Merge tag 'v3.72.0' into v3+sylr

v3.72.0

.changelog/18610.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_task_definition: Add plan time validation for `family`
+```

.changelog/19311.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_vpn_connection: `customer_gateway_id`, `transit_gateway_id` and `vpn_gateway_id` can be updated without recreating the resource
+```
+
+```release-note:enhancement
+resource/aws_vpn_connection: `tunnel1_preshared_key` and `tunnel2_preshared_key` can be updated without recreating the resource
+```
+
+```release-note:enhancement
+resource/aws_vpn_connection: Add `vgw_telemetry.certificate_arn` attribute
+```

.changelog/21556.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route53_record: Fix import with underscores in names
+```

.changelog/21993.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_shield_protection_health_check_association
+```

.changelog/22074.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_backup_selection: Add `condition` configuration block and `not_resources` argument in support of fine-grained backup plan [resource assignment](https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html)
+```

.changelog/22211.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc: Add `ipv6_cidr_block_network_border_group` argument
+```

.changelog/22250.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_quick_connect
+```

.changelog/22269.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_task_definition: Add `skip_destroy` argument to optionally prevent overwriting previous revision
+```

.changelog/22303.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_connect_contact_flow: add delete function
+```

.changelog/22342.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_ebs_snapshot: Add `outpost_arn`, `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments
+```
+
+```release-note:enhancement
+resource/aws_ebs_snapshot_copy: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments
+```
+
+```release-note:enhancement
+resource/aws_ebs_snapshot_import: Add `storage_tier`, `permanent_restore`, `temporary_restore_days` arguments
+```
+
+```release-note:enhancement
+data-source/aws_ebs_snapshot: Add `storage_tier` and `outpost_arn` attributes.
+```

.changelog/22349.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_contact_flow_module
+```

.changelog/22411.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_appsync_datasource: Add `delta_sync_config` and `versioned` to the `dynamodb_config` configuration block
+```
+
+```release-note:enhancement
+resource/aws_appsync_datasource: Add `authorization_config` attribute to the `http_config` configuration block
+```
+
+```release-note:enhancement
+resource/aws_appsync_datasource: Add plan time validation for `service_role_arn` and `lambda_config.function_arn`
+```
+
+```release-note:enhancement
+resource/aws_appsync_datasource: Add `relational_database_config` argument
+```

.changelog/22435.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_customer_gateway: Add `certificate_arn` argument
+```
+
+```release-note:enhancement
+data-source/aws_customer_gateway: Add `certificate_arn` attribute
+```

.changelog/22438.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+data-source/aws_vpc_ipam_pool: Return an error if more than 1 IPAM Pool matches
+```
+
+```release-note:bug
+data-source/aws_vpc_ipam_pool: Set `address_family`, `allocation_default_netmask_length`, `allocation_max_netmask_length`, `allocation_min_netmask_length` and `tags` attributes
+```

.changelog/22453.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_elb_service_account: Add account ID for `ap-southeast-3` AWS Region
+```

.changelog/22455.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the BlazingText image in `af-south-1` and `eu-south-1` AWS Regions
+```
+
+```release-note:enhancement
+data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the DeepAR Forecasting image in `af-south-1` and `eu-south-1` AWS Regions
+```
+
+```release-note:enhancement
+data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Factorization Machines image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions
+```
+
+```release-note:enhancement
+data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the XGBoost image in `af-south-1`, `ap-northeast-3` and `eu-south-1` AWS Regions
+```
+
+```release-note:enhancement
+data-source/aws_sagemaker_prebuilt_ecr_image: Add account IDs for the Spark ML Serving image in `af-south-1`, `ap-east-1`, `cn-north-1`, `cn-northwest-1`, `eu-north-1`, `eu-south-1`, `eu-west-3`, `me-south-1` and `sa-east-1` AWS Regions
+```

.changelog/22458.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_devicefarm_instance_profile
+```

.changelog/22460.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudwatch_log_destination_policy: Add `force_update` argument.
+```
+
+```release-note:enhancement
+resource/aws_cloudwatch_log_destination_policy: Add plan time validation for `access_policy`.
+```

.changelog/22461.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudfront_distribution: Increase the maximum valid `origin_read_timeout` value to `180`
+```

.changelog/22462.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_fsx_lustre_file_system: Add missing values to `per_unit_storage_throughput` validation
+```

.changelog/22463.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_instance: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_instance: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add the `instance_metadata_tags` argument to the `metadata_options` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add the `instance_metadata_tags` attribute to the `metadata_options` configuration block
+```

.changelog/22470.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipam_pool_cidr_allocation: Add `disallowed_cidrs` argument
+```

.changelog/22472.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_crawler: add `delta_target` argument.
+```

.changelog/22477.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cognito_user_pool_client
+```

.changelog/22480.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_fsx_openzfs_file_system: Fix crash with nil `root_volume_configuration.nfs_exports` value
+```
+
+```release-note:bug
+resource/aws_fsx_openzfs_file_system: Change `root_volume_configuration.copy_tags_to_snapshots` to ForceNew
+```

.changelog/22484.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_function: Add `max_batch_size` and `sync_config` arguments.
+```

.changelog/22485.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_eks_cluster: Add `ip_family` to the `kubernetes_network_config` configuration block
+```

.changelog/22486.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_memorydb_snapshot
+```

.changelog/22489.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_memorydb_cluster: Correctly propagate configurable timeouts to waiters.
+```

.changelog/22501.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipam_preview_next_cidr: Add `disallowed_cidrs` argument
+```

.changelog/22510.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_resolver: Add `max_batch_size` and `sync_config` arguments.
+```

.changelog/22511.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sns_topic: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22514.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cognito_identity_pool_provider_principal_tag
+```

.changelog/22516.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sqs_queue: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_sqs_queue: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22522.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssm_parameter: Mark `version` as Computed when `value` changes
+```

.changelog/22529.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_ecs_capacity_provider: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_ecs_cluster: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_ecs_service: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_ecs_task_definition: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_ecs_task_set: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22531.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_subnet: Resource-based naming is not available in the `ap-southeast-3` region
+```

.changelog/22535.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecr_repository: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_ecr_repository: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22544.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_iam_role: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_iam_role: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_iam_user: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_iam_user: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22547.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sqs_queue: Don't timeout when a queue policy `Condition` value contains an empty array
+```

.changelog/22550.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudwatch_event_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_cloudwatch_event_bus: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22551.txt

@@ -0,0 +1,27 @@
+```release-note:enhancement
+resource/aws_lb_listener: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_lb_listener: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_lb_listener_rule: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_lb: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_lb: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_lb_target_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+data-source/aws_lb_target_group: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22552.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_cloudfront_distribution: Add `aliases` attribute
+```

.changelog/22556.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_cloudwatch_composite_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_cloudwatch_metric_alarm: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:enhancement
+resource/aws_cloudwatch_metric_stream: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/22575.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add additional protection against `object_lock_configuration` causing errors in partitions (e.g., ISO) where not supported
+```

.changelog/22580.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_subnet: Protect against errors when `availability_zone_id` is not supported in a partition (e.g., ISO)
+```

.github/workflows/stale.yml

@@ -14,7 +14,7 @@ jobs:
         days-before-close: 30
         exempt-issue-labels: 'needs-triage'
         exempt-pr-labels: 'needs-triage'
-        operations-per-run: 100
+        operations-per-run: 125
         stale-issue-label: 'stale'
         stale-issue-message: |
           Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.

.github/workflows/terraform_provider.yml

@@ -218,11 +218,11 @@ jobs:
         key: ${{ runner.os }}-go-pkg-mod-${{ hashFiles('go.sum') }}
     - name: Get all changed files
       id: changed-files
-      uses: tj-actions/changed-files@v11.9
+      uses: tj-actions/changed-files@v13.1
     - name: Get changed packages
       run: |
         touch /tmp/dirs_changed_all
-        for file in ${{ steps.changed-files.outputs.all_modified_files }}; do
+        for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
           if [[ "${file}" == internal/* ]]; then
             echo $( dirname "${file}" | xargs ) >> /tmp/dirs_changed_all
           fi

.golangci.yml

@@ -48,8 +48,8 @@ linters-settings:
           - request.WithWaiterMaxAttempts
           # AWS Provider
           - mapMaxItems
-          - wafv2RootStatementSchema
-          - wafv2WebACLRootStatementSchema
+          - rootStatementSchema
+          - webACLRootStatementSchema
           - nullable.*
           - sweep.SweepOrchestratorContext
           # Terraform Plugin SDK