Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps hashicorp/aws from 6.2.0 to 6.18.0.

Release notes

Sourced from hashicorp/aws's releases.

v6.18.0

6.18.0 (October 23, 2025)

NOTES:

  • data-source/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
  • resource/aws_organizations_account: The status attribute is deprecated. Use state instead. (#44327)
  • resource/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)

FEATURES:

  • New Resource: aws_bedrockagentcore_memory (#44306)
  • New Resource: aws_bedrockagentcore_memory_strategy (#44306)
  • New Resource: aws_bedrockagentcore_oauth2_credential_provider (#44307)
  • New Resource: aws_bedrockagentcore_token_vault_cmk (#44606)
  • New Resource: aws_bedrockagentcore_workload_identity (#44308)

ENHANCEMENTS:

  • data-source/aws_iam_policy: Adds validation for path_prefix attribute (#44703)
  • data-source/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
  • resource/aws_appstream_directory_config: Add certificate_based_auth_properties argument (#44679)
  • resource/aws_iam_policy: Adds List support (#44703)
  • resource/aws_iam_policy: Adds validation for path attribute (#44703)
  • resource/aws_iam_role_policy_attachment: Adds List support (#44739)
  • resource/aws_odb_network: Add delete_associated_resources attribute to enable practitioner to delete associated oci resource. (#44754)
  • resource/aws_organizations_account: Add state attribute (#44327)
  • resource/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)

BUG FIXES:

  • data-source/aws_vpn_connection: Properly set tags attribute (#44761)
  • resource/aws_rds_cluster: Fix "When modifying Provisioned IOPS storage, specify a value for both allocated storage and iops" error when updating RDS clusters with Provisioned IOPS storage (#44706)
  • resource/guardduty_detector_feature: Fix additional_configuration block to ignore ordering (#44627)

v6.17.0

6.17.0 (October 16, 2025)

NOTES:

  • resource/aws_quicksight_account_subscription: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#44638)

FEATURES:

  • New Data Source: aws_rds_global_cluster (#37286)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.18.0 (October 23, 2025)

NOTES:

  • data-source/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: The accounts.status attribute is deprecated. Use accounts.state instead. (#44327)
  • resource/aws_organizations_account: The status attribute is deprecated. Use state instead. (#44327)
  • resource/aws_organizations_organization: The accounts.status and non_master_accounts.status attributes are deprecated. Use the accounts.state and non_master_accounts.state attributes instead. (#44327)

FEATURES:

  • New Resource: aws_bedrockagentcore_memory (#44306)
  • New Resource: aws_bedrockagentcore_memory_strategy (#44306)
  • New Resource: aws_bedrockagentcore_oauth2_credential_provider (#44307)
  • New Resource: aws_bedrockagentcore_token_vault_cmk (#44606)
  • New Resource: aws_bedrockagentcore_workload_identity (#44308)

ENHANCEMENTS:

  • data-source/aws_iam_policy: Adds validation for path_prefix attribute (#44703)
  • data-source/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)
  • data-source/aws_organizations_organizational_unit_child_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
  • data-source/aws_organizations_organizational_unit_descendant_accounts: Add state, joined_method, and joined_timestamp attributes to the accounts block (#44327)
  • resource/aws_appstream_directory_config: Add certificate_based_auth_properties argument (#44679)
  • resource/aws_iam_policy: Adds List support (#44703)
  • resource/aws_iam_policy: Adds validation for path attribute (#44703)
  • resource/aws_iam_role_policy_attachment: Adds List support (#44739)
  • resource/aws_odb_network: Add delete_associated_resources attribute to enable practitioner to delete associated oci resource. (#44754)
  • resource/aws_organizations_account: Add state attribute (#44327)
  • resource/aws_organizations_organization: Add state, joined_method, and joined_timestamp attributes to the accounts and non_master_accounts blocks (#44327)

BUG FIXES:

  • data-source/aws_vpn_connection: Properly set tags attribute (#44761)
  • resource/aws_rds_cluster: Fix "When modifying Provisioned IOPS storage, specify a value for both allocated storage and iops" error when updating RDS clusters with Provisioned IOPS storage (#44706)
  • resource/guardduty_detector_feature: Fix additional_configuration block to ignore ordering (#44627)

6.17.0 (October 16, 2025)

NOTES:

  • resource/aws_quicksight_account_subscription: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing (#44638)

FEATURES:

  • New Data Source: aws_rds_global_cluster (#37286)
  • New Data Source: aws_vpn_connection (#44622)
  • New Resource: aws_bedrockagentcore_agent_runtime (#44301)
  • New Resource: aws_bedrockagentcore_agent_runtime_endpoint (#44301)

... (truncated)

Commits
  • 433171d Merge pull request #44784 from hashicorp/t-update-changelog-version
  • eff3a94 Prepare release
  • 7770940 Update CHANGELOG.md (Manual Trigger)
  • 529be63 Merge pull request #44327 from alexbacchin/f-organizations_account_state
  • 92b7638 [r|d]/aws_organizations(doc): tidy up after state attribute addition
  • 420ae7b chore: tweak changelog
  • 99d3a46 Merge pull request #44754 from oracle-community/delete_oci_ressource_flag
  • 4e17148 Update CHANGELOG.md for #44739
  • d1a4e09 Merge pull request #44739 from hashicorp/f-list-iam-role-policy-attachment
  • bc58871 Merge pull request #44627 from icco/refactor
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 6.2.0 to 6.18.0.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.2.0...v6.18.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Oct 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 27, 2025 10:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Oct 27, 2025
@stackleteer

This comment has been minimized.

@stackleteer

This comment has been minimized.

@albertodonato
Copy link
Contributor

atlantis plan -destroy

@stackleteer

This comment has been minimized.

@albertodonato
Copy link
Contributor

atlantis plan --destroy

@stackleteer
Copy link
Contributor

Error: unknown flag: --destroy.
Usage of plan:
  -d, --dir string         Which directory to run plan in relative to root of repo,
                           ex. 'child/dir'.
  -p, --project string     Which project to run plan for. Refers to the name of the
                           project configured in a repo config file. Cannot be used
                           at same time as workspace or dir flags.
      --verbose            Append Atlantis log to comment.
  -w, --workspace string   Switch to this Terraform workspace before planning.

@albertodonato
Copy link
Contributor

atlantis plan -p dev -destroy

@stackleteer
Copy link
Contributor

Error: cannot use -p/--project at same time as -d/--dir or -w/--workspace.
Usage of plan:
  -d, --dir string         Which directory to run plan in relative to root of repo,
                           ex. 'child/dir'.
  -p, --project string     Which project to run plan for. Refers to the name of the
                           project configured in a repo config file. Cannot be used
                           at same time as workspace or dir flags.
      --verbose            Append Atlantis log to comment.
  -w, --workspace string   Switch to this Terraform workspace before planning.

@albertodonato
Copy link
Contributor

atlantis plan -p dev -- -destroy

@stackleteer
Copy link
Contributor

Ran Plan for project: dev dir: . workspace: default

Show Output
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
- destroy

Terraform will perform the following actions:

  # aws_iam_role.org_read will be destroyed
- resource "aws_iam_role" "org_read" {
      - arn                   = "arn:aws:iam::880584957794:role/atlantis-org-read" -> null
      - assume_role_policy    = jsonencode(
            {
              - Statement = [
                  - {
                      - Action    = "sts:AssumeRole"
                      - Condition = {
                          - StringEquals = {
                              - "sts:ExternalId" = "b5748e1f-0fa5-47c2-b9e2-84108424dd6a"
                            }
                        }
                      - Effect    = "Allow"
                      - Principal = {
                          - AWS = [
                              - "arn:aws:iam::179874453562:role/qa-stacklet-platform",
                              - "arn:aws:iam::179874453562:role/qa-collector",
                            ]
                        }
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - create_date           = "2025-07-09T12:34:44Z" -> null
      - description           = "Access to read accounts information for atlantis Stacklet deployment" -> null
      - force_detach_policies = false -> null
      - id                    = "atlantis-org-read" -> null
      - managed_policy_arns   = [
          - "arn:aws:iam::aws:policy/AWSOrganizationsReadOnlyAccess",
        ] -> null
      - max_session_duration  = 3600 -> null
      - name                  = "atlantis-org-read" -> null
      - path                  = "/" -> null
      - tags                  = {} -> null
      - tags_all              = {} -> null
      - unique_id             = "AROA42BXUD5RE3RZZADS5" -> null
        # (2 unchanged attributes hidden)

      - inline_policy {
          - name   = "AllowBulkTagRead" -> null
          - policy = jsonencode(
                {
                  - Statement = [
                      - {
                          - Action   = "tag:GetResources"
                          - Effect   = "Allow"
                          - Resource = "*"
                        },
                    ]
                  - Version   = "2012-10-17"
                }
            ) -> null
        }
    }

  # aws_iam_role_policy.tags_read will be destroyed
- resource "aws_iam_role_policy" "tags_read" {
      - id          = "atlantis-org-read:AllowBulkTagRead" -> null
      - name        = "AllowBulkTagRead" -> null
      - policy      = jsonencode(
            {
              - Statement = [
                  - {
                      - Action   = "tag:GetResources"
                      - Effect   = "Allow"
                      - Resource = "*"
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - role        = "atlantis-org-read" -> null
        # (1 unchanged attribute hidden)
    }

  # aws_iam_role_policy_attachments_exclusive.org_read will be destroyed
- resource "aws_iam_role_policy_attachments_exclusive" "org_read" {
      - policy_arns = [
          - "arn:aws:iam::aws:policy/AWSOrganizationsReadOnlyAccess",
        ] -> null
      - role_name   = "atlantis-org-read" -> null
    }

Plan: 0 to add, 0 to change, 3 to destroy.

Changes to Outputs:
- org_read_role = "arn:aws:iam::880584957794:role/atlantis-org-read" -> null
  • ▶️ To apply this plan, comment:
    atlantis apply -p dev
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment:
    atlantis plan -p dev -- -destroy

Plan: 0 to add, 0 to change, 3 to destroy.


  • ⏩ To apply all unapplied plans from this Pull Request, comment:
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment:
    atlantis unlock

@albertodonato
Copy link
Contributor

atlantis apply

@stackleteer

This comment has been minimized.

@albertodonato
Copy link
Contributor

atlantis apply

@stackleteer
Copy link
Contributor

Ran Apply for project: dev dir: . workspace: default

aws_iam_role_policy_attachments_exclusive.org_read: Destroying...
aws_iam_role_policy.tags_read: Destroying... [id=atlantis-org-read:AllowBulkTagRead]
aws_iam_role_policy_attachments_exclusive.org_read: Destruction complete after 0s
aws_iam_role_policy.tags_read: Destruction complete after 0s
aws_iam_role.org_read: Destroying... [id=atlantis-org-read]
aws_iam_role.org_read: Destruction complete after 1s

Apply complete! Resources: 0 added, 0 changed, 3 destroyed.

@stackleteer
Copy link
Contributor

Automatically merging because all plans have been successfully applied.

@stackleteer stackleteer merged commit ce2a20a into main Nov 10, 2025
9 of 10 checks passed
@stackleteer
Copy link
Contributor

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: . workspace: default
  • dir: estroy workspace: default

@stackleteer stackleteer deleted the dependabot/terraform/hashicorp/aws-6.18.0 branch November 10, 2025 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants