oracle-community · ab-cs13 · Oct 8, 2025 · Sep 29, 2025 · Sep 29, 2025 · Sep 29, 2025
diff --git a/.changelog/42708.txt b/.changelog/42708.txt
@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_transfer_web_app
+```
+
+```release-note:new-resource
+aws_transfer_web_app_customization
+```
diff --git a/.changelog/43490.txt b/.changelog/43490.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kinesisanalyticsv2_application: Ensure that configured `application_configuration.run_configuration` values are respected during update
+```
diff --git a/.changelog/43590.txt b/.changelog/43590.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Do not warn if no filter element is set
+```
diff --git a/.changelog/43825.txt b/.changelog/43825.txt
@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_odb_gi_versions
+```
+
+```release-note:new-data-source
+aws_odb_db_system_shapes
+```
diff --git a/.changelog/43996.txt b/.changelog/43996.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_chatbot_slack_channel_configuration: Force resource replacement when `configuration_name` is modified
+```
diff --git a/.changelog/44256.txt b/.changelog/44256.txt
@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_prometheus_resource_policy
+```
diff --git a/.changelog/44299.txt b/.changelog/44299.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_service_specific_credential: Add support for Bedrock API keys with `credential_age_days`, `service_credential_alias`, `service_credential_secret`, `create_date`, and `expiration_date` attributes
+```
diff --git a/.changelog/44309.txt b/.changelog/44309.txt
@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_rds_proxy: Add `default_auth_scheme` argument
+```
+
+```release-note:enhancement
+resource/aws_rds_proxy: Make `auth` configuration block optional
+```
+
+```release-note:enhancement
+data-source/aws_rds_proxy: Add `default_auth_scheme` attribute
+```
diff --git a/.changelog/44328.txt b/.changelog/44328.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ec2_instance_type_offering: Add `location` attribute
+```
diff --git a/.changelog/44362.txt b/.changelog/44362.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_vpc: Correctly set `ipv6_cidr_block` when the VPC has multiple associated IPv6 CIDRs
+```
+
+```release-note:bug
+resource/aws_default_vpc: Correctly set `ipv6_cidr_block` when the VPC has multiple associated IPv6 CIDRs
+```
diff --git a/.changelog/44369.txt b/.changelog/44369.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssmcontacts_contact_channel: Add resource identity support
+```
diff --git a/.changelog/44372.txt b/.changelog/44372.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_pinpointsmsvoicev2_phone_number: Update `two_way_channel_arn` argument to accept `connect.[region].amazonaws.com` in addition to ARNs
+```
diff --git a/.changelog/44389.txt b/.changelog/44389.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_endpoint: Ensure that `postgres_settings` are updated
+```
diff --git a/.changelog/44417.txt b/.changelog/44417.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_opensearch_domain: Add `aiml_options` argument
+```
diff --git a/.changelog/44435.txt b/.changelog/44435.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cleanrooms_configured_table: Add resource identity support
+```
diff --git a/.changelog/44442.txt b/.changelog/44442.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Allows unsetting `noncurrent_version_expiration.newer_noncurrent_versions` and `noncurrent_version_transition.newer_noncurrent_versions`.
+```
diff --git a/.changelog/44444.txt b/.changelog/44444.txt
@@ -0,0 +1,3 @@
+```release-note:new-action
+aws_codebuild_start_build
+```
diff --git a/.changelog/44445.txt b/.changelog/44445.txt
@@ -0,0 +1,3 @@
+```release-note:new-action
+aws_transcribe_start_transcription_job
+```
diff --git a/.changelog/44449.txt b/.changelog/44449.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_servicequotas_service_quota: Fixed a panic that occurred when a non-existing `quota_name` was provided
+```
diff --git a/.changelog/44456.txt b/.changelog/44456.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_fsx_lustre_file_system: Fixed to update `metadata_configuration` first to allow simultaneous increase of `metadata_configuration.iops` and `storage_capacity`
+```
diff --git a/.changelog/44459.txt b/.changelog/44459.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Fix `interface conversion: interface {} is nil, not map[string]interface {}` panics when `capacity_reservation_target` is empty
+```
diff --git a/.changelog/44461.txt b/.changelog/44461.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_elastic_beanstalk_environment: Fix `inconsistent final plan` error in some cases with `setting` elements.
+```
+
+```release-note:bug
+resource/aws_elastic_beanstalk_configuration_template: Fix `inconsistent final plan` error in some cases with `setting` elements.
+```
diff --git a/.changelog/44463.txt b/.changelog/44463.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudfront_distribution: Add `ip_address_type` argument to `origin.custom_origin_config` block
+```
diff --git a/.changelog/44464.txt b/.changelog/44464.txt
@@ -0,0 +1,3 @@
+```release-note:new-action
+aws_sfn_start_execution
+```
diff --git a/.changelog/44473.txt b/.changelog/44473.txt
@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_route53recoverycontrolconfig_cluster: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_route53recoverycontrolconfig_control_panel: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_route53recoverycontrolconfig_safety_rule: Add tagging support
+```
diff --git a/.changelog/44482.txt b/.changelog/44482.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_networkfirewall_firewall_policy: Fix failure to retrieve multiple `firewall_policy.stateful_rule_group_reference` attributes
+```
diff --git a/.changelog/44485.txt b/.changelog/44485.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_lb: Fix `Invalid address to set: []string{"secondary_ips_auto_assigned_per_subnet"}` errors
+```
diff --git a/.changelog/44487.txt b/.changelog/44487.txt
@@ -0,0 +1,3 @@
+```release-note:new-action
+aws_events_put_events
+```
diff --git a/.changelog/44489.txt b/.changelog/44489.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_event_rule: Do not retry on `LimitExceededException`
+```
diff --git a/.changelog/44491.txt b/.changelog/44491.txt
@@ -0,0 +1,39 @@
+```release-note:bug
+resource/aws_datazone_environment: Prevents `unknown value` error when optional `account_identifier` is not specified.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Prevents `unknown value` error when optional `account_region` is not specified.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Properly passes `blueprint_identifier` on creation.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Prevents error when updating.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Prevents occasional `unexpected state` error when deleting.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Sets values for `user_parameters` when importing.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Values in `user_parameters` should not be updateable.
+```
+
+```release-note:bug
+resource/aws_datazone_environment: Correctly updates `glossary_terms`.
+```
+
+```release-note:bug
+resource/aws_datazone_project: No longer ignores errors when deleting.
+```
+
+```release-note:bug
+resource/aws_datazone_project: No longer returns error when already deleting.
+```
diff --git a/.changelog/44498.txt b/.changelog/44498.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_odb_cloud_vm_cluster : Fixed planmodifier for data_storage_size_in_tbs. Marked it mandatory. Fixed gi-version issue during creation
+```
diff --git a/.changelog/44505.txt b/.changelog/44505.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_launch_template: `kms_key_id` validation now accepts key ID, alias, and alias ARN in addition to key ARN
+```
diff --git a/.changelog/44509.txt b/.changelog/44509.txt
@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecs_capacity_provider: Make `auto_scaling_group_provider` optional
+```
+
+```release-note:enhancement
+resource/aws_ecs_capacity_provider: Add `cluster` and `managed_instances_provider` arguments
+```
diff --git a/.changelog/44514.txt b/.changelog/44514.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ebs_volume: Update `throughput` maximum validation from 1000 to 2000 MiB/s for gp3 volumes
+```
diff --git a/.changelog/44515.txt b/.changelog/44515.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add `enable_monitoring_dashboard` argument
+```
diff --git a/.changelog/44516.txt b/.changelog/44516.txt
@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `mysql_settings` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_dms_endpoint: Add `mysql_settings` attribute
+```
diff --git a/.changelog/44522.txt b/.changelog/44522.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_log_resource_policy: Do not retry on `LimitExceededException`
+```
diff --git a/.changelog/44540.txt b/.changelog/44540.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `schema_registry_config` configuration blocks to `amazon_managed_kafka_event_source_config` and `self_managed_kafka_event_source_config` blocks
+```
diff --git a/.changelog/44548.txt b/.changelog/44548.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssmcontacts_contact: Add resource identity support
+```
diff --git a/.changelog/44559.txt b/.changelog/44559.txt
@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_transfer_host_key
+```
diff --git a/.changelog/44560.txt b/.changelog/44560.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpclattice_resource_gateway: Add `ipv4_addresses_per_eni` argument
+```
diff --git a/.changelog/44573.txt b/.changelog/44573.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Correctly validate AWS European Sovereign Cloud Regions in ARNs
+```
diff --git a/.ci/providerlint/go.mod b/.ci/providerlint/go.mod
@@ -4,7 +4,7 @@ go 1.24.6
 
 require (
 	github.com/bflad/tfproviderlint v0.31.0
-	github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.66
+	github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.67
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.38.1
 	golang.org/x/tools v0.37.0
 )

diff --git a/.ci/providerlint/go.sum b/.ci/providerlint/go.sum
@@ -54,8 +54,8 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.66 h1:HA6blfR0h6kGnw4oJ92tZzghubreIkWbQJ4NVNqS688=
-github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.66/go.mod h1:7kTJVbY5+igob9Q5N6KO81EGEKDNI9FpjujB31uI/n0=
+github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.67 h1:IS4mjtvkLHXWI5yn/t9ILOUiBqPePMFaO4IRh5pcMk4=
+github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.67/go.mod h1:l81jrdpcZSWUsJs4BGFfdGScefSYEFQRLMQRG3uyvT0=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
@@ -163,8 +163,8 @@ github.com/zclconf/go-cty v1.17.0 h1:seZvECve6XX4tmnvRzWtJNHdscMtYEx5R7bnnVyd/d0
 github.com/zclconf/go-cty v1.17.0/go.mod h1:wqFzcImaLTI6A5HfsRwB0nj5n0MRZFwmey8YoFPPs3U=
 github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940 h1:4r45xpDWB6ZMSMNJFMOjqrGHynW3DIBuR2H9j0ug+Mo=
 github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940/go.mod h1:CmBdvvj3nqzfzJ6nTCIwDTPZ56aVGvDrmztiO5g3qrM=
-go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA=
-go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A=
+go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
+go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
 go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8=
 go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
 go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA=

diff --git a/.github/workflows/acctest-terraform-embedded-lint.yml b/.github/workflows/acctest-terraform-embedded-lint.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
@@ -55,13 +55,13 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
           path: ~/go/pkg/mod
           key: ${{ runner.os }}-go-pkg-mod-${{ hashFiles('go.sum') }}
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         name: Cache plugin dir
         continue-on-error: true
         timeout-minutes: 2

diff --git a/.github/workflows/acctest-terraform-lint.yml b/.github/workflows/acctest-terraform-lint.yml
@@ -26,7 +26,7 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
@@ -45,13 +45,13 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
           path: ~/go/pkg/mod
           key: ${{ runner.os }}-go-pkg-mod-${{ hashFiles('go.sum') }}
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         name: Cache plugin dir
         continue-on-error: true
         timeout-minutes: 2

diff --git a/.github/workflows/changelog_misspell.yml b/.github/workflows/changelog_misspell.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:

diff --git a/.github/workflows/copyright.yml b/.github/workflows/copyright.yml
@@ -32,13 +32,13 @@ jobs:
       - name: go env
         run: |
           echo "GOCACHE=$(go env GOCACHE)" >> $GITHUB_ENV
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
           path: ${{ env.GOCACHE }}
           key: ${{ runner.os }}-GOCACHE-${{ hashFiles('go.sum') }}-${{ hashFiles('internal/**') }}
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
@@ -47,13 +47,13 @@ jobs:
       - name: go env
         run: |
           echo "GOCACHE=$(go env GOCACHE)" >> $GITHUB_ENV
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:
           path: ${{ env.GOCACHE }}
           key: ${{ runner.os }}-GOCACHE-${{ hashFiles('go.sum') }}-${{ hashFiles('internal/**') }}
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with:

diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
@@ -47,7 +47,7 @@ jobs:
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version-file: go.mod
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         continue-on-error: true
         timeout-minutes: 2
         with: