v5.98.0

FEATURES:

• New Data Source: aws_account_primary_contact (#42526)
• New Data Source: aws_dynamodb_tables (#42339)
• New Resource: aws_bedrockagent_prompt (#42211)
• New Resource: aws_cloudfrontkeyvaluestore_keys_exclusive (#42246)
• New Resource: aws_dataexchange_revision_assets (#42272)
• New Resource: aws_inspector2_filter (#42374)
• New Resource: aws_wafv2_api_key (#42525)

ENHANCEMENTS:

• data-source/aws_cloudwatch_event_bus: Add dead_letter_config attribute (#42471)
• data-source/aws_cloudwatch_event_connection: Add kms_key_identifier attribute (#42385)
• data-source/aws_cognito_user_pool_client: Add refresh_token_rotation attribute (#42430)
• data-source/aws_cognitoidp_user_pool: Add user_pool_add_ons attribute (#42470)
• data-source/aws_dynamodb_table: Add point_in_time_recovery.recovery_period_in_days attribute (#41484)
• data-source/aws_ec2_client_vpn_endpoint: Add client_route_enforcement_options attribute (#42424)
• data-source/aws_imagebuilder_distribution_configuration: Add distribution.ssm_parameter_configuration attribute (#42604)
• data-source/aws_redshiftserverless_workgroup: Add track_name attribute (#42451)
• data-source/aws_workspaces_directory: Add active_directory_config, user_identity_type, workspace_directory_description, workspace_directory_name, and workspace_type attributes (#42330)
• resource/aws_appflow_flow: Add destination_flow_config.destination_connector_properties.salesforce.data_transfer_api argument (#42479)
• resource/aws_autoscaling_group: Add capacity_reservation_specification argument (#42380)
• resource/aws_bedrockagent_agent: Add prepared_at attribute. (#42586)
• resource/aws_bedrockagent_agent: Increase instruction max length for validation to 20000 (#42596)
• resource/aws_cloudwatch_event_bus: Add dead_letter_config argument (#42471)
• resource/aws_cloudwatch_event_connection: Add kms_key_identifier argument (#42385)
• resource/aws_cognito_managed_user_pool_client: Add refresh_token_rotation argument (#42430)
• resource/aws_cognito_user_pool_client: Add refresh_token_rotation argument (#42430)
• resource/aws_cognitoidp_user_pool: Add user_pool_add_ons.advanced_security_additional_flows argument (#42470)
• resource/aws_docdb_cluster: Add manage_master_user_password argument and master_user_secret attribute (#42563)
• resource/aws_dynamodb_table: Add point_in_time_recovery.recovery_period_in_days argument (#41484)
• resource/aws_ec2_client_vpn_endpoint: Add client_route_enforcement_options argument (#42424)
• resource/aws_ecs_account_setting_default: Add support for defaultLogDriverMode value in Name argument (#42418)
• resource/aws_imagebuilder_distribution_configuration: Add distribution.ssm_parameter_configuration argument (#42604)
• resource/aws_iot_domain_configuration: Add application_protocol and authentication_type arguments (#42534)
• resource/aws_msk_serverless_cluster: Add bootstrap_brokers_sasl_iam attribute. This functionality requires the kafka:GetBootstrapBrokers IAM permission (#42148)
• resource/aws_redshiftserverless_workgroup: Add track_name argument (#42451)
• resource/aws_rum_app_monitor: Add domain_list argument (#42456)
• resource/aws_rum_app_monitor: Mark domain as Optional (#42456)
• resource/aws_s3tables_table: Add encryption_configuration argument. This functionality requires the s3tables:GetTableEncryption IAM permission (#42356)
• resource/aws_s3tables_table_bucket: Add encryption_configuration argument. This functionality requires the s3tables:GetTableBucketEncryption IAM permission (#42356)
• resource/aws_securityhub_finding_aggregator: Support NO_REGIONS as a valid value for linking_mode (#42574)
• resource/aws_sns_topic: Add fifo_throughput_scope argument (#42508)
• resource/aws_wafv2_rule_group: Add uri_fragment to field_to_match configuration blocks (#42407)
• resource/aws_wafv2_web_acl: Add data_protection_config argument (#42404)
• resource/aws_wafv2_web_acl: Add uri_fragment to field_to_match configuration blocks (#42407)
• resource/aws_workspaces_directory: Add active_directory_config, user_identity_type, workspace_directory_description, workspace_directory_name, and workspace_type arguments in support of WorkSpaces Pools (#42330)
• resource/aws_workspaces_directory: Mark directory_id as Optional (#42330)

BUG FIXES:

• aws_sagemaker_mlflow_tracking_server: Fix ValidationException: The provided MLflow version is not supported errors (#42435)
• data-source/aws_networkfirewall_firewall_policy: Add firewall_policy.policy_variables configuration block (#42473)
• resource/aws_bedrockagent_agent_alias: Stop using state for unknown on routing_configuration so we only send it on update when explicility configured. This allows updates to aliases to create new versions. (#42603)
• resource/aws_cloudwatch_metric_alarm: Support 20 as a valid value for metric_query.metric.period, metric_query.period, and period (#42390)
• resource/aws_controltower_control: Fix handling ResourceNotFound exceptions during delete (#42494)
• resource/aws_controltower_control: Fix handling of parameters block removal (#42494)
• resource/aws_ec2_network_insights_path: Fix failure when filter_at_source.source_address is unspecified. (#42369)
• resource/aws_instance: Fix InvalidNetworkInterface.InUse errors on Create (#42623)
• resource/aws_lb_listener: Don't send zero value (false, 0 or "") for unconfigured listener attributes on Create (#41846)
• resource/aws_rds_cluster_parameter_group: Fix InvalidParameterValue: collation_server '..' is not valid for character_set '...' errors on Create (#42559)