatch with RabbitMQ 3.13 and ActiveMQ 5.18 and above (#39024)endpoint_management = "CUSTOMER"(#39394)policy(#39322)v5.67.0Compare Source
BREAKING CHANGES:
value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy(#39254)NOTES:
1.22.6. A small number of users have reported failed or hanging network connections using the version of the Terraform AWS provider which was first built with Go1.23.0(v5.65.0). At this point, maintainers have been unable to reproduce failures, but enough distinct users have reported issues that we are going to attempt downgrading to Go1.22.6for the next provider release. We will continue to coordinate with users and AWS in an attempt to identify the root cause, using this upcoming release with a reverted Go build version as a data point. (#39256)value_selection_setting.advanced_recognition_settingblock, theaudio_recognition_settingargument has been renamedaudio_recognition_strategy. See the linked pull request for additional justification on this change. The previous misnaming effectively made this argument unusable, therefore a breaking change in a minor version was deemed acceptable. (#39254)FEATURES:
aws_codebuild_fleet(#39237)aws_cloudformation_stack_instances(#36794)aws_codebuild_fleet(#39237)aws_computeoptimizer_enrollment_status(#35349)aws_computeoptimizer_recommendation_preferences(#35349)aws_costoptimizationhub_enrollment_status(#36440)aws_costoptimizationhub_preferences(#36526)aws_datazone_asset_type(#38812)aws_datazone_environment_profile(#38581)aws_lambda_function_recursion_config(#39153)ENHANCEMENTS:
domainandtagsas Optional. This enables certificates to be matched based on tags (#31453)encryption_typeandkms_key_idattributes (#39212)user_pool_tagsin favor of standardtags. (#39260)assume_rolenow accepts multiple elements. (#39255)cache_configargument (#39215)modeargument (#39206)hsm2m.mediumas a valid value forhsm_type(#39206)fleetattribute inenvironmentconfiguration block (#39237)snowflake_configuration.buffering_internalandsnowflake_configuration.buffering_sizearguments (#39214)READER_PRO,AUTHOR_PRO, andADMIN_PROas valid values for theuser_roleargument (#39220)default_user_settings.domain_settings.docker_settingsconfiguration block (#35416)default_user_settings.studio_web_portal_settings,default_space_settings.jupyter_lab_app_settings,default_space_settings.space_storage_settings,default_space_settings.custom_posix_user_config, anddefault_space_settings.custom_file_system_configconfiguration blocks (#38457)production_variants.managed_instance_scalingandshadow_production_variants.managed_instance_scalingconfiguration blocks (#35479)primary_container.inference_specification_nameandcontainer.inference_specification_namearguments (#35873)primary_container.model_data_source.s3_data_source.model_access_config,primary_container.multi_model_config,container.model_data_source.s3_data_source.model_access_config, and ``container.multi_model_config` configuration blocks (#35873)user_settings.studio_web_portal_settingsconfiguration block (#38567)definitionusing the AWS Step Functions Validation API (#39229)BUG FIXES:
created_atas an RFC3339 formatted timestamp (#24183)created_atas an RFC3339 formatted timestamp (#24183)check_certificate_revovation_statusis ignored due to bad autoflex field mapping (#39211)aggregation_periodnot set. (#39279)permissions.actionsMaxItemsfrom16to20. This fixes a regression introduced in v5.66.0 (#39226)vpc_connection_idregular expression validator. This fixes a regression introduced in v5.66.0 (#39231)default_user_settings.domain_settingsto include missingsecurity_group_idsandr_studio_server_pro_domain_settingsvalues (#35416)suppression_options.suppressed_reasonsto be an empty list ([]) in order to disable the suppression list (#29671)event_destination.matching_event_typesfromTypeListtoTypeSetas order is not significant (#36897)load_balancer_options.subnet_ids(#39196)v5.66.0Compare Source
FEATURES:
aws_glue_registry(#37953)aws_organizations_organizational_unit_descendant_organizational_units(#39120)aws_quicksight_analysis(#31737)aws_datazone_environment(#38811)ENHANCEMENTS:
tagsattribute (#38959)tagsattribute (#39092)api_typeandmerged_api_execution_role_arnarguments (#39159)vector_ingestion_configuration.chunking_configuration.semantic_chunking_configuration,vector_ingestion_configuration.chunking_configuration.hierarchical_chunking_configuration, andvector_ingestion_configuration.parsing_configurationconfiguration blocks (#39138)skip_deletion_protectionattribute (#38811)backup_retention_periodandpreferred_backup_windowattributes (#38452)parameters.databricksargument (#31737)notification_settingsargument (#39108)InServicetimeouts to 60 minutes (#39090)rate_based_statement.limitminimum from100to10(#39107)rate_based_statement.limitminimum from100to10(#39107)BUG FIXES:
segment_actions.via.with_edge_override.use_edgeto be nested set of edges, matching JSON (#39142)segment_actions.via.with_edge_override.use_edge. Usesegment_actions.via.with_edge_override.use_edge_locationinstead (#39142)nullvalue. (#38869)role_arnas Optional (#38900)slot_type_valuesvalidator which limited configurations to 1 element (#39126)theme_arnargument on create and update when configured (#31737)role_arnsas Optional and send an empty list if unconfigured (#39108)run_config.timeout_in_secondsdefault value to allow creation of resources with a frequency less than 14 minutes (#35177)v5.65.0Compare Source
NOTES:
FEATURES:
aws_shield_protection(#37524)aws_glue_catalog_table_optimizer(#38052)ENHANCEMENTS:
ap-southeast-5AWS Region (#39052)ap-southeast-5AWS Region (#39052)ap-southeast-5AWS Region (#39052)ap-southeast-5as a valid AWS Region (#39049)password_policy.password_history_sizeargument (#39043)processargument (#25468)SUCCEEDED_WITH_ISSUESstatus as success when upgrading cluster (#38086)io2as a valid value forebs_config.type(#37740)io2as a valid value forinstance_type_configs.ebs_config.type(#37740)io2as a valid value forinstance_type_configs.ebs_config.type(#37740)job_run_queuing_enabledargument (#39027)kms_key_arnargument (#39055)falseon update ifpolicy_documentis empty (#38675)BUG FIXES:
auto_branch_creation_config(#39041)domain_nameto ForceNew (#38086)instance_countvalue of0on create when configured (#37740)BadRequestException: The request is rejected because an invalid or out-of-range value is specified as an input parametererrors on resource Create (#39084)data_cells_filterpermissions (#39026)neptune_cluster_parameter_group_nameas Computed (#38980)neptune_parameter_group_nameas Computed (#38980)ValidationException: Parameter ARN is not supported for this operationerrors when deleting resources imported by ARN (#39067)v5.64.0Compare Source
ENHANCEMENTS:
dashboard_endpoint_v2,domain_endpoint_v2_hosted_zone_id, andendpoint_v2attributes (#38456)suspended_stateconfiguration block (#38942)restore_source_table_arnattribute (#38953)dashboard_endpoint_v2,domain_endpoint_v2_hosted_zone_id, andendpoint_v2attributes (#38456)BUG FIXES:
idattribute whendeployment_targetsdoes not include organizational unit IDs. (#38969)actionis configured (#38994)enabled_http_endpoint) to be enabled and disabled forprovisionedengine mode and serverlessv2 (#38997)v5.63.1Compare Source
FEATURES:
aws_route53_zones(#17457)aws_ssoadmin_permission_sets(#38741)ENHANCEMENTS:
job_state_time_limit_actionattribute (#38784)ecs_propertiesargument (#37871)job_state_time_limit_actionargument (#38784)BUG FIXES:
idparsing errors (#38924)logical_table_map.data_transforms.project_operation.projected_columnswith null list elements (#38886)reputation_metrics_enabledis set totrue(#38921)v5.63.0Compare Source
FEATURES:
aws_bedrockagent_agent_versions(#38792)aws_bedrock_guardrail(#38757)aws_cloudtrail_organization_delegated_admin_account(#38817)aws_datazone_environment_profile(#35603)aws_datazone_form_type(#38746)aws_datazone_glossary_term(#38706)aws_pinpoint_email_template(#33266)ENHANCEMENTS:
logging_configuration.log_destination_configMaxItemsfrom2to3(#38824)BUG FIXES:
sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)nameandname_prefix(#38194)sdkdiags.AppendErrorffunction calls (#38854)service_registriesitem (#38883)container_definitionsdiffs onhealthCheck's default values (#38872)container_definitions.dockerLabels(#38804)nulls fromcontainer_definitionarray fields (#38870)replicas_per_node_groupif node groups are empty (#38797)sdkdiags.AppendErrorffunction calls (#38854)network_access_controlblock is configured (#38775)vpc_configurationblock is configured (#38775)attribute_payloadblock is configured (#38776)configuration.bgp_configurationson Read (#38798)encryptedon snapshot restore, when enabled (#38828)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)sdkdiags.AppendErrorffunction calls (#38854)v5.62.0Compare Source
FEATURES:
aws_rds_cluster_parameter_group(#38416)aws_secretsmanager_secret_versions(#35411)aws_ebs_snapshot_block_public_access(#38641)aws_rds_integration(#35199)ENHANCEMENTS:
application/x-sql(#38737)application/x-sql(#38737)default_tagsto be set by environment variables (#33339)ignore_tags.keysandignore_tags.key_prefixesto be set by environment variables (#35264)skip_destroyargument (#29663)skip_destroyargument (#29663)secret_arn(#37213)force_deleteargument (#38707)grafana_tokenargument (#38743)target_health_state.unhealthy_draining_intervalargument (#38654)sub_slot_settingattribute (#38698)BUG FIXES:
ROOTas a valid value forprefix(#38685)namemax length validation to 128 (#37539)eks_propertiesfor job updates (#38716)retry_strategyfor job updates (#38716)timeoutfor job updates (#38716)created_dateattribute (#38689)ROOTas a valid value forprefix(#38685)launch_specificationsargument (#38773)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)PreconditionFailedExceptionon delete for resources deleted out-of-band (#38661)$.network-function-groups: null found, array expectederrors when creating resource withcreate_base_policyargument (#38642)revision_idandstate_machine_version_arnas Computed on update ifpublishistrue(#38657)v5.61.0Compare Source
NOTES:
FEATURES:
aws_ecr_repository_creation_template(#38597)aws_chatbot_slack_channel_configuration(#38124)aws_chatbot_teams_channel_configuration(#38630)aws_datazone_glossary(#38602)aws_ecr_repository_creation_template(#38597)aws_timestreaminfluxdb_db_instance(#37963)ENHANCEMENTS:
upgrade_policyattribute (#38573)repository_namevalues. See documentation for details (#38575)enhanced_metrics_configconfiguration block (#38570)upgrade_storage_configargument (#36904)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)upgrade_policyconfiguration block (#38573)log_configuration.include_execution_dataargument (#38569)performance_insights_enabled,performance_insights_kms_key_id, andperformance_insights_retention_periodarguments (#29415)restore_to_point_in_time.source_cluster_resource_idargument (#38540)restore_to_point_in_time.source_cluster_identifieras Optional (#38540)encryption_configurationconfiguration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions Activity resources (#38574)encryption_configurationconfiguration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions State Machine resources (#38574)jsonattribute value (#35950)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)assign_generated_ipv6_cidr_blockandipv6_poolarguments (#27274)ipv6_cidr_blocksizes between/44and/60in increments of /4 (#35614)ipv6_netmask_lengthvalues between44and60in increments of 4 (#35614)tagsto theAuthorizeSecurityGroupEgressEC2 API call instead of making a separateCreateTagscall (#35614)tagsto theAuthorizeSecurityGroupIngressEC2 API call instead of making a separateCreateTagscall (#35614)rule_jsonattribute to allow raw JSON for rules. (#38309)BUG FIXES:
CoreNetworkPolicyExceptionwhen putting policy with single wildcard inwhen_sent_to(#38595)index_namecharacter length validation (#38509)container_definitionsstart with a lowercase letter (#38622)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.