chore(deps): update terraform aws to v3.76.1 #3
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
3.62.0
->3.76.1
Release Notes
hashicorp/terraform-provider-aws (aws)
v3.76.1
Compare Source
ENHANCEMENTS:
server_side_encryption_configuration
as Computed in support of S3 object encryption by default (#28702)v3.76.0
Compare Source
NOTES:
subtype
attribute will always have the value"DEFAULT"
(#28082)ENHANCEMENTS:
nodejs18.x
runtime
value (#28082)nodejs18.x
compatible_runtimes
value (#28082)from_port
orto_port
values to the AWS API if arule
'sprotocol
value is-1
orall
(#27685)BUG FIXES:
cache_cluster_size
withoutcache_cluster_enabled
resulted in waiter error (#27541)apply_immediately
default value is applied (#28298)ServerSideEncryptionConfigurationNotFoundError
errors due to eventual consistency (#26091)rule
'sprotocol
value isall
andfrom_port
orto_port
are not0
(#27685)sqs_managed_sse_enabled
toComputed
as newly created SQS queues use SSE-SQS encryption by default. This means that Terraform will only perform drift detection of the attribute's value when present in a configuration (#27313)sqs_managed_sse_enabled
value on resource Create. In particular a configuredfalse
value is sent to the AWS API, which overrides the new service default value oftrue
(#27338)v3.75.2
Compare Source
ENHANCEMENTS:
nodejs16.x
runtime
value (#24874)nodejs16.x
compatible_runtimes
value (#24874)routing_rules
parameter to be used instead ofrouting_rule
to support configurations with empty String values (#24199)v3.75.1
Compare Source
BUG FIXES:
v3.75.0
Compare Source
NOTES:
acceleration_status
argument has been deprecated. Use theaws_s3_bucket_accelerate_configuration
resource instead. (#23471)acl
andgrant
arguments have been deprecated. Use theaws_s3_bucket_acl
resource instead. (#23419)cors_rule
argument has been deprecated. Use theaws_s3_bucket_cors_configuration
resource instead. (#23434)lifecycle_rule
argument has been deprecated. Use theaws_s3_bucket_lifecycle_configuration
resource instead. (#23445)logging
argument has been deprecated. Use theaws_s3_bucket_logging
resource instead. (#23430)object_lock_configuration.object_lock_enabled
argument has been deprecated. Use the top-level argumentobject_lock_enabled
instead. (#23449)object_lock_configuration.rule
argument has been deprecated. Use theaws_s3_bucket_object_lock_configuration
resource instead. (#23449)replication_configuration
argument has been deprecated. Use theaws_s3_bucket_replication_configuration
resource instead. (#23716)request_payer
argument has been deprecated. Use theaws_s3_bucket_request_payment_configuration
resource instead. (#23473)server_side_encryption_configuration
argument has been deprecated. Use theaws_s3_bucket_server_side_encryption_configuration
resource instead. (#23476)versioning
argument has been deprecated. Use theaws_s3_bucket_versioning
resource instead. (#23432)website
,website_domain
, andwebsite_endpoint
arguments have been deprecated. Use theaws_s3_bucket_website_configuration
resource instead. (#23435)FEATURES:
aws_s3_bucket_accelerate_configuration
(#23471)aws_s3_bucket_acl
(#23419)aws_s3_bucket_cors_configuration
(#23434)aws_s3_bucket_lifecycle_configuration
(#23445)aws_s3_bucket_logging
(#23430)aws_s3_bucket_object_lock_configuration
(#23449)aws_s3_bucket_request_payment_configuration
(#23473)aws_s3_bucket_server_side_encryption_configuration
(#23476)aws_s3_bucket_versioning
(#23432)aws_s3_bucket_website_configuration
(#23435)ENHANCEMENTS:
dotnet6
runtime
value (#23670)dotnet6
compatible_runtimes
value (#23670)object_lock_enabled
parameter (#23449)aws_s3_bucket.lifecycle_rule
parameter in provider versions prior to v4.0) (#23750)token
field to specifyx-amz-bucket-object-lock-token for enabling replication on object lock enabled
buckets or enabling object lock on an existing bucket. (#23716)
Disabled
bucket versioning (#23731)BUG FIXES:
cors_rule
(#7547)rule
configuration block to list instead of set (#23737)rule.filter
configuration block in API requests (#23716)key
andvalue
arguments of therule.filter.tag
configuration block are correctly populated in the outgoing API request and terraform state. (#23716)rule.filter.prefix
is an empty string (#23716)rule.id
as Computed to prevent drift when the value is not configured (#23737)v3.74.3
Compare Source
BUG FIXES:
activated_rule
(#22978)activated_rule
(#22978)v3.74.2
Compare Source
BUG FIXES:
engine_version
string is shorter than theEngineVersion
string returned from the AWS API (#23039)ipsec.1-aes256
connection type (#23127)v3.74.1
Compare Source
BUG FIXES:
condition
andnot_resources
arguments causing resource recreation (#22882)v3.74.0
Compare Source
FEATURES:
aws_api_gateway_export
(#22731)aws_api_gateway_sdk
(#22731)aws_apigatewayv2_export
(#22732)aws_connect_contact_flow_module
(#22518)aws_connect_prompt
(#22636)aws_connect_quick_connect
(#22527)aws_datapipeline_pipeline
(#22597)aws_datapipeline_pipeline_definition
(#22597)aws_imagebuilder_components
(#21881)aws_imagebuilder_distribution_configurations
(#22733)aws_imagebuilder_infrastructure_configurations
(#22723)aws_connect_queue
(#22566)aws_connect_security_profile
(#22369)aws_dataexchange_data_set
(#22697)aws_datapipeline_pipeline_definition
(#22597)aws_devicefarm_test_grid_project
(#22688)aws_ecs_cluster_capacity_providers
(#22672)aws_sagemaker_project
(#21534)ENHANCEMENTS:
web_acl_arn
attribute (#18561)user_group_ids
to associateaws_elasticache_user_group
withaws_elasticache_replication_group
(#20406)container_distribution_configuration
argument (#22758)credential_duration
argument to43200
(12 hours) (#22757)private_ip_list
,private_ip_list_enabled
,ipv6_address_list
, andipv6_address_list_enabled
attributes (#17846)eventbridge
argument (#22045)BUG FIXES:
origin_keepalive_timeout
value to180
(#22632)aws_ecs_cluster_capacity_providers
to avoid bugs usingcapacity_providers
anddefault_capacity_provider_strategy
, which arguments will be deprecated in a future version (#22672)ap-southeast-3
AWS Region (#22693)default
DHCP Options ID (#22722)v3.73.0
Compare Source
FEATURES:
aws_cloudfront_origin_access_identity
(#22572)aws_vpc_ipam_preview_next_cidr
(#22643)aws_appsync_api_cache
(#22578)aws_appsync_domain_name
(#22487)aws_appsync_domain_name_api_association
(#22487)aws_cloudsearch_domain
(#17723)aws_cloudsearch_domain_service_access_policy
(#17723)aws_detective_invitation_accepter
(#22163)aws_detective_member
(#22163)aws_fsx_data_repository_association
(#22291)aws_lambda_invocation
(#19488)ENHANCEMENTS:
client_names
attribute (#22615)user_data_base64
attribute (#21763)billing_mode
fromPAY_PER_REQUEST
toPROVISIONED
and provisioned throughput is ignored. (#22630)file_system_type_version
argument (#22291)user_data_base64
argument (#21763)ebs_volume.type
andcustom_json
. (#12433)cloudwatch_configuration
(#12433)BUG FIXES:
binding_certificate
as a valid target when waiting for creation. (#20222)origin_keepalive_timeout
value to180
(#22632)policy
when no changes are detected (#22665)policy_attribute
differences (#21776)v3.72.0
Compare Source
FEATURES:
aws_cognito_user_pool_client
(#22477)aws_cognito_identity_pool_provider_principal_tag
(#22514)aws_connect_contact_flow_module
(#22349)aws_connect_quick_connect
(#22250)aws_devicefarm_instance_profile
(#22458)aws_memorydb_snapshot
(#22486)aws_shield_protection_health_check_association
(#21993)ENHANCEMENTS:
aliases
attribute (#22552)certificate_arn
attribute (#22435)storage_tier
andoutpost_arn
attributes. (#22342)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22535)ip_family
to thekubernetes_network_config
configuration block (#22485)ap-southeast-3
AWS Region (#22453)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)instance_metadata_tags
attribute to themetadata_options
configuration block (#22463)instance_metadata_tags
attribute to themetadata_options
configuration block (#22463)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)af-south-1
andeu-south-1
AWS Regions (#22455)af-south-1
andeu-south-1
AWS Regions (#22455)af-south-1
,ap-northeast-3
andeu-south-1
AWS Regions (#22455)af-south-1
,ap-east-1
,cn-north-1
,cn-northwest-1
,eu-north-1
,eu-south-1
,eu-west-3
,me-south-1
andsa-east-1
AWS Regions (#22455)af-south-1
,ap-northeast-3
andeu-south-1
AWS Regions (#22455)tags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22516)authorization_config
attribute to thehttp_config
configuration block (#22411)delta_sync_config
andversioned
to thedynamodb_config
configuration block (#22411)relational_database_config
argument (#22411)service_role_arn
andlambda_config.function_arn
(#22411)max_batch_size
andsync_config
arguments. (#22484)max_batch_size
andsync_config
arguments. (#22510)condition
configuration block andnot_resources
argument in support of fine-grained backup plan resource assignment (#22074)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22550)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22550)force_update
argument. (#22460)access_policy
. (#22460)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22556)certificate_arn
argument (#22435)outpost_arn
,storage_tier
,permanent_restore
,temporary_restore_days
arguments (#22342)storage_tier
,permanent_restore
,temporary_restore_days
arguments (#22342)storage_tier
,permanent_restore
,temporary_restore_days
arguments (#22342)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22535)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)skip_destroy
argument to optionally prevent overwriting previous revision (#22269)family
(#18610)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22529)ip_family
to thekubernetes_network_config
configuration block (#22485)delta_target
argument. (#22472)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22544)instance_metadata_tags
argument to themetadata_options
configuration block (#22463)instance_metadata_tags
argument to themetadata_options
configuration block (#22463)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22551)object_lock_configuration
causing errors in partitions (e.g., ISO) where not supported (#22575)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22511)tags
-on-create, fallback to tag after create, and allow sometags
errors to be non-fatal to support non-standard AWS partitions (i.e., ISO) (#22516)ipv6_cidr_block_network_border_group
argument (#22211)disallowed_cidrs
argument (#22470)disallowed_cidrs
argument (#22501)vgw_telemetry.certificate_arn
attribute (#19311)customer_gateway_id
,transit_gateway_id
andvpn_gateway_id
can be updated without recreating the resource (#19311)tunnel1_preshared_key
andtunnel2_preshared_key
can be updated without recreating the resource (#19311)BUG FIXES:
address_family
,allocation_default_netmask_length
,allocation_max_netmask_length
,allocation_min_netmask_length
andtags
attributes (#22438)origin_read_timeout
value to180
(#22461)per_unit_storage_throughput
validation (#22462)root_volume_configuration.copy_tags_to_snapshots
to ForceNew (#22480)root_volume_configuration.nfs_exports
value (#22480)Condition
value contains an empty array (#22547)version
as Computed whenvalue
changes (#22522)availability_zone_id
is not supported in a partition (e.g., ISO) (#22580)ap-southeast-3
region (#22531)v3.71.0
Compare Source
FEATURES:
aws_batch_scheduling_policy
(#22335)aws_cognito_user_pool_clients
(#22289)aws_cognito_user_pool_signing_certificate
(#22285)aws_mskconnect_custom_plugin
(#22333)aws_mskconnect_worker_configuration
(#22414)aws_organizations_resource_tags
(#22371)aws_ses_active_receipt_rule_set
(#22310)aws_ses_domain_identity
(#22321)aws_ses_email_identity
(#22321)aws_batch_scheduling_policy
(#22262)aws_cloud9_environment_membership
(#11857)aws_codebuild_resource_policy
(#22196)aws_datasync_location_fsx_lustre_file_system
(#22346)aws_datasync_location_hdfs
(#22347)aws_devicefarm_device_pool
(#21025)aws_devicefarm_network_profile
(#22448)aws_devicefarm_upload
(#22443)aws_fsx_openzfs_file_system
(#22234)aws_fsx_openzfs_snapshot
(#22234)aws_fsx_openzfs_volume
(#22234)aws_memorydb_cluster
(#22388)aws_memorydb_parameter_group
(#22304)aws_memorydb_subnet_group
(#22256)aws_memorydb_user
(#22261)aws_mskconnect_custom_plugin
(#22333)aws_mskconnect_worker_configuration
(#22414)aws_sagemaker_device
(#22427)aws_vpc_endpoint_connection_accepter
(#19083)aws_vpc_ipam_organization_admin_account
(#22394)ENHANCEMENTS:
scheduling_policy_arn
attribute (#22348)ap-southeast-3
AWS Region (#22295)arn
attribute. (#21856)ap-southeast-3
AWS Region (#22295)ap-southeast-3
AWS Region (#22295)recursive
argument (#22222)enable_dns64
,ipv6_native
,enable_resource_name_dns_aaaa_record_on_launch
,enable_resource_name_dns_a_record_on_launch
andprivate_dns_hostname_type_on_launch
attributes (#22339)duration
,external_id
andsession_name
arguments in theassume_role
configuration block (#18085)scheduling_policy_arn
attribute (#22298)name
,automatic_stop_time_minutes
,description
. (#18560)ordered_cache_behavior.forwarded_values.cookies
,ordered_cache_behavior.lambda_function_association.event_type
,ordered_cache_behavior.lambda_function_association.lambda_arn
,ordered_cache_behavior.function_association.lambda_arn
,ordered_cache_behavior.function_association.event_type
,ordered_cache_behavior.viewer_protocol_policy
,comment
,default_cache_behavior.forwarded_values.cookies
,default_cache_behavior.lambda_function_association.event_type
,ordered_cache_behavior.lambda_function_association.lambda_arn
,default_cache_behavior.function_association.lambda_arn
,default_cache_behavior.function_association.event_type
,default_cache_behavior.viewer_protocol_policy
,origin.custom_origin_config.origin_keepalive_timeout
,origin.custom_origin_config.origin_read_timeout
,origin.custom_origin_config.origin_protocol_policy
,origin.custom_origin_config.origin_ssl_protocols
,price_class
,viewer_certificate.acm_certificate_arn
,viewer_certificate.minimum_protocol_version
,viewer_certificate.ssl_support_method
. (#21034)artifacts.bucket_owner_access
,secondary_artifacts.bucket_owner_access
,logs_config.s3_logs.bucket_owner_access
,project_visibility
,resource_access_role
arguments. (#22189)public_project_alias
attribute. (#22189)secondary_source_version
argument (#22345)cache.modes
andservice_role
. (#22189)name
,role_arn
,stage.name
,stage.action.name
,stage.action.name
,stage.action.run_order
,stage.action.namespace
,action.configuration
, andaction.version
(#18451)arn
aConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.