Merge tag 'v4.14.0' into v4+sylr

.changelog/13000.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+data-source/aws_kms_alias: Fix `name` plan time validation
+```
+
+```release-note:bug
+resource/aws_kms_alias: Fix `name` and `name_prefix` plan time validation
+```

.changelog/16087.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `http` and `error_action.http` arguments
+```

.changelog/17268.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_spot_fleet_request: Add `terminate_instances_on_delete` argument
+```

.changelog/17738.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+ aws_s3_bucket_policy
+ ```

.changelog/19060.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+ resource/aws_ebs_volume: Add support for `multi_attach_enabled` with `io2` volumes
+ ```

.changelog/19175.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `s3.canned_acl` and `error_action.s3.canned_acl` arguments
+```

.changelog/19256.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Fix issue with assuming Placement and disableApiTermination instance attributes exist when managing a Snowball Edge device
+```

.changelog/19262.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_codestarconnections_connection: Support lookup by `name`
+```

.changelog/20003.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_emrcontainers_virtual_cluster
+```
+
+```release-note:new-data-source
+aws_emrcontainers_virtual_cluster
+```

.changelog/20073.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_acm_certificate: Correctly handle SAN entries that match `domain_name`
+```
+
+```release-note:enhancement
+resource/aws_acm_certificate_validation: Increase default resource Create (certificate issuance) timeout to 75 minutes
+```

.changelog/20871.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_emr_cluster: Add `list_steps_states` argument
+```

.changelog/21005.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Add `client_authentication.unauthenticated` argument
+```
+
+```release-note:enhancement
+resource/aws_msk_cluster: Allow in-place update of `client_authentication` and `encryption_info.encryption_in_transit.client_broker`
+```
+
+```release-note:enhancement
+resource/aws_msk_cluster: Add `broker_node_group_info.connectivity_info` argument to support [public access](https://docs.aws.amazon.com/msk/latest/developerguide/public-access.html)
+```
+
+```release-note:enhancement
+resource/aws_msk_cluster: Add `bootstrap_brokers_public_sasl_iam`, `bootstrap_brokers_public_sasl_scram` and `bootstrap_brokers_public_tls` attributes
+```
+
+```release-note:enhancement
+data-source/aws_msk_cluster: Add `bootstrap_brokers_public_sasl_iam`, `bootstrap_brokers_public_sasl_scram` and `bootstrap_brokers_public_tls` attributes
+```

.changelog/22337.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `timestream` and `error_action.timestream` arguments
+```

.changelog/22968.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_athena_data_catalog
+```

.changelog/23510.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_s3_bucket_versioning: Let resource be removed from tfstate if bucket deleted outside Terraform
+```
+
+```release-note:bug
+resource/aws_s3_bucket_policy: Let resource be removed from tfstate if bucket deleted outside Terraform
+```

.changelog/23524.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_connect_security_profile
+```

.changelog/23525.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_connect_routing_profile
+```

.changelog/23527.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_connect_user_hierarchy_structure
+```

.changelog/23531.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_user_hierarchy_group
+```

.changelog/23734.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Update regex pattern to target specific Redis V6 versions through the `engine_version` attribute
+```
+
+```release-note:bug
+resource/aws_elasticache_cluster: Update regex pattern to target specific Redis V6 versions through the `engine_version` attribute
+```

.changelog/23768.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_alb_listener_rule: Don't force recreate listener rule on priority change.
+```

.changelog/23892.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appflow_connector_profile
+```

.changelog/23904.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appintegrations_event_integration
+```

.changelog/24017.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appflow_flow
+```

.changelog/24047.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_replication_task: Fix to stop the task before updating, if required
+```

.changelog/24222.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_elasticsearch_domain: For Elasticsearch versions 6.7+, allow in-place update of `node_to_node_encryption.0.enabled` and `encrypt_at_rest.0.enabled`.
+```
+
+```release-note:enhancement
+resource/aws_opensearch_domain: For Elasticsearch versions 6.7+, allow in-place update of `node_to_node_encryption.0.enabled` and `encrypt_at_rest.0.enabled`.
+```

.changelog/24248.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_transfer_workflow
+```
+
+```release-note:enhancement
+resource/aws_transfer_server: Add `workflow_details` argument
+```

.changelog/24250.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudformation_stack_set: Prevent `Validation` errors when `operation_preferences.failure_tolerance_count` is zero
+```

.changelog/24264.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_proxy: Add `auth.username` argument
+```

.changelog/24266.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_server_side_encryption_configuration: Retry on `ServerSideEncryptionConfigurationNotFoundError` errors due to eventual consistency
+```

.changelog/24274.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_user: Add plan-time validation of password argumnet length
+```

.changelog/24275.txt

@@ -0,0 +1,27 @@
+```release-note:bug
+data-source/aws_elasticache_cluster: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_cluster: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_parameter_group: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_replication_group: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_subnet_group: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_user_group: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_user: Gracefully handle additional tagging error type in non-standard AWS partitions (i.e., ISO)
+```

.changelog/24278.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elastic_beanstalk_environment: Correctly set `cname_prefix` attribute
+```

.changelog/24280.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Add support for `SINGLE_AZ_1` `deployment_type`.
+```

.changelog/24283.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_instance: Add `network_interface.network_card_index` argument
+```
+
+```release-note:enhancement
+resource/aws_instance: Add `capacity_reservation_specification.capacity_reservation_target.capacity_reservation_resource_group_arn` argument
+```

.changelog/24284.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_opensearch_domain: Add `cold_storage_options` argument to the `cluster_config` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_opensearch_domain: Add `cold_storage_options` attribute to the `cluster_config` configuration block
+```

.changelog/24285.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_imagebuilder_infrastructure_configuration: Add `instance_metadata_options` argument
+```
+
+```release-note:enhancement
+data-source/aws_imagebuilder_infrastructure_configuration: Add `instance_metadata_options` attribute
+```

.changelog/24286.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_waf_byte_match_set: Additional supported values for `byte_match_tuples.field_to_match.type` argument
+```
+
+```release-note:enhancement
+resource/aws_wafregional_web_acl: Additional supported values for `logging_configuration.redacted_fields.field_to_match.type` argument
+```
+
+```release-note:enhancement
+resource/aws_workspaces_workspace: Additional supported values for `workspace_properties.compute_type_name` argument
+```

.changelog/24296.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_shield_protection_group: When updating resource tags, use the `protection_group_arn` parameter instead of `arn`.
+```

.changelog/24298.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_efs_file_system: Prevent panic when searching by tag returns 0 or multiple results
+```

.changelog/24299.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_db_instance: Prevent panic when setting instance connection endpoint values
+```

.changelog/24300.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_association: Prevent panic when `wait_for_success_timeout_seconds` is configured
+```

.changelog/24302.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sfn_state_machine: Prevent panic during resource update
+```

.changelog/24303.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appstream_user_stack_association: Prevent panic during resource read
+```

.changelog/24304.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_macie2_member: Correct type for `invitation_disable_email_notification` parameter
+```

.changelog/24312.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kinesis_firehose_delivery_stream: Increase the maximum length of the `processing_configuration.processors.parameters.parameter_value` argument's value to `5120`
+```

.changelog/24334.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb: Fix bug causing an error on update if tags unsupported in ISO region
+```

.changelog/24358.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_grafana_workspace: Add `tags` argument
+```
+
+```release-note:enhancement
+data-source/aws_grafana_workspace: Add `tags` attribute
+```

.changelog/24363.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `serverlessv2_scaling_configuration` argument to support [Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html)
+```

.changelog/24377.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_instance: Add `maintenance_options` argument
+```
+
+```release-note:enhancement
+data-source/aws_instance: Add `maintenance_options` attribute
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `maintenance_options` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `maintenance_options` attribute
+```

.changelog/24379.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_docdb_event_subscription
+```

.changelog/24382.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_identities
+```

.changelog/24383.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ses_receipt_filter: Allow period character (`.`) in `name` argument
+```

.changelog/24385.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mq_broker: Make `maintenance_window_start_time` updateable without recreation.
+```

.changelog/24394.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_mq_broker_instance_type_offerings
+```

.changelog/24395.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `kafka` and `error_action.kafka` arguments
+```
+
+```release-note:new-resource
+aws_iot_topic_rule_destination
+```

.changelog/24401.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ssm_patch_baseline: Add the following attributes: `approved_patches`, `approved_patches_compliance_level`, `approval_rule`, `global_filter`, `rejected_patches`, `rejected_patches_action`, `source`
+```

.changelog/24402.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_ce_cost_category
+```
+
+```release-note:new-data-source
+aws_ce_cost_category
+```
+
+```release-note:new-data-source
+aws_ce_tags
+```

.changelog/24422.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_availability_zone_group: Don't crash if `group_name` is not found
+```

.changelog/24423.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_iam_instance_profiles
+```