Merge branch 'main' into HEAD

.actrc

@@ -2,3 +2,5 @@
 # The `full` variants are needed for Maven for TeamCity configuration validation
 -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
 -P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-xl=ghcr.io/catthehacker/ubuntu:act-22.04

.changelog/17457.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_route53_zones
+```

.changelog/20386.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Fixes error when `schema` has empty `string_attribute_constraints` or `number_attribute_constraints`
+```

.changelog/21834.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_batch_job_definition: Suppress unnecessary differences in `container_properties.environment`
+```

.changelog/24183.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp
+```
+
+```release-note:bug
+resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp
+```

.changelog/25036.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_pinpointsmsvoicev2_phone_number
+```
+
+```release-note:new-resource
+aws_pinpointsmsvoicev2_opt_out_list
+```

.changelog/25468.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elastic_beanstalk_application_version: Add `process` argument
+```

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/27274.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Add `assign_generated_ipv6_cidr_block` and `ipv6_pool` arguments
+```

.changelog/29034.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_data_source: Add `credentials.secret_arn` argument
+```

.changelog/29415.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `performance_insights_enabled`, `performance_insights_kms_key_id`, and `performance_insights_retention_period` arguments
+```

.changelog/29663.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_db_option_group: Add `skip_destroy` argument
+```
+
+```release-note:enhancement
+resource/aws_db_parameter_group: Add `skip_destroy` argument
+```

.changelog/29671.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sesv2_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list
+```

.changelog/29832.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_elasticache_reserved_cache_node
+```
+
+```release-note:new-data-source
+aws_elasticache_reserved_cache_node_offering
+```

.changelog/30167.txt

@@ -0,0 +1,4 @@
+```release-note:enhancement
+resource/aws_route53_resolver_endpoint: Add `resolver_endpoint_type` argument
+resource/aws_route53_resolver_rule: Add `ipv6` optional argument to the `target_ip` object
+```

.changelog/31284.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting
+```

.changelog/31453.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags
+```

.changelog/31737.txt

@@ -0,0 +1,11 @@
+```release-note:new-data-source
+aws_quicksight_analysis
+```
+
+```release-note:bug
+resource/aws_quicksight_analysis: Properly send `theme_arn` argument on create and update when configured
+```
+
+```release-note:enhancement
+resource/aws_quicksight_data_source: Add `parameters.databricks` argument
+```

.changelog/33266.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_pinpoint_email_template
+```

.changelog/33298.txt

@@ -0,0 +1,3 @@
+```release-notes:enhancement
+resource/aws_lakeformation_permissions: Allow `principal` to be an AWS federated-user arn
+```

.changelog/33339.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Allow `default_tags` to be set by environment variables
+```

.changelog/33653.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_backup_plan: Add `rule.schedule_expression_timezone` argument
+```
+
+```release-note:enhancement
+data-source/aws_backup_plan: Add `rule.schedule_expression_timezone` attribute
+```

.changelog/34044.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Use the configured `copy_tags_to_snapshot` value when `restore_to_point_in_time` is set
+```

.changelog/34474.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```
+
+```release-note:enhancement
+data-source/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```

.changelog/34542.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_ec2_transit_gateway: Add `security_group_referencing_support` argument
+```
+
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway: Add `security_group_referencing_support` attribute
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_vpc_attachment: Add `security_group_referencing_support` argument
+```
+
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway_vpc_attachment: Add `security_group_referencing_support` attribute
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_vpc_attachment_accepter: Add `security_group_referencing_support` argument
+```

.changelog/34843.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_snapshot_copy: Add `shared_accounts` argument
+```

.changelog/34885.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_cluster_snapshot: Add `shared_accounts` argument
+```

.changelog/35003.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_certificate
+```

.changelog/35168.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkfirewall_tls_inspection_configuration
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add plan-time validation of `firewall_arn`
+```

.changelog/35177.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_synthetics_canary: Remove `run_config.timeout_in_seconds` default value to allow creation of resources with a frequency less than 14 minutes
+```

.changelog/35199.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_integration
+```

.changelog/35264.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Allow `ignore_tags.keys` and `ignore_tags.key_prefixes` to be set by environment variables
+```

.changelog/35280.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_prometheus_default_scraper_configuration
+```

.changelog/35349.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_computeoptimizer_enrollment_status
+```
+
+```release-note:new-resource
+aws_computeoptimizer_recommendation_preferences
+```

.changelog/35411.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_secretsmanager_secret_versions
+```

.changelog/35416.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.domain_settings.docker_settings` configuration block
+```
+
+```release-note:bug
+resource/aws_sagemaker_domain: Fix update for `default_user_settings.domain_settings` to include missing `security_group_ids` and `r_studio_server_pro_domain_settings` values
+```

.changelog/35479.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add `production_variants.managed_instance_scaling` and `shadow_production_variants.managed_instance_scaling` configuration blocks
+```

.changelog/35614.txt

@@ -0,0 +1,31 @@
+```release-note:enhancement
+resource/aws_vpc: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_vpc: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_default_vpc: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_default_vpc: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_vpc_security_group_ingress_rule: Add `tags` to the `AuthorizeSecurityGroupIngress` EC2 API call instead of making a separate `CreateTags` call
+```
+
+```release-note:enhancement
+resource/aws_vpc_security_group_egress_rule: Add `tags` to the `AuthorizeSecurityGroupEgress` EC2 API call instead of making a separate `CreateTags` call
+```

.changelog/35722.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkmonitor_monitor
+```
+
+```release-note:new-resource
+aws_networkmonitor_probe
+```

.changelog/35873.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sagemaker_model: Add `primary_container.model_data_source.s3_data_source.model_access_config`, `primary_container.multi_model_config`, `container.model_data_source.s3_data_source.model_access_config`, and ``container.multi_model_config` configuration blocks
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_model: Add `primary_container.inference_specification_name` and `container.inference_specification_name` arguments
+```

.changelog/35950.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Remove empty fields from `json` attribute value
+```

.changelog/36286.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iot_topic_rule: Retry IAM eventual consistency errors on Update
+```

.changelog/36301.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_control
+```

.changelog/36316.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_codepipeline: Add `timeout_in_minutes` argument to the `action` configuration block
+```
+
+```release-note:bug
+resource/aws_codepipeline: Mark `trigger` as Computed
+```

.changelog/36368.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_database
+```

.changelog/36423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: Use the configured `ip_address_type` value when `target_type` is `instance`
+```

.changelog/36440.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_costoptimizationhub_enrollment_status
+```

.changelog/36500.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_instance: Allow `domain_dns_ips` to use single DNS server IP
+```

.changelog/36526.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_costoptimizationhub_preferences
+```

.changelog/36568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_api_key: Add `api_key_id` attribute
+```

.changelog/36599.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_table
+```

.changelog/36754.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add configurable timeouts
+```
+
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Retry `InsufficientInstanceCapacity` errors
+```

.changelog/36772.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `cloudwatch_logs.batch_mode` and `error_action.cloudwatch_logs.batch_mode` arguments
+```

.changelog/36774.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_chime_voice_connector_group: Properly handle voice connector groups deleted out of band
+```

.changelog/36794.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_cloudformation_stack_instances
+```
+
+```release-note:bug
+resource/aws_iam_role: Fix to reduce Terraform reporting differences when a role's ARN temporarily appears as the role's unique ID
+```

.changelog/36830.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_account_subscription: Add `iam_identity_center_instance_arn` attribute
+```

.changelog/36897.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sesv2_configuration_set_event_destination: Change `event_destination.matching_event_types` from `TypeList` to `TypeSet` as order is not significant
+```

.changelog/36900.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `experiment_options` configuration block
+```

.changelog/36902.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_peering_attachment: Add `options` argument
+```

.changelog/36904.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_instance: Add `upgrade_storage_config` argument
+```

.changelog/36962.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_applicationinsights_application: Change `resource_group_name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```
+
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_session: Mark `packet_length` as Computed
+```

.changelog/36966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_network_insights_path: Mark `destination` as Optional
+```