Merge tag 'v4.20.1' into v4+sylr

v4.20.1

.changelog/12103.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_snapshot_create_volume_permission: Error if `account_id` is the snapshot's owner
+```

.changelog/17695.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_launch_configuration: Honor associate_public_ip_address = false
+```

.changelog/19277.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Correctly delete instance on destroy when `disable_api_termination` is `true`
+```

.changelog/19523.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_lakeformation_lf_tag
+```

.changelog/19648.txt

@@ -0,0 +1,7 @@
+```release-note:note:enhancement
+resource/aws_lakeformation_permissions: Add LF-tag support
+```
+
+```release-note:note:enhancement
+datasource/aws_lakeformation_permissions: Add LF-tag support
+```

.changelog/20625.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_lightsail_container_service
+```
+
+```release-note:new-resource
+aws_lightsail_container_service_deployment_version
+```

.changelog/20912.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ebs_snapshot_copy: Add support for `timeouts` configuration block.
+```

.changelog/21846.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `redshift_settings` configuration block
+```

.changelog/21916.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ebs_volume: Add `final_snapshot` argument
+```

.changelog/22646.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add ability to use AWS Secrets Manager with the `sqlserver` engine
+```

.changelog/22844.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_efs_replication_configuration
+```

.changelog/22859.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_guardduty_detector: Add `kubernetes` attribute to the `datasources` configuration block
+```

.changelog/23280.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ebs_volume: Fix to preserve `iops` when changing EBS volume type (`io1`, `io2`, `gp3`)
+```

.changelog/23691.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add ability to use AWS Secrets Manager with the `aurora-postgresql` and `mongodb` engines
+```

.changelog/24695.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Prevent error `InvalidParameterCombination: The parameter GroupName within placement information cannot be specified when instanceInterruptionBehavior is set to 'STOP'` when using a launch template that sets `instance_interruption_behavior` to `stop`
+```

.changelog/24764.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add error handling for `ErrCodeNotImplemented` and `ErrCodeXNotImplemented` errors when ready bucket information.
+```

.changelog/24795.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_autoscaling_group: Add `mixed_instances_policy.launch_template.override.instance_requirements` argument
+```

.changelog/24804.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_servicecatalog_provisioned_product: Add possible `TAINTED` target state for resource update and remove one of the internal waiters during read
+```

.changelog/24821.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_location_place_index
+```

.changelog/24846.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add ability to use AWS Secrets Manager with the `aurora`, `mariadb` and `mysql` engines
+```

.changelog/24856.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_redshift_cluster: Add plan-time validation for `iam_roles`, `owner_account`, and `port`.
+```
+
+```release-note:enhancement
+resource/aws_redshift_cluster: Add `aqua_configuration_status` and `apply_immediately` arguments.
+```
+
+```release-note:enhancement
+data-source/aws_redshift_cluster: Add `aqua_configuration_status` attribute.
+```

.changelog/24875.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_proxy_target: Fix `InvalidDBInstanceState: DB Instance is in an unsupported state - CREATING, needs to be in [AVAILABLE, MODIFYING, BACKING_UP]` error on resource Create
+```

.changelog/24882.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_metric_stream: Add `statistics_configuration` argument
+```

.changelog/24886.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_redshift_cluster: Add `logging.log_destination_type` and `logging.log_exports` arguments.
+```

.changelog/24889.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appflow_flow: Amend `task_properties` validation to avoid conflicting type assumption
+```

.changelog/24899.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_organizations_account: Fix reading account state for existing accounts
+```

.changelog/24906.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_hsm_client_certificate
+```

.changelog/24907.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_authentication_profile
+```

.changelog/24909.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_redshift_event_subscription: Add plan time validations for `event_categories`, `source_type`, and `severity`.
+```

.changelog/24913.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudfront_response_headers_policy: Add `server_timing_headers_config` argument
+```
+
+```release-note:enhancement
+datasource/aws_cloudfront_response_headers_policy: Add `server_timing_headers_config` attribute
+```

.changelog/24915.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudsearch_domain: Add `index_field.source_fields` argument
+```

.changelog/24916.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_usage_limit
+```

.changelog/24920.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_kendra_index
+```

.changelog/24951.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_autoscaling_group: Add `context` argument
+```

.changelog/24980.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_location_place_index
+```

.changelog/24982.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_redshift_cluster: Add `default_iam_role_arn`, `maintenance_track_name`, and `manual_snapshot_retention_period` arguments.
+```
+
+```release-note:enhancement
+data-source/aws_redshift_cluster: Add `arn`, `cluster_nodes`, `cluster_nodes`, `maintenance_track_name`, `manual_snapshot_retention_period`, `log_destination_type`, and `log_exports` attributes.
+```

.changelog/25045.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+data-source/aws_ami: Add `tpm_support` attribute
+```
+
+```release-note:enhancement
+resource/aws_ami: Add `tpm_support` argument
+```
+
+```release-note:enhancement
+resource/aws_ami_copy: Add `tpm_support` argument
+```
+
+```release-note:enhancement
+resource/aws_ami_from_instance: Add `tpm_support` argument
+```

.changelog/25046.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_managed_prefix_list_entry: Fix error when attempting to create or delete multiple list entries
+```

.changelog/25053.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_redshift_subnet_group
+```

.changelog/25060.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add support for `TransferSecurityPolicy-2022-03` `security_policy_name` value
+```

.changelog/25062.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Support multiple attribute updates by refreshing `current_version` after each update
+```

.changelog/25072.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_msk_cluster: Prevent crash on apply when `client_authentication.tls` is empty
+```

.changelog/25073.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_endpoint_access
+```

.changelog/25077.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_global_replication_group: Add support for upgrading `engine_version`.
+```

.changelog/25080.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add ability to use AWS Secrets Manager with the `redshift` engine
+```

.changelog/25092.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_redshift_cluster_credentials
+```

.changelog/25093.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_hsm_configuration
+```

.changelog/25096.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_redshift_cluster_iam_roles
+```
+
+```release-note:enhancement
+resource/aws_redshift_cluster: The `default_iam_role_arn` argument is now Computed
+```

.changelog/25097.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_launch_configuration: Correct data type for `ebs_block_device.throughput` and `root_block_device.throughput` attributes
+```

.changelog/25104.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshiftdata_statement
+```

.changelog/25109.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_acmpca_policy
+```

.changelog/25113.txt

@@ -0,0 +1,2 @@
+```release-note:enhancement
+resource/aws_ram_resource_share: Add `permission_arns` argument.

.changelog/25130.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_servicecatalog_provisioned_product: Correctly handle resources in a `TAINTED` state
+```

.changelog/25140.txt

@@ -0,0 +1,2 @@
+```release-note:enhancement
+resource/aws_neptune_cluster: Add `allow_major_version_upgrade` argument.

.changelog/25144.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_emrserverless_application
+```

.changelog/25145.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_rds_cluster_role_association: Extend timeout to 10 minutes
+```
+
+```release-note:bug
+resource/aws_db_instance_role_association: Extend timeout to 10 minutes
+```

.changelog/25158.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ram_resource_share: Fix regression in v4.17.0 where `permission_arns` would get clobbered if already set
+```

.changelog/25159.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ram_resource_share: Add `resource_share_status` argument.
+```

.changelog/25161.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+resource/aws_instance: Add `private_dns_name_options` argument
+```
+
+```release-note:enhancement
+data-source/aws_instance: Add `private_dns_name_options` attribute
+```
+
+```release-note:enhancement
+resource/aws_instance: Correctly handle `credit_specification` for T4g instances
+```
+
+```release-note:enhancement
+data-source/aws_instance: Correctly set `credit_specification` for T4g instances
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Correctly handle `credit_specification` for T4g instances
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Correctly set `credit_specification` for T4g instances
+```

.changelog/25174.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_parameter: Allow `Intelligent-Tiering` to upgrade to `Advanced` tier as needed.
+```

.changelog/25177.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ce_anomaly_monitor
+```

.changelog/25180.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudwatchrum_app_monitor
+```

.changelog/25181.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cognito_user_pool_client: Add `enable_propagate_additional_user_context_data` argument
+```
+
+```release-note:enhancement
+data-source/aws_cognito_user_pool_client: Add `enable_propagate_additional_user_context_data` argument
+```

.changelog/25182.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_datasync_location_efs: Add `access_point_arn`, `file_system_access_role_arn`, and `in_transit_encryption` arguments
+```
+
+```release-note:enhancement
+resource/aws_datasync_location_efs: Add plan time validations for `ec2_config.security_group_arns`
+```

.changelog/25184.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Correctly handle missing or empty `account_recovery_setting` attribute
+```

.changelog/25185.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_instance: Add `disable_api_stop` argument
+```
+
+```release-note:enhancement
+data-source/aws_instance: Add `disable_api_stop` attribute
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `disable_api_stop` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `disable_api_stop` attribute
+```

.changelog/25187.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_cloudwatch_logs_groups: Make `log_group_name_prefix` optional
+```

.changelog/25189.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_vpc_endpoint_service: Add `supported_ip_address_types` argument
+```
+
+```release-note:enhancement
+data-source/aws_vpc_endpoint_service: Add `supported_ip_address_types` attribute
+```