Skip to content

Update Terraform aws to v5.100.0#90

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/aws-5.x
Open

Update Terraform aws to v5.100.0#90
renovate[bot] wants to merge 1 commit intomainfrom
renovate/aws-5.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 17, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider minor 5.94.1 → 5.100.0

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.100.0

Compare Source

NOTES:

  • resource/aws_route53_vpc_association_authorization: Because we cannot easily replicate the highly concurrent environments in which these errors have been observed, this fix is best effort and we ask for community help in verifying the reported issues are resolved by this change (#​42948)

FEATURES:

  • New Resource: aws_dsql_cluster (#​41868)
  • New Resource: aws_dsql_cluster_peering (#​41868)
  • New Resource: aws_prometheus_workspace_configuration (#​42478)
  • New Resource: aws_s3control_directory_bucket_access_point_scope (#​42338)
  • New Resource: aws_vpc_route_server (#​42392)
  • New Resource: aws_vpc_route_server_endpoint (#​42392)
  • New Resource: aws_vpc_route_server_peer (#​42392)
  • New Resource: aws_vpc_route_server_propagation (#​42392)
  • New Resource: aws_vpc_route_server_vpc_association (#​42392)
  • New Resource: aws_workspacesweb_data_protection_settings (#​42852)
  • New Resource: aws_workspacesweb_ip_access_settings (#​42863)
  • New Resource: aws_workspacesweb_user_access_logging_settings (#​42868)

ENHANCEMENTS:

  • data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
  • data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-east-2 AWS Region (#​42915)
  • data-source/aws_neptune_engine_version: Add several arguments and attributes to support dynamic selection of versions including latest, has_major_target, preferred_major_targets, and preferred_upgrade_targets (#​42854)
  • data-source/aws_s3_bucket: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
  • provider: Support ap-east-2 as a valid AWS Region (#​42906)
  • resource/aws_fsx_lustre_file_system: Add data_read_cache_configuration and throughput_capacity arguments in support of the Intelligent-Tiering storage class (#​42839)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add two_way_channel_role argument (#​42950)
  • resource/aws_route53_vpc_association_authorization: Add configurable timeouts for create, read, and delete (#​42948)
  • resource/aws_s3_access_point: Add support for S3 Directory Buckets (#​42338)
  • resource/aws_s3control_access_point_policy: Add support for S3 Directory Buckets (#​42338)
  • resource/aws_vpn_connection: Add preshared_key_storage argument and preshared_key_arn attribute (#​42819)
  • resource/aws_wafv2_rule_group: Add statement.asn_match_statement configuration block (#​42965)
  • resource/aws_wafv2_web_acl: Add statement.asn_match_statement configuration block (#​42965)

BUG FIXES:

  • resource/aws_cloudfrontkeyvaluestore_keys_exclusive: Batch update operations to stay under the Key Value Store Service Quota. The max_batch_size argument can be used to override the default value of 50 items. (#​42795)
  • resource/aws_cloudwatch_log_destination: Fix to return the first matched destination name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_cloudwatch_log_group: Fix to return the first matched group name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_cloudwatch_log_metric_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_cloudwatch_log_query_definition: Fix to return the first matched query definition ID during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_cloudwatch_log_resource_policy: Fix to return the first matched policy name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_cloudwatch_log_subscription_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
  • resource/aws_dynamodb_table: Set new computed value for stream_arn attribute when changing stream_view_type (#​42561)
  • resource/aws_neptune_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
  • resource/aws_neptune_global_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
  • resource/aws_route53_vpc_association_authorization: Retry InvalidPaginationToken errors on read (#​42948)
  • resource/aws_verifiedaccess_endpoint: Fix InvalidParameterValue: The value of loadBalancerOptions.port you provided is not valid errors when creating TCP load balancer endpoints (#​42736)
  • resource/aws_vpc_endpoint_subnet_association: Fix OperationInProgress: VpcEndpoint modify operation in progress errors when deleting multiple associations in parallel (#​42884)

v5.99.1

Compare Source

BUG FIXES:

  • resource/aws_fms_admin_account: Fix panic: runtime error: invalid memory address or nil pointer dereference (#​42813)
  • resource/aws_lb: Ignore InvalidAction exceptions for DescribeCapacityReservation operations. This fixes a regression introduced in v5.99.0 (#​42812)
  • resource/aws_s3_bucket_lifecycle_configuration: Correctly handles switching child attributes of rule.filter. (#​42655)

v5.99.0

Compare Source

FEATURES:

  • New Resource: aws_notifications_channel_association (#​42575)
  • New Resource: aws_notifications_event_rule (#​42575)
  • New Resource: aws_notifications_notification_configuration (#​42575)
  • New Resource: aws_notifications_notification_hub (#​42544)
  • New Resource: aws_notificationscontacts_email_contact (#​42575)
  • New Resource: aws_quicksight_account_settings (#​42185)
  • New Resource: aws_workspacesweb_browser_settings (#​42681)
  • New Resource: aws_workspacesweb_network_settings (#​42722)
  • New Resource: aws_workspacesweb_user_settings (#​42783)

ENHANCEMENTS:

  • data-source/aws_ami: Add block_device_mappings.ebs["volume_initialization_rate"] attribute (#​42684)
  • data-source/aws_launch_template: Add block_device_mappings.ebs.volume_initialization_rate attribute (#​42684)
  • data-source/aws_verifiedpermissions_policy_store: Add tags attribute. This functionality requires the verifiedpermissions:ListTagsForResource IAM permission (#​42663)
  • resource/aws_ecs_service: Add volume_configuration.managed_ebs_volume.volume_initialization_rate argument (#​42750)
  • resource/aws_launch_template: Add block_device_mappings.ebs.volume_initialization_rate argument (#​42684)
  • resource/aws_lb: Add minimum_load_balancer_capacity configuration block. This functionality requires the elasticloadbalancing:DescribeCapacityReservations and elasticloadbalancing:ModifyCapacityReservation IAM permissions (#​42685)
  • resource/aws_organizations_account: Allow name to be updated in-place. This functionality requires the account:PutAccountName IAM permission (#​42350)
  • resource/aws_securityhub_standards_subscription: Add configurable Create and Delete timeouts (#​42759)
  • resource/aws_verifiedpermissions_policy_store: Add tags argument and tags_all attribute. This functionality requires the verifiedpermissions:ListTagsForResource, verifiedpermissions:TagResource, and verifiedpermissions:UntagResource IAM permissions (#​42663)

BUG FIXES:

  • data-source/aws_ecr_repository_creation_template: prefix can now be up to 256 characters (#​42723)
  • resource/aws_cloudwatch_log_stream: Fix to return the first matched stream name during the read operation. This fixes a regression introduced in v5.83.0 (#​42719)
  • resource/aws_cognitoidp_user_pool: Fix crash when the user_pool_add_ons.advanced_security_additional_flows block is non-empty, but contains only a single nil value. (#​42793)
  • resource/aws_ecr_repository_creation_template: prefix can now be up to 256 characters (#​42723)
  • resource/aws_elasticache_replication_group: Fix crash during read operations where configuration endpoint and node groups are nil and empty, respectively (#​42726)
  • resource/aws_s3_bucket: Ensure that HeadBucket S3 API calls are made using configured credentials. This fixes a regression introduced in v5.98.0 (#​42786)
  • resource/aws_s3_bucket_lifecycle_configuration: No longer returns warning on empty rule.filter. (#​42624)
  • resource/aws_vpc_endpoint: Fix issue where dns_options were not being updated correctly when private_dns_enabled was set to true (#​42746)

v5.98.0

Compare Source

FEATURES:

  • New Data Source: aws_account_primary_contact (#​42526)
  • New Data Source: aws_dynamodb_tables (#​42339)
  • New Resource: aws_bedrockagent_prompt (#​42211)
  • New Resource: aws_cloudfrontkeyvaluestore_keys_exclusive (#​42246)
  • New Resource: aws_dataexchange_revision_assets (#​42272)
  • New Resource: aws_inspector2_filter (#​42374)
  • New Resource: aws_wafv2_api_key (#​42525)

ENHANCEMENTS:

  • data-source/aws_cloudwatch_event_bus: Add dead_letter_config attribute (#​42471)
  • data-source/aws_cloudwatch_event_connection: Add kms_key_identifier attribute (#​42385)
  • data-source/aws_cognito_user_pool_client: Add refresh_token_rotation attribute (#​42430)
  • data-source/aws_cognitoidp_user_pool: Add user_pool_add_ons attribute (#​42470)
  • data-source/aws_dynamodb_table: Add point_in_time_recovery.recovery_period_in_days attribute (#​41484)
  • data-source/aws_ec2_client_vpn_endpoint: Add client_route_enforcement_options attribute (#​42424)
  • data-source/aws_imagebuilder_distribution_configuration: Add distribution.ssm_parameter_configuration attribute (#​42604)
  • data-source/aws_redshiftserverless_workgroup: Add track_name attribute (#​42451)
  • data-source/aws_workspaces_directory: Add active_directory_config, user_identity_type, workspace_directory_description, workspace_directory_name, and workspace_type attributes (#​42330)
  • resource/aws_appflow_flow: Add destination_flow_config.destination_connector_properties.salesforce.data_transfer_api argument (#​42479)
  • resource/aws_autoscaling_group: Add capacity_reservation_specification argument (#​42380)
  • resource/aws_bedrockagent_agent: Add prepared_at attribute. (#​42586)
  • resource/aws_bedrockagent_agent: Increase instruction max length for validation to 20000 (#​42596)
  • resource/aws_cloudwatch_event_bus: Add dead_letter_config argument (#​42471)
  • resource/aws_cloudwatch_event_connection: Add kms_key_identifier argument (#​42385)
  • resource/aws_cognito_managed_user_pool_client: Add refresh_token_rotation argument (#​42430)
  • resource/aws_cognito_user_pool_client: Add refresh_token_rotation argument (#​42430)
  • resource/aws_cognitoidp_user_pool: Add user_pool_add_ons.advanced_security_additional_flows argument (#​42470)
  • resource/aws_docdb_cluster: Add manage_master_user_password argument and master_user_secret attribute (#​42563)
  • resource/aws_dynamodb_table: Add point_in_time_recovery.recovery_period_in_days argument (#​41484)
  • resource/aws_ec2_client_vpn_endpoint: Add client_route_enforcement_options argument (#​42424)
  • resource/aws_ecs_account_setting_default: Add support for defaultLogDriverMode value in Name argument (#​42418)
  • resource/aws_imagebuilder_distribution_configuration: Add distribution.ssm_parameter_configuration argument (#​42604)
  • resource/aws_iot_domain_configuration: Add application_protocol and authentication_type arguments (#​42534)
  • resource/aws_msk_serverless_cluster: Add bootstrap_brokers_sasl_iam attribute. This functionality requires the kafka:GetBootstrapBrokers IAM permission (#​42148)
  • resource/aws_redshiftserverless_workgroup: Add track_name argument (#​42451)
  • resource/aws_rum_app_monitor: Add domain_list argument (#​42456)
  • resource/aws_rum_app_monitor: Mark domain as Optional (#​42456)
  • resource/aws_s3tables_table: Add encryption_configuration argument. This functionality requires the s3tables:GetTableEncryption IAM permission (#​42356)
  • resource/aws_s3tables_table_bucket: Add encryption_configuration argument. This functionality requires the s3tables:GetTableBucketEncryption IAM permission (#​42356)
  • resource/aws_securityhub_finding_aggregator: Support NO_REGIONS as a valid value for linking_mode (#​42574)
  • resource/aws_sns_topic: Add fifo_throughput_scope argument (#​42508)
  • resource/aws_wafv2_rule_group: Add uri_fragment to field_to_match configuration blocks (#​42407)
  • resource/aws_wafv2_web_acl: Add data_protection_config argument (#​42404)
  • resource/aws_wafv2_web_acl: Add uri_fragment to field_to_match configuration blocks (#​42407)
  • resource/aws_workspaces_directory: Add active_directory_config, user_identity_type, workspace_directory_description, workspace_directory_name, and workspace_type arguments in support of WorkSpaces Pools (#​42330)
  • resource/aws_workspaces_directory: Mark directory_id as Optional (#​42330)

BUG FIXES:

  • aws_sagemaker_mlflow_tracking_server: Fix ValidationException: The provided MLflow version is not supported errors (#​42435)
  • data-source/aws_networkfirewall_firewall_policy: Add firewall_policy.policy_variables configuration block (#​42473)
  • resource/aws_bedrockagent_agent_alias: Stop using state for unknown on routing_configuration so we only send it on update when explicility configured. This allows updates to aliases to create new versions. (#​42603)
  • resource/aws_cloudwatch_metric_alarm: Support 20 as a valid value for metric_query.metric.period, metric_query.period, and period (#​42390)
  • resource/aws_controltower_control: Fix handling ResourceNotFound exceptions during delete (#​42494)
  • resource/aws_controltower_control: Fix handling of parameters block removal (#​42494)
  • resource/aws_ec2_network_insights_path: Fix failure when filter_at_source.source_address is unspecified. (#​42369)
  • resource/aws_instance: Fix InvalidNetworkInterface.InUse errors on Create (#​42623)
  • resource/aws_lb_listener: Don't send zero value (false, 0 or "") for unconfigured listener attributes on Create (#​41846)
  • resource/aws_rds_cluster_parameter_group: Fix InvalidParameterValue: collation_server '..' is not valid for character_set '...' errors on Create (#​42559)

v5.97.0

Compare Source

FEATURES:

  • New Resource: aws_ec2_default_credit_specification (#​42345)

ENHANCEMENTS:

  • data-source/aws_glue_connection: Support athena_properties attribute (#​42262)
  • data-source/aws_imagebuilder_infrastructure_configuration: Add placement attribute (#​42347)
  • data-source/aws_networkfirewall_firewall: Add enabled_analysis_types attribute (#​42160)
  • data-source/aws_workspaces_directory: Add certificate_based_auth_properties attribute (#​42269)
  • resource/aws_accessanalyzer_analyzer: Add configuration.unused_access.analysis_rule argument (#​42332)
  • resource/aws_fis_experiment_template: Add support for ManagedResources to action.*.target (#​42376)
  • resource/aws_glue_connection: Add athena_properties argument and allow DYNAMODB connection type. (#​42262)
  • resource/aws_glue_connection: Support DYNAMODB as a valid value for connection_type (#​42262)
  • resource/aws_imagebuilder_infrastructure_configuration: Add placement argument (#​42347)
  • resource/aws_networkfirewall_firewall: Add enabled_analysis_types argument (#​42160)
  • resource/aws_workspaces_directory: Add certificate_based_auth_properties configuration block (#​42269)

BUG FIXES:

  • resource/aws_vpclattice_listener_rule: Prevents error when setting listener_identifier to ARN. (#​42215)
  • resource/aws_vpclattice_listener_rule: Prevents error when setting service_identifier to ARN. (#​42215)
  • resource/aws_vpclattice_listener_rule: Requires match.http_match. (#​42215)
  • resource/aws_vpclattice_listener_rule: Requires exactly one of action.fixed_response or action.forward. (#​42215)

v5.96.0

Compare Source

FEATURES:

  • New Data Source: aws_fis_experiment_templates (#​37060)
  • New Data Source: aws_vpc_endpoint_associations (#​41918)

ENHANCEMENTS:

  • data-source/aws_api_gateway_domain_name: Add endpoint_configuration.ip_address_type attribute (#​42146)
  • data-source/aws_api_gateway_rest_api: Add endpoint_configuration.ip_address_type attribute (#​42146)
  • data-source/aws_apigatewayv2_api: Add ip_address_type attribute (#​42145)
  • data-source/aws_dms_endpoint: Add kinesis_settings.use_large_integer_value attribute (#​42300)
  • data-source/aws_guardduty_detector: Add arn attribute (#​42344)
  • data-source/aws_guardduty_detector: Add tags attribute (#​42344)
  • resource/aws_api_gateway_domain_name: Add endpoint_configuration.ip_address_type argument to support dual-stack (IPv4 and IPv6) endpoints (#​42146)
  • resource/aws_api_gateway_rest_api: Add endpoint_configuration.ip_address_type argument to support dual-stack (IPv4 and IPv6) endpoints (#​42146)
  • resource/aws_apigatewayv2_api: Add ip_address_type argument to support dual-stack (IPv4 and IPv6) endpoints (#​42145)
  • resource/aws_apigatewayv2_domain_name: Add domain_name_configuration.ip_address_type argument to support dual-stack (IPv4 and IPv6) endpoints (#​42145)
  • resource/aws_dms_endpoint: Add kinesis_settings.use_large_integer_value argument (#​42300)
  • resource/aws_fis_experiment_template: Add experiment_report_configuration argument (#​41120)

BUG FIXES:

  • resource/aws_elasticache_replication_group: Fix malformed version error when parsing 7.x redis engine versions (#​42346)
  • resource/aws_iam_user: Retry ConcurrentModificationExceptions during user creation (#​42081)
  • resource/aws_rds_cluster: Fix InvalidParameterValue: SecondsUntilAutoPause can only be specified when minimum capacity is 0 errors when removing serverlessv2_scaling_configuration.seconds_until_auto_pause (#​41180)

v5.95.0

Compare Source

NOTES:

  • resource/aws_api_gateway_deployment: Computed attributes invoke_url and execution_arn are deprecated. Use the invoke_url and execution_arn attributes of the aws_api_gateway_stage resource instead. (#​42244)

FEATURES:

  • New Resource: aws_redshift_integration (#​42105)

ENHANCEMENTS:

  • data-source/aws_ec2_network_insights_path: Support filter_at_destination and filter_at_source attributes (#​42214)
  • resource/aws_amplify_app: Add compute_role_arn argument (#​41650)
  • resource/aws_codebuild_webhook: Add manual_creation argument (#​40155)
  • resource/aws_cognito_user_pool_domain: Add managed_login_version argument (#​40855)
  • resource/aws_ec2_network_insights_path: Add filter_at_destination and filter_at_source configuration blocks (#​42214)
  • resource/aws_eks_cluster: Add force_update_version argument (#​42134)
  • resource/aws_prometheus_scraper: Allow alias, destination, role_configuration, and scrape_configuration to be updated in-place (#​42109)
  • resource/aws_redshiftserverless_workgroup: Add price_performance_target argument (#​40946)
  • resource/aws_sagemaker_image_version: Add horovod, job_type, ml_framework, processor, programming_lang, release_notes, and vendor_guidance arguments (#​42143)
  • resource/aws_sagemaker_notebook_lifecycle_configuration: Add tags argument and tags_all attribute (#​42141)
  • resource/aws_transfer_server: Add TransferSecurityPolicy-2025-03, TransferSecurityPolicy-FIPS-2025-03, and TransferSecurityPolicy-SshAuditCompliant-2025-02 as valid values for security_policy_name (#​42164)

BUG FIXES:

  • resource/aws_elasticache_serverless_cache: Fix to allow in-place updates when engine is changed from redis to valkey (#​42208)
  • resource/aws_kms_custom_key_store: Fix panic: runtime error: invalid memory address or nil pointer dereference when no XksProxyConfiguration is returned (#​42241)
  • resource/aws_s3_bucket_lifecycle_configuration: Fix errors when removing rule from top of list (#​42228)
  • resource/aws_s3_bucket_lifecycle_configuration: Fix potential eventual consistency errors in some regions (#​41764)
  • resource/aws_s3_bucket_lifecycle_configuration: No longer allows empty rule.filter.and.tags (#​42041)
  • resource/aws_sagemaker_domain: Allow default_user_settings.custom_file_system_config and default_space_settings.custom_file_system_config to be removed on Update (#​42144)
  • resource/aws_sagemaker_user_profile: Allow user_settings.custom_file_system_config to be removed on Update (#​42144)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 17, 2025 •
edited
Loading

Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
1 files    0 ❌
1 errors

For more details on these parsing errors, see this check.

Results for commit 58e1bd4.

♻️ This comment has been updated with latest results.

@renovate renovate bot changed the title Update Terraform aws to v5.95.0 Update Terraform aws to v5.96.0 Apr 24, 2025
@renovate renovate bot force-pushed the renovate/aws-5.x branch from 2673862 to 6e06e7b Compare April 24, 2025 20:43
@renovate renovate bot force-pushed the renovate/aws-5.x branch from 6e06e7b to 32d93c3 Compare May 1, 2025 21:28
@renovate renovate bot changed the title Update Terraform aws to v5.96.0 Update Terraform aws to v5.97.0 May 1, 2025
@renovate renovate bot changed the title Update Terraform aws to v5.97.0 Update Terraform aws to v5.98.0 May 15, 2025
@renovate renovate bot force-pushed the renovate/aws-5.x branch from 32d93c3 to c844cdf Compare May 15, 2025 22:50
@renovate renovate bot force-pushed the renovate/aws-5.x branch from c844cdf to fd23b7c Compare May 29, 2025 22:30
@renovate renovate bot changed the title Update Terraform aws to v5.98.0 Update Terraform aws to v5.99.0 May 29, 2025
@renovate renovate bot force-pushed the renovate/aws-5.x branch from fd23b7c to a863f5a Compare May 30, 2025 18:07
@renovate renovate bot changed the title Update Terraform aws to v5.99.0 Update Terraform aws to v5.99.1 May 30, 2025
@renovate renovate bot force-pushed the renovate/aws-5.x branch from a863f5a to 88e6650 Compare June 12, 2025 22:27
@renovate renovate bot changed the title Update Terraform aws to v5.99.1 Update Terraform aws to v5.100.0 Jun 12, 2025
@renovate renovate bot force-pushed the renovate/aws-5.x branch from 88e6650 to 58e1bd4 Compare August 10, 2025 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants