v6.11.0 — Terraform Provider AWS

6.11.0 (August 28, 2025)

FEATURES:

New Resource: aws_timestreaminfluxdb_db_cluster (#42382)
New Resource: aws_workspacesweb_browser_settings_association (#43735)
New Resource: aws_workspacesweb_data_protection_settings_association (#43773)
New Resource: aws_workspacesweb_identity_provider (#43729)
New Resource: aws_workspacesweb_ip_access_settings_association (#43774)
New Resource: aws_workspacesweb_network_settings_association (#43775)
New Resource: aws_workspacesweb_portal (#43444)
New Resource: aws_workspacesweb_session_logger (#43863)
New Resource: aws_workspacesweb_session_logger_association (#43866)
New Resource: aws_workspacesweb_trust_store (#43408)
New Resource: aws_workspacesweb_trust_store_association (#43778)
New Resource: aws_workspacesweb_user_access_logging_settings_association (#43776)
New Resource: aws_workspacesweb_user_settings_association (#43777)

ENHANCEMENTS:

data-source/aws_ec2_client_vpn_endpoint: Add endpoint_ip_address_type and traffic_ip_address_type attributes (#44059)
data-source/aws_network_interface: Add attachment.network_card_index attribute (#42188)
data-source/aws_sesv2_email_identity: Add verification_status attribute (#44045)
data-source/aws_signer_signing_profile: Add signing_material and signing_parameters attributes (#43921)
data-source/aws_vpc_ipam: Add metered_account attribute (#43967)
resource/aws_datazone_domain: Add domain_version and service_role arguments to support V2 domains (#44042)
resource/aws_dlm_lifecycle_policy: Add copy_tags, create_interval, exclusions, extend_deletion, policy_language, resource_type and retain_interval attributes to policy_details configuration block (#41055)
resource/aws_dlm_lifecycle_policy: Add default_policy argument (#41055)
resource/aws_dlm_lifecycle_policy: Add policy_details.create_rule.scripts argument (#41055)
resource/aws_dlm_lifecycle_policy: Add policy_details.schedule.cross_region_copy_rule.target_region argument (#33796)
resource/aws_dlm_lifecycle_policy: Make policy_details.schedule.cross_region_copy_rule.target optional (#33796)
resource/aws_dlm_lifecycle_policy:Add policy_details.schedule.archive_rule argument (#41055)
resource/aws_dynamodb_contributor_insights: Add mode argument in support of CloudWatch contributor insights modes (#43914)
resource/aws_ec2_client_vpn_endpoint: Add endpoint_ip_address_type and traffic_ip_address_type arguments to support IPv6 connectivity in Client VPN (#44059)
resource/aws_ec2_client_vpn_endpoint: Make client_cidr_block optional (#44059)
resource/aws_ecr_lifecycle_policy: Add resource identity support (#44041)
resource/aws_ecr_repository: Add resource identity support (#44041)
resource/aws_ecr_repository_policy: Add resource identity support (#44041)
resource/aws_ecs_service: Add sigint_rollback argument (#43986)
resource/aws_ecs_service: Change deployment_configuration to Optional and Computed (#43986)
resource/aws_eks_cluster: Allow remote_network_config to be updated in-place, enabling support for EKS hybrid nodes on existing clusters (#42928)
resource/aws_elasticache_global_replication_group: Change engine to Optional and Computed (#42636)
resource/aws_inspector2_filter: Support code_repository_project_name, code_repository_provider_type, ecr_image_in_use_count, and ecr_image_last_in_use_at in filter_criteria (#43950)
resource/aws_iot_thing_principal_attachment: Add thing_principal_type argument (#43916)
resource/aws_kms_alias: Add resource identity support (#44025)
resource/aws_kms_external_key: Add key_spec argument (#44011)
resource/aws_kms_external_key: Change key_usage to Optional and Computed (#44011)
resource/aws_kms_key: Add resource identity support (#44025)
resource/aws_lb: Add secondary_ips_auto_assigned_per_subnet argument for Network Load Balancers (#43699)
resource/aws_mwaa_environment: Add worker_replacement_strategy argument (#43946)
resource/aws_network_interface: Add attachment.network_card_index argument (#42188)
resource/aws_network_interface_attachment: Add network_card_index argument (#42188)
resource/aws_route53_resolver_rule: Add resource identity support (#44048)
resource/aws_route53_resolver_rule_association: Add resource identity support (#44048)
resource/aws_route: Add resource identity support (#43910)
resource/aws_route_table: Add resource identity support (#43990)
resource/aws_s3_bucket_acl: Add resource identity support (#44043)
resource/aws_s3_bucket_cors_configuration: Add resource identity support (#43976)
resource/aws_s3_bucket_logging: Add resource identity support (#43976)
resource/aws_s3_bucket_notification: Add resource identity support (#43976)
resource/aws_s3_bucket_ownership_controls: Add resource identity support (#43976)
resource/aws_s3_bucket_policy: Add resource identity support (#43976)
resource/aws_s3_bucket_public_access_block: Add resource identity support (#43976)
resource/aws_s3_bucket_server_side_encryption_configuration: Add resource identity support (#43976)
resource/aws_s3_bucket_versioning: Add resource identity support (#43976)
resource/aws_s3_bucket_website_configuration: Add resource identity support (#43976)
resource/aws_s3tables_table_bucket: Add force_destroy argument (#43922)
resource/aws_secretsmanager_secret_version: Add resource identity support (#44031)
resource/aws_sesv2_email_identity: Add verification_status attribute (#44045)
resource/aws_signer_signing_profile: Add signing_parameters argument (#43921)
resource/aws_synthetics_canary: Add vpc_config.ipv6_allowed_for_dual_stack argument (#43989)
resource/aws_vpc_ipam: Add metered_account argument (#43967)

BUG FIXES:

data-source/aws_glue_catalog_table: Add partition_keys.parameters attribute (#26702)
resource/aws_cognito_user_pool: Fixed to accept an empty email_mfa_configuration block (#43926)
resource/aws_db_instance: Fixes the behavior when modifying database_insights_mode when using custom KMS key (#44050)
resource/aws_dx_hosted_connection: Fix DescribeHostedConnections failed for connection dxcon-xxxx doesn't exist by pointing to the correct connection ID when doing the describe. (#43499)
resource/aws_glue_catalog_table: Add partition_keys.parameters argument, fixing Invalid address to set: []string{"partition_keys", "0", "parameters"} errors (#26702)
resource/aws_imagebuilder_image_recipe: Increase upper limit of block_device_mapping.ebs.iops from 10000 to 100000 (#43981)
resource/aws_nat_gateway: Fix inconsistent final plan for secondary_private_ip_addresses (#43708)
resource/aws_spot_instance_request: Change network_interface.network_card_index to Computed (#38336)
resource/aws_timestreaminfluxdb_db_instance: Fix tag-only update errors (#42382)
resource/aws_wafv2_web_acl: Add missing flattening of name in response_inspection.header blocks for AWSManagedRulesATPRuleSet and AWSManagedRulesACFPRuleSet to avoid persistent plan diffs (#44032)