v2.0.0-beta3

This beta rolls up every change merged from the 1.x line since v2.0.0-beta2 — see the 1.288.0 and 1.289.0 sections of CHANGELOG.md — plus the v2-only changes below.

FEATURES:

• Terraform Plugin Framework: the provider binary now serves a terraform-plugin-framework provider alongside the existing terraform-plugin-sdk/v2 one, muxed behind tf5muxserver. Protocol version, provider address and provider schema are unchanged; new resources and data sources can be authored framework-native, and the framework-only concept types (ephemeral resources, provider functions, list resources, actions) become available for the first time.
• New Data Source: alicloud_ims_default_domain — the default domain of the Alibaba Cloud account, backed by the Ims GetDefaultDomain API. Served by the framework provider.
• New Function: arn_build — builds an Alibaba Cloud Resource Name (ARN) of the form acs:<service>:<region>:<account_id>:<resource> from its constituent parts, invoked as provider::alicloud::arn_build(service, region, account_id, resource). Mirrors the AWS provider's arn_build function. Requires Terraform 1.8+ with the provider declared in required_providers.
• New Function: arn_parse — parses an Alibaba Cloud Resource Name (ARN) of the form acs:<service>:<region>:<account_id>:<resource> into an object with service, region, account_id and resource attributes, invoked as provider::alicloud::arn_parse(arn). The attributes are the arguments of arn_build, so the two compose. Any colons beyond the fourth belong to the resource and are kept as part of it. Unlike arn_build, which formats whatever it is given, arn_parse reports an error for a string that is not an ARN. Mirrors the AWS provider's arn_parse function. Requires Terraform 1.8+ with the provider declared in required_providers.

ENHANCEMENTS:

• deps: bump golang.org/x/crypto to 0.52.0 and google.golang.org/grpc to 1.82.1.

BUG FIXES:

• provider: close the partial-state window before the success return in resource/alicloud_reserved_instance and resource/alicloud_cs_kubernetes_node_pool. SDK v2 deleted the d.SetPartial whitelist that d.Partial(true) filtered against, inverting the flag's meaning from "persist only these keys" to "persist nothing", so a window still open at a successful return wrote prior state instead of what d.Set staged: an alicloud_reserved_instance attribute update was discarded, and an alicloud_cs_kubernetes_node_pool scale-down reported success while leaving the old node_count in state and re-planning the same diff. Eleven Partial calls that cannot affect any outcome have also been removed. (#10210)

v1.289.0

• New Resource: alicloud_redis_global_security_ip_group (#10094)
• New Resource: alicloud_cms_event_notify_policy (#10129)
• New Resource: alicloud_cr_artifact_subscription_rule (#10144)
• New Resource: alicloud_cr_internet_endpoint (#10170)
• New Data Source: alicloud_redis_global_security_ip_groups (#10094)
• New Data Source: alicloud_cms_event_notify_policies (#10129)
• New Data Source: alicloud_cr_artifact_subscription_rules (#10144)
• New Data Source: alicloud_cr_internet_endpoint (#10170)
• New Data Source: alicloud_ens_security_groups (#10185)

ENHANCEMENTS:

• resource/alicloud_kvstore_instance: pass MajorVersion on local-disk spec change. (#10016)
• resource/alicloud_mongodb_instance: support named security IP groups; resource/alicloud_mongodb_sharding_instance: support named security IP groups. (#10020)
• resource/alicloud_instance: retry auto renew modification on transient charge type errors. (#10023)
• resource/alicloud_cloud_storage_gateway_gateway_file_share: return error when create task lookup fails. (#10027)
• resource/alicloud_alidns_cloud_gtm_monitor_template: fix evaluation_count enum to reject 0. (#10101)
• resource/alicloud_alidns_cloud_gtm_monitor_template: drop 0 from failure_rate enum. (#10102)
• resource/alicloud_gpdb_instance: support status to pause or resume a Serverless instance. (#10117)
• docs: fix router_id description incorrectly stating region ID. (#10134)
• resource/alicloud_gpdb_instance: support modifying serverless_resource and cache_storage_size in place. (#10138)
• resource/alicloud_security_group_rule: stabilize cross-account owner IDs. (#10142)
• resource/alicloud_rds_ddr_instance: skip CheckCreateDdrDBInstance pre-check for cloud disk types. (#10143)
• resource/alicloud_config_aggregate_config_rule: support exclude_tags_scope. (#10146)
• resource/alicloud_dts_synchronization_job: support VPC NAT vSwitch arguments; resource/alicloud_dts_migration_job: support VPC NAT vSwitch arguments. (#10154)
• docs: correct cidr_ip default description for alicloud_security_group_rule. (#10159)
• resource/alicloud_cr_endpoint_acl_policy: wait for endpoint RUNNING before ACL creation and await entry propagation in Create path; data-source/alicloud_cr_ee_instances: keep instances without endpoint support. (#10170)
• resource/alicloud_oss_bucket_object: rebuild after out-of-band delete. (#10172)
• resource/alicloud_image: wait for Usable=true instead of Status=Available on create. (#10176)
• resource/alicloud_ens_security_group: add permissions support. (#10185)
• resource/alicloud_vpn_gateway_vpn_attachment: support tunnel_bandwidth; data-source/alicloud_vpn_gateway_vpn_attachments: support tunnel_bandwidth; resource/alicloud_vpn_gateway_vco_route: wait for deletion. (#10188)
• resource/alicloud_polardb_cluster: support TDE automatic key rotation. (#10191)
• docs: document alikafka_instance serverless spec_type and reserved capacity minimums. (#10193)
• resource/alicloud_hbr_policy: support immutable backup lock for rules. (#10194)
• data-source/alicloud_nas_file_systems: add file_system_type input filter; data-source/alicloud_nas_access_groups: add cpfs enum. (#10195)
• resource/alicloud_click_house_db_cluster: support version 26.3. (#10199)
• resource/alicloud_data_works_project_member: treat GetProjectMember error code 400010 as member not found. (#10201)
• resource/alicloud_route_entry: serialize create/delete and stop abandoned retry from creating after failure. (#10208)
• resource/alicloud_config_delivery: export delivery_channel_id computed attribute. (#10212)
• docs: add serverless provisioned (reserved + elastic) billing example for amqp_instance. (#10215)
• resource/alicloud_instance: support replacing the instance when image_id changes. (#10217)
• resource/alicloud_api_gateway_vpc_access: support vpc_target_host_name. (#10218)

BUG FIXES:

• resource/alicloud_drds_instance: fix panic on empty VIP list in Read. (#9981)
• resource/alicloud_alb_rule: fix remove_header_config being dropped on create. (#10190)
• docs: db_backup_policy; resource/alicloud_db_backup_policy: fix backup_retention_period being ignored when set to 7. (#10197)
• resource/alicloud_oss_bucket_cname: fix acceptance tests and stop discarding OSS API errors. (#10209)

v1.288.0

• New Resource: alicloud_esa_routine_code_deployment (#10035)
• New Resource: alicloud_ssl_certificates_service_instance (#10113)
• New Resource: alicloud_ssl_certificates_service_certificate_apply (#10115)
• New Resource: alicloud_ssl_certificates_service_certificate_validation (#10120)
• New Resource: alicloud_ssl_certificates_service_instance_certificate (#10121)
• New Data Source: alicloud_esa_routine_code_versions (#10035)
• New Data Source: alicloud_ssl_certificates_service_instances (#10113)
• New Data Source: alicloud_ssl_certificates_service_instance_certificates (#10121)

ENHANCEMENTS:

• resource/alicloud_cs_kubernetes_node_pool: support modify containerd_config. (#9665)
• resource/alicloud_db_backup_policy: Added enable_pitr_protection and inc_backup_interval, optimized backup_interval and backup_retention_period. (#9898)
• testcase: tolerate externally deleted role user in alicloud_max_compute_role_user_attachment Read. (#10009)
• resource/alicloud_esa_routine: support code lifecycle. (#10035)
• resource/alicloud_gpdb_instance: support ServerlessPro instance mode. (#10073)
• resource/alicloud_ess_alb_server_group_attachment: add retry error code. (#10084)
• resource/alicloud_route_entry: recover create when create result is ambiguous or duplicate. (#10092)
• docs: add lifecycle ignore_changes example for oss_bucket_acl. (#10103)
• docs: resource/alicloud_db_backup_policy: skip backup_interval for unsupported MySQL instances. (#10112)
• resource/alicloud_gpdb_instance: support modifying payment_type between PayAsYouGo and Subscription. (#10114)
• resource/alicloud_gpdb_instance: support upgrading the minor version of an instance. (#10119)
• resource/alicloud_ehpc_cluster_v2: add cluster description, quotas, tags, queues and scale/monitor/scheduler specs. (#10123)
• resource/alicloud_cloud_monitor_service_metric_alarm_rule: Added the field targets. (#10126)
• docs: Remove apig_environment. (#10127)
• docs: Optimized the example for hbr_oss_backup_plan. (#10128)
• resource/alicloud_cr_ee_instance: Added the field tags; data-source/alicloud_cr_ee_instances: Added the field tags; testcase/alicloud_cr_ee_instance: Fixed the RAM policy scope of the custom OSS bucket case. (#10130)
• resource/alicloud_oss_bucket_acl: handle pointer ACL responses; testcase: cover SPI parsing. (#10132)
• resource/alicloud_amqp_virtual_host: retry the transient instance-not-ready error on create. (#10147)

BUG FIXES:

• resource/alicloud_ssl_certificates_service_instance: Fixed the refund failure when deleting a freshly created instance. (#10115)
• resource/alicloud_ram_policy: fix force delete leaving orphaned policies. (#10124)
• resource/alicloud_ram_role: fix force delete leaving orphaned roles. (#10124)
• resource/alicloud_oos_secret_parameter: fix tags read returning tag bindings of other secret parameters. (#10131)
• resource/alicloud_kms_value_added_service: fix recreating on every plan. (#10139)
• provider: normalize OSS gateway responses; testcase: add OSS gateway regression test. (#10148)

v1.287.0

• New Resource: alicloud_ssl_certificates_service_contact (#9993)
• New Resource: alicloud_apig_service (#10010)
• New Resource: alicloud_polardb_dynamo_table (#10021)
• New Resource: alicloud_polardb_dynamo_item (#10021)
• New Resource: alicloud_apig_route (#10030)
• New Resource: alicloud_apig_ai_model_provider (#10037)
• New Resource: alicloud_message_service_account_logging (#10083)
• New Resource: alicloud_resource_manager_resource_group_settings (#10098)
• New Data Source: alicloud_ssl_certificates_service_contacts (#9993)
• New Data Source: alicloud_apig_services (#10010)
• New Data Source: alicloud_apig_routes (#10030)
• New Data Source: alicloud_apig_ai_model_providers (#10037)

ENHANCEMENTS:

• resource/alicloud_kvstore_instance: support replica counts. (#9908)
• resource/alicloud_vpc: deprecate classic_link_enabled. (#9968)
• resource/alicloud_privatelink_vpc_endpoint_service: support the resource field to associate service resources at creation. (#9983)
• resource/alicloud_gpdb_instance: support backup_id. (#9988)
• resource/alicloud_log_audit: preserve missing display name. (#10007)
• resource/alicloud_redis_tair_instance: support config attribute. (#10018)
• resource/alicloud_polardb_account: modify account type. (#10021)
• resource/alicloud_cs_managed_kubernetes: support control_plane_endpoints_config. (#10025)
• resource/alicloud_ess_attachment: fix always false condition. (#10028)
• data-source/alicloud_ess_scaling_rules: fix loss of root cause. (#10033)
• resource/alicloud_db_instance: support force_delete to destroy Subscription instances. (#10036)
• resource/alicloud_sls_index: suppress API default diffs. (#10041)
• resource/alicloud_amqp_instance: support storage encryption. (#10042)
• docs: support setting skip_region_validation by the ALICLOUD_SKIP_REGION_VALIDATION environment variable. (#10047)
• docs: expand short field descriptions in alicloud_apig_route to meet doc-check thresholds. (#10048)
• resource/alicloud_ecs_disk: deprecate enable_auto_snapshot. (#10054)
• resource/alicloud_oss_bucket: skip DeleteObjectVersions when no objects to delete during force_destroy. (#10063)
• resource/alicloud_gwlb_listener: support tcp_idle_timeout. (#10072)
• resource/alicloud_gwlb_server_group: support server_failover_mode. (#10078)
• resource/alicloud_pvtz_zone: support dns_group (NORMAL_ZONE/FAST_ZONE). (#10089)
• resource/alicloud_dts_migration_job: support source_endpoint_ssl and destination_endpoint_ssl. (#10099)
• resource/alicloud_dts_synchronization_job: support source_endpoint_ssl and destination_endpoint_ssl. (#10099)
• provider: add support for na-south-1 region validation. (#10105)

BUG FIXES:

• resource/alicloud_ram_security_preference: fix login_network_masks and login_session_duration being cleared by updating the other attributes. (#10051)
• resource/alicloud_polardb_cluster: fix kms and tde bug. (#10065)
• resource/alicloud_db_backup_policy: skip BackupInterval for Basic-edition DB backup policy. (#10067)
• resource/alicloud_alikafka_instance: fix panic on empty serverless_config/confluent_config block. (#10081)

v2.0.0-beta2

This beta rolls up every change merged from the 1.x line since v2.0.0-beta1 — see the 1.287.0 section of CHANGELOG.md — plus the v2-only fix below.

BUG FIXES:

provider: report the actual provider version in the API User-Agent. .goreleaser.yml injected -X main.version, but main.go declares no version variable, so the linker discarded the value silently and v2.0.0-beta1 identified itself to Alibaba Cloud as Terraform-Provider/1.286.0. The ldflag now targets alicloud/connectivity.providerVersion, the variable that actually feeds the User-Agent, and the baked-in constant tracks the v2 line so unstamped local builds no longer claim v1. The stale -X main.commit flag has been dropped. (#10109)

v2.0.0-beta1

FEATURES:

• Terraform Plugin SDK v2: the whole provider (all resources, data sources and the acceptance-test harness) has been migrated from terraform-plugin-sdk v1 to terraform-plugin-sdk/v2.

BREAKING CHANGES:

• provider: migrate from terraform-plugin-sdk v1 to terraform-plugin-sdk/v2. Terraform CLI 0.11 and earlier are no longer supported. Before upgrading, move to v1.282.0 or later and confirm terraform plan is clean. See the Version 2 Upgrade Guide.
• provider: d.SetPartial is not supported by terraform-plugin-sdk/v2, so all 1437 call sites across 210 resources have been removed. Partial-state tracking on a failed apply is therefore no longer in effect.
• resource/alicloud_cr_repo, data-source/alicloud_cr_repos: the backing Container Registry API (version 2016-06-07) is no longer available, so both are non-functional and must be removed from your configuration. domain_list also changed from TypeMap to TypeList.
• resource/alicloud_api_gateway_instance: to_connect_vpc_ip_block changed from TypeMap to TypeList. Existing state is upgraded automatically by a v0 -> v1 state upgrader; configurations must be updated from map syntax to block syntax.
• resource/alicloud_cs_edge_kubernetes, resource/alicloud_cs_kubernetes: runtime, certificate_authority and connections changed from TypeMap to TypeList. Existing state is upgraded automatically; update attribute references from map-key syntax to list-index syntax.
• resource/alicloud_cs_managed_kubernetes: certificate_authority and connections changed from TypeMap to TypeList. Existing state is upgraded automatically.
• resource/alicloud_cs_edge_kubernetes: cluster creation now goes through the ROA Container Service CreateCluster API instead of the legacy CreateManagedKubernetesCluster, and exactly one default Edge node pool must be configured.
• data-source/alicloud_instance_types: instance_types.gpu, instance_types.burstable_instance and instance_types.local_storage changed from TypeMap to TypeList.
• data-source/alicloud_db_instance_classes: instance_classes.storage_range changed from TypeMap to TypeList.
• data-source/alicloud_cs_cluster_credential: certificate_authority changed from TypeMap to TypeList.
• data-source/alicloud_cs_edge_kubernetes_clusters, data-source/alicloud_cs_kubernetes_clusters, data-source/alicloud_cs_managed_kubernetes_clusters, data-source/alicloud_cs_serverless_kubernetes_clusters: clusters.connections changed from TypeMap to TypeList.
• provider: terraform-plugin-sdk/v2 dropped support for the Removed: schema property, so the 157 placeholder schema entries across 39 resources and data sources that existed only to emit "this field has been removed in vX" errors have been deleted. These arguments already had no effect in 1.x; configurations that still reference them now fail with Terraform's generic "Unsupported argument" error instead of the provider's explanatory message. Affected resources include alicloud_instance, alicloud_nat_gateway, alicloud_cms_alarm, alicloud_slb_listener, alicloud_lindorm_instance, alicloud_sae_application, alicloud_ros_stack_group, alicloud_eci_container_group and the alicloud_cs_* family.

DEPRECATIONS:

• provider: sync deprecation notices from the documentation into the schema. 72 resources and data sources that were already documented as deprecated (including alicloud_mns_*, alicloud_network_acl_entries, alicloud_network_acl_attachment, alicloud_slb_attachment, alicloud_router_interface*, alicloud_scdn_*, alicloud_waf_domain, alicloud_waf_instance, alicloud_tsdb_instance, alicloud_kvstore_backup_policy, alicloud_rdc_organization, alicloud_config_delivery_channel, alicloud_emr_cluster) now emit a deprecation warning at plan time.
• resource/alicloud_dbfs_, data-source/alicloud_dbfs_: mark all DBFS resources and data sources as deprecated since v1.279.0.
• data-source/alicloud_bp_studio_applications: deprecate applications.topo_url; it is no longer returned by the server.

ENHANCEMENTS:

• docs: add the Version 2 upgrade guide (guides/version-2-upgrade) documenting every type change and state migration in this release.
• provider: add v0 -> v1 state upgraders for alicloud_api_gateway_instance, alicloud_cr_repo, alicloud_cs_edge_kubernetes, alicloud_cs_kubernetes and alicloud_cs_managed_kubernetes so existing state is migrated in place.
• provider: migrate the acceptance-test plumbing from Providers to ProviderFactories.
• resource/alicloud_cs_edge_kubernetes: add the computed slb_id attribute and a dedicated delete path.
• resource/alicloud_cen_transit_router: mark support_multicast as Computed.
• resource/alicloud_polardb_database: mark account_name as Computed.
• resource/alicloud_emrv2_cluster: apply the auto scaling policy via PutAutoScalingPolicy after CreateNodeGroup.
• resource/alicloud_ebs_solution_instance: switch tag creation to the TagResources API.
• resource/alicloud_gpdb_instance: wait for seg_node_num to converge after an update.
• resource/alicloud_dms_enterprise_workspace: send WorkspaceRegion on create.
• resource/alicloud_ram_login_profile: only send Password when it actually changed.
• resource/alicloud_selectdb_db_instance: simplify how the upgrade target version is resolved.
• resource/alicloud_ecd_command: retry on error code CloudAssistant.NotReady.
• resource/alicloud_ecd_desktop: retry on error code INTERNAL_ERROR.
• resource/alicloud_ecd_network_package: add Updating to the pending states when waiting.
• resource/alicloud_polardb_cluster: retry DescribeParameters on throttling, and retry on OperationDenied.DBClusterStatus.
• resource/alicloud_dms_airflow: retry on DMS.AIRFLOW.InternalError.
• resource/alicloud_resource_manager_policy_attachment: add create and delete timeouts, and retry on EntityNotExist.Role.
• resource/alicloud_ots_tunnel: treat OTSPermissionDenied as temporarily unavailable and retry.
• provider: NotFoundError now recognizes OTS tunnel errors — ParamInvalid with "tunnel not exist", and PermissionDenied with "is not found" or "instance is not running" — as not-found.
• resource/alicloud_dms_enterprise_user: treat the DELETE state as not-found.
• resource/alicloud_ens_instance: raise the create, update and delete timeouts to 60 minutes.
• resource/alicloud_ens_eip_instance_attachment: raise the create and delete timeouts to 10 minutes.
• resource/alicloud_edas_k8s_cluster: raise the delete timeout to 60 minutes and treat ClusterImportStatus 4 as already deleted.
• resource/alicloud_data_works_project: wait for PaiTaskEnabled to converge, align throttling retries and degrade gracefully when the waiter cannot resolve.
• resource/alicloud_simple_application_server_custom_image: wait for the asynchronous create and delete to complete.
• resource/alicloud_vpc_ipam_service: treat ExceedPurchaseLimit as already-opened so opening the service is idempotent.
• resource/alicloud_compute_nest_service_instance: suppress the spurious operation_metadata.resources ForceNew diff.
• resource/alicloud_oss_access_point: sync status before the next operation.
• build: add terraform-registry-manifest.json declaring Terraform plugin protocol version 5.0.
• deps: bump Go module dependencies and vendor hc-install v0.9.5.

BUG FIXES:

• provider: guard the SDK v2 unknown-value sentinel in the credential configuration. (#10038)
• provider: remove d.Set calls targeting attributes absent from the schema, which panic under SDK v2. Affects resource/alicloud_cassandra_cluster, resource/alicloud_cassandra_data_center, resource/alicloud_mse_nacos_config, resource/alicloud_polardb_cluster, resource/alicloud_slb_domain_extension, resource/alicloud_cloud_firewall_vpc_firewall, resource/alicloud_cloud_firewall_vpc_firewall_cen (id); resource/alicloud_cs_edge_kubernetes and resource/alicloud_cs_kubernetes (various); resource/alicloud_vpc_route_entry (name); resource/alicloud_vpc_public_ip_address_pool (zones); resource/alicloud_security_center_service_linked_role (product_name); resource/alicloud_db_readonly_instance (ssl_status); resource/alicloud_yundun_dbaudit_instance (region_id); resource/alicloud_bastionhost_instance (ad_auth_server.has_password); data-source/alicloud_cs_kubernetes_node_pools (names). These attributes were never declared, so they were never present in state.
• resource/alicloud_nas_smb_acl_attachment: fix a panic caused by a boolean-to-string conversion.
• resource/alicloud_governance_account: format account_id as an int in Read to fix a panic.
• resource/alicloud_rds_db_proxy: fix an ssl_status panic.
• resource/alicloud_image: cast disk_device_mapping.size to an int in Read.
• resource/alicloud_image_import: read back through its own Read function instead of alicloud_image's.
• resource/alicloud_ros_stack: marshal stack_policy_body to a JSON string in Read.
• resource/alicloud_express_connect_router_interface: cast has_reservation_data to a string in Read.
• resource/alicloud_instance: cast deployment_set_group_no to a string in Read.
• resource/alicloud_adb_backup_policy: cast backup_retention_period to a string in Read.
• resource/alicloud_gpdb_external_data_service: parse service_id as an integer in Read.
• resource/alicloud_gpdb_hadoop_data_source, resource/alicloud_gpdb_remote_adb_data_source: stop setting the integer id attributes from string ID parts.
• resource/alicloud_amqp_instance: only send security_group_id and vpc_id when they are set, and parse create_time from RFC3339 into the integer attribute.
• resource/alicloud_ecs_instance_set: read tags from the nested Tags.Tag structur...

v1.286.0

• New Resource: alicloud_apig_domain (#9910)
• New Resource: alicloud_apig_plugin (#9965)
• New Resource: alicloud_gpdb_api_key (#9972)
• New Resource: alicloud_ram_access_key_policy (#9978)
• New Resource: alicloud_ssl_certificates_service_company (#9991)
• New Resource: alicloud_nas_log_analysis (#10004)
• New Data Source: alicloud_apig_gateways (#9905)
• New Data Source: alicloud_apig_domains (#9910)
• New Data Source: alicloud_apig_plugins (#9965)
• New Data Source: alicloud_gpdb_api_keys (#9972)
• New Data Source: alicloud_ram_access_key_policy (#9978)
• New Data Source: alicloud_ssl_certificates_service_companies (#9991)
• New Data Source: alicloud_nas_log_analyses (#10004)

ENHANCEMENTS:

• resource/alicloud_apig_http_api: support ai_protocols, deploy_configs, enable_auth, model_category. (#9895)
• resource/alicloud_apig_gateway: regenerate. (#9905)
• resource/alicloud_nat_gateway: support availability_mode (CrossAZ/SingleAZ). (#9924)
• docs: use non-deprecated role_name/assume_role_policy_document in ram_role_policy_attachment example. (#9947)
• resource/alicloud_db_instance: fix upgrade for rds sqlserver. (#9956)
• resource/alicloud_ecs_launch_template: validate http_put_response_hop_limit range 1-64. (#9960)
• docs: fix S4 documentation gaps across ram_role, vpc, vswitch, security_group resources. (#9963)
• resource/alicloud_redis_tair_instance: add maintain_start_time and maintain_end_time. (#9964)
• resource/alicloud_api_gateway_api: ignore content_type_value when content_type_category = CLIENT. (#9966)
• resource/alicloud_cloud_firewall_address_book: Supported group_type set to asset, assetIpv6; Added the field asset_member_uids, asset_region_resource_types, address_list_count, reference_count; data-source/alicloud_cloud_firewall_address_books: Added the field asset_member_uids, asset_region_resource_types, address_list_count, reference_count. (#9967)
• resource/alicloud_arms_prometheus: support duration, archive_duration and payment_type. (#9975)
• resource/alicloud_bastionhost_user: add RemoteDNChanged status. (#9987)
• resource/alicloud_event_bridge_rule: add ApacheKafkaSelf target type. (#9989)
• testcase: resolve default profile path cross-platform via homedir.Dir. (#9990)
• docs: update Version 2 upgrade guide for runtime output references and CR resource deprecations. (#9994)
• docs: add length and prefix constraints for vswitch_name. (#9997)
• docs: fix type annotation typo Intl to Int for escalations.warn.times. (#9999)
• resource/alicloud_cs_serverless_kubernetes: support secret encryption. (#10022)
• docs: alicloud_nas_file_system clarify vpc_id/vswitch_id network configuration rules. (#10024)

BUG FIXES:

• resource/alicloud_esa_kv: fix id parsing for keys containing colons. (#9950)
• resource/alicloud_db_instance: fix panic when DescribeParameters has no ParamGroupInfo. (#9970)
• resource/alicloud_redis_tair_instance: fix TDE read for instances that do not support TDE. (#9977)
• resource/alicloud_rocketmq_instance: fix BSS region lookup and stabilize acc tests. (#9992)

v1.285.0

• New Resource: alicloud_cloud_monitor_service_metric_alarm_rule (#9876)
• New Resource: alicloud_das_sql_log_config (#9917)
• New Resource: alicloud_cms_alert_rule_v2 (#9923)
• New Resource: alicloud_cr_artifact_lifecycle_rule (#9926)
• New Resource: alicloud_apig_plugin_class (#9944)
• New Data Source: alicloud_das_sql_log_configs (#9917)
• New Data Source: alicloud_drds_polardbx_instances (#9918)
• New Data Source: alicloud_cms_alert_rules_v2 (#9923)
• New Data Source: alicloud_cr_artifact_lifecycle_rules (#9926)
• New Data Source: alicloud_express_connect_router_vbr_child_instances (#9932)
• New Data Source: alicloud_express_connect_router_tr_associations (#9943)
• New Data Source: alicloud_apig_plugin_classes (#9944)
• New Data Source: alicloud_express_connect_router_vpc_associations (#9953)

ENHANCEMENTS:

• resource/alicloud_polardb_cluster: support target minor version. (#9911)
• resource/alicloud_esa_routine: , resource/alicloud_esa_routine_related_record: , resource/alicloud_esa_routine_route: retry LockFailed on concurrent writes. (#9916)
• resource/alicloud_drds_polardbx_instance: support ModifyDBInstanceClass. (#9918)
• resource/alicloud_amqp_instance: Added the field auth_model. (#9919)
• resource/alicloud_polardb_endpoint: support dynamodb endpoint resource/alicloud_polardb_account: support dynamodb account. (#9931)
• resource/alicloud_ram_user_group_attachment: handle 409 already-exists, paginate describe, wait for state. (#9945)
• resource/alicloud_cdn_domain_config: Fixed the diff error caused by field function_args. (#9951)
• data-source/alicloud_cloud_monitor_service_metric_alarm_rules: regenerate from CMS IDL. (#9876)
• data-source/alicloud_das_sql_log_configs: address review feedback. (#9927)
• data-source/alicloud_vpn_gateways: add gateway_type filter and fix panic on enhanced gateways. (#9930)
• data-source/alicloud_alikafka_sasl_acls: Added the field id. (#9940)
• docs: fix vpc_route_entry example / cdn_real_time_log_delivery import / hbr_cross_account API links. (#9934)
• docs: fix RepeatType value descriptions from Permit/normal to Permanent in cloud_firewall_nat_firewall_control_policy. (#9957)

BUG FIXES:

• resource/alicloud_vpc: fix dns_hostname_status validation to reject read-only value MODIFYING. (#9922)
• resource/alicloud_redis_tair_instance: fix perpetual diff when security_group_id contains multiple comma-separated security groups. (#9954)

v1.284.0

• New Resource: alicloud_resource_manager_handshake_acceptance (#9907)

ENHANCEMENTS:

• resource/alicloud_instance: Added the field network_interface_id, source_dest_check, network_interfaces.source_dest_check. (#9897)
• resource/alicloud_mongodb_audit_policy: support service_type and hot_storage_period; data-source/alicloud_mongodb_audit_policies: support service_type, storage_period and hot_storage_period. (#9899)
• resource/alicloud_oos_execution: support tags attribute; data-source/alicloud_oos_executions: support tags attribute. (#9901)
• resource/alicloud_polardb_aicluster: support conn string and api key. (#9902)
• resource/alicloud_bastionhost_instance: Add bandwidth validation. (#9903)
• resource/alicloud_resource_manager_handshake: remove accepted account. (#9907)
• provider: add support for ap-southeast-8 region validation. (#9909)
• docs: wafv3_defense_rule - list in-list and not-in-list op_value enums. (#9904)

BUG FIXES:

• resource/alicloud_ess_scaling_configuration: Ensure system_disk_size is not updated to 0. (#9859)
• resource/alicloud_schedulerx_job: fix panic on empty contact_info block in job_monitor_info. (#9912)

v1.283.0

• New Resource: alicloud_wafv3_address_book (#9874)
• New Resource: alicloud_threat_detection_service_linked_role (#9888)
• New Resource: alicloud_resource_manager_resource_directory_sharing (#9890)
• New Data Source: alicloud_wafv3_address_book (#9874)
• New Data Source: alicloud_wafv3_defense_rules (#9883)

ENHANCEMENTS:

• provider: widen configuration_source length limit to 1024. (#9877)
• resource/alicloud_esa_origin_pool: Added the field origins.ip_version_policy. (#9891)
• resource/alicloud_esa_transport_layer_application: Fixed the int overflow bug in field application_id; Improved alicloud_esa_transport_layer_application testcase. (#9762)
• resource/alicloud_cloud_firewall_instance: add auto_asset_protection. (#9854)
• resource/alicloud_alikafka_sasl_acl: Added retry strategy for error code BIZ_FIND_CONSUMER_GROUP_INFO_ERROR. (#9856)
• resource/alicloud_message_service_queue: Added the field queue_type. (#9860)
• resource/alicloud_instance: Aadd support for enable_high_density_mode. (#9862)
• resource/alicloud_message_service_topic: Added the field topic_type. (#9863)
• resource/alicloud_db_instance: Retry on IncorrectDBInstanceState and OperationDenied.DBInstanceStatus. (#9865)
• resource/alicloud_cr_ee_repo: support tag_immutability attribute. (#9867)
• resource/alicloud_amqp_instance: support serverless_switch and tags; data-source/alicloud_amqp_instances: support serverless_switch. (#9870)
• resource/alicloud_ecs_launch_template: Add customizeDiff to propagate the update event of latest_version_number and fix template_tags update bug. (#9871)
• resource/alicloud_alidns_record: Added retry strategy for DescribeDomainRecordInfo. (#9873)
• resource/alicloud_rds_custom_disk: Added the field bursting_enabled, delete_with_instance, instance_id, resource_group_id, tags; Removed the ForceNew for field performance_level. (#9879)
• resource/alicloud_wafv3_defense_rule: Added the field gmt_modified; data-source/alicloud_wafv3_domains: Added the field domain_id. (#9883)
• data-source/alicloud_ess_notifications: support time_zone and message_encoding. (#9844)
• docs: alicloud_cr_ee_instance document Economy instance_type and DISABLE image_scanner. (#9858)
• docs: Improved the document esa_cache_reserve_instance. (#9885)

BUG FIXES:

• resource/alicloud_rds_instance_cross_backup_policy: fix delete with proper parameters and pre-checks. (#9838)
• resource/alicloud_alikafka_instance: Fixed the update error caused by field serverless_config; Added the field vpc_sasl_domain_endpoint . (#9855)
• resource/alicloud_rds_custom: Fixed the diff error caused by field system_disk.category. (#9875)
• resource/alicloud_ros_stack_instances: Fixed duplicate entries regionids. (#9892)
• resource/alicloud_esa_routine_route: Fixed the int overflow bug in field config_id; Changed the field route_enable, route_name, rule from Optional to Required; Improved alicloud_esa_routine_route testcase. (#9893)
• testcase: fix alicloud_rds_instance_cross_backup_policy test. (#9857)
• docs: fix broken DescribeInstance link in alicloud_wafv3_address_book{,s}. (#9880)
• docs: fix Available since version for auto_asset_protection in alicloud_cloud_firewall_instance. (#9894)