All checksums have been double-checked against existing RMD160 and
SHA512 hashes
Not committed (merge conflicts...):
net/radsecproxy/distinfo
The following distfiles could not be fetched (fetched conditionally?):
./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz
./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch
./net/djbdns/distinfo djbdns-1.05-test28.diff.xz
./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch
./net/djbdns/distinfo djbdns-1.05-multiip.diff
./net/djbdns/distinfo djbdns-cachestats.patch
Changes:
3.27.0
======
FEATURES:
---------
New Data Source: aws_cloudfront_origin_request_policy (#17342)
New Resource: aws_ec2_transit_gateway_prefix_list_reference (#16823)
New Resource: aws_route53_key_signing_key (#16840)
New Resource: aws_cloudfront_origin_request_policy (#17342)
ENHANCEMENTS:
-------------
data-source/resource_aws_lb_target_group: Add protocol_version attribute (#17260)
data-source/aws_subnet: Add customer_owned_ipv4_pool and map_customer_owned_ip_on_launch attributes (#16676)
resource/aws_glacier_vault: Add plan-time validation for notification configuration block events and sns_topic_arn arguments (#12645)
resource/aws_glue_catalog_table: Adds support for specifying schema from schema registry. (#17335)
resource/aws_iam_access_key: Add create_date attribute (#17318)
resource/aws_iam_access_key: Support resource import (#17321)
resource/resource_aws_lb_target_group: Add protocol_version (#17260)
resource/aws_subnet: Add customer_owned_ipv4_pool and map_customer_owned_ip_on_launch attributes (#16676)
resource/aws_lb: Add ipv6_address attribute (#17229)
resource/aws_sfn_state_machine: Add support for EXPRESS state machine type (#12249)
resource/aws_cloudfront_distribution: Add cloudfront_origin_request_policy_id attribute (#17342)
BUG FIXES:
----------
data-source/aws_partition: Correct reverse_dns_prefix value in AWS China, C2S, and SC2S (#17142)
provider: Only validate AWS shared configuration profile SSO configuration when attempting to use SSO cached credentials (#17469)
resource/aws_api_gateway_method_settings: Ignore non-existent resource errors during deletion (#17234)
resource/aws_api_gateway_method_settings: Prevent confusing Terraform error on resource disappearance during creation (#17234)
resource/aws_cloudwatch_event_rule: Prevent perpetual differences with name_prefix argument values beginning with terraform- (#17030)
resource/aws_glacier_vault: Prevent crash with GetVaultAccessPolicy API errors (#12645)
resource/aws_glacier_vault: Properly remove from state when resource does not exist (#12645)
resource/aws_glue_crawler: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation permissions errors (#17256)
resource/aws_glue_partition: Fix partition_values to preserve order. (#17344)
resource/aws_iam_access_key: Ensure Inactive status is properly configured during resource creation (#17322)
resource/aws_kinesis_firehose_delivery_stream: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation access errors (#17254)
resource/aws_security_group: Prevent perpetual differences with name_prefix argument values beginning with terraform- (#17030)
resource/aws_ssoadmin_permission_set: Properly update resource with relay_state argument (#17423)
resource/aws_vpc_endpoint: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion (#16656)
resource/aws_vpc_endpoint_service: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion (#16656)
RELRO_SUPPORTED=no is set in lang/go/go-vars.mk which should remove the
need to use CHECK_RELRO_SKIP in go packages. This was not working
previously because check-relro.mk was using "PKGSRC_USE_RELRO" instead
of "_PKGSRC_USE_RELRO".
ok'd jperkin
pkgsrc changes:
- Adjust to use go-module.mk
- Remove unneeded GITHUB_PROJECT, it is already PKGBASE by default
- Remove bash tool dependency and REPLACE_BASH, none of the scripts are invoked
Changes:
Unfortunately the changelog is too long to include (138KB, more than 1000 lines
not wrapped). It can be found at:
https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/v3.26.0/CHANGELOG.md
(or ${WRKSRC}/CHANGELOG.md).
Worth to note:
- terraform-provider-aws 3.x is compatible only with Terraform 0.12 and newer
- A lot of new data sources and resources
And here the complete list of breaking changes of 3.x:
BREAKING CHANGES
----------------
* provider: New versions of the provider can only be automatically installed on Terraform 0.12 and later
* provider: All "removed" attributes are cut, using them would result in a Terraform Core level error
* provider: Credential ordering has changed from static, environment, shared credentials, EC2 metadata, default AWS Go SDK (shared configuration, web identity, ECS, EC2 Metadata) to static, environment, shared credentials, default AWS Go SDK (shared configuration, web identity, ECS, EC2 Metadata)
* provider: The `AWS_METADATA_TIMEOUT` environment variable no longer has any effect as we now depend on the default AWS Go SDK EC2 Metadata client timeout of one second with two retries
* provider: Remove deprecated `kinesis_analytics` and `r53` custom service endpoint arguments
* data-source/aws_availability_zones: Remove deprecated `blacklisted_names` and `blacklisted_zone_ids` arguments
* data-source/aws_directory_service_directory: Return an error when a single result is not found
* data-source/aws_ecr_repository: Return an error when a single result is not found
* data-source/aws_efs_file_system: Return an error when a single result is not found
* data-source/aws_launch_template: Return an error when a single result is not found
* data-source/aws_route53_resolver_rule: Trailing period removed from `domain_name` argument set in data-source
* data-source/aws_route53_zone: Trailing period removed from `name` argument set in data-source
* resource/aws_acm_certificate: `certificate_body`, `certificate_chain`, and `private_key` attributes are no longer stored in the Terraform state with hash values
* resource/aws_acm_certificate: `domain_validation_options` attribute changed from list to set
* resource/aws_acm_certificate: Plan-time validation added to `domain_name` and `subject_alternative_names` arguments to prevent usage of strings with trailing periods
* resource/aws_api_gateway_method_settings: Remove `Computed` property from `throttling_burst_limit` and `throttling_rate_limit` arguments, enabling drift detection
* resource/aws_api_gateway_method_settings: Update `throttling_burst_limit` and `throttling_rate_limit` argument defaults to match API default of `-1` to keep throttling disabled
* resource/aws_autoscaling_group: `availability_zones` and `vpc_zone_identifier` argument conflict now reported at plan-time
* resource/aws_autoscaling_group: Remove `Computed` property from `load_balancers` and `target_group_arns` arguments, enabling drift detection
* resource/aws_cloudfront_distribution: `active_trusted_signers` argument renamed to `trusted_signers` to support accessing `items` in Terraform 0.12
* resource/aws_cloudwatch_log_group: Automatically trim `:*` suffix from `arn` attribute
* resource/aws_codepipeline: Removes `GITHUB_TOKEN` environment variable
* resource/aws_cognito_user_pool: Remove deprecated `admin_create_user_config` configuration block `unused_account_validity_days` argument
* resource/aws_dx_gateway: Remove automatic `aws_dx_gateway_association` resource import
* resource/aws_dx_gateway_association: Remove deprecated `vpn_gateway_id` argument
* resource/aws_dx_gateway_association_proposal: Remove deprecated `vpn_gateway_id` argument
* resource/aws_ebs_volume: Return an error when `iops` argument set to a value greater than 0 for volume types other than `io1`
* resource/aws_elastic_transcoder_preset: Remove `video` configuration block `max_frame_rate` argument default value
* resource/aws_emr_cluster: Remove deprecated `instance_group` configuration block, `core_instance_count`, `core_instance_type`, and `master_instance_type` arguments
* resource/aws_glue_job: Remove deprecated `allocated_capacity` argument
* resource/aws_iam_access_key: Remove deprecated `ses_smtp_password` attribute
* resource/aws_iam_instance_profile: Remove deprecated `roles` argument
* resource/aws_iam_server_certificate: Remove state hashing from `certificate_body`, `certificate_chain`, and `private_key` arguments for new or recreated resources
* resource/aws_instance: Return an error when `ebs_block_device` `iops` or `root_block_device` `iops` argument set to a value greater than `0` for volume types other than `io1`
* resource/aws_lambda_alias: Resource import no longer converts Lambda Function name to ARN
* resource/aws_launch_template: `network_interfaces` `delete_on_termination` argument changed from `bool` to `string` type
* resource/aws_lb_listener_rule: Remove deprecated `condition` configuration block `field` and `values` arguments
* resource/aws_msk_cluster: Update `encryption_info` `encryption_in_transit` `client_broker` argument default to match API default of `TLS`
* resource/aws_rds_cluster: Update `scaling_configuration` `min_capacity` argument default to match API default of `1`
* resource/aws_route53_resolver_rule: Trailing period removed from `domain_name` argument set in resource
* resource/aws_route53_zone: Trailing period removed from `name` argument set in resource
* resource/aws_s3_bucket: Remove automatic `aws_s3_bucket_policy` resource import
* resource/aws_s3_bucket: Convert `region` to read-only attribute
* resource/aws_s3_bucket_metric: Update `filter` argument to require at least one of the `prefix` or `tags` nested arguments
* resource/aws_security_group: Remove automatic `aws_security_group_rule` resource import
* resource/aws_ses_domain_identity: Plan-time validation added to `domain` argument to prevent usage of strings with trailing periods
* resource/aws_ses_domain_identity_verification: Plan-time validation added to `domain` argument to prevent usage of strings with trailing periods
* resource/aws_sns_platform_application: `platform_credential` and `platform_principal` attributes are no longer stored in the Terraform state with hash values
* resource/aws_spot_fleet_request: Remove 24 hour default for `valid_until` argument
* resource/aws_ssm_maintenance_window_task: Remove deprecated `logging_info` and `task_parameters` configuration blocks
2.70.0
FEATURES:
* **New Resource:** `aws_ec2_client_vpn_authorization_rule`
* **New Resource:** `aws_ec2_client_vpn_route`
ENHANCEMENTS:
* resource/aws_launch_template: Add `default_version` argument (previously only an exported attribute)
* resource/aws_launch_template: Add `update_default_version` argument to set the launch template's default version to the latest version available on update
* resource/aws_organizations_organization: Support `BACKUP_POLICY` value in `enabled_policy_types` plan-time validation (Support Backup policies)
* resource/aws_organizations_policy: Support `BACKUP_POLICY` value in `type` plan-time validation (Support Backup policies)
v2.69.0
NOTES:
data-source/aws_availability_zones: The blacklisted_names and blacklisted_zone_ids arguments have been deprecated in preference for exclude_names and exclude_zone_ids respectively.
ENHANCEMENTS:
data-source/aws_availability_zones: Add exclude_names and exclude_zone_ids arguments
data-source/aws_elasticsearch_domain: Add advanced_security_options attribute
resource/aws_ecs_service: Increase delete retry timeout from 5 to 20 minutes
resource/aws_ecs_service: Support configurable delete timeout
resource/aws_elasticsearch_domain: Add advanced_security_options configuration block
resource/aws_sfn_state_machine: Add arn attribute
BUG FIXES:
resource/aws_autoscaling_group: Prevent unexpected differences in tags for Terraform 0.11 and earlier with boolean propagate_at_launch values
resource/aws_backup_selection: Correctly handle the associated backup plan being deleted outside Terraform
resource/aws_customer_gateway: Continue allowing 4-byte ASN values in bgp_asn argument
resource/aws_db_instance: Prevent schema version 1 upgrade panic on missing state
resource/aws_db_instance_role_association: Prevent immediate read after creation panic
resource/aws_efs_mount_target: Ensure empty string ("") validation in ip_address argument continues to work for Terraform 0.11 support
resource/aws_route53_record: Ensure old Route53 record is deleted when updating name argument
resource/aws_route53_record: Prevent errors when health_check_id argument is configured and updating set_identifier or type arguments
resource/aws_sfn_state_machine: Handle IAM Role eventual consistency on creation and wait for state machine deletion
resource/aws_spot_fleet_request: Increase default delete timeout to 15 minutes
resource/aws_wafv2_web_acl: Support additional nested and/or/not statement in rule statement and rule statement rate_based_statement attributes
v2.68.0:
FEATURES:
New Data Source: aws_efs_access_points
New Resource: aws_wafv2_web_acl_logging_configuration
ENHANCEMENTS:
data-soruce/aws_ami: Add arn attribute
data-source/aws_customer_gateway: Add arn attribute
data-source/aws_ebs_snapshot: Add arn attribute
data-source/aws_vpc_endpoint: Add arn attribute
data-source/aws_vpc_endpoint_service: Add arn attribute
data-source/aws_vpn_gateway: Add arn attribute
resource/aws_ami: Add arn attribute and plan-time validations to architecture, volume_type and virtualization_type arguments
resource/aws_ami_copy: Add arn attribute
resource/aws_ami_from_instance: Add arn attribute
resource/aws_customer_gateway: Add arn attribute and plan-time validations for bgp_asn, ip_address, and type arguments
resource/aws_default_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_ebs_snapshot: Add arn attribute
resource/aws_ebs_snapshot: Support resource import
resource/aws_ebs_snapshot_copy: Add arn attribute
resource/aws_ec2_traffic_mirror_session: Add arn attribute
resource/aws_ecs_service: Support deployment_controller configuration block type argument value of EXTERNAL (support external deployments)
resource/aws_ecs_task_definition: Add efs_volume_configuration configuration block authorization_config, transit_encryption, and transit_encryption_port arguments (support EFS Access Points and transit encryption)
resource/aws_elasticsearch_domain: Ultrawarm can now be enabled without re-creating the resource
resource/aws_glue_catalog_database: Add arn attribute
resource/aws_iot_policy: Support resource import
resource/aws_iot_topic_rule: Add error_action configuration block
resource/aws_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_placement_group: Add arn attribute
resource/aws_ses_receipt_filter: Add arn attribute and plan-time validations for all arguments
resource/aws_vpn_connection: Add arn attribute
resource/aws_vpc_endpoint: Add arn attribute
resource/aws_vpc_endpoint_service: Add arn attribute
resource/aws_vpn_gateway: Add arn attribute
BUG FIXES:
resource/aws_batch_compute_environment: Ensure desired_vcpus is fully optional and wait for updates
resource/aws_batch_compute_environment: Remove resource from Terraform state when not found instead of returning error
resource/aws_cloudtrail: Properly configure single event_selector with no data_resource and read_write_type of ReadOnly or WriteOnly
resource/aws_cloudtrail: Prevent InvalidEventSelectorsException error when removing all event_selector configuration
resource/aws_default_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_default_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_ecs_service: Add plan-time validation and prevent panics with empty type argument in ordered_placement_strategy configuration block
resource/aws_ecs_task_definition: Prevent showing API ordering differences in container_definitions environment variables during update plans
resource/aws_elasticsearch_domain: Ensure empty string ("") validation in ebs_options volume_type argument continues to work for Terraform 0.11 support
resource/aws_iot_policy: Ensure name argument updates recreate the resource
resource/aws_route: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route: Ensure empty string ("") validation in destination_cidr_block and destination_ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_spot_fleet_request: Prevent crash with missing placement information
resource/aws_vpc_endpoint: Skip ModifyVpcEndpoint API call on tags only updates
resource/aws_vpc_endpoint: Wait for acceptance when auto_accept is enabled
resource/aws_wafv2_web_acl: Prevent unexpected UpdateWebACL API errors on tags only updates
v2.67.0
NOTES:
data-source/aws_secretsmanager_secret: The rotation_* attributes have been deprecated in favor of the new aws_secretsmanager_secret_rotation data source.
resource/aws_secretsmanager_secret: The rotation_* arguments have been deprecated in favor of the new aws_secretsmanager_secret_rotation resource. The new resource, which fixes workflow issues, prevents the existing resource from showing changes when attempting to remove rotation. Removal must be done with the new resource or manually.
FEATURES:
New Data Source: aws_ebs_volumes
New Data Source: aws_ec2_local_gateway_virtual_interface
New Data Source: aws_ec2_local_gateway_virtual_interface_group
New Data Source: aws_ec2_local_gateway_virtual_interface_groups
New Data Source: aws_ecr_authorization_token
New Data Source: aws_outposts_outpost
New Data Source: aws_outposts_outpost_instance_type
New Data Source: aws_outposts_outpost_instance_types
New Data Source: aws_outposts_outposts
New Data Source: aws_outposts_site
New Data Source: aws_outposts_sites
New Data Source: aws_secretsmanager_secret_rotation
New Data Source: aws_wafv2_web_acl
New Guide: Resource Tagging
New Resource: aws_ec2_local_gateway_route
New Resource: aws_ec2_local_gateway_route_table_vpc_association
New Resource: aws_ec2_tag
New Resource: aws_secretsmanager_secret_rotation
New Resource: aws_wafv2_web_acl
New Resource: aws_wafv2_web_acl_association
ENHANCEMENTS:
data-source/aws_vpc_dhcp_options: Add arn attribute
data-source/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
data-source/aws_internet_gateway: Add arn attribute
data-source/aws_lambda_function: Add file_system_config attribute
data-source/aws_workspaces_bundle: Add name and owner as search crieria
resource/aws_ec2_capacity_reservation: Add arn attribute and support for Linux SQL Server values in instance_platform argument
resource/aws_cloudwatch_log_stream: Support resource import
resource/aws_default_vpc_dhcp_options: Add arn attribute
resource/aws_devicefarm_project: Support resource import
resource/aws_ec2_traffic_mirror_target: Add arn attribute
resource/aws_ecs_capacity_provider: Implement API deletion support
resource/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
resource/aws_efs_mount_target: Add plan time validation for ip_address argument
resource_aws_elasticsearch_domain: Add support for elasticsearch warm storage
resource_aws_elasticsearch_domain: Add plan time validation for cloudwatch_log_group_arn, role_arn, and ebs_options.volume_type
resource/aws_flow_log: Add arn attribute
resource/aws_glue_catalog_table: Add arn attribute
resource/aws_guardduty_detector: Add tags argument and arn attribute
resource/aws_guardduty_ipset: Add tags argument and arn attribute
resource/aws_guardduty_threatintelset: Add tags argument and arn attribute
resource/aws_internet_gateway: Add arn attribute
resource/aws_key_pair: Add arn attribute
resource/aws_lambda_function: Add file_system_config attribute
resource/aws_service_discovery_http_namespace: Add tags argument
resource/aws_service_discovery_private_dns_namespace: Add tags argument
resource/aws_service_discovery_public_dns_namespace: Add tags argument
resource/aws_service_discovery_service: Add tags argument
resource/aws_vpc_dhcp_options: Add arn attribute
resource/aws_wafv2_ip_set: Increase addresses maximum amount of items limit from 50 to 10,000 to match AWS limits
BUG FIXES:
resource/aws_cloudfront_origin_access_identity: Properly trigger resource recreation when deleted outside Terraform
resource/aws_cognito_user_pool_client: Mark client_secret as sensitive
resource/aws_route: Ensure retries occur on read after creation if route not found for EC2 eventual consistency
v2.66.0
FEATURES:
New Data Source: aws_wafv2_rule_group
New Resource: aws_wafv2_rule_group
BUG FIXES:
resource/aws_autoscaling_group: Allow on_demand_base_capacity to be set to 0
resource/aws_autoscaling_group: Add Computed field to instances_distribution and it's sub-fields on_demand_allocation_strategy, on_demand_base_capacity, on_demand_percentage_above_base_capacity, and spot_allocation_strategy
resource/aws_autoscaling_group: Remove Default field from instances_distribution sub-fields on_demand_allocation_strategy, on_demand_percentage_above_base_capacity, and spot_allocation_strategy
resource/aws_batch_job_definition: Prevent differences when no command is specified in container properties
resource/aws_instance: Continue supporting empty string ("") private_ip argument
v2.65.0
ENHANCEMENTS:
resource/aws_acm_certificate: Add status attribute
resource/aws_directory_servicedirectory: Add availability_zones attribute to vpc_settings block
resource/aws_directory_servicedirectory: Add availability_zones attribute to connect_settings block
resource/aws_directory_servicedirectory: Add plan time validation to customer_dns_ips in connect_settings block
resource/aws_ec2_client_vpn_endpoint: Add arn attribute and plan time validation to root_certificate_chain_arn (in authentication_options block), client_cidr_block, and server_certificate_arn
resource/aws_instance: Add plan time validation to volume_type(in ebs_block_device and root_block_device blocks), private_ip, ipv6_addresses, and tenancy
resource/aws_lb_listener_rule: Add support for multiple, weighted target groups in forward rules
resource/aws_lb_listener: Add support for multiple, weighted target groups in default actions
resource/aws_workspaces_ip_group: Add plan-time validation for rules.source
BUG FIXES:
resource/aws_acm_certificate: Detect AMAZON_ISSUED type validation_method value directly from API response instead of custom logic
resource/aws_acm_certificate: Increase deletion retries from 10 minutes to 20 minutes (better support API Gateway Custom Domain deletion)
resource/aws_apigatewayv2_stage: Prevent perpetual plan differences with default_route_settings.logging_level argument for HTTP APIs
resource/aws_appmesh_route: Allow configuration of spec http_route action weighted_target weight argument to be 0
resource/aws_autoscaling_group: Prevent crash with tags argument containing boolean values in Terraform 0.11 and earlier
resource/aws_dynamodb_table: Prevent multiple replica creation/deletion errors
resource/aws_instance: Prevent perpetual plan differences, forcing replacement, with ebs_block_device configuration blocks
resource/aws_kinesis_firehose_delivery_stream: Correctly set kinesis_source_configuration during import to prevent resource recreation
resource/aws_ses_configuration_set: Prevent Provider produced inconsistent result after apply errors during creation or import
resource/aws_workspaces_ip_group: Remove resource from state if deleted outside of Terraform
v2.64.0
ENHANCEMENTS:
data-source/aws_directory_service_directory: connect_settings connect_ips attribute now set
resource/aws_directory_service_directory: connect_settings connect_ips attribute now set
resource/aws_iot_topic_rule: Add step_functions configuration block
resource/aws_ses_event_destination: Support resource import
BUG FIXES:
data-source/aws_elasticsearch_domain: processing is now correctly set
resource/aws_acm_certificate: Update pending DNS validation record creation time from 1 minute to 5 minutes (better support for certificates with high amount of Subject Alternative Names)
resource/aws_api_gateway_method_settings: settings now properly set
resource/aws_autoscaling_group: Ignore ordering differences for tags argument (prevent unexpected differences from version 2.63.0)
resource/aws_codebuild_project: Enable drift detection for environment_variable argument
resource/aws_codebuild_project: Prevent inconsistent final plan errors with source configuration block
resource/aws_ecs_task_definition: Ensure efs_volume_configuration changes are properly detected
resource/aws_lb_cookie_stickiness_policy: cookie_expiration_policy now properly set
resource/aws_lightsail_instance: ram_size now properly set
resource/aws_load_balancer_backend_server_policy: instance_port now properly set
resource/aws_load_balancer_listener_policy: load_balancer_port now properly set
resource/aws_opsworks_application: environment secure now properly set
resource/aws_security_group_rule: Correctly set description after state refresh when source_security_group_id refers to a security group across accounts
resource/aws_ses_active_receipt_rule_set: Recreate resource when destroyed outside of Terraform
resource/aws_ses_event_destination: Correctly refresh entire resource state (prevent unexpected differences from version 2.63.0 and properly perform drift detection)
resource/aws_ses_receipt_rule: Recreate resource when destroyed outside of Terraform
resource/aws_sns_topic: Attributes of type schema.TypeInt are now correctly set
v2.63.0
FEATURES:
New Data Source: aws_efs_access_point
New Data Source: aws_wafv2_ip_set
New Data Source: aws_wafv2_regex_pattern_set
New Resource: aws_efs_access_point
New Resource: aws_efs_file_system_policy
New Resource: aws_wafv2_ip_set
New Resource: aws_wafv2_regex_pattern_set
ENHANCEMENTS:
resource/aws_ssm_document: Add document_version attribute
data-source/aws_ram_resource_share: Add owning_account_id attribute
data-source/aws_lb: Add ip_address_type attribute
data-source/aws_lb_target_group: Add load_balancing_algorithm_type attribute
data-source/aws_rds_cluster: backtrack_window attribute now available
resource/aws_codebuild_webhook: Support COMMIT_MESSAGE value in filter types
resource/aws_cognito_identity_pool_roles_attachment: Add import support
resource/aws_ecs_service: Add force_new_deployment argument
resource/aws_ecs_service: Support in-place updates for ordered_placement_strategy and placement_constraints
resource/aws_eks_node_group: Add force_update_version argument
resource/aws_glue_connection: Add arn argument
resource/aws_iot_topic_rule: Add tags argument
BUG FIXES:
resource/aws_ssm_activation: expired now properly set
resource/aws_redshift_security_group: The resource is now importable
resource/cloudwatch_log_metric_filter: metric_transformation default_value now properly set
data-source/aws_db_instance: auto_minor_version_upgrade attribute now properly set
resource/aws_autoscaling_group: tags propagate_at_launch attribute now properly set
resource/aws_eks_node_group: Only pass release_version value during UpdateNodegroupVersion if changed
resource/aws_network_acl: Fix issue with updating subnet associations returning InvalidAssociationID.NotFound
v2.62.0
FEATURES:
New Resource: aws_workspaces_workspace
ENHANCEMENTS:
resource/aws_appsync_resolver: Add cache_config configuration block
resource/aws_codebuild_project: Support git_submodules_config with GITHUB and GITHUB_ENTERPRISE source types
resource/aws_codebuild_project: Support SECRETS_MANAGER environment variable type
resource/aws_datasync_task: Support ONLY_FILES_TRANSFERRED value in verify_mode argument
resource/aws_iot_topic_rule: Add dynamodbv2 configuration block
resource/aws_iot_topic_rule: Add iot_analytics configuration block
resource/aws_iot_topic_rule: Add iot_events configuration block
resource/aws_iot_topic_rule: Add operation argument to dynamodb configuration block
resource/aws_iot_topic_rule: Add qos argument republish configuration block
BUG FIXES:
resource/aws_codebuild_project: Allow empty value ("") environment variables
resource/aws_security_group_rule: Prevent recreation when source_security_group_id refers to a security group across accounts
v2.61.0
FEATURES:
New Data Source: aws_ec2_coip_pool
New Data Source: aws_ec2_coip_pools
New Data Source: aws_ec2_local_gateway
New Data Source: aws_ec2_local_gateways
New Data Source: aws_ec2_local_gateway_route_table
New Data Source: aws_ec2_local_gateway_route_tables
New Resource: aws_ec2_transit_gateway_peering_attachment_accepter
ENHANCEMENTS:
data-source/aws_ebs_volume: Add multi_attach_enabled attribute
data-source/aws_efs_file_system: Add size_in_bytes attribute
data-source/aws_eip: Add customer_owned_ip and customer_owned_ipv4_pool attributes
data-source/aws_launch_template: add partition_number attribute
resource/aws_api_gateway_deployment: Add triggers argument
resource/aws_apigatewayv2_deployment: Add triggers argument
resource/aws_ebs_volume: Add multi_attach_enabled attribute
resource/aws_eip: Add customer_owned_ip attribute and customer_owned_ipv4_pool argument
resource/aws_glue_connection: Support KAFKA for connection_type argument
resource/aws_launch_template: add partition_number attribute
resource/aws_launch_template: add plan time validation to volume_type, spot_instance_type, ipv6_addresses, ipv4_addresses, private_ip_address`
resource/aws_workspaces_directory: Add output attributes for workspace_security_group_id, iam_role_id, registration_code, directory_name, directory_type, customer_user_name, alias, ip_group_ids and dns_ip_addresses
BUG FIXES:
resource/aws_workspaces_directory: Fixes error when removing tags
v2.60.0
NOTES:
provider: Region validation now automatically supports the new eu-south-1 (Europe (Milan)) region. For AWS operations to work in the new region, the region must be explicitly enabled as outlined in the AWS Documentation. When the region is not enabled, the Terraform AWS Provider will return errors during credential validation (e.g. error validating provider credentials: error calling sts:GetCallerIdentity: InvalidClientTokenId: The security token included in the request is invalid) or AWS operations will throw their own errors (e.g. data.aws_availability_zones.current: Error fetching Availability Zones: AuthFailure: AWS was not able to validate the provided access credentials).
provider: Ignore tags functionality across all data sources and resources (except aws_autoscaling_group) via the provider-level ignore_tags configuration block has been enabled and this functionality is no longer considered in preview.
FEATURES:
New Data Source: aws_backup_plan
New Data Source: aws_backup_selection
New Data Source: aws_backup_vault
New Data Source: aws_ec2_transit_gateway_peering_attachment
New Resource: aws_ec2_transit_gateway_peering_attachment
New Resource: aws_guardduty_organization_admin_account
New Resource: aws_guardduty_organization_configuration
ENHANCEMENTS:
data-source/aws_cloudtrail_service_account: Support eu-south-1 region
data-source/aws_ebs_volume: Add outpost_arn attribute
data-source/aws_elastic_beanstalk_hosted_zone: Support eu-south-1 region
data-source/aws_elb_hosted_zone_id: Add us-gov-east-1 and us-gov-west-1 region values
data-source/aws_elb_hosted_zone_id: Support eu-south-1 region
data-source/aws_elb_service_account: Support eu-south-1 region
data-source/aws_instance: Add outpost_arn attribute
data-source/aws_network_interface: Add outpost_arn attribute
data-source/aws_s3_bucket: Support eu-south-1 region for hosted_zone_id attribute
data-source/aws_subnet: Add outposts_arn attribute
provider: Support automatic region validation for eu-south-1
provider: Implement ignore tags functionality across all data sources and resources (except aws_autoscaling_group)
resource/aws_api_gateway_stage: Ignore NotFoundException error on destroy
resource/aws_db_snapshot: Support import
resource/aws_default_route_table: Add plan-time validation to cidr_block and ipv6_cidr_block arguments
resource/aws_default_route_table: Support import
resource/aws_dms_endpoint: Add kafka_settings configuration block and kafka to engine_name argument validation
resource/aws_ebs_volume: Add outpost_arn argument
resource/aws_elasticsearch_domain: Support customizable update timeout
resource/aws_glue_connection: Support MONGODB for connection_type argument
resource/aws_key_pair: Support tag-on-create
resource/aws_instance: Add outpost_arn attribute
resource/aws_mq_broker: Support import
resource/aws_network_interface: Add outpost_arn attribute
resource/aws_placement_group: Support tag-on-create
resource/aws_route_table: Add plan-time validation to cidr_block and ipv6_cidr_block arguments
resource/aws_route53_health_check: Support plan-time validation for reference_name argument
resource/aws_s3_bucket: Support eu-south-1 region for hosted_zone_id attribute
resource/aws_spot_fleet_request: Add launch_template_config configuration block (Support EC2 Launch Templates)
resource/aws_spot_fleet_request: Support import
resource/aws_storagegateway_gateway: Add gateway_vpc_endpoint argument
resource/aws_storagegateway_smb_file_share: Add path attribute
resource/aws_subnet: Add outposts_arn argument
resource/aws_wafregional_xss_match_set: Add plan-time validation for xss_match_tuple configuration block arguments
BUG FIXES:
data-source/aws_api_gateway_rest_api: Prevent error with VPC Endpoint configured APIs
resource/aws_appautoscaling_scheduled_action: Prevent error on refresh with multiple resources using the same scheduled action name
resource/aws_batch_job_queue: Prevent panic when ComputeEnvironmentOrder is updated outside Terraform
resource/aws_default_route_table: Proper tag on resource creation
resource/aws_efs_file_system: Prevent panic with empty lifecycle_policy configuration block
resource/aws_fsx_windows_file_system: Prevent panic when update includes self_managed_active_directory settings
resource/aws_glue_catalog_table: Prevent various panics with empty configuration blocks
resource/aws_kinesis_firehose_delivery_stream: Prevent panic with empty processing_configuration configuration block
resource/aws_kms_external_key: Prevent MalformedPolicyDocumentException errors on creation by retrying for up to 2 minutes to wait for IAM change propagation
resource/aws_kms_key: Prevent MalformedPolicyDocumentException errors on creation by retrying for up to 2 minutes to wait for IAM change propagation
resource/aws_lb_listener: Prevent panics on creation and refresh when API throttled
resource/aws_route53_zone: Prevent panic with APIs missing ChangeInfo during creation (best effort fix for LocalStack)
resource/aws_storagegateway_gateway: Perform multiple connectivity checks after activation to wait if the underlying server (e.g. EC2 Instance) is automatically rebooted
resource/aws_storagegateway_gateway: Retry 504 status code on activation
resource/aws_wafregional_xss_match_set: Prevent crash with xss_match_tuple configuration block since version 2.59.0
v2.59.0
@breathingdust breathingdust released this 24 days ago · 470 commits to master since this release
NOTES:
provider: Region validation now automatically supports the new af-south-1 (Africa (Cape Town)) region. For AWS operations to work in the new region, the region must be explicitly enabled as outlined in the AWS Documentation. When the region is not enabled, the Terraform AWS Provider will return errors during credential validation (e.g. error validating provider credentials: error calling sts:GetCallerIdentity: InvalidClientTokenId: The security token included in the request is invalid) or AWS operations will throw their own errors (e.g. data.aws_availability_zones.current: Error fetching Availability Zones: AuthFailure: AWS was not able to validate the provided access credentials). (#12715)
resource/aws_iam_user: The additional force_destroy behavior for handling signing certificates requires two additional IAM permissions (iam:ListSigningCertificates and iam:DeleteSigningCertificate). Restrictive IAM permissions for Terraform runs may require updates. (#10542)
resource/aws_rds_cluster: Due to recent API support for Aurora MySQL 5.7 and PostgreSQL Global Clusters which implemented the engine mode as provisioned instead of the previous global for Aurora MySQL 5.6, the resource now requires the DescribeGlobalClusters API call. Restrictive IAM permissions may require updates. (#12867)
FEATURES:
New Resource: aws_apigatewayv2_api_mapping (#9461)
New Resource: aws_apigatewayv2_vpc_link (#12577)
ENHANCEMENTS:
data_source/aws_acm_certificate: Add tags output (#11659)
data-source/aws_cloudtrail_service_account: Support af-south-1 region (#12967)
data-source/aws_elastic_beanstalk_hosted_zone: Support af-south-1 region (#12967)
data-source/aws_elb_hosted_zone_id: Support af-south-1 region (#12967)
data-source/aws_elb_service_account: Support af-south-1 region (#12967)
data-source/aws_s3_bucket: Support af-south-1 region for hosted_zone_id attribute (#12967)
provider: Support automatic region validation for af-south-1 (#12715)
resource/aws_apigatewayv2_api: Add cors_configuration, credentials_arn, route_key and target attributes (#12452)
resource/aws_appsync_graphql_api: Add log_config configuration block exclude_verbose_content argument (#12884)
resource/aws_config_configuration_recorder: Prevent error during deletion operation when resource is missing (#12734)
resource/aws_default_network_acl: Support import (#12924)
resource/aws_lambda_alias: Suppress differences for equivalent function_name argument values of name versus ARN (#12902)
resource/aws_network_acl_rule: Support import (#12921)
resource/aws_route: Add plan-time validation for destination_cidr_block and destination_ipv6_cidr_block arguments (#12890)
resource/aws_s3_bucket: Support af-south-1 region for hosted_zone_id attribute (#12967)
resource/aws_service_discovery_private_dns_namespace: Support import (#12929)
resource/aws_ssm_activation: Support import (#12933)
resource/aws_ssm_maintenance_window_target: Add plan-time validation to resource_type argument (#11783)
resource/aws_ssm_maintenance_window_target: Support import (#12935)
resource/aws_volume_attachment: Support import (#12948)
resource/aws_waf_ipset: Add plan-time validation for ip_set_descriptors configuration block arguments (#12775)
resource/aws_waf_sql_injection_match_set: Support import (#11657)
resource/aws_waf_xss_match_set: Add plan-time validation for xss_match_tuples configuration block arguments (#12777)
resource/aws_wafregional_web_acl: Add plan-time validation to various arguments (#12793)
BUG FIXES:
data-source/aws_launch_template: Prevent type error with network_interfaces associate_public_ip_address attribute (#12936)
resource/aws_glue_security_configuration: Prevent empty string KMS Key ARN in S3 Encryption settings (#12898)
resource/aws_iam_user: Ensure force_destroy argument removes signing certificates when enabled (#10542)
resource/aws_rds_cluster: Prevent unexpected global_cluster_identifier differences and deletion error with aurora-mysql and aurora-postgresql Global Cluster members (#12867)
resource/aws_route: Prevent not found after creation error with destination_ipv6_cidr_block set to ::0/0 (#12890)
Assets
2
v2.58.0
94d0642
Unverified
Compare
v2.58.0
@breathingdust breathingdust released this on 17 Apr · 589 commits to master since this release
FEATURES:
New Data Source: aws_regions (#12269)
New Resource: aws_apigatewayv2_deployment (#9245)
New Resource: aws_apigatewayv2_domain_name (#9391)
New Resource: aws_apigatewayv2_integration_response (#9365)
New Resource: aws_apigatewayv2_route (#8881)
New Resource: aws_apigatewayv2_route_response (#9373)
New Resource: aws_apigatewayv2_stage (#9232)
New Resource: aws_dms_event_subscription (#7170)
ENHANCEMENTS:
data-source/aws_dynamodb_table: Add replica attribute (initial support for Global Tables V2 (version 2019.11.21)) (#12342)
data-source/aws_instance: Exports volume_name for root_block_device (#12620)
resource/aws_backup_plan: Add rule configuration block copy_action configuration block (support cross region copy) (#11923)
resource/aws_cognito_identity_provider: Support plan-time validation for idp_identifiers, provider_name, and provider_type arguments (#10705)
resource/aws_dms_endpoint: Add elasticsearch_settings configuration block and elasticsearch to engine_name validation (support Elasticsearch endpoints) (#11792)
resource/aws_dms_endpoint: Add kinesis_settings configuration block and kinesis to engine_name validation (support Kinesis endpoints) (#8633)
resource/aws_dynamodb_table: Add replica configuration block (initial support for Global Tables V2 (version 2019.11.21)) (#12342)
resource/aws_ec2_client_vpn_endpoint: Allow two authentication_options configuration blocks (#12819)
resource/aws_instance: Allow changing root volume size without re-creating resource (#12620)
resource/aws_instance: Exports volume_name for root_block_device (#12620)
BUG FIXES:
resource/aws_dlm_lifecycle_policy: Ensure plan-time validation for times argument only allows 24 hour format (#12800)
Assets
2
v2.57.0
8c46f5f
Unverified
Compare
v2.57.0
@breathingdust breathingdust released this on 10 Apr · 712 commits to master since this release
BREAKING CHANGES:
provider: The configuration for the preview ignore tags functionality has been updated to include a wrapping configuration block. For example:
provider "aws" {
ignore_tags {
keys = ["TagKey1"]
}
}
FEATURES:
New Data Source: aws_cloudfront_distribution (#6468)
New Resource: aws_apigatewayv2_authorizer (#9228)
New Resource: aws_apigatewayv2_integration (#8949)
New Resource: aws_apigatewayv2_model (#8912)
ENHANCEMENTS:
data-source/aws_lambda_layer_version: Support plan-time validation for compatible_runtime argument dotnetcore3.1 value (support .NET Core 3.1) (#12712)
resource/aws_cloudhsm_v2_cluster: Support tag-on-create (#11683)
resource/aws_docdb_cluster: Add deletion_protection argument (#12650)
resource/aws_egress_only_internet_gateway: Add tags argument (#11568)
resource/aws_lambda_function: Support plan-time validation for runtime argument dotnetcore3.1 value (support .NET Core 3.1) (#12712)
resource/aws_lambda_layer_version: Support plan-time validation for compatible_runtimes argument dotnetcore3.1 value (support .NET Core 3.1) (#12712)
resource/aws_rds_global_cluster: Add aurora-postgresql to engine argument plan-time validation (#12401)
resource/aws_redshift_snapshot_copy_grant: Support resource import (#10350)
resource/aws_spot_fleet_request: Add tags argument (support tagging of Spot Fleet Request itself) (#12295)
resource/aws_spot_fleet_request: Support plan-time validation for launch_specification configuration block ebs_block_device volume_type, iam_instance_profile_arn, placement_tenancy, and root_block_device volume_type arguments (#12295)
resource/aws_spot_fleet_request: Support plan-time validation for allocation_strategy, instance_interruption_behaviour, and target_group_arns arguments (#12295)
service/ec2: Prevent eventual consistency errors tagging resources on creation (#12735)
BUG FIXES:
resource/aws_appautoscaling_policy: Fix error when importing DynamoDB Table Index policy (#11232)
resource/aws_db_instance: Allow creating read replica into RAM shared Subnet with VPC Security Group (#12700)
resource/aws_kms_key: Prevent eventual consistency related errors on creation (#12738)
resource/aws_lb_target_group: Automatically propose resource recreation for TCP protocol Target Groups when health_check configuration block interval, protocol, or timeout argument values are updated (#4568)
Assets
2
v2.56.0
02afaa6
Unverified
Compare
v2.56.0
@bflad bflad released this on 3 Apr · 813 commits to master since this release
NOTES:
resource/aws_emr_cluster: The bug fix in this release will potentially re-create EMR Clusters with multiple bootstrap actions, since bootstrap actions cannot be modified in place. To avoid re-creation, temporarily add the ignore_changes lifecycle configuration argument and/or update the order in your Terraform configuration.
ENHANCEMENTS:
data-source/aws_launch_template: Add hibernation_options attribute (#12492)
resource/aws_codepipeline: Adds cross-region action support (#12549)
resource/aws_dx_connection: Support 2Gbps and 5Gbps values in plan-time validation for bandwidth argument (#12559)
resource/aws_dx_lag: Support 2Gbps and 5Gbps values in plan-time validation for bandwidth argument (#12559)
resource/aws_elastic_transcoder_preset: Support plan-time validation for role argument (#12575)
resource/aws_kms_grant: Support resource import (#11991)
resource/aws_launch_template: Add hibernation_options configuration block (#12492)
BUG FIXES:
resource/aws_codedeploy_deployment_group: Fix blue_green_deployment_config updates for ECS (#11885)
resource/aws_emr_cluster: Now properly sets the order when multiple bootstrap actions are defined
resource/aws_kms_grant: Remove resource from Terraform state instead of error if removed outside Terraform (#12560)
resource/aws_s3_bucket: Prevent various panics with empty configuration blocks (#12614)
resource/aws_volume_attachment: Ensure any error is shown while waiting for volume to detach (#12596)
Assets
2
v2.55.0
3bef4e2
Unverified
Compare
v2.55.0
@gdavison gdavison released this on 27 Mar · 899 commits to master since this release
FEATURES:
New Resource: aws_ec2_availability_zone_group (#12400)
ENHANCEMENTS:
data-source/aws_availability_zone: Add all_availability_zones and filter arguments (#12400)
data-source/aws_availability_zone: Add group_name, network_border_group, and opt_in_status attributes (#12400)
data-source/aws_availability_zones: Add all_availability_zones and filter arguments (#12400)
data-source/aws_availability_zones: Add group_names attribute (#12400)
data-source/aws_ec2_transit_gateway_dx_gateway_attachement: Add filter and tags arguments (#12516)
data-source/aws_ec2_transit_gateway_vpn_attachment: Add filter and tags arguments (#12415)
data-source/aws_instance: Add metadata_options attribute (#12491)
data-source/aws_launch_template: Add filter and tags arguments (#12403)
data-source/aws_launch_template: Add metadata_options attribute (#12491)
data-source/aws_prefix_list: Add filter argument (#12416)
data-source/aws_vpc_endpoint_service: Add filter and tags arguments (#12404)
resource/aws_athena_workgroup: Add force_destroy argument (#12254)
resource/aws_cloudwatch_log_metric_filter: Support resource import (#11992)
resource/aws_flow_log: Add max_aggregation_interval argument (#12483)
resource/aws_instance: Add metadata_options configuration block (support IMDSv2) (#12491)
resource/aws_launch_template: Add metadata_options configuration block (support IMDSv2) (#12491)
resource/aws_msk_cluster: Add logging_info configuration block (support CloudWatch, Firehose, and S3 logging) (#12215)
resource/aws_mq_configuration: Support plan-time validation for engine_type argument (#11843)
resource/aws_route53_health_check: A dd plan-time validation to insufficient_data_health_status (#12305)
resource/aws_storagegateway_nfs_file_share: Add path attribute (#12530)
BUG FIXES:
resource/aws_db_instance: Allow restoring from snapshot into RAM shared Subnet with VPC Security Group (#12447)
resource/aws_mq_configuration: Remove extraneous ListTags API call during refresh (#11843)
resource/aws_neptune_cluster_instance: Add missing configuring-log-exports as allowed pending state (#12079)
resource/aws_route53_health_check: Do not recreate health check when using compressed ipv6 address
