Merge tag 'v4.7.0' into v4+sylr

.changelog/12711.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_route53domains_registered_domain
+```

.changelog/13251.txt

@@ -0,0 +1,83 @@
+```release-note:new-resource
+aws_networkmanager_global_network
+```
+
+```release-note:new-resource
+aws_networkmanager_site
+```
+
+```release-note:new-resource
+aws_networkmanager_device
+```
+
+```release-note:new-resource
+aws_networkmanager_transit_gateway_registration
+```
+
+```release-note:new-resource
+aws_networkmanager_link
+```
+
+```release-note:new-resource
+aws_networkmanager_link_association
+```
+
+```release-note:new-resource
+aws_networkmanager_customer_gateway_association
+```
+
+```release-note:new-resource
+aws_networkmanager_transit_gateway_connect_peer_association
+```
+
+```release-note:new-resource
+aws_networkmanager_connection
+```
+
+```release-note:new-data-source
+aws_networkmanager_global_network
+```
+
+```release-note:new-data-source
+aws_networkmanager_global_networks
+```
+
+```release-note:new-data-source
+aws_networkmanager_site
+```
+
+```release-note:new-data-source
+aws_networkmanager_sites
+```
+
+```release-note:new-data-source
+aws_networkmanager_device
+```
+
+```release-note:new-data-source
+aws_networkmanager_devices
+```
+
+```release-note:new-data-source
+aws_networkmanager_link
+```
+
+```release-note:new-data-source
+aws_networkmanager_links
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_connect_peer: Add `arn` attribute
+```
+
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway_connect_peer: Add `arn` attribute
+```
+
+```release-note:new-data-source
+aws_networkmanager_connection
+```
+
+```release-note:new-data-source
+aws_networkmanager_connections
+```

.changelog/13366.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add error handling for `NotImplemented` errors when reading `object_lock_enabled` and `object_lock_configuration` into terraform state.
+```

.changelog/13737.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_vpc_endpoint_security_group_association
+```
+
+```release-note:enhancement
+resource/aws_vpc_endpoint: The `security_group_ids` attribute can now be empty when the resource is created. In this case the VPC's default security is associated with the VPC endpoint
+```

.changelog/19195.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloud9_environment_ec2: Add `connection_type` and `image_id` arguments
+```

.changelog/20812.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_redshift_cluster: Add `availability_zone_relocation_enabled` attribute and allow `availability_zone` to be changed in-place.
+```
+
+```release-note:enhancement
+data_source/aws_redshift_cluster: Add `availability_zone_relocation_enabled` attribute.
+```

.changelog/22104.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_imagebuilder_distribution_configuration: Add `organization_arns` and `organizational_unit_arns` arguments to the `distribution.ami_distribution_configuration.launch_permission` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_imagebuilder_distribution_configuration: Add `organization_arns` and `organizational_unit_arns` attributes to the `distribution.ami_distribution_configuration.launch_permission` configuration block
+```

.changelog/22181.txt

@@ -0,0 +1,27 @@
+```release-note:new-resource
+aws_ec2_transit_gateway_connect
+```
+
+```release-note:new-resource
+aws_ec2_transit_gateway_connect_peer
+```
+
+```release-note:new-data-source
+aws_ec2_transit_gateway_connect
+```
+
+```release-note:new-data-source
+aws_ec2_transit_gateway_connect_peer
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway: Add `transit_gateway_cidr_blocks` argument
+```
+
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway: Add `transit_gateway_cidr_blocks` attribute
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway: Add [custom `timeouts`](https://www.terraform.io/docs/language/resources/syntax.html#operation-timeouts) block
+```

.changelog/22451.txt

@@ -0,0 +1,2 @@
+```release-note:enhancement
+resource/aws_autoscaling_policy: Add `customized_capacity_metric_specification`, `customized_load_metric_specification` and `customized_scaling_metric_specification` to the `predictive_scaling_configuration.metric_specification` argument

.changelog/22727.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_networkfirewall_rule_group: Allow any character in `source` and `destination` `rule_group.rules_source.stateful_rule.header` arguments as per the AWS API docs
+```

.changelog/22768.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_connect_queue
+```

.changelog/22813.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_routing_profile
+ ```

.changelog/22836.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_connect_user_hierarchy_structure
+```

.changelog/22942.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_metric_alarm: Additional allowed values for `extended_statistic` and `metric_query.metric.stat` arguments
+```

.changelog/23086.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_instance: Add `source_db_instance_automated_backup_arn` option within `restore_to_point_in_time` attribute
+```

.changelog/23091.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_api_gateway_stage: Fixed issue with providing `cache_cluster_size` without `cache_cluster_enabled` resulted in waiter error
+```

.changelog/23126.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_certificate: Add `ca_pem` argument, enabling the use of existing IoT certificates
+```

.changelog/23152.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_launch_configuration: Add `ephemeral_block_device.no_device` argument
+```

.changelog/23173.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_apprunner_vpc_connector
+```
+
+```release-note:enhancement
+resource/aws_apprunner_service: Add `network_configuration` argument
+```

.changelog/23275.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_job: Add support for [streaming jobs](https://docs.aws.amazon.com/glue/latest/dg/add-job-streaming.html) by removing the default value for the `timeout` argument and marking it as Computed
+```

.changelog/23330.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_network_insights_path
+```

.changelog/23339.txt

@@ -0,0 +1,8 @@
+```release-note:bug
+resource/aws_cloudformation_stack_set: Use `call_as` attribute when reading stack sets, fixing an error raised when using a delegated admistrator account
+```
+
+```release-note:enhancement
+resource/aws_cloudformation_stack_set:_instance: Add `call_as` argument
+```
+

.changelog/23365.txt

@@ -0,0 +1,27 @@
+```release-note:enhancement
+data-source/aws_launch_template: Add `capacity_reservation_specification`, `cpu_options`, `elastic_inference_accelerator` and `license_specification` attributes
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `ipv4_prefixes`, `ipv4_prefix_count`, `ipv6_prefixes` and `ipv6_prefix_count` arguments to the `network_interfaces` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `ipv4_prefixes`, `ipv4_prefix_count`, `ipv6_prefixes` and `ipv6_prefix_count` attributes to the `network_interfaces` configuration block
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `capacity_reservation_resource_group_arn` argument to the `capacity_reservation_specification.capacity_reservation_target` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `capacity_reservation_resource_group_arn` attribute to the `capacity_reservation_specification.capacity_reservation_target` configuration block
+```
+
+```release-note:enhancement
+resource/aws_launch_template: Add `private_dns_name_options` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `private_dns_name_options` attribute
+```

.changelog/23366.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_cluster: Retry when `ResourceInUseException` errors are returned from the AWS API during resource deletion
+```

.changelog/23394.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_synthetics_canary: Retry canary creation if it fails because of IAM propagation.
+```

.changelog/23397.txt

@@ -0,0 +1,63 @@
+```release-note:bug
+resource/aws_opsworks_application: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_custom_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_ecs_cluster_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_ganglia_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_haproxy_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_instance: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_java_app_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_memcached_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_mysql_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_nodejs_app_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_php_app_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_rails_app_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_rds_db_instance: Correctly remove from state in certain deletion situations
+```
+
+```release-note:bug
+resource/aws_opsworks_stack: Fix error reported on successful deletion, lack of eventual consistency wait
+```
+
+```release-note:bug
+resource/aws_opsworks_static_web_layer: Fix error reported on successful deletion
+```
+
+```release-note:bug
+resource/aws_opsworks_user_profile: Fix error reported on successful deletion
+```

.changelog/23401.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_grafana_license_association
+```

.changelog/23426.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lambda_function: Add support for `dotnet6` `runtime` value
+```
+
+```release-note:enhancement
+resource/aws_lambda_layer_version: Add support for `dotnet6` `compatible_runtimes` value
+```

.changelog/23427.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route: `nat_gateway_id` target no longer conflicts with `destination_ipv6_cidr_block`
+```

.changelog/23440.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `cloudwatch_logs` and `error_action.cloudwatch_logs` arguments
+```

.changelog/23441.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Correctly configure `rule.filter.object_size_greater_than` and `rule.filter.object_size_less_than` in API requests and terraform state
+```
+
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Prevent drift when `rule.noncurrent_version_expiration.newer_noncurrent_versions` or `rule.noncurrent_version_transition.newer_noncurrent_versions` is not specified
+```

.changelog/23443.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_ec2_serial_console_access
+```
+
+```release-note:new-data-source
+aws_ec2_serial_console_access
+```

.changelog/23444.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_endpoint: Fix bug where KMS key was ignored for DynamoDB, OpenSearch, Kafka, Kinesis, Oracle, PostgreSQL, and S3 engines.
+```

.changelog/23452.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_eks_node_group: Add `taints` attribute
+```

.changelog/23485.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route53_resolver_firewall_domain_list: Remove limit for number of `domains`.
+```

.changelog/23516.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_account_alternate_contact: Improve eventual consistency handling to avoid "no resource found" on updates
+```
+
+```release-note:enhancement
+resource/aws_account_alternate_contact: Add configurable timeouts
+```

.changelog/23517.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_amplify_app: Allow `repository` to be updated in-place
+```