v6.26.0

6.26.0 (December 10, 2025)

FEATURES:

• New List Resource: aws_batch_job_definition (#45401)
• New List Resource: aws_codebuild_project (#45400)
• New List Resource: aws_lambda_capacity_provider (#45467)
• New List Resource: aws_ssm_parameter (#45512)
• New Resource: aws_iam_outbound_web_identity_federation (#45217)

ENHANCEMENTS:

• data-source/aws_db_instance: Add upgrade_rollout_order attribute (#45527)
• data-source/aws_eks_node_group : Add update_config block including update_strategy attribute (#41487)
• data-source/aws_rds_cluster: Add upgrade_rollout_order attribute (#45527)
• resource/aws_bedrockagent_agent: Add session_summary_configuration.max_recent_sessions argument (#45449)
• resource/aws_db_instance: Add upgrade_rollout_order attribute (#45527)
• resource/aws_eks_node_group : Add update_config.update_strategy attribute (#41487)
• resource/aws_kinesisanalyticsv2_application: Add application_configuration.application_encryption_configuration argument (#45356)
• resource/aws_kinesisanalyticsv2_application: Support FLINK-1_20 as a valid value for runtime_environment (#45356)
• resource/aws_lambda_capacity_provider: Add resource identity support (#45456)
• resource/aws_odb_network_peering_connection: Add network peering creation using odb_network_arn for resource sharing model. (#45509)
• resource/aws_rds_cluster: Add upgrade_rollout_order attribute (#45527)
• resource/aws_s3vectors_index: Add encryption_configuration block (#45470)
• resource/aws_s3vectors_index: Add metadata_configuration block (#45470)

BUG FIXES:

• data-source/aws_ec2_transit_gateway: Fix potential crash when reading encryption_support. This addresses a regression introduced in v6.25.0. (#45462)
• resource/aws_api_gateway_integration: Fix timeout_milliseconds validation to allow up to 900,000 ms when response_transfer_mode is STREAM (#45482)
• resource/aws_bedrock_model_invocation_logging_configuration: Mark logging_config.s3_config.bucket_name, logging_config.cloudwatch_config.log_group_name, logging_config.cloudwatch_config.role_arn, and logging_config.cloudwatch_config.large_data_delivery_s3_config.bucket_name as Required (#45469)
• resource/aws_ec2_transit_gateway: Fix potential crash when setting encryption_support. This addresses a regression introduced in v6.25.0. (#45462)
• resource/aws_lambda_function: Fix persistent diff when image_config has null values set in config (#45511)
• resource/aws_notifications_event_rule: Fix persistent diff when event_pattern argument is not specified in config (#45524)
• resource/aws_route53_zone: Operations to enable accelerated recovery are enforced to run serially when multiple hosted zones are configured (#45457)
• resource/aws_sagemaker_model: Mark vpc_config.security_group_ids and vpc_config.subnets as ForceNew (#45491)
• resource/aws_secretsmanager_secret_version: Avoid sending GetSecretValue calls when the secret is write-only (#44876)