v6.13.0 — Terraform Provider AWS

6.13.0 (September 11, 2025)

ENHANCEMENTS:

data-source/aws_budgets_budget: Add billing_view_arn attribute (#44241)
data-source/aws_dynamodb_table: Add warm_throughput and global_secondary_index.warm_throughput attributes (#41308)
data-source/aws_elastic_beanstalk_hosted_zone: Add hosted zone IDs for ap-southeast-5, ap-southeast-7, eu-south-2, and me-central-1 AWS Regions (#44132)
data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-southeast-6 AWS Region (#44132)
data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-southeast-6 AWS Region (#44132)
data-source/aws_s3_bucket: Add hosted zone ID for ap-southeast-6 AWS Region (#44132)
resource/aws_appautoscaling_policy: Add predictive_scaling_policy_configuration argument (#44211)
resource/aws_appautoscaling_policy: Add plan-time validation of policy_type (#44211)
resource/aws_appautoscaling_policy: Add plan-time validation of step_scaling_policy_configuration.adjustment_type and step_scaling_policy_configuration.metric_aggregation_type (#44211)
resource/aws_bedrock_guardrail: Add input_action, output_action, input_enabled, and output_enabled arguments to word_policy_config.managed_word_lists_config and word_policy_config.words_config configuration blocks (#44224)
resource/aws_budgets_budget: Add billing_view_arn argument (#44241)
resource/aws_cloudfront_distribution: Add origin.response_completion_timeout argument (#44163)
resource/aws_codebuild_webhook: Add pull_request_build_policy configuration block (#44201)
resource/aws_dynamodb_table: Add warm_throughput and global_secondary_index.warm_throughput arguments (#41308)
resource/aws_ecs_account_setting_default: Support dualStackIPv6 as a valid value for name (#44165)
resource/aws_glue_catalog_table_optimizer: Add iceberg_configuration.run_rate_in_hours argument to retention_configuration and orphan_file_deletion_configuration blocks (#44207)
resource/aws_networkfirewall_rule_group: Add IPv6 CIDR block support to address_definition arguments in source and destination blocks within rule_group.rules_source.stateless_rules_and_custom_actions.stateless_rule.rule_definition.match_attributes (#44215)
resource/aws_networkmanager_vpc_attachment: Add options.dns_support and options.security_group_referencing_support arguments (#43742)
resource/aws_networkmanager_vpc_attachment: Change options to Optional and Computed (#43742)
resource/aws_opensearch_package: Add engine_version argument (#44155)
resource/aws_opensearch_package: Add waiter to ensure package validation completes (#44155)
resource/aws_synthetics_canary: Add schedule.retry_config configuration block (#44244)
resource/aws_vpc_endpoint: Add resource identity support (#44194)
resource/aws_vpc_security_group_egress_rule: Add resource identity support (#44198)
resource/aws_vpc_security_group_ingress_rule: Add resource identity support (#44198)

BUG FIXES:

resource/aws_appautoscaling_policy: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when step_scaling_policy_configuration is empty (#44211)
resource/aws_cognito_managed_login_branding: Fix reading Cognito Managed Login Branding by client ... couldn't find resource errors when a user pool contains multiple client apps (#44204)
resource/aws_eks_cluster: Supports null compute_config.node_role_arn when disabling auto mode or built-in node pools (#42483)
resource/aws_flow_log: Fix Error decoding ... from prior state: unsupported attribute "log_group_name" errors when upgrading from a pre-v6.0.0 provider version (#44191)
resource/aws_launch_template: Fix Error decoding ... from prior state: unsupported attribute "elastic_gpu_specifications" errors when upgrading from a pre-v6.0.0 provider version (#44195)
resource/aws_rds_cluster_role_association: Make feature_name optional (#44143)
resource/aws_s3_bucket_lifecycle_configuration: Ignore MethodNotAllowed errors when deleting non-existent lifecycle configurations (#44189)
resource/aws_secretsmanager_secret: Return diagnostic warning when remote policy is invalid (#44228)
resource/aws_servicecatalog_provisioned_product: Restore timeouts.read arguments removed in v6.12.0 (#44238)