v6.25.0

6.25.0 (December 4, 2025)

FEATURES:

• New Resource: aws_cloudwatch_log_transformer (#44300)
• New Resource: aws_eks_capability (#45326)

ENHANCEMENTS:

• data-source/aws_backup_plan: Add rule.scan_action and scan_setting attributes (#45392)
• data-source/aws_cloudwatch_log_group: Add deletion_protection_enabled attribute (#45298)
• data-source/aws_ec2_transit_gateway: Add encryption_support attribute (#45317)
• data-source/aws_lambda_function: Add durable_config attribute (#45359)
• data-source/aws_lb: Add health_check_logs attribute (#45269)
• data-source/aws_lb_target_group: Add target_control_port attribute (#45270)
• data-source/aws_route53_zone: Add enable_accelerated_recovery attribute (#45302)
• data-source/aws_transfer_connector: Add egress_config attribute to expose VPC Lattice connectivity configuration (#45314)
• data-source/aws_workspaces_directory: Add tenancy attribute (#43134)
• resource/aws_api_gateway_integration: Add integration_target argument (#45311)
• resource/aws_api_gateway_integration: Add response_transfer_mode argument (#45329)
• resource/aws_athena_workgroup: Add configuration.managed_query_results_configuration block (#44273)
• resource/aws_backup_plan: Support malware scanning by adding rule.scan_action and scan_setting configuration blocks (#45392)
• resource/aws_bedrockagentcore_gateway: Add interceptor_configuration argument (#45344)
• resource/aws_cloudwatch_log_group: Add deletion_protection_enabled argument (#45298)
• resource/aws_ec2_transit_gateway: Add encryption_support argument (#45317)
• resource/aws_flow_log: Add regional_nat_gateway_id argument (#45380)
• resource/aws_kms_ciphertext: Add plaintext_wo and plaintext_wo_version arguments to support write-only input (#43592)
• resource/aws_lambda_function: Add durable_config argument (#45359)
• resource/aws_lb: Add health_check_logs configuration block (#45269)
• resource/aws_lb_target_group: Add target_control_port argument to support the ALB Target Optimizer (#45270)
• resource/aws_rolesanywhere_profile: Add accept_role_session_name argument (#45391)
• resource/aws_rolesanywhere_profile: Add plan-time validation of managed_policy_arns and role_arns (#45391)
• resource/aws_route53_zone: Add enable_accelerated_recovery argument (#45302)
• resource/aws_ssm_association: Add calendar_names argument (#45363)
• resource/aws_transfer_connector: Add egress_config argument to support VPC Lattice connectivity for SFTP connectors (#45314)
• resource/aws_transfer_connector: Make url argument optional to support VPC Lattice connectors (#45314)
• resource/aws_workspaces_directory: Add tenancy argument (#43134)