sync the fork with upstream

.changelog/26702.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_glue_catalog_table: Add `partition_keys.parameters` argument, fixing `Invalid address to set: []string{"partition_keys", "0", "parameters"}` errors
+```
+
+```release-note:bug
+data-source/aws_glue_catalog_table: Add `partition_keys.parameters` attribute
+```

.changelog/33796.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `policy_details.schedule.cross_region_copy_rule.target_region` argument
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Make `policy_details.schedule.cross_region_copy_rule.target` optional
+```

.changelog/38336.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_spot_instance_request: Change `network_interface.network_card_index` to Computed
+```

.changelog/38527.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_instance: Add `placement_group_id` argument
+```
+
+```release-note:enhancement
+data-source/aws_instance: Add `placement_group_id` attribute
+```

.changelog/40148.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_batch_compute_environment: Allow in-place updates of compute environments that have the `SPOT_PRICE_CAPACITY_OPTIMIZED` strategy
+```

.changelog/41055.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `default_policy` argument
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `copy_tags`, `create_interval`, `exclusions`, `extend_deletion`, `policy_language`, `resource_type` and `retain_interval` attributes to `policy_details` configuration block
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `policy_details.create_rule.scripts` argument
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy:Add `policy_details.schedule.archive_rule` argument
+```

.changelog/41308.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_dynamodb_table: Add `warm_throughput` and `global_secondary_index.warm_throughput` arguments
+```
+
+```release-note:enhancement
+data-source/aws_dynamodb_table: Add `warm_throughput` and `global_secondary_index.warm_throughput` attributes
+```

.changelog/42188.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_network_interface: Add `attachment.network_card_index` argument
+```
+
+```release-note:enhancement
+resource/aws_network_interface_attachment: Add `network_card_index` argument
+```
+
+```release-note:enhancement
+data-source/aws_network_interface: Add `attachment.network_card_index` attribute
+```

.changelog/42382.txt

@@ -0,0 +1,6 @@
+```release-note:new-resource
+aws_timestreaminfluxdb_db_cluster
+```
+```release-note:bug
+resource/aws_timestreaminfluxdb_db_instance: Fix tag-only update errors
+```

.changelog/42397.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_controltower_baseline
+```

.changelog/42483.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_eks_cluster: Supports null `compute_config.node_role_arn` when disabling auto mode or built-in node pools
+```

.changelog/42636.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_global_replication_group: Change `engine` to Optional and Computed
+```

.changelog/42740.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_wafv2_web_acl: Fix performance of update when the WebACL has a large number of rules
+```

.changelog/42928.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Allow `remote_network_config` to be updated in-place, enabling support for EKS hybrid nodes on existing clusters
+```

.changelog/43241.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Remove Terraform default for `availability_zone_rebalancing` and change the attribute to Optional and Computed. This allow ECS to default to `ENABLED` for new resources compatible with *AvailabilityZoneRebalancing* and maintain an existing service's `availability_zone_rebalancing` value during update when not configured. If an existing service never had an `availability_zone_rebalancing` value configured and is updated, ECS will treat this as `DISABLED`
+```

.changelog/43408.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_trust_store
+```

.changelog/43444.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_portal
+```

.changelog/43499.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dx_hosted_connection: Fix `DescribeHostedConnections failed for connection dxcon-xxxx doesn't exist` by pointing to the correct connection ID when doing the describe.
+```

.changelog/43650.txt

@@ -0,0 +1,8 @@
+```release-note:new-resource
+aws_odb_cloud_exadata_infrastructure
+```
+
+```release-note:new-data-source
+aws_odb_cloud_exadata_infrastructure
+```
+

.changelog/43699.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb: Add `secondary_ips_auto_assigned_per_subnet` argument for Network Load Balancers
+```

.changelog/43708.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_nat_gateway: Fix inconsistent final plan for `secondary_private_ip_addresses`
+```

.changelog/43729.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_identity_provider
+```

.changelog/43735.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_browser_settings_association
+```

.changelog/43742.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_networkmanager_vpc_attachment: Change `options` to Optional and Computed
+```
+
+```release-note:enhancement
+resource/aws_networkmanager_vpc_attachment: Add `options.dns_support` and `options.security_group_referencing_support` arguments
+```

.changelog/43773.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_data_protection_settings_association
+```

.changelog/43774.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_ip_access_settings_association
+```

.changelog/43775.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_network_settings_association
+```

.changelog/43776.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_user_access_logging_settings_association
+```

.changelog/43777.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_user_settings_association
+```

.changelog/43778.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_trust_store_association
+```

.changelog/43817.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cognito_managed_login_branding
+```

.changelog/43863.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_session_logger
+```

.changelog/43866.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_workspacesweb_session_logger_association
+```

.changelog/43910.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route: Add resource identity support
+```

.changelog/43914.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dynamodb_contributor_insights: Add `mode` argument in support of [CloudWatch contributor insights modes](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/contributorinsights_HowItWorks.html#contributorinsights_HowItWorks.Modes)
+```

.changelog/43916.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_thing_principal_attachment: Add `thing_principal_type` argument
+```

.changelog/43918.txt

@@ -0,0 +1,12 @@
+```release-note:enhancement
+resource/aws_sqs_queue: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_sqs_queue_policy: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_sqs_queue_redrive_policy: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_sqs_queue_redrive_allow_policy: Add resource identity support
+```

.changelog/43919.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Fixes the behavior when enabling database_insights_mode="advanced" without changing performance insights retention window
+```

.changelog/43921.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_signer_signing_profile: Add `signing_parameters` argument
+```
+
+```release-note:enhancement
+data-source/aws_signer_signing_profile: Add `signing_material` and `signing_parameters` attributes
+```

.changelog/43922.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3tables_table_bucket: Add `force_destroy` argument
+```

.changelog/43925.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/imagebuilder_lifecycle_policy: Fix `Provider produced inconsistent result after apply` error when `policy_detail.exclusion_rules.amis.is_public` is omitted
+```

.changelog/43926.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Fixed to accept an empty `email_mfa_configuration` block
+```

.changelog/43942.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Fixes the behavior when modifying `database_insights_mode` when using custom KMS key
+```

.changelog/43946.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mwaa_environment: Add `worker_replacement_strategy` argument
+```

.changelog/43950.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_inspector2_filter: Support `code_repository_project_name`, `code_repository_provider_type`, `ecr_image_in_use_count`, and `ecr_image_last_in_use_at` in `filter_criteria`
+```

.changelog/43953.txt

@@ -0,0 +1,15 @@
+```release-note:bug
+resource/aws_instance: Adds `primary_network_interface` to allow importing resources with custom primary network interface.
+```
+
+```release-note:bug
+resource/aws_spot_instance_request: Adds `primary_network_interface` to allow importing resources with custom primary network interface.
+```
+
+```release-note:note
+resource/aws_instance: The `network_interface` block has been deprecated. Use `primary_network_interface` for the primary network interface and `aws_network_interface_attachment` resources for other network interfaces.
+```
+
+```release-note:note
+resource/aws_spot_instance_request: The `network_interface` block has been deprecated. Use `primary_network_interface` for the primary network interface and `aws_network_interface_attachment` resources for other network interfaces.
+```

.changelog/43954.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_permission: Add resource identity support
+```

.changelog/43956.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_servicecatalog_provisioned_product: Set `provisioning_parameters` and `provisioning_artifact_id` to the values from the last successful deployment when update fails
+```

.changelog/43967.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_vpc_ipam: Add `metered_account` argument
+```
+
+```release-note:enhancement
+data-source/aws_vpc_ipam: Add `metered_account` attribute
+```

.changelog/43976.txt

@@ -0,0 +1,27 @@
+```release-note:enhancement
+resource/aws_s3_bucket_public_access_block: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_policy: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_ownership_controls: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_logging: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_server_side_encryption_configuration: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_versioning: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_notification: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_cors_configuration: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_s3_bucket_website_configuration: Add resource identity support
+```

.changelog/43981.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_imagebuilder_image_recipe: Increase upper limit of `block_device_mapping.ebs.iops` from `10000` to `100000`
+```

.changelog/43984.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_event_target: Add resource identity support
+```

.changelog/43986.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add `sigint_rollback` argument
+```
+
+```release-note:enhancement
+resource/aws_ecs_service: Change `deployment_configuration` to Optional and Computed
+```

.changelog/43988.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_job: Support `G.12X`, `G.16X`, `R.1X`, `R.2X`, `R.4X`, and `R.8X` as valid values for `worker_type`
+```

.changelog/43989.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_synthetics_canary: Add `vpc_config.ipv6_allowed_for_dual_stack` argument
+```

.changelog/43990.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route_table: Add resource identity support
+```

.changelog/44011.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_kms_external_key: Add `key_spec` argument
+```
+
+```release-note:enhancement
+resource/aws_kms_external_key: Change `key_usage` to Optional and Computed
+```

.changelog/44025.txt

@@ -0,0 +1,6 @@
+```release-note:enhancement
+resource/aws_kms_key: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_kms_alias: Add resource identity support
+```

.changelog/44031.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_secretsmanager_secret_version: Add resource identity support
+```

.changelog/44032.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_wafv2_web_acl: Add missing flattening of `name` in `response_inspection.header` blocks for `AWSManagedRulesATPRuleSet` and `AWSManagedRulesACFPRuleSet` to avoid persistent plan diffs
+```

.changelog/44041.txt

@@ -0,0 +1,9 @@
+```release-note:enhancement
+resource/aws_ecr_repository: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_ecr_repository_policy: Add resource identity support
+```
+```release-note:enhancement
+resource/aws_ecr_lifecycle_policy: Add resource identity support
+```

.changelog/44042.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_datazone_domain: Add `domain_version` and `service_role` arguments to support V2 domains
+```

.changelog/44043.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket_acl: Add resource identity support
+```