Update Terraform aws to ~> 5.60

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	~> 4.16 -> ~> 5.60

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.61.0

Compare Source

NOTES:

• resource/aws_chatbot_teams_channel_configuration: This resource is provided on a best-effort basis, and we welcome the community's help in testing it. (#​38630)

FEATURES:

• New Data Source: aws_ecr_repository_creation_template (#​38597)
• New Resource: aws_chatbot_slack_channel_configuration (#​38124)
• New Resource: aws_chatbot_teams_channel_configuration (#​38630)
• New Resource: aws_datazone_glossary (#​38602)
• New Resource: aws_ecr_repository_creation_template (#​38597)
• New Resource: aws_timestreaminfluxdb_db_instance (#​37963)

ENHANCEMENTS:

• data-source/aws_eks_cluster: Add upgrade_policy attribute (#​38573)
• data-source/aws_sagemaker_prebuilt_ecr_image: Support additional repository_name values. See documentation for details (#​38575)
• resource/aws_appsync_graphql_api: Add enhanced_metrics_config configuration block (#​38570)
• resource/aws_db_instance: Add upgrade_storage_config argument (#​36904)
• resource/aws_default_vpc: Support ipv6_cidr_block sizes between /44 and /60 in increments of /4 (#​35614)
• resource/aws_default_vpc: Support ipv6_netmask_length values between 44 and 60 in increments of 4 (#​35614)
• resource/aws_eks_cluster: Add upgrade_policy configuration block (#​38573)
• resource/aws_elasticache_user_group_association: Add configurable create and delete timeouts (#​38559)
• resource/aws_pipes_pipe: Add log_configuration.include_execution_data argument (#​38569)
• resource/aws_rds_cluster: Add performance_insights_enabled, performance_insights_kms_key_id, and performance_insights_retention_period arguments (#​29415)
• resource/aws_rds_cluster: Add restore_to_point_in_time.source_cluster_resource_id argument (#​38540)
• resource/aws_rds_cluster: Mark restore_to_point_in_time.source_cluster_identifier as Optional (#​38540)
• resource/aws_sfn_activity: Add encryption_configuration configuration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions Activity resources (#​38574)
• resource/aws_sfn_state_machine: Add encryption_configuration configuration block to support the use of Customer Managed Keys with AWS KMS to encrypt Step Functions State Machine resources (#​38574)
• resource/aws_ssm_patch_baseline: Remove empty fields from json attribute value (#​35950)
• resource/aws_storagegateway_file_system_association: Add configurable timeouts (#​38554)
• resource/aws_vpc: Support ipv6_cidr_block sizes between /44 and /60 in increments of /4 (#​35614)
• resource/aws_vpc: Support ipv6_netmask_length values between 44 and 60 in increments of 4 (#​35614)
• resource/aws_vpc_ipv6_cidr_block_association: Add assign_generated_ipv6_cidr_block and ipv6_pool arguments (#​27274)
• resource/aws_vpc_ipv6_cidr_block_association: Support ipv6_cidr_block sizes between /44 and /60 in increments of /4 (#​35614)
• resource/aws_vpc_ipv6_cidr_block_association: Support ipv6_netmask_length values between 44 and 60 in increments of 4 (#​35614)
• resource/aws_vpc_security_group_egress_rule: Add tags to the AuthorizeSecurityGroupEgress EC2 API call instead of making a separate CreateTags call (#​35614)
• resource/aws_vpc_security_group_ingress_rule: Add tags to the AuthorizeSecurityGroupIngress EC2 API call instead of making a separate CreateTags call (#​35614)
• resource/aws_wafv2_web_acl: Add rule_json attribute to allow raw JSON for rules. (#​38309)

BUG FIXES:

• data-source/aws_appstream_image: Fix issue where the most recent image is not returned (#​38571)
• datasource/aws_networkmanager_core_network_policy_document: Fix CoreNetworkPolicyException when putting policy with single wildcard in when_sent_to (#​38595)
• resource/aws_cloudsearch_domain: Fix index_name character length validation (#​38509)
• resource/aws_ecs_task_definition: Ensure that JSON keys in container_definitions start with a lowercase letter (#​38622)
• resource/aws_iot_provisioning_template: Properly send type argument on create when configured (#​38640)
• resource/aws_opensearchserverless_security_policy: Normalize policy content to prevent persistent differences (#​38604)
• resource/aws_pipes_pipe: Don't reset target_parameters if the configured value has not changed (#​38598)
• resource/aws_rds_instance: Allow domain_dns_ips to use single DNS server IP (#​36500)
• resource/aws_sagemaker_domain: Properly send domain_settings.r_studio_server_pro_domain_settings.r_studio_package_manager_url argument on create (#​38547)
• resource/aws_vpc_ipam_pool_cidr_allocation: Set description on Read (#​38618)
• resource/aws_vpc_ipam_pool_cidr_allocation: Set netmask_length on Read (#​38618)

---

Configuration

📅 Schedule: Branch creation - "before 4pm on friday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.