FEATURES:
aws_macie2_organization_configuration (#41475)aws_neptunegraph_graph (#41216)aws_quicksight_role_membership (#41589)aws_rds_shard_group (#41254)aws_xray_resource_policy (#41517)ENHANCEMENTS:
configuration argument (#41524)cluster_scalability_type attribute (#41254)database_insights_mode attribute (#41254)application/yaml to the list of Content-Types that return a body (#41443)application/yaml to the list of Content-Types that return a body (#41443)checksum_crc64nvme attribute (#41015)target_tracking_configuration.customized_metric_specification.period argument to support high-resolution metrics (#41385)RequiredWith validation password_wo and password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)25Gbps and 400Gbps as supported bandwidth values (#41547)25Gbps as a supported bandwidth value (#41547)400Gbps as a supported connections_bandwidth value (#41547)network_interfaces.ena_srd_specification configuration block (#41367)enable_zonal_shift support for Application Load Balancers (#41335)tags to be updated in-place (#41266)tags to be updated in-place (#41266)tags to be updated in-place (#41266)tags to be updated in-place (#41266)secondary_private_ip_address_count to secondary_private_ip_addresses for private NAT Gateways (#41403)RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)cluster_scalability_type argument (#41254)database_insights_mode argument (#41254)"" as a valid value for engine_mode (#41254)iam-db-auth-error as a valid value for enabled_cloudwatch_logs_exports (#41408)RequiredWith validation master_password_wo and master_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)RequiredWith validation admin_user_password_wo and admin_user_password_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)data_redundancy is SingleLocalZone if location.type is LocalZone (#40944)checksum_crc64nvme attribute (#41015)checksum_crc64nvme attribute (#41015)RequiredWith validation secret_string_wo and secret_string_wo_version. Remove PreferWriteOnlyAttribute validation (#41562)PreferWriteOnlyAttribute validation (#41562)BUG FIXES:
s3_delivery_configuration.suffix_path (#41497)spot_options.max_total_price, spot_options.min_target_capacity, spot_options.single_instance_type, and spot_options.single_availability_zone arguments (#41272)routing_http_response_server_enabled, routing_http_response_strict_transport_security_header_value, routing_http_response_access_control_allow_origin_header_value, routing_http_response_access_control_allow_methods_header_value, routing_http_response_access_control_allow_headers_header_value, routing_http_response_access_control_allow_credentials_header_value, routing_http_response_access_control_expose_headers_header_value, routing_http_response_access_control_max_age_header_value, routing_http_response_content_security_policy_header_value, routing_http_response_x_content_type_options_header_value, routing_http_response_x_frame_options_header_value, routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name, routing_http_request_x_amzn_mtls_clientcert_issuer_header_name, routing_http_request_x_amzn_mtls_clientcert_subject_header_name, routing_http_request_x_amzn_mtls_clientcert_validity_header_name, routing_http_request_x_amzn_mtls_clientcert_leaf_header_name, routing_http_request_x_amzn_mtls_clientcert_header_name, routing_http_request_x_amzn_tls_version_header_name, and routing_http_request_x_amzn_tls_cipher_suite_header_name are updated if tcp_idle_timeout_seconds does not change (#41299)status and tags can be updated in-place (#41266)secondary_allocation_ids to be updated in-place (#41403)master_username validation (#41556)InvalidRequest error when rule.and.object_size_less_than not set. (#41542)NOTES:
rule.expiration.expired_object_delete_marker is set with either rule.expiration.date or rule.expiration.days. While historically the provider allowed this invalid configuration, the migration of this resource to the Terraform Plugin Framework in v5.86.0 resulted in this misconfiguration surfacing as a hard inconsistent result after apply error. This diagnostic aims to direct users how to resolve the issue at plan time. See this issue comment for additional context. (#41462)FEATURES:
aws_cloudwatch_contributor_managed_insight_rules (#41472)aws_cloudwatch_contributor_managed_insight_rule (#41449)aws_qbusiness_application (#35249)ENHANCEMENTS:
video_data_delivery_enabled argument (#41317)password_wo write-only attribute (#41366)master_password_wo write-only attribute (#41413)storage_descriptor.additional_locations argument (#41434)master_password_wo write-only attribute (#41411)admin_user_password_wo write-only attribute (#41412)secret_string_wo write-only attribute (#41371)BUG FIXES:
scaling_configuration is not empty. (#41377)sub_domain (#36961)embedding_data_delivery_enabled, image_data_delivery_enabled, and text_data_delivery_enabled arguments as optional with default value of true (#41317)FEATURES:
aws_cloudwatch_contributor_insight_rule (#41373)ENHANCEMENTS:
export_type and incremental_export_specification arguments (#41303)parameters.s3.role_arn argument to allow override an account-wide role for a specific S3 data source (#41284)master_password_wo write-only attribute (#41314)stream_processor_arn in favor of arn. (#41271)value_wo write-only attribute (#40952)service_network_log_type argument (#41304)BUG FIXES:
on_demand_throughput and global_secondary_index.*.on_demand_throughput attributes to resolve read error (#41350)OperationInProgress errors (#41388)BUG FIXES:
AccessDeniedError attempting to list tags (#41295)AccessDeniedError attempting to list tags (#41295)sns_topic_name shows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)rule[*].prefix is an empty string. (#41296)NOTES:
prefix, the Terraform plan will show the removal of prefix from state. This is expected, and should not occur on subsequent plans. (#41159)ENHANCEMENTS:
monitoring_interval and monitoring_role_arn attributes (#41002)us-isof-east-1 and us-isof-south-1 as valid AWS Regions (#41243)security_service_policy_data.policy_option.network_acl_common_policy argument to allow creation of FMS-managed NACL rules (#41219)monitoring_interval and monitoring_role_arn arguments (#41002)timeouts. (#41232)BUG FIXES:
tags_all value (#41256)instance_lifecycle is spot (#41206)panic: runtime error: invalid memory address or nil pointer dereference when deleting the resource would otherwise return an error (#41260)transition_default_minimum_object_size (#41159)rule during import (#41205)NOTES:
FEATURES:
aws_vpc_ipam (#40459)aws_vpc_ipams (#40459)aws_secretsmanager_random_password (#41106)aws_guardduty_member_detector_feature (#35625)aws_route53domains_domain (#37885)aws_timestreamquery_scheduled_query (#41145)aws_vpclattice_resource_configuration (#41019)aws_vpclattice_service_network_resource_association (#41057)ENHANCEMENTS:
arn attribute (#41086)arn attribute (#41087)arn attribute (#41084)network_interfaces.connection_tracking_specification attribute (#41184)connector_profile_config.connector_profile_properties.salesforce.use_privatelink_for_metadata_and_authorization argument (#41175)target_tracking_configuration.customized_metric_specification.metrics.metric_stat.period argument to support high-resolution metrics (#41066)data_source_configuration.confluence_configuration, data_source_configuration.salesforce_configuration, data_source_configuration.share_point_configuration, and data_source_configuration.web_configuration arguments (#40711)knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration arguments (#40737)sns_topic_arn attribute (#41168)suspend argument (#40607)invocation_connectivity_parameters argument (#41144)arn attribute (#41087)arn attribute (#41084)enable_fault_injection argument (#41078)network_interfaces.connection_tracking_specification argument (#41184)concurrent_jobs argument (#41012)create timeout (#40972)orchestration_sending_role_arn argument (#41043)kms_key_identifier argument (#41082)instance as a valid value for enabled_cloudwatch_logs_exports (#41111)tags argument and tags_all attribute (#41192)resource_configuration_arn and service_network_arn arguments to support creating VPC Endpoints of type Resource and ServiceNetwork (#41116)BUG FIXES:
created_date and last_modified_date attributes (#41105)sort_ascending to sort in ascending order (#40529)role_arn argument (#41072)Provider produced inconsistent result after apply errors for s3_delivery_configuration.enable_hive_compatible_path (#41122)field_delimiter as Computed (#41122)provider_name to count UTF-8 characters properly (#41187)name to count UTF-8 characters properly (#41187)callback_urls, default_redirect_uri, logout_urls, and supported_identity_providers` to count UTF-8 characters properly (#41187)panic: interface conversion: interface {} is float64, not string (#41096)InvalidParameterCombination error during update (#40969)name, name_prefix, and path without forcing new resource (#41186)invitation_id when calling the AcceptInvitation API (#41163)NOTES:
FEATURES:
aws_eks_cluster_auth (#40660)aws_media_packagev2_channel_group (#38406)ENHANCEMENTS:
uefi_data attribute (#40210)bandwidth_weightings, boot_modes, default_network_card_index, efa_maximum_interfaces, ena_srd_supported, inference_accelerators.memory_size, media_accelerators, network_cards, neuron_devices, nitro_enclaves_support, nitro_tpm_support, nitro_tpm_supported_versions, phc_support, supported_cpu_features, total_inference_memory, total_media_memory, and total_neuron_device_memory attributes (#40717)mx-central-1 AWS Region (#40940)mx-central-1 AWS Region (#40940)mx-central-1 AWS Region (#40940)mx-central-1 as a valid AWS Region (#40940)uefi_data argument (#40210)uefi_data attribute (#40210)uefi_data attribute (#40210)userIdentity.arn to advanced_event_selector.field_selector (#40629)engine is now case insensitive (#40794)engine is now case insensitive (#40794)arn attribute (#40930)arn attribute (#40930)arn attribute (#40930)arn attribute (#40930)routing_http_response_server_enabled, routing_http_response_strict_transport_security_header_value, routing_http_response_access_control_allow_origin_header_value, routing_http_response_access_control_allow_methods_header_value, routing_http_response_access_control_allow_headers_header_value, routing_http_response_access_control_allow_credentials_header_value, routing_http_response_access_control_expose_headers_header_value, routing_http_response_access_control_max_age_header_value, routing_http_response_content_security_policy_header_value, routing_http_response_x_content_type_options_header_value, routing_http_response_x_frame_options_header_value, routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name, routing_http_request_x_amzn_mtls_clientcert_issuer_header_name, routing_http_request_x_amzn_mtls_clientcert_subject_header_name, routing_http_request_x_amzn_mtls_clientcert_validity_header_name, routing_http_request_x_amzn_mtls_clientcert_leaf_header_name, routing_http_request_x_amzn_mtls_clientcert_header_name, routing_http_request_x_amzn_tls_version_header_name, and routing_http_request_x_amzn_tls_cipher_suite_header_name arguments in support of HTTP header modification (#40736)triggers argument to support synchronization with upstream CloudWatch alarm changes (#40918)production_variants.managed_instance_scaling and shadow_production_variants.managed_instance_scaling to 0 (#40882)BUG FIXES:
ingress_vpc_configuration, name, and service_arn to ForceNew (#40927)location URI global ID and subdirectory (...) does not match pattern "..." errors on Read when s3_bucket_arn is an S3 on Outposts access point (#40929)volume.configure_at_launch and volume.docker_volume_configuration (#40853)v5.1.0 with an input that cannot be marshaled into a map[string]interface{} (#40958)v5.1.0 with no configuration changes (#40958)broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughput is unset (#40910)broker_node_group_info.0.storage_info.0.ebs_storage_info.0.provisioned_throughput block is removed (#40910)NOTES:
apigatewayv2 client has been updated to more extensively match ConflictException error responses. This change should be transparent to users, but if any unexpected changes in behavior with apigatewayv2 resources occur following an upgrade to this release, please open a bug report. (#40840)id in favor of arn. (#40626)id. (#40626)id in favor of bucket. (#40626)FEATURES:
aws_cloudwatch_event_buses (#40662)aws_ecs_clusters (#40638)aws_route53_records (#38186)aws_cognito_identity_openid_token_for_developer_identity (#40763)aws_bedrockagent_agent_collaborator (#40559)aws_cleanrooms_membership (#35165)aws_cloudwatch_log_delivery (#40731)aws_cloudwatch_log_delivery_destination (#40731)aws_cloudwatch_log_delivery_destination_policy (#40731)aws_cloudwatch_log_delivery_source (#40731)aws_cloudwatch_log_index_policy (#40594)aws_vpclattice_resource_gateway (#40821)ENHANCEMENTS:
compute_configuration attribute (#40752)kafka_settings.sasl_mechanism attribute (#36918)ap-southeast-7 AWS Region (#40850)ap-southeast-7 AWS Region (#40850)default_for_new_launches attribute (#40536)supports_certificate_rotation_without_restart, supports_integrations, and supports_local_write_forwarding attributes (#40700)ap-southeast-7 AWS Region (#40850)region attribute (#40795)service_regions argument (#40795)ap-southeast-7 as a valid AWS Region (#40849)data_transfer_api attribute to destination_flow_config_list.destination_connector_properties.salesforce (#34937)grpc_config argument to default_cache_behavior and ordered_cache_behavior configuration blocks (#40762)compute_configuration argument (#40752)email_mfa_configuration argument (#40734)sign_in_policy and web_authn_configuration arguments (#40765)user_pool_tier argument (#40633)kafka_settings.sasl_mechanism argument (#36918)name and value arguments (#40772)instance_id or network_interface_id (#40769)node_repair_config configuration block (#40698)VALKEY as supported value for 'engine' argument (#40764)VALKEY as supported value for 'engine' argument (#40764)encryption_key_arn argument (#40771)user_invitation_url attribute (#40775)iam-db-auth-error as a valid value for enabled_cloudwatch_logs_exports (#40789)data_filter argument (#40816)override_provider configuration block, allowing tags inherited from the provider default_tags configuration block to be ignored (#40689)BUG FIXES:
description, name or version if they are not present in the OpenAPI definition body (#40707)ConflictException error responses (#40840)panic: interface conversion: interface {} is nil, not map[string]interface {} when parameters_in_cache_key_and_forwarded_to_origin.cookies_config, parameters_in_cache_key_and_forwarded_to_origin.headers_config, or parameters_in_cache_key_and_forwarded_to_origin.query_strings_config are empty (#40815)scaling_configuration to be removed on Update (#40773)file_system_locations to be removed on Update (#40842)fips_dns_name to an empty value ("") when no value is returned from the EC2 API. This fixes known-after-apply loops in Regions that don't support FIPS endpoints (#37939)create_table_default_permission with a nil principal block (#40761)http_tokens when metadata_options is updated (#40727)public_dns and public_ip attributes when changing instance_type, user_data, or user_data_base64 (#40710)operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#40790)operation error EC2: DetachInternetGateway, ..., api error InvalidInternetGatewayID.NotFound: ... errors on delete for resources deleted out-of-band (#40790)logical_table_map.tag_column_operation.tags.column_description (#40713)manage_master_user_password being updated in state when update errors (#40538)alias.name contains characters that the Route 53 API escapes (#40154)name contains characters that the Route 53 API escapes (#40154)delivery_options.max_delivery_seconds when not configured (#40670)sqs_managed_sse_enabled=true and kms_data_key_reuse_period_seconds is configured (#40729)BUG FIXES:
NOTES:
id attribute has changed to prevent inconsistent parsing which resulted in provider crashes under certain conditions. The new format is a comma-delimited string combining group_arn and resource_arn in their entirety. Configuarations relying on the previous format may need to be updated to continue functioning correctly. (#40579)FEATURES:
aws_servicecatalogappregistry_attribute_group_associations (#38306)aws_api_gateway_domain_name_access_association (#40566)aws_cloudfront_vpc_origin (#40239)aws_memorydb_multi_region_cluster (#40376)aws_networkmanager_dx_gateway_attachment (#40546)aws_rds_cluster_snapshot_copy (#40398)ENHANCEMENTS:
arn attribute (#40546)statement sid is valid, including on alphanumeric characters (#40562)service_region attribute (#40583)agent_collaboration attribute to configure agent collaboration role (#40543)origin.vpc_origin_config argument (#40239)name_prefix argument (#40622)arn attribute (#40546)efa_enabled argument (#40381)advertise_trust_store_ca_names attribute to the mutual_authentication configuration block (#40550)multi_region_cluster_name argument (#40376)edge_locations attribute (#40546)service_region argument (#40583)BUG FIXES:
AccessDeniedException: ... is not authorized to perform: acm-pca:GetCertificateAuthorityCsr on resource: ... errors for RAM-shared CAs (#39952)setting entitlements: Invalid address to set: []string{"entitlements", "0", "overage"} errors (#40621)certificate_settings when updating. (#40589)certificate_settings.type to CUSTOM. (#40589)ValidationException when setting certificate_settings.type to AMPLIFY_MANAGED. (#40589)certificate_settings not set. (#40589)certificate_settings is not set during update. (#40589)arn for private custom domain names (#40566)vpc_configuration.tls_certificate as Optional (#40574)at_rest_encryption_enabled when engine is valkey. (#40514)IAMPrincipals principal group (#38600)permissions and permissions_with_grant_option attributes (#38047)result attribute when changing input attribute, for lifecycle scope "CRUD" (#34263)teletext_destination_settings. (#33797)allocated_storage (#40601)force_destroy = true can now delete objects with non-XML-safe keys (#40537)force_destroy = true can now delete objects with non-XML-safe keys (#40537)automatically_after_days was not being set properly when schedule_expression had been set previously (#34295)InvalidRequestException: A previous rotation isn't complete. That rotation will be reattempted. (#34295)redrive_allow_policy diffs (#40604)FEATURES:
aws_servicecatalogappregistry_attribute_group (#38188)aws_ssm_parameter (#40313)aws_bedrock_inference_profile (#40294)aws_cloudwatch_log_anomaly_detector (#40437)aws_ecr_account_setting (#40219)aws_msk_single_scram_secret_association (#37056)aws_servicecatalogappregistry_attribute_group (#38183)aws_servicecatalogappregistry_attribute_group_association (#38290)ENHANCEMENTS:
policy and domain_name_id attributes (#40364)tags attribute (#38243)delivery_options.max_delivery_seconds and tracking_options.https_policy attributes (#40194)domain_name_id argument (#40447)policy argument and domain_name_id attribute (#40364)PRIVATE as a valid value for endpoint_configuration.types argument, enabling custom domain name support for private REST API endpoints (#40364)completion_duration_minutes argument (#40336)configuration.retention_configuration and configuration.orphan_file_deletion_configuration attributes. (#40199)enable_primary_ipv6 argument to add support for enabling primary IPv6 addresses on EC2 instances (#36425)shard_count would not exceed the AWS account's shard quota when the data stream capacity mode is PROVISIONED, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires the kinesis:DescribeLimits IAM permission (#40499)kinesis:DescribeLimits IAM permission (#40499)topic_replication.topic_name_configuration argument (#40101)enable_primary_ipv6 argument to add support for enabling primary IPv6 addresses for network interfaces (#36425)stateful_engine_options.flow_timeouts argument (#39996)serverlessv2_scaling_configuration.seconds_until_auto_pause argument (#40441)tags argument and tags_all attribute (#40470)notebook-al2-v3 value for platform_identifier (#40484)tags argument and tags_all attribute (#38243)delivery_options.max_delivery_seconds and tracking_options.https_policy arguments (#40194)BUG FIXES:
InvalidArgumentException: NextToken and StreamName cannot be provided together errors when the data stream has more than 1000 shards (#40499)rule from TypeSet to TypeList as order is significant (#40521)throughput_capacity validation to allow values up to 12228 (#40468)logging_configuration.log_destination_configs (#40092)InvalidDBClusterStateFault errors when deleting clusters that are members of a global cluster (#40333)InvalidParameterValue: Serverless v2 maximum capacity 0.0 isn't valid. The maximum capacity must be at least 1.0. errors when removing serverlessv2_scaling_configuration in an update (#40511)storage_type when restoring from S3 (#40471)storage_type when restoring from snapshot (#40471)storage_type when restoring to a point in time (#40471)database_name as Computed. This prevents resource recreation when the source cluster specifies a database_name (#40469)FEATURES:
aws_codeconnections_connection (#40300)aws_codeconnections_host (#40300)aws_s3tables_namespace (#40420)aws_s3tables_table (#40420)aws_s3tables_table_bucket (#40420)aws_s3tables_table_bucket_policy (#40420)aws_s3tables_table_policy (#40420)ENHANCEMENTS:
instruction max length for validation to 8000 (#40279)deletion_protection_enabled argument (#35359)serverlessv2_scaling_configuration.max_capacity and serverlessv2_scaling_configuration.min_capacity minimum values to 0 to support Amazon Aurora Serverless v2 scaling to 0 ACUs (#40230)LocalZone as a valid value for location.type, enabling support for Amazon S3 Express One Zone in AWS Dedicated Local Zones (#40339)BUG FIXES:
tags_all when planning. (#40305)deserialization failed, failed to decode response body with invalid JSON errors on Read (#40419)FEATURES:
aws_vpc_block_public_access_exclusion (#40235)aws_vpc_block_public_access_options (#40233)ENHANCEMENTS:
compute_config, storage_config, and kubernetes_network_config.elastic_load_balancing arguments for EKS Auto Mode (#40370)remote_network_config argument for EKS Auto Mode (#40371)metrics_config argument (#40322)provisioned_poller_config argument (#40303)supported_regions argument (#40346)BUG FIXES:
disk_iops_configuration.iops from 350000 to 400000 for deployment_type = "SINGLE_AZ_2" (#40359)NOTES:
FEATURES:
aws_iam_organizations_features (#40164)ENHANCEMENTS:
engine attribute (#40224)cluster_configuration.engine attribute (#40224)engine argument (#40224)cluster_configuration.engine attribute (#40224)BUG FIXES:
product_description (e.g., "postgresql") is a substring of multiple products, fix Error: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering (#40281)Warning: AWS account ID not found for provider when skip_requesting_account_id is true (#40264)eksProperties or ecsProperties block (#40172)content_policy_config.filters_configs are specified. (#40304)sns_topic_arnschanges (#40253)sns_topic_arnschanges (#40291)storage_type from io1 or io2 to gp3, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#37257)gp3 volume's allocated_storage to a value larger than the threshold value for engine, fix bug causing error InvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops (#28847)NOTES:
aws_kms_secrets, aws_lambda_invocation, and aws_secretsmanager_secret_version now support ephemeral values. (#40009)FEATURES:
aws_kms_secrets (#40009)aws_lambda_invocation (#39988)aws_secretsmanager_secret_version (#40009)aws_rds_instance_state (#40180)ENHANCEMENTS:
most_recent is true and certain filter criteria are missing (#40211)availability_zone_rebalancing attribute (#40225)availability_zone_rebalancing attribute (#40225)versionConsistency argument to container_definitions (#40216)endpoint argument to point to the writer DB instance in the current primary cluster (#39960)BUG FIXES:
tags from the DescribeSubnets response, removing the need for the ec2:DescribeTags IAM permission (#40144)schema element (#40195)pod_identity_association is modified (#40168)pod_identity_association is changed (#40168)FEATURES:
aws_vpc_security_group_vpc_association (#40069)ENHANCEMENTS:
BUG FIXES:
BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters and/or cache_key_parameters (#40124)BadRequestException: Invalid mapping expression specified and NotFoundException: Invalid parameter name specified errors when making updates to request_parameters (#40124)launch_template that is updated causing ValidationError: You must use a valid fully-formed launch template. (#40088)ipam_pool_id is set (#40082)Provider returned invalid result object after apply errors (#40090)policy_names (#40076)policy_arns (#40076)policy_names (#40076)policy_arns (#40076)policy_names (#40076)policy_arns (#40076)ENHANCEMENTS:
description attribute (#39980)reset_on_delete to properly reset CloudWatch Role ARN on deletion. (#40004)description argument (#39980)BUG FIXES:
canary_settings and stage_description when stage_name not set. (#40067)ttl[0].attribute_name to be set when ttl[0].enabled is false (#40046)ValidationException on updates when RStudio is disabled on the domain (#40049)BREAKING CHANGES:
canary_settings.deployment_id attribute as required (#39929)NOTES:
ARNType will properly surface validation errors (#40008)deployment_id was added to canary_settings as a required attribute. This breaking change was necessary to make canary_settings functional. Without this change all canary traffic was routed to the main deployment (#39929)FEATURES:
aws_spot_datafeed_subscription (#39647)ENHANCEMENTS:
init_containers, share_process_namespace, and image_pull_secrets attributes (#40019)init_containers and share_process_namespace arguments (#40019)containers arguments to 10 (#40019)pod_identity_association argument (#38357)password argument as sensitive (#39991)BUG FIXES:
alarm_configuration.alarms argument (#39971)ResourceNotFound exceptions during resource destruction (#38357)Value Conversion Error during resource creation (#39945)tcp_idle_timeout_seconds argument for gateway load balancers (#40039)tcp_idle_timeout_seconds value, preventing ModifyListenerAttributes API calls when a value is not explicitly configured (#40039)public_ip_source = "amazon": The request can only contain PubliclyAdvertisable if the AddressFamily is IPv6 and PublicIpSource is byoip. (#40042)