Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 30, 2025

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider minor 6.14.1 -> 6.18.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

hashicorp/terraform-provider-aws (aws)

v6.18.0

Compare Source

NOTES:

  • data-source/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#​44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#​44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#​44327)
  • resource/aws_organizations_account: The status attribute is deprecated. Use state instead. (#​44327)
  • resource/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#​44327)

FEATURES:

  • New Resource: aws_bedrockagentcore_memory (#​44306)
  • New Resource: aws_bedrockagentcore_memory_strategy (#​44306)
  • New Resource: aws_bedrockagentcore_oauth2_credential_provider (#​44307)
  • New Resource: aws_bedrockagentcore_token_vault_cmk (#​44606)
  • New Resource: aws_bedrockagentcore_workload_identity (#​44308)

ENHANCEMENTS:

  • data-source/aws_iam_policy: Adds validation for path_prefix attribute (#​44703)
  • data-source/aws_organizations_organization: Add state, joined_method, and 'joined_timestampattributes to theaccountsandnon_master_accounts` blocks (#​44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: Add state, joined_method, and 'joined_timestampattributes to theaccounts` block (#​44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: Add state, joined_method, and 'joined_timestampattributes to theaccounts` block (#​44327)
  • resource/aws_appstream_directory_config: Add certificate_based_auth_properties argument (#​44679)
  • resource/aws_iam_policy: Adds List support (#​44703)
  • resource/aws_iam_policy: Adds validation for path attribute (#​44703)
  • resource/aws_iam_role_policy_attachment: Adds List support (#​44739)
  • resource/aws_odb_network: Add delete_associated_resources attribute to enable practitioner to delete associated oci resource. (#​44754)
  • resource/aws_organizations_account: Add state attribute (#​44327)
  • resource/aws_organizations_organization: Add state, joined_method, and 'joined_timestampattributes to theaccountsandnon_master_accounts` blocks (#​44327)

BUG FIXES:

  • data-source/aws_vpn_connection: Properly set tags attribute (#​44761)
  • resource/aws_rds_cluster: Fix "When modifying Provisioned IOPS storage, specify a value for both allocated storage and iops" error when updating RDS clusters with Provisioned IOPS storage (#​44706)
  • resource/guardduty_detector_feature: Fix additional_configuration block to ignore ordering (#​44627)

v6.17.0

Compare Source

NOTES:

  • resource/aws_quicksight_account_subscription: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#​44638)

FEATURES:

  • New Data Source: aws_rds_global_cluster (#​37286)
  • New Data Source: aws_vpn_connection (#​44622)
  • New Resource: aws_bedrockagentcore_agent_runtime (#​44301)
  • New Resource: aws_bedrockagentcore_agent_runtime_endpoint (#​44301)
  • New Resource: aws_bedrockagentcore_api_key_credential_provider (#​44302)
  • New Resource: aws_bedrockagentcore_browser (#​44303)
  • New Resource: aws_bedrockagentcore_code_interpreter (#​44304)
  • New Resource: aws_bedrockagentcore_gateway (#​44305)
  • New Resource: aws_bedrockagentcore_gateway_target (#​44305)

ENHANCEMENTS:

  • resource/aws_imagebuilder_container_recipe: Update EBS throughput maximum validation from 1000 to 2000 MiB/s for gp3 volumes (#​44604)
  • resource/aws_imagebuilder_image_recipe: Update EBS throughput maximum validation from 1000 to 2000 MiB/s for gp3 volumes (#​44604)
  • resource/aws_launch_template: Update EBS throughput maximum validation from 1000 to 2000 MiB/s for gp3 volumes (#​44604)
  • resource/aws_quicksight_account_subscription: Add admin_pro_group, author_pro_group, and reader_pro_group arguments (#​44638)
  • resource/aws_subnet: Adds List support (#​44671)
  • resource/aws_vpc: Adds List support (#​44609)

BUG FIXES:

  • resource/aws_ec2_transit_gateway_route_table_propagation.test: Fix bug causing inconsistent final plan errors (#​44542)
  • resource/aws_lambda_function: Reset non-API attributes (source_code_hash, s3_bucket, s3_key, s3_object_version and filename) to their previous values when an update operation fails (#​42829)

v6.16.0

Compare Source

FEATURES:

  • New Action: aws_transcribe_start_transcription_job (#​44445)
  • New Data Source: aws_odb_cloud_autonomous_vm_clusters (#​44336)
  • New Data Source: aws_odb_cloud_exadata_infrastructures (#​44336)
  • New Data Source: aws_odb_cloud_vm_clusters (#​44336)
  • New Data Source: aws_odb_network_peering_connections (#​44336)
  • New Data Source: aws_odb_networks (#​44336)
  • New Resource: aws_prometheus_resource_policy (#​44256)
  • New Resource: aws_transfer_host_key (#​44559)
  • New Resource: aws_transfer_web_app (#​42708)
  • New Resource: aws_transfer_web_app_customization (#​42708)

ENHANCEMENTS:

  • resource/aws_codebuild_project: Add auto_retry_limit argument (#​40035)
  • resource/aws_emrserverless_application: Add scheduler_configuration block (#​44589)
  • resource/aws_lambda_event_source_mapping: Add schema_registry_config configuration blocks to amazon_managed_kafka_event_source_config and self_managed_kafka_event_source_config blocks (#​44540)
  • resource/aws_ssmcontacts_contact: Add resource identity support (#​44548)
  • resource/aws_vpclattice_resource_gateway: Add ipv4_addresses_per_eni argument (#​44560)

BUG FIXES:

  • provider: Correctly validate AWS European Sovereign Cloud Regions in ARNs (#​44573)
  • provider: Fix Missing Resource Identity After Update errors for non-refreshed and failed updates of Plugin Framework based resources (#​44518)
  • provider: Fix Unexpected Identity Change errors when fully-null identity values in state are updated to valid values for Plugin Framework based resources (#​44518)
  • resource/aws_datazone_environment: Correctly updates glossary_terms. (#​44491)
  • resource/aws_datazone_environment: Prevents unknown value error when optional account_identifier is not specified. (#​44491)
  • resource/aws_datazone_environment: Prevents unknown value error when optional account_region is not specified. (#​44491)
  • resource/aws_datazone_environment: Prevents error when updating. (#​44491)
  • resource/aws_datazone_environment: Prevents occasional unexpected state error when deleting. (#​44491)
  • resource/aws_datazone_environment: Properly passes blueprint_identifier on creation. (#​44491)
  • resource/aws_datazone_environment: Sets values for user_parameters when importing. (#​44491)
  • resource/aws_datazone_environment: Values in user_parameters should not be updateable. (#​44491)
  • resource/aws_datazone_project: No longer ignores errors when deleting. (#​44491)
  • resource/aws_datazone_project: No longer returns error when already deleting. (#​44491)
  • resource/aws_dynamodb_table: Do not retry on LimitExceededException (#​44576)
  • resource/aws_ivschat_room: Set maximum_message_rate_per_second validation maximum to 100 (#​44572)
  • resource/aws_launch_template: kms_key_id validation now accepts key ID, alias, and alias ARN in addition to key ARN (#​44505)
  • resource/aws_servicecatalog_portfolio_share: Add global mutex lock around create and delete operations to prevent ThrottlingException errors (#​24730)

v6.15.0

Compare Source

BREAKING CHANGES:

  • resource/aws_ecs_service: Fix behavior when updating capacity_provider_strategy to avoid ECS service recreation after recent AWS changes (#​43533)

FEATURES:

  • New Action: aws_codebuild_start_build (#​44444)
  • New Action: aws_events_put_events (#​44487)
  • New Action: aws_sfn_start_execution (#​44464)
  • New Data Source: aws_appconfig_application (#​44168)
  • New Data Source: aws_odb_db_node (#​43792)
  • New Data Source: aws_odb_db_nodes (#​43792)
  • New Data Source: aws_odb_db_server (#​43792)
  • New Data Source: aws_odb_db_servers (#​43792)
  • New Data Source: aws_odb_db_system_shapes (#​43825)
  • New Data Source: aws_odb_gi_versions (#​43825)
  • New Resource: aws_lakeformation_lf_tag_expression (#​43883)

ENHANCEMENTS:

  • data-source/aws_dms_endpoint: Add mysql_settings attribute (#​44516)
  • data-source/aws_ec2_instance_type_offering: Add location attribute (#​44328)
  • data-source/aws_rds_proxy: Add default_auth_scheme attribute (#​44309)
  • resource/aws_cleanrooms_configured_table: Add resource identity support (#​44435)
  • resource/aws_cloudfront_distribution: Add ip_address_type argument to origin.custom_origin_config block (#​44463)
  • resource/aws_connect_instance: Add resource identity support (#​44346)
  • resource/aws_connect_phone_number: Add resource identity support (#​44365)
  • resource/aws_dms_endpoint: Add mysql_settings configuration block (#​44516)
  • resource/aws_dsql_cluster: Adds attribute force_destroy. (#​44406)
  • resource/aws_ebs_volume: Update throughput maximum validation from 1000 to 2000 MiB/s for gp3 volumes (#​44514)
  • resource/aws_ecs_capacity_provider: Add cluster and managed_instances_provider arguments (#​44509)
  • resource/aws_ecs_capacity_provider: Make auto_scaling_group_provider optional (#​44509)
  • resource/aws_iam_service_specific_credential: Add support for Bedrock API keys with credential_age_days, service_credential_alias, service_credential_secret, create_date, and expiration_date attributes (#​44299)
  • resource/aws_networkfirewall_logging_configuration: Add enable_monitoring_dashboard argument (#​44515)
  • resource/aws_opensearch_domain: Add aiml_options argument (#​44417)
  • resource/aws_pinpointsmsvoicev2_phone_number: Update two_way_channel_arn argument to accept connect.[region].amazonaws.com in addition to ARNs (#​44372)
  • resource/aws_rds_proxy: Add default_auth_scheme argument (#​44309)
  • resource/aws_rds_proxy: Make auth configuration block optional (#​44309)
  • resource/aws_route53recoverycontrolconfig_cluster: Add network_type argument (#​44377)
  • resource/aws_route53recoverycontrolconfig_cluster: Add tagging support (#​44473)
  • resource/aws_route53recoverycontrolconfig_control_panel: Add tagging support (#​44473)
  • resource/aws_route53recoverycontrolconfig_safety_rule: Add tagging support (#​44473)
  • resource/aws_s3control_bucket: Add resource identity support (#​44379)
  • resource/aws_sfn_activity: Add arn argument (#​44408)
  • resource/aws_sfn_activity: Add resource identity support (#​44408)
  • resource/aws_sfn_alias: Add resource identity support (#​44408)
  • resource/aws_ssmcontacts_contact_channel: Add resource identity support (#​44369)

BUG FIXES:

  • data-source/aws_lb: Fix Invalid address to set: []string{"secondary_ips_auto_assigned_per_subnet"} errors (#​44485)
  • data-source/aws_networkfirewall_firewall_policy: Fix failure to retrieve multiple firewall_policy.stateful_rule_group_reference attributes (#​44482)
  • data-source/aws_servicequotas_service_quota: Fixed a panic that occurred when a non-existing quota_name was provided (#​44449)
  • resource/aws_bedrock_provisioned_model_throughput: Fix AttributeName("arn") still remains in the path: could not find attribute or block "arn" in schema errors when upgrading from a pre-v6.0.0 provider version (#​44434)
  • resource/aws_chatbot_slack_channel_configuration: Force resource replacement when configuration_name is modified (#​43996)
  • resource/aws_cloudwatch_event_rule: Do not retry on LimitExceededException (#​44489)
  • resource/aws_cloudwatch_log_resource_policy: Do not retry on LimitExceededException (#​44522)
  • resource/aws_default_vpc: Correctly set ipv6_cidr_block when the VPC has multiple associated IPv6 CIDRs (#​44362)
  • resource/aws_dms_endpoint: Ensure that postgres_settings are updated (#​44389)
  • resource/aws_dsql_cluster: Prevents error when optional attribute deletion_protection_enabled not set. (#​44406)
  • resource/aws_eks_cluster: Change compute_config, kubernetes_network_config.elastic_load_balancing, and storage_config. to Optional and Computed, allowing EKS Auto Mode settings to be enabled, disabled, and removed from configuration (#​44334)
  • resource/aws_elastic_beanstalk_configuration_template: Fix inconsistent final plan error in some cases with setting elements. (#​44461)
  • resource/aws_elastic_beanstalk_environment: Fix inconsistent final plan error in some cases with setting elements. (#​44461)
  • resource/aws_elasticache_cluster: Fix provider produced unexpected value for cache_usage_limits argument. (#​43841)
  • resource/aws_fsx_lustre_file_system: Fixed to update metadata_configuration first to allow simultaneous increase of metadata_configuration.iops and storage_capacity (#​44456)
  • resource/aws_instance: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#​44459)
  • resource/aws_kinesisanalyticsv2_application: Ensure that configured application_configuration.run_configuration values are respected during update (#​43490)
  • resource/aws_odb_cloud_autonomous_vm_cluster : Fixed planmodifier for computed attribute. (#​44401)
  • resource/aws_odb_cloud_vm_cluster : Fixed planmodifier for computed attribute. Fixed planmodifier from display_name attribute. (#​44401)
  • resource/aws_odb_cloud_vm_cluster : Fixed planmodifier for data_storage_size_in_tbs. Marked it mandatory. Fixed gi-version issue during creation (#​44498)
  • resource/aws_odb_network_peering_connection : Fixed planmodifier for computed attribute. (#​44401)
  • resource/aws_rds_cluster: Fixes error when setting database_insights_mode with global_cluster_identifier. (#​44404)
  • resource/aws_route53_health_check: Fix child_health_threshold to properly accept explicitly specified zero value (#​44006)
  • resource/aws_s3_bucket_lifecycle_configuration: Allows unsetting noncurrent_version_expiration.newer_noncurrent_versions and noncurrent_version_transition.newer_noncurrent_versions. (#​44442)
  • resource/aws_s3_bucket_lifecycle_configuration: Do not warn if no filter element is set (#​43590)
  • resource/aws_vpc: Correctly set ipv6_cidr_block when the VPC has multiple associated IPv6 CIDRs (#​44362)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/aws-6.x branch 3 times, most recently from fa5f0d4 to b38712a Compare October 30, 2025 08:15
@renovate renovate bot force-pushed the renovate/aws-6.x branch from b38712a to 8731fc9 Compare October 30, 2025 10:43
@rmvangun rmvangun merged commit 9fb65b1 into main Oct 30, 2025
6 checks passed
@rmvangun rmvangun deleted the renovate/aws-6.x branch October 30, 2025 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants