Update Terraform aws to v6 #56
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
💰 Infracost reportMonthly estimate generatedThis comment will be updated when code changes. |
renovate
bot
force-pushed
the
renovate/aws-6.x
branch
2 times, most recently
from
0cd2331 to
3cafb56
Compare
renovate
bot
force-pushed
the
renovate/aws-6.x
branch
from
3cafb56 to
db58b80
Compare
renovate
bot
force-pushed
the
renovate/aws-6.x
branch
from
db58b80 to
1812af9
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.60.0->6.4.0Release Notes
hashicorp/terraform-provider-aws (aws)
v6.4.0Compare Source
FEATURES:
aws_s3_access_point(#43391)aws_bedrockagent_flow(#42201)aws_fsx_s3_access_point_attachment(#43391)ENHANCEMENTS:
typeargument (#43150)hybrid_access_enabled,with_federationandwith_privileged_accessattributes (#43377)options.exportargument to issue an exportable certificate (#43207)apply_on_transformed_logsargument (#43381)agent_arnsoptional (#43400)deployment_configurationargument (#43434)load_balancer.advanced_configurationargument (#43434)service.client_alias.test_traffic_rulesargument (#43434)deployment_controller.typechanges no longer force a replacement (#43434)with_privileged_accessargument (#43377)skip_destroyargument (#43415)BUG FIXES:
parent_action_group_signatureon Read (#43355)Inappropriate value for attribute "regional_parameters"errors during planning. This fixes a regression introduced in v6.0.0 (#43382)transit_gateway_attachment_idas ForceNew if the value is known not to change (#43405)waiting for Lambda Function (...) version publish: unexpected state '', wanted target 'Successful'errors on Update. This fixes a regression introduced in v6.2.0 (#43416)sub_slot_setting.slot_specification.value_elicitation_setting.prompt_specification.prompt_attempts_specificationandvalue_elicitation_setting.prompt_specification.prompt_attempts_specificationhave default values (#43358)meta_store_role_arnto be updated in-place (#36874)v6.3.0Compare Source
FEATURES:
aws_prometheus_query_logging_configuration(#43222)ENHANCEMENTS:
anycast_ip_list_idattribute (#43196)core_network_configuration.dns_supportandcore_network_configuration.security_group_referencing_supportarguments (#43277)anycast_ip_list_idargument (#43196)replica.consistency_modeargument in support of multi-Region strong consistency for Amazon DynamoDB global tables (#43236)BUG FIXES:
runtime error: invalid memory address or nil pointer dereferencepanics for numerous resource types when modifyingtags(#43324)operation can't be performed on Agent when it is in Preparing state.errors during agent action group base creation, update, and deletion. (#43232)operation can't be performed on Agent when it is in Preparing state.errors during agent knowledge base creation and disassociation (#43232)managed_login_versionfor custom Cognito domains (#43252)InvalidDBInstanceStateerrors on delete (#43303)interface conversion: interface {} is nil, not map[string]interface {}panics when configuration blocks are empty (#43308)InvalidDBClusterStateFaulterrors on delete (#43303)availability_zone_relocation_enabled(#43270)resource_propertiesto Computed to enablevpc_endpointassociations (#42562)arnwhen refreshing state. (#43273)v6.2.0Compare Source
ENHANCEMENTS:
tagsattribute. This functionality requires thekinesis:ListTagsForResourceIAM permission (#43173)firewall_policy.stateful_rule_group_reference.deep_threat_inspectionattribute (#43137)configuration.internal_accessargument (#43138)job_configargument (#43136)enable_skew_protectionargument (#43218)errorCode,eventType,sessionCredentialFromConsole, andvpcEndpointIdas valid values foradvanced_event_selector.field_selector.field(#43091)errorCode,eventType,sessionCredentialFromConsole, andvpcEndpointIdas valid values foradvanced_event_selector.field_selector.field(#43091)kms_key_identifierargument (#43139)DELIVERYas a valid value forlog_group_class(#42658)environment.docker_serverconfiguration block (#42982)disable_session_tagsandtarget_role_arnarguments andexternal_idattribute (#42979)os_release_labelargument (#43018)resource_tag_logical_operatorargument (#43031)job_modeargument (#42607)tagsargument andtags_allattribute. This functionality requires thekinesis:ListTagsForResource,kinesis:TagResource, andkinesis:UntagResourceIAM permissions (#43173)HMAC_224,HMAC_384,HMAC_512,ML_DSA_44,ML_DSA_65, andML_DSA_87as valid values forcustomer_master_key_spec(#43128)-1is now a valid value forport_info.from_portandport_info.to_port(#37703)firewall_policy.stateful_rule_group_reference.deep_threat_inspectionargument (#43137)exclude_resource_tagsargument (#43189)tagsargument andtags_allattribute. This functionality requires thes3express:ListTagsForResource,s3express:TagResource, ands3express:UntagResourceIAM permissions (#43256)metadataargument (#43112)aws_managed_rules_anti_ddos_rule_settomanaged_rule_group_configsconfiguration block in support of L7 DDoS protection (#43149)BUG FIXES:
Unexpected Identity Changeerrors for numerous resource types when refreshing resources created or refreshed by Terraform AWS Provider v6.0.0 (#43221)Exceeded the number of retries on OptLock failure. Too many concurrent requests.errors during update (#43179)Prepare operation can't be performed on Agent when it is in Preparing state.errors during prepare (#43179)Update operation can't be performed on Agent when it is in Preparing state.errors during update (#43179)operation can't be performed on Agent when it is in Preparing state.errors during agent collaborator update and disassociation (#43179)log_group_names(#43183)"") value fors3_prefix. This fixes a regression introduced in v6.0.0 (#43159)log_publishing_optionsremoved on Update. This prevents a perpetual diff (#43033)ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log streamIAM eventual consistency errors on Create (#43033)logging_configdiffs whenlog_formatis set toJSONandpublish = true(#42660)confirmation_setting.prompt_specification.prompt_attempts_specificationdefaults (#43147)log_publishing_optionsremoved on Update. This prevents a perpetual diff (#43033)ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group ... does not grant sufficient permissions for Amazon Elasticsearch Service to create a log streamIAM eventual consistency errors on Create (#43033)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)WHOLEis now a valid value fordefinition.sheets.visuals.pie_chart_visual.chart_configuration.donut_options.arc_options.arc_thickness(#37116)email(#43014)Value Conversion Errorerrors when upgrading existing resources to Terraform AWS Provider v6.0.0 (#43116)v6.0.0Compare Source
BREAKING CHANGES:
most_recentistrueand owner and image ID filter criteria has been increased to an error. Existing configurations which were previously receiving a warning diagnostic will now fail to apply. To prevent this error, set theownerargument or include afilterblock with animage-idorowner-idname/value pair. To continue using unsafe filter values withmost_recentset totrue, set the newallow_unsafe_filterargument totrue. This is not recommended. (#42114)inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)inference_accelerator_overridesattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)action.authenticate_cognito,action.authenticate_oidc,action.fixed_response,action.forward,action.forward.stickiness,action.redirect,condition.host_header,condition.http_header,condition.http_request_method,condition.path_pattern,condition.query_string, andcondition.source_ipattributes are now list nested blocks instead of single nested blocks (#42283)filterhas been removed (#42325)elastic_inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)elastic_gpu_specificationshas been removed (#42312)kibana_endpointhas been removed (#42268)saml_optionsis now a list nested block instead of a single nested block (#42270)tags_allattribute (#42136)aws_opsworks_applicationresource has been removed (#41948)aws_opsworks_custom_layerresource has been removed (#41948)aws_opsworks_ecs_cluster_layerresource has been removed (#41948)aws_opsworks_ganglia_layerresource has been removed (#41948)aws_opsworks_haproxy_layerresource has been removed (#41948)aws_opsworks_instanceresource has been removed (#41948)aws_opsworks_java_app_layerresource has been removed (#41948)aws_opsworks_memcached_layerresource has been removed (#41948)aws_opsworks_mysql_layerresource has been removed (#41948)aws_opsworks_nodejs_app_layerresource has been removed (#41948)aws_opsworks_permissionresource has been removed (#41948)aws_opsworks_php_app_layerresource has been removed (#41948)aws_opsworks_rails_app_layerresource has been removed (#41948)aws_opsworks_rds_db_instanceresource has been removed (#41948)aws_opsworks_stackresource has been removed (#41948)aws_opsworks_static_web_layerresource has been removed (#41948)aws_opsworks_user_profileresource has been removed (#41948)aws_simpledb_domainresource has been removed. Add a constraint to v5 of the Terraform AWS Provider for continued use of this resource (#41775)aws_worklink_fleetresource has been removed (#42059)aws_worklink_website_certificate_authority_associationresource has been removed (#42059)aws_redshift_service_accountresource has been removed. AWS recommends that a service principal name should be used instead of an AWS account ID in any relevant IAM policy (#41941)endpoints.iotanalyticsandendpoints.ioteventsconfiguration arguments have been removed (#42703)endpoints.opsworksconfiguration argument has been removed (#41948)endpoints.simpledbandendpoints.sdbconfiguration arguments have been removed (#41775)endpoints.worklinkconfiguration argument has been removed (#42059)filter.existsnow only accepts one of""(empty string),true, orfalse(#42434)preserve_client_ipnow only accepts one of""(empty string),true, orfalse(#42434)reset_on_deleteargument has been removed (#42226)canary_settings,execution_arn,invoke_url,stage_description, andstage_namearguments. Instead, use theaws_api_gateway_stageresource to manage stages. (#42249)compute_environment_nametonameresource/aws_batch_compute_environment: Rename
compute_environment_name_prefixtoname_prefix(#38050)compute_environment_nametoname(#38050)compute_environmentsin place ofcompute_environment_order(#40751)logging_config,logging_config.cloudwatch_config,logging_config.cloudwatch_config.large_data_delivery_s3_config, andlogging_config.s3_configare now list nested blocks instead of single nested blocks (#42307)idis now set to remote object'sIdinstead ofname(#42230)etagargument is now computed only (#38448)suspendnow only accepts one of""(empty string),true, orfalse(#42434)idattribute is now a comma-delimited string concatenating theuser_pool_id,group_name, andusernamearguments (#34082)s3_prefixargument is now required (#38446)character_set_namenow cannot be set withreplicate_source_db,restore_to_point_in_time,s3_import, orsnapshot_identifier. (#42348)s3_settingsattribute. Useaws_dms_s3_endpointinstead (#42379)vpn_gateway_idhas been removed (#42323)terminate_instances_on_deletenow only accepts one of""(empty string),true, orfalse(#42434)block_duration_minutesattribute (#42060)inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)vpchas been removed. Usedomaininstead. (#42340)resolve_conflictshas been removed. Useresolve_conflicts_on_createandresolve_conflicts_on_updateinstead. (#42318)auto_minor_version_upgradenow only accepts one of""(empty string),true, orfalse(#42434)at_rest_encryption_enabledandauto_minor_version_upgradenow only accept one of""(empty string),true, orfalse(#42434)auth_token_update_strategyno longer has a default value. Ifauth_tokenis set,auth_token_update_strategymust also be explicitly configured. (#42336)variations.value.bool_valuenow only accepts one of""(empty string),true, orfalse(#42434)log_group_namehas been removed. Uselog_destinationinstead. (#42333)idattribute is now computed only (#42097)datasources. Useaws_guardduty_detector_featureresources instead. (#42436)auto_enableattribute has been removed (#42251)filterhas been removed (#42325)instance_configuration.block_device_mapping.ebs.delete_on_terminationandinstance_configuration.block_device_mapping.ebs.encryptednow only accept one of""(empty string),true, orfalse(#42434)block_device_mapping.ebs.delete_on_terminationandblock_device_mapping.ebs.encryptednow only accept one of""(empty string),true, orfalse(#42434)cpu_core_countandcpu_threads_per_core. Instead, usecpu_options. (#42280)user_datanow displays cleartext instead of a hash. Base64 encoded content should useuser_data_base64instead. (#42078)block_device_mappings.ebs.delete_on_termination,block_device_mappings.ebs.encrypted,ebs_optimized,network_interfaces.associate_carrier_ip_address,network_interfaces.associate_public_ip_address,network_interfaces.delete_on_termination, andnetwork_interfaces.primary_ipv6now only accept one of""(empty string),true, orfalse(#42434)elastic_inference_acceleratorattribute. Amazon Elastic Inference reached end of life on April, 2024. (#42137)elastic_gpu_specificationshas been removed (#42312)mutual_authenticationattributesadvertise_trust_store_ca_names,ignore_client_certificate_expiry, andtrust_store_arnare only valid ifmodeisverify(#42326)preserve_client_ipnow only accepts one of""(empty string),true, orfalse(#42434)logs.auditnow only accepts one of""(empty string),true, orfalse(#42434)base_policy_regionargument has been removed. Usebase_policy_regionsinstead. (#38398)kibana_endpointhas been removed (#42268)saml_optionsis now a list nested block instead of a single nested block (#42270)key_attributesandkey_attributes.key_modes_of_useare now list nested blocks instead of single nested blocks. (#42264)tags_allhas been removed (#42260)cluster_public_key,cluster_revision_number, andendpointare now read only and should not be set (#42119)loggingattribute has been removed (#42013)publicly_accessibleattribute now defaults tofalse(#41978)snapshot_copyattribute has been removed (#41995)regions_of_interest.bounding_boxis now a list nested block instead of a single nested block (#41380)policy,policy.az,policy.hardware,policy.software, andpolicy.regionare now list nested blocks instead of single nested blocks (#42297)code_editor_app_image_config,jupyter_lab_image_config, orkernel_gateway_image_configblock must be configured (#42753)idis now a comma-delimited string concatenatingimage_nameandversion(#42536)accelerator_typesfrom your configuration—it no longer exists. Instead, useinstance_typeto use Inferentia. (#42099)instance_idargument (#42224)definitionis now a list nested block instead of a single nested block (#42305)rule.statement.managed_rule_group_statement.managed_rule_group_configs.aws_managed_rules_bot_control_rule_set.enable_machine_learningnow defaults tofalse(#39858)NOTES:
nameattribute has been deprecated. All configurations usingnameshould be updated to use theregionattribute instead (#42131)bucket_regionattribute. Use of thebucket_regionattribute instead of theregionattribute is encouraged (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theaws_regionattribute instead (#42131)regionattribute has been deprecated. All configurations usingregionshould be updated to use theregionsattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theservice_regionattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use therequester_regionattribute instead (#42014)s3_us_east_1_regional_endpointargument. The ability to use the global S3 endpoint will be removed inv7.0.0. (#42375)regionattribute has been deprecated. All configurations usingregionshould be updated to use thestack_set_instance_regionattribute instead (#42014)idin favor ofarn(#42232)regionattribute has been deprecated. All configurations usingregionshould be updated to use theauthorized_aws_regionattribute instead (#42014)regionattribute has been deprecated. All configurations usingregionshould be updated to use theconnection_regionattribute instead (#42014)enginevalue is deprecated (#42419)enginevalue is deprecated (#42419)enginevalue is deprecated (#42419)datasourcesnow returns a deprecation warning (#42251)aws_kinesisanalyticsv2_applicationresource instead (#42102)encryptedis nowtrueto match the AWS API. (#42631)bucket_regionattribute. Use of thebucket_regionattribute instead of theregionattribute is encouraged (#42014)health_check_custom_config.failure_thresholdis deprecated. The argument is no longer supported by AWS and is always set to 1 (#40777)regionattribute has been deprecated. All configurations usingregionshould be updated to use theaws_regionattribute instead (#42131)regionattribute has been deprecated. All configurations usingregionshould be updated to use theregionsattribute instead (#42014)ENHANCEMENTS:
allow_unsafe_filterargument (#42114)group_long_nameattribute (#42014)regionas Optional, allowing a value to be configured (#42014)roles.role_arnandroles.role_type(#42131)regionsupport to most resources, data sources, and ephemeral resources, allowing per-resource Region targeting without requiring multiple provider configurations. See the Enhanced Region Support guide for more information. (#43075)control_mapping_sources.source_frequency,control_mapping_sources.source_set_up_option, andcontrol_mapping_sources.source_type(#42131)destination_account(#42741)admin_account_id(#42741)arnattribute (#42733)finding_publishing_frequency. (#42436)mutual_authenticationattributetrust_store_arnis required ifmodeisverify(#42326)policy_arn(#42131)aliasesargument (#42610)access_typesource.aws_log_source_resource.source_name, andsubscriber_identity.external_id(#42131)BUG FIXES:
Provider produced inconsistent result after applyerrors (#42131)encryptedis not explicitly set totrue. (#42631)regions_of_interest.bounding_boxandregions_of_interest.polygonargument validation (#41380)access_typeto ForceNew (#42131)v5.100.0Compare Source
NOTES:
FEATURES:
aws_dsql_cluster(#41868)aws_dsql_cluster_peering(#41868)aws_prometheus_workspace_configuration(#42478)aws_s3control_directory_bucket_access_point_scope(#42338)aws_vpc_route_server(#42392)aws_vpc_route_server_endpoint(#42392)aws_vpc_route_server_peer(#42392)aws_vpc_route_server_propagation(#42392)aws_vpc_route_server_vpc_association(#42392)aws_workspacesweb_data_protection_settings(#42852)aws_workspacesweb_ip_access_settings(#42863)aws_workspacesweb_user_access_logging_settings(#42868)ENHANCEMENTS:
ap-east-2AWS Region (#42915)ap-east-2AWS Region (#42915)latest,has_major_target,preferred_major_targets, andpreferred_upgrade_targets(#42854)ap-east-2AWS Region (#42915)ap-east-2as a valid AWS Region (#42906)data_read_cache_configurationandthroughput_capacityarguments in support of the Intelligent-Tiering storage class (#42839)two_way_channel_roleargument (#42950)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.