chore(deps): update terraform aws to v6.5.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	6.4.0 -> 6.5.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.5.0

Compare Source

NOTES:

• resource/aws_cognito_log_delivery_configuration: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#​43396)
• resource/aws_ecs_service: Acceptance tests cannot fully reproduce scenarios with deployments older than 3 months. Community feedback on this fix is appreciated, particularly for long-running ECS services with in-place updates (#​43502)

FEATURES:

• New Data Source: aws_ecr_images (#​42577)
• New Resource: aws_cognito_log_delivery_configuration (#​43396)
• New Resource: aws_networkfirewall_firewall_transit_gateway_attachment_accepter (#​43430)
• New Resource: aws_s3_bucket_metadata_configuration (#​41364)

ENHANCEMENTS:

• data-source/aws_dms_endpoint: Add postgres_settings.authentication_method and postgres_settings.service_access_role_arn attributes (#​43440)
• data-source/aws_networkfirewall_firewall: Add availability_zone_change_protection, availability_zone_mapping, firewall_status.sync_states.attachment.status_message, firewall_status.transit_gateway_attachment_sync_states, transit_gateway_id, and transit_gateway_owner_account_id attributes (#​43430)
• resource/aws_alb_listener: Add resource identity support (#​43161)
• resource/aws_alb_listener_rule: Add resource identity support (#​43155)
• resource/aws_alb_target_group: Add resource identity support (#​43171)
• resource/aws_dms_endpoint: Add oracle_settings configuration block for authentication method (#​43125)
• resource/aws_dms_endpoint: Add postgres_settings.authentication_method and postgres_settings.service_access_role_arn arguments (#​43440)
• resource/aws_dms_endpoint: Add plan-time validation of postgres_settings.database_mode, postgres_settings.map_long_varchar_as, and postgres_settings.plugin_name arguments (#​43440)
• resource/aws_dms_replication_instance: Add dns_name_servers attribute and kerberos_authentication_settings configuration block for Kerberos authentication settings (#​43125)
• resource/aws_dx_gateway_association: Add transit_gateway_attachment_id attribute. This functionality requires the ec2:DescribeTransitGatewayAttachments IAM permission (#​43436)
• resource/aws_globalaccelerator_accelerator: Add resource identity support (#​43200)
• resource/aws_globalaccelerator_custom_routing_accelerator: Add resource identity support (#​43423)
• resource/aws_glue_registry: Add resource identity support (#​43450)
• resource/aws_glue_schema: Add resource identity support (#​43450)
• resource/aws_iam_openid_connect_provider: Add resource identity support (#​43503)
• resource/aws_iam_policy: Add resource identity support (#​43503)
• resource/aws_iam_saml_provider: Add resource identity support (#​43503)
• resource/aws_iam_service_linked_role: Add resource identity support (#​43503)
• resource/aws_inspector2_enabler: Support CODE_REPOSITORY as a valid value for resource_types (#​43525)
• resource/aws_inspector2_organization_configuration: Add auto_enable.code_repository argument (#​43525)
• resource/aws_lb_listener: Add resource identity support (#​43161)
• resource/aws_lb_listener_rule: Add resource identity support (#​43155)
• resource/aws_lb_target_group: Add resource identity support (#​43171)
• resource/aws_lb_trust_store: Add resource identity support (#​43186)
• resource/aws_networkfirewall_firewall: Add availability_zone_change_protection, availability_zone_mapping, and transit_gateway_id arguments and firewall_status.transit_gateway_attachment_sync_states and transit_gateway_owner_account_id attributes (#​43430)
• resource/aws_networkfirewall_firewall: Mark subnet_mapping and vpc_id as Optional (#​43430)
• resource/aws_quicksight_account_subscription: Add import support. This resource can now be imported via the aws_account_id argument. (#​43501)
• resource/aws_sns_topic: Add resource identity support (#​43202)
• resource/aws_wafv2_rule_group: Add rules_json argument (#​43397)
• resource/aws_wafv2_web_acl: Add statement.rate_based_statement.custom_key.asn argument (#​43506)

BUG FIXES:

• provider: Prevent planned forces replacement on region for numerous resource types when upgrading from a pre-v6.0.0 provider version and -refresh=false is in effect (#​43516)
• resource/aws_api_gateway_resource: Recompute path when path_part is updated (#​43215)
• resource/aws_bedrockagent_flow: Remove definition.connection and definition.node list length limits (#​43471)
• resource/aws_ecs_service: Improve stabilization logic to handle both new deployments and in-place updates correctly. This fixes a regression introduced in v6.4.0 (#​43502)
• resource/aws_instance: Recompute ipv6_addresses when ipv6_address_count is updated (#​43158)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.