v6.20.0

6.20.0 (November 6, 2025)

FEATURES:

• New Resource: aws_ec2_allowed_images_settings (#44800)
• New Resource: aws_fis_target_account_configuration (#44875)
• New Resource: aws_invoicing_invoice_unit (#44892)

ENHANCEMENTS:

• data-source/aws_connect_routing_profile: Add media_concurrencies.cross_channel_behavior attribute (#44934)
• data-source/aws_elasticache_replication_group: Add node_group_configuration attribute to expose node group details including availability zones, replica counts, and slot ranges (#44879)
• data-source/aws_kinesis_stream: Add max_record_size_in_kib attribute (#44915)
• data-source/aws_opensearch_domain: Add identity_center_options attribute (#44626)
• provider: Support us-isob-west-1 as a valid AWS Region (#44944)
• resource/aws_cloudfront_distribution: Add logging_v1_enabled attribute (#44838)
• resource/aws_connect_routing_profile: Add media_concurrencies.cross_channel_behavior argument (#44934)
• resource/aws_ec2_client_vpn_route: Allow IPv6 address ranges for destination_cidr_block (#44926)
• resource/aws_ec2_instance_connect_endpoint: Add ip_address_type argument (#44616)
• resource/aws_eks_node_group: Add max_parallel_nodes_repaired_count, max_parallel_nodes_repaired_percentage, max_unhealthy_node_threshold_count, max_unhealthy_node_threshold_percentage, and node_repair_config_overrides to the node_repair_config schema (#44894)
• resource/aws_elasticache_replication_group: Add node_group_configuration block to support availability zone specification and snapshot restoration for cluster mode enabled replication groups (#44879)
• resource/aws_glue_job: Ensure that timeout is unconfigured for Ray jobs (#35012)
• resource/aws_kinesis_stream: Add max_record_size_in_kib argument to support for Kinesis 10MiB payloads. This functionality requires the kinesis:UpdateMaxRecordSize IAM permission (#44915)
• resource/aws_opensearch_domain: Add identity_center_options configuration block (#44626)
• resource/aws_transfer_server: Add support for TransferSecurityPolicy-AS2Restricted-2025-07 security_policy_name value (#44865)
• resource/aws_transfer_server: Support TransferSecurityPolicy-AS2Restricted-2025-07 as a valid value for security_policy_name (#44652)

BUG FIXES:

• resource/aws_cloudfront_continuous_deployment_policy: Fix Source type "...cloudfront.stagingDistributionDNSNamesModel" does not implement attr.Value error. This fixes a regression introduced in v6.17.0 (#44972)
• resource/aws_cloudfront_distribution: Change logging_config.bucket argument from Required to Optional (#44838)
• resource/aws_cloudfront_distribution: Fix inability to configure logging_config.include_cookies argument while keeping V1 logging disabled (#44838)
• resource/aws_cloudfront_vpc_origin: Fix Source type "...cloudfront.originSSLProtocolsModel" does not implement attr.Value and missing required field, CreateVpcOriginInput.VpcOriginEndpointConfig errors. This fixes a regression introduced in v6.17.0 (#44861)
• resource/aws_glue_job: Allow Ray jobs to be updated (#35012)
• resource/aws_glue_job: Allow a zero (0) value for timeout for Apache Spark streaming ETL jobs. This allows the job to be configured with no timeout (#44920)
• resource/aws_lakeformation_lf_tags: Remove incorrect validation from catalog_id, database.catalog_id, table.catalog_id, and table_with_columns.catalog_id arguments (#44890)
• resource/aws_launch_template: Allow an empty ("") value for block_device_mappings.ebs.kms_key_id. This fixes a regression introduced in v6.16.0 (#44708)