Merge branch 'main' into f/aws_sns_topic_subscription

.changelog/10036.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket_object: Existing resource can now be imported
+```

.changelog/10213.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_acmpca_certificate
+```
+
+```release-note:new-data-source
+aws_acmpca_certificate
+```

.changelog/10539.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudformation_stack: Avoid conflicts with `on_failure` and `disable_rollback`
+```

.changelog/10807.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_instance: Add support for configuration with Launch Template
+```

.changelog/10817.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_ec2_host
+```
+
+```release-note:new-data-source
+aws_ec2_host
+```

.changelog/10969.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set_instance: Retry when `OperationInProgress` errors are returned from the AWS API
+```
+
+```release-note:enhancement
+resource/aws_cloudformation_stack_set: Retry when `OperationInProgress` errors are returned from the AWS API
+```

.changelog/11522.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket_object: Add `source_hash` argument to compliment `etag`'s encryption limitations
+```

.changelog/11795.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Retry on `PutBucketEncryption` HTTP 409 errors due to eventual consistency
+```

.changelog/11936.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_backend_environment
+```

.changelog/11937.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_amplify_branch
+```
+
+```release-note:bug
+resource/aws_amplify_app: Mark the `enable_performance_mode` argument in the `auto_branch_creation_config` configuration block as `ForceNew`
+```

.changelog/11938.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_domain_association
+```

.changelog/11939.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_webhook
+```

.changelog/11967.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_parameter: Add support for `Intelligent-Tiering`
+```

.changelog/12130.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codebuild_project: Add `file_system_locations` argument
+```

.changelog/12370.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_rds_cluster_role_association
+```
+
+```release-note:enhancement
+aws_rds_cluster: Set `iam_roles` as Computed to prevent drift when the `aws_rds_cluster_role_association` resource is used
+```

.changelog/12423.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set: Add `auto_deployment` configuration block and `permissions_model` arguments (support service managed permissions)
+```

.changelog/12436.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_role: Retry `assume_role_policy` updates for IAM eventual consistency
+```

.changelog/12482.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dx_gateway_association: Changes to `proposal_id` do not force resource recreation
+```

.changelog/12548.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: Ignore allocated_storage for replica at creation time
+```

.changelog/12642.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Add validation for `role_arn`, `policy_arns`, and `policy`
+```

.changelog/12684.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_securityhub_invite_accepter
+```

.changelog/12758.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mq_broker: Support updating broker engine version without recreating broker
+```

.changelog/12787.txt

@@ -0,0 +1,6 @@
+```release-note:enhancement
+resource/aws_spot_instance_request: Add import support
+```
+```release-note:enhancement
+resource/aws_spot_instance_request: Add plan time validation for `spot_type` and `block_duration_minutes`
+```

.changelog/12817.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_metric_alarm: Add plan time validation to `alarm_name`, `comparison_operator`, `metric_name`, `metric_query.id`, `metric_query.expression`, `metric_query.metric.metric_name`, `metric_query.metric.namespace`, `metric_query.metric.unit`, `namespace`, `period`, `statistic`, `alarm_description`, `insufficient_data_actions`, `ok_actions`, `unit`, and `extended_statistic`
+```

.changelog/13127.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_spot_fleet_request: Add `on_demand_allocation_strategy`, `on_demand_max_total_price`, and `on_demand_target_capacity` arguments
+```

.changelog/13371.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add `protocols` argument
+```
+
+```release-note:enhancement
+data-source/aws_transfer_server: Add `certificate`, `endpoint_type`, `protocols` and `security_policy_name` attributes
+```

.changelog/13453.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route53_record: Support `set_identifier` values containing `_`
+```

.changelog/13474.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_scheduled_action
+```

.changelog/13476.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_replication_task: Handle read-only attributes in `replication_task_settings` to avoid unnecessary diffs.
+```

.changelog/13554.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_subnet: Add `available_ip_address_count` attributes
+```

.changelog/13564.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_eks_node_groups
+```
+
+```release-note:new-data-source
+aws_eks_node_group
+```

.changelog/13783.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_dynamodb_tag
+```
+
+```release-note:new-resource
+aws_ecs_tag
+```

.changelog/13883.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_apigatewayv2_api
+```
+
+```release-note:new-data-source
+aws_apigatewayv2_apis
+```

.changelog/13938.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_node_group: Add `node_group_name_prefix` argument
+```

.changelog/13944.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_security_groups: Adds `arns` attribute
+```

.changelog/13971.txt

@@ -0,0 +1,14 @@
+```release-note:enhancement
+resource/aws_ami: Add `usage_operation`, `platform_details`, `image_owner_alias`, `image_type`, `hypervisor`, `owner_id`, `platform`, `public` attributes
+```
+```release-note:enhancement
+resource/aws_ami_copy: Add `usage_operation`, `platform_details`, `image_owner_alias`, `image_type`, `hypervisor`, `owner_id`, `platform`, `public` attributes
+```
+
+```release-note:enhancement
+resource/aws_ami_from_instance: Add `usage_operation`, `platform_details`, `image_owner_alias`, `image_type`, `hypervisor`, `owner_id`, `platform`, `public` attributes
+```
+
+```release-note:enhancement
+data-source/aws_ami: Add `usage_operation`, `platform_details`, `ena_support` attributes
+```

.changelog/14101.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sns_topic_subscription: Add plan time validation for `subscription_role_arn` and `topic_arn`
+```
+
+```release-note:bug
+resource/aws_sns_topic_subscription: recreate subscription if topic is deleted
+```

.changelog/14123.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sns_topic_policy: Add plan time validation to `arn`
+```
+
+```release-note:enhancement
+resource/aws_sns_topic_policy: Add `owner` attribute
+```

.changelog/14193.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecr_repository_policy: Add plan time validation for `policy`
+```

.changelog/14247.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_config_configuration_aggregator: Allow name to have uppercase characters
+```

.changelog/14255.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sns_topic_subscription: Fix to avoid `delivery_policy` always showing diff.
+```

.changelog/14319.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_wafv2_web_acl_logging_configuration: Ensure `redacted_fields` are applied to the resource
+```
+
+```release-note:note
+resource/aws_wafv2_web_acl_logging_configuration: The `redacted_fields` configuration block `all_query_arguments`, `body`, and `single_query_argument` arguments have been deprecated to match the WAF API documentation
+```

.changelog/14452.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_datasync_task: Add plan time validation to `cloudwatch_log_group_arn`, `destination_location_arn` and `source_location_arn`
+```
+
+```release-note:enhancement
+resource/aws_datasync_task: Add `schedule` argument
+```

.changelog/14462.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lb_listener: Add `alpn_policy` argument
+```
+
+```release-note:enhancement
+data-source/aws_lb_listener: Add `alpn_policy` argument
+```

.changelog/14534.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codebuild_project: Add `build_batch_config` argument
+```

.changelog/14578.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_function: Handle eventual consistency issues after publishing a version
+```

.changelog/14627.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_msk_cluster: Don't recreate cluster if order of `broker_node_group_info.client_subnets` or `broker_node_group_info.security_groups` entries change
+```

.changelog/14671.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iot_authorizer
+```

.changelog/14710.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_resolver: Mark `request_template` and `response_template` as optional (support Lambda)
+```

.changelog/14714.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_securityhub_standards_control
+```

.changelog/14905.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_light_instance_public_ports: Add `cidrs` argument to `port_info`
+```

.changelog/14923.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sns_topic_subscription: Add `email`, `email-json`, and `firehose` to protocol values. Add `subscription_role_arn` argument for Firehose support. Add `confirmation_was_authenticated`, `owner_id`, and `pending_confirmation` attributes.
+```

.changelog/14935.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_cognito_user_pool_client: Add plan time validation for `name`, `default_redirect_uri`, `supported_identity_providers`
+```
+
+```release-note:enhancement
+resource/aws_cognito_user_pool_client: Add support for `access_token_validity` and `id_token_validity`, `token_validity_units`
+```
+
+```release-note:enhancement
+resource/aws_cognito_user_pool: Add support for `configuration_set` in `email_configuration`
+```

.changelog/15112.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_listener: Fix `default_action.forward.target_group` to have minimum of 1.
+```

.changelog/15167.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_log_delivery_canonical_user_id
+```

.changelog/15213.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_ssm_patch_group: Allow for a single patch group to be registered with multiple patch baselines
+```
+
+```release-note:bug
+resource/aws_ssm_patch_group: Replace `Provider produced inconsistent result after apply` with actual error message
+```

.changelog/15241.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_guardduty_organization_configuration: Add `datasources` argument
+```

.changelog/15375.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add `security_policy_name` argument
+```

.changelog/15434.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sfn_state_machine: Add `tracing_configuration` attribute
+```
+
+```release-note:bug
+resource/aws_sfn_state_machine: Handle eventual consistency of state machine updates
+```

.changelog/15442.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codebuild_project: Add `build_status_config` attribute to `source` and `secondary_sources` configuration blocks
+```

.changelog/15461.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_s3_object_copy
+```

.changelog/15463.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_timestreamwrite_database
+```

.changelog/15661.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Add `zookeeper_connect_string_tls` attribute
+```

.changelog/15785.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_launch_template: Add `placement` `host_resource_group_arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `placement` `host_resource_group_arn` argument
+```

.changelog/15828.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sns_topic: Add `fifo_topic` and `content_based_deduplication` attributes
+```

.changelog/15885.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_elasticache_global_replication_group
+```