Merge branch 'main' into HEAD

.actrc

@@ -2,3 +2,4 @@
 # The `full` variants are needed for Maven for TeamCity configuration validation
 -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
 -P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/34474.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```
+
+```release-note:enhancement
+data-source/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```

.changelog/35003.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_certificate
+```

.changelog/35168.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkfirewall_tls_inspection_configuration
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add plan-time validation of `firewall_arn`
+```

.changelog/35722.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkmonitor_monitor
+```
+
+```release-note:new-resource
+aws_networkmonitor_probe
+```

.changelog/36286.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iot_topic_rule: Retry IAM eventual consistency errors on Update
+```

.changelog/36301.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_control
+```

.changelog/36368.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_database
+```

.changelog/36423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: Use the configured `ip_address_type` value when `target_type` is `instance`
+```

.changelog/36568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_api_key: Add `api_key_id` attribute
+```

.changelog/36599.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_table
+```

.changelog/36754.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add configurable timeouts
+```
+
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Retry `InsufficientInstanceCapacity` errors
+```

.changelog/36772.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `cloudwatch_logs.batch_mode` and `error_action.cloudwatch_logs.batch_mode` arguments
+```

.changelog/36830.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_account_subscription: Add `iam_identity_center_instance_arn` attribute
+```

.changelog/36900.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `experiment_options` configuration block
+```

.changelog/36902.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_peering_attachment: Add `options` argument
+```

.changelog/36966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_network_insights_path: Mark `destination` as Optional
+```

.changelog/36968.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_replicator: Add `starting_position` argument
+```

.changelog/37006.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Add `enable_machine_learning` to `aws_managed_rules_bot_control_rule_set` configuration block
+```

.changelog/37082.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_target_group: Add `target_group_health` configuration block
+```

.changelog/37105.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_amplify_domain_association: Add `certificate_settings` argument
+```

.changelog/37108.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `ca_certificate_identifier` argument and `ca_certificate_valid_till` attribute
+```

.changelog/37139.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_user_profile: Add `user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```

.changelog/37142.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_launch_template: Add `network_interfaces.primary_ipv6` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `network_interfaces.primary_ipv6` attribute
+```

.changelog/37152.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iot_authorizer: Add `tags` argument
+```
+
+```release-note:bug
+resource/aws_iot_provisioning_template: Fix `pre_provisioning_hook` update operation
+```

.changelog/37153.txt

@@ -0,0 +1,8 @@
+
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.code_editor_app_settings.custom_image` configuration block
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_user_profile: Add `user_settings.code_editor_app_settings.custom_image` configuration block
+```

.changelog/37174.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_autoscaling_group: Fix bug updating `warm_pool.max_group_prepared_capacity` to `0`
+```
+
+```release-note:enhancement
+resource/aws_autoscaling_group: Add plan-time validation of `warm_pool.max_group_prepared_capacity` and `warm_pool.min_size`
+```

.changelog/37242.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route53_resolver_firewall_rule: Add `firewall_domain_redirection_action` argument
+```

.changelog/37291.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_ingestion
+```

.changelog/37317.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_pipeline: Add `execution_role` and `workflow` arguments
+```

.changelog/37348.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_lb_listener: Correctly set `default_action.target_group_arn`
+```

.changelog/37399.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cognito_user_pool
+```

.changelog/37627.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_ingestion_destination
+```

.changelog/37705.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_msk_cluster: Add `broker_node_group_info` attribute
+```

.changelog/37708.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_db_instance: Add `engine_lifecycle_support` argument
+```
+
+```release-note:enhancement
+resource/aws_rds_cluster: Add `engine_lifecycle_support` argument
+```
+
+```release-note:enhancement
+resource/aws_rds_global_cluster: Add `engine_lifecycle_support` argument
+```

.changelog/37726.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add support for `InputAndOutput` in `capture_mode`
+```

.changelog/37748.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_codebuild_project: Fix unsetting `concurrent_build_limit`
+```

.changelog/37760.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_job: Add `maintenance_window` argument
+```

.changelog/37889.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_emrserverless_application: Add `interactive_configuration` argument
+```

.changelog/37890.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_backup_plan: Add `rule` attribute
+```

.changelog/37898.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set_instance: Extend `deployment_targets` argument.
+```
+
+```release-note:bug
+resource/aws_cloudformation_stack_set_instance: Add `ForceNew` to deployment_targets attributes to ensure a new resource is recreated when the deployment_targets argument is changed, which was not the case previously.
+```

.changelog/37932.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_cluster: Add `configuration.managed_storage_configuration` argument
+```

.changelog/37964.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpclattice_listener: Support `TLS_PASSTHROUGH` as a valid value for `protocol`
+```

.changelog/37980.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_event_source_mapping: Remove the upper limit on `scaling_config.maximum_concurrency`
+```

.changelog/37991.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_dynamodb_table: Fixes perpetual diff when `ttl.attribute_name` is set when `ttl.enabled` is not set.
+```
+
+```release-note:enhancement
+resource/aws_dynamodb_table: Adds validation for `ttl` values.
+```

.changelog/38003.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_launch_template: Add `instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+resource/aws_ec2_fleet: Add `launch_template_config.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+resource/aws_autoscaling_group: Add `mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+data-source/aws_autoscaling_group: Add `mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` attribute
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` attribute
+```

.changelog/38010.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_api_gateway_integration: Increase maximum value of `timeout_milliseconds` from `29000` (29 seconds) to `300000` (5 minutes)
+```

.changelog/38011.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+service/transitgateway: Fix resource Read pagination regression causing `NotFound` errors
+```

.changelog/38013.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `attachment_policies.action.add_to_network_function_group` argument
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `send-via` and `send-to` as valid values for `segment_actions.action`
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `single-hop` and `dual-hop` as valid values for `segment_actions.mode`
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `when_sent_to` and `via` configuration blocks to `segment_actions`
+```
+
+```release-note:bug
+data-source/aws_networkmanager_core_network_policy_document: Add correct `except` values to the returned JSON document when `segment_actions.share_with_except` is configured
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `network_function_groups` configuration block
+```

.changelog/38057.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Now falls back to non-FIPS endpoint if `use_fips_endpoint` is set and no FIPS endpoint is available
+```

.changelog/38067.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_ecs_service: Correctly set `tags`
+```

.changelog/38071.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_controltower_control: Add `parameters` argument and `arn` attribute
+```

.changelog/38074.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route53_resolver_firewall_rule: Add `q_type` argument
+```

.changelog/38077.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Add `sensitivity_level` argument to `sqli_match_statement` configuration block
+```

.changelog/38078.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_workforce: add `oidc_config.authentication_request_extra_params` and `oidc_config.scope` arguments
+```

.changelog/38084.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_app_authorization_connection
+```

.changelog/38085.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add `production_variants.inference_ami_version` and `shadow_production_variants.inference_ami_version` arguments
+```

.changelog/38087.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_workteam: Add `worker_access_configuration` attribute
+```

.changelog/38101.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_grafana_workspace_service_account_token
+```
+
+```release-note:new-resource
+aws_grafana_workspace_service_account
+```

.changelog/38109.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecs_service: Change `volume_configuration.managed_ebs_volume.throughput` from `TypeString` to `TypeInt`
+```

.changelog/38143.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_drs_replication_configuration_template: Fix issues preventing creation and deletion
+```

.changelog/38161.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Add `resource_set_ids` attribute
+```

.changelog/38162.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Add `bootstrap_self_managed_addons` argument
+```