Merge tag 'v4.9.0' into v4+sylr

.changelog/12108.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iot_provisioning_template
+```

.changelog/13203.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_redshift_cluster: Correctly use `number_of_nodes` argument value when restoring from snapshot
+```

.changelog/13392.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iot_logging_options
+```

.changelog/14075.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dynamodb_table_item: Allow `item` names to still succeed if they include non-letters
+```

.changelog/15355.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_storagegateway_gateway: Add `maintenance_start_time` argument
+```

.changelog/18088.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mq_broker: Add validation to `broker_name` and `security_groups` arguments
+```

.changelog/19713.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_elasticsearch_domain: Add `cold_storage_options` argument to the `cluster_config` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_elasticsearch_domain: Add `cold_storage_options` attribute to the `cluster_config` configuration block
+```
+
+```release-note:enhancement
+resource/aws_elasticsearch_domain: Add configurable Create and Delete timeouts
+```

.changelog/20068.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+resource/aws_elasticache_cluster: Add `log_delivery_configuration` argument
+```
+
+```release-note:enhancement
+data-source/aws_elasticache_cluster: Add `log_delivery_configuration` attribute
+```
+
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add `log_delivery_configuration` argument
+```
+
+```release-note:enhancement
+data-source/aws_elasticache_replication_group: Add `log_delivery_configuration` attribute
+```

.changelog/20708.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_autoscaling_group: Fix issue where group was not recreated if `initial_lifecycle_hook` changed
+```

.changelog/20709.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudfront_distribution: Fix default value of `origin_path` in `origin` block
+```

.changelog/20892.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticsearch_domain_saml_option: Fix difference caused by `subject_key` default not matching AWS default; old and new defaults are equivalent
+```

.changelog/21941.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mwaa_environment: Add `schedulers` argument
+```

.changelog/22097.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_cluster_activity_stream
+```

.changelog/22160.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudformation_stack_set: Consider `QUEUED` a valid pending state for resource creation
+```

.changelog/22355.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_network_firewall_policy: Allow use of managed rule group arns for network firewall managed rule groups.
+```

.changelog/23157.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_eks_addon_version
+```

.changelog/23544.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_mskconnect_custom_plugin: Implement resource Delete
+```
+
+```new-resource
+aws_mskconnect_connector
+```
+
+```new-data-source
+aws_mskconnect_connector
+```

.changelog/23759.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_db_instance_automated_backups_replication
+```

.changelog/23798.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `acl` and `grant` parameters to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring these parameters with the standalone `aws_s3_bucket_acl` resource.
+```

.changelog/23816.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `acceleration_status` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_accelerate_configuration` resource.
+```

.changelog/23817.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `cors_rule` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_cors_configuration` resource.
+```

.changelog/23818.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `lifecycle_rule` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_lifecycle_configuration` resource.
+```

.changelog/23819.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `logging` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_logging` resource.
+```

.changelog/23820.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `versioning` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_versioning` resource.
+```

.changelog/23821.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `website` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_website_configuration` resource.
+```

.changelog/23822.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `server_side_encryption_configuration` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_server_side_encryption_configuration` resource.
+```

.changelog/23842.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `replication_configuration` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_replication_configuration` resource.
+```

.changelog/23843.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `policy` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_policy` resource.
+```

.changelog/23844.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `request_payer` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_request_payment_configuration` resource.
+```

.changelog/23859.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_eips: Set `public_ips` for VPC as well as EC2 Classic
+```

.changelog/23862.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_event_target: Fix setting `path_parameter_values`.
+```

.changelog/23873.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lambda_function: Add `ephemeral_storage` argument
+```
+
+```release-note:enhancement
+data-source/aws_lambda_function: Add `ephemeral_storage` attribute
+```

.changelog/23879.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_function: Add error handling for `ResourceConflictException` errors on create and update
+```

.changelog/23880.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add `policy_details.schedule.create_rule.cron_expression`, `policy_details.schedule.retain_rule.interval`, `policy_details.schedule.retain_rule.interval_unit`, `policy_details.policy_type`, `policy_details.schedule.deprecate_rule`, `policy_details.parameters`, `policy_details.schedule.variable_tags`, `policy_details.schedule.fast_restore_rule`, `policy_details.schedule.share_rule`, `policy_details.resource_locations`, `policy_details.schedule.create_rule.location`, `policy_details.action` and `policy_details.event_source` arguments
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Add plan time validations for `policy_details.resource_types` and `description` arguments
+```
+
+```release-note:enhancement
+resource/aws_dlm_lifecycle_policy: Make `policy_details.resource_types`, `policy_details.schedule`, `policy_details.target_tags`, `policy_details.schedule.retain_rule` and `policy_details.schedule.create_rule.interval` arguments optional
+```

.changelog/23890.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_memorydb_user
+```

.changelog/23891.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_memorydb_acl
+```

.changelog/23893.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Prevent `MalformedXML` errors when handling diffs in `rule.filter`
+```

.changelog/23902.txt

@@ -0,0 +1,15 @@
+```release-note:new-data-source
+aws_opensearch_domain
+```
+
+```release-note:new-resource
+aws_opensearch_domain_policy
+```
+
+```release-note:new-resource
+aws_opensearch_domain_saml_options
+```
+
+```release-note:new-resource
+aws_opensearch_domain
+```

.changelog/23908.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set: Add `operation_preferences` argument
+```

.changelog/23924.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_imagebuilder_distribution_configuration: Add `account_id` argument to the `launch_template_configuration` attribute of the `distribution` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_imagebuilder_distribution_configuration: Add `account_id` attribute to the `launch_template_configuration` attribute of the `distribution` configuration block
+```

.changelog/23930.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_organizations_account: Add `close_on_deletion` argument to close account on deletion
+```

.changelog/23947.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_dynamodb_contributor_insights
+```

.changelog/23952.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Retry when `InternalErrorException` errors are returned from the AWS API
+```

.changelog/23967.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_backup_report_plan: Wait for asynchronous lifecycle operations to complete
+```

.changelog/23972.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb: Fix attribute key not recognized issue preventing creation in ISO-B regions
+```

.changelog/23973.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipam: add `cascade` argument
+```

.changelog/23979.txt

@@ -0,0 +1,27 @@
+```release-note:bug
+data-source/aws_elasticache_cluster: Allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_cluster: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_parameter_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_replication_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_subnet_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_user_group: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```
+
+```release-note:bug
+resource/aws_elasticache_user: Attempt `tags`-on-create, fallback to tag after create, and allow some `tags` errors to be non-fatal to support non-standard AWS partitions (i.e., ISO)
+```

.changelog/23984.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Update `object_lock_configuration.rule` parameter to be configurable. Please refer to the documentation for details on drift detection and potential conflicts when configuring this parameter with the standalone `aws_s3_bucket_object_lock_configuration` resource.
+```

.changelog/23985.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/aws_s3_bucket: The `acceleration_status`, `acl`, `cors_rule`, `grant`, `lifecycle_rule`, `logging`, `object_lock_configuration.rule`, `policy`, `replication_configuration`, `request_payer`, `server_side_encryption_configuration`, `versioning`, and `website` parameters are now Optional. Please refer to the documentation for details on drift detection and potential conflicts when configuring these parameters with the standalone `aws_s3_bucket_*` resources.
+```

.changelog/23990.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_memorydb_snapshot
+```

.changelog/23991.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_memorydb_cluster
+```

.changelog/23993.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_authorizer: Add `enable_caching_for_http` argument
+```

.changelog/23996.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_elasticache_cluster: Add `auto_minor_version_upgrade` argument
+```
+
+```release-note:bug
+resource/aws_elasticache_replication_group: Allow disabling `auto_minor_version_upgrade`
+```

.changelog/24001.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_permission: Add `principal_org_id` argument.
+```

.changelog/24002.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Support updating `storage_capacity`, `throughput_capacity`, and `disk_iops_configuration`.
+```

.changelog/24011.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ssm_maintenance_windows
+```

.changelog/24020.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Speed up resource deletion, especially when the S3 buckets contains a large number of objects and `force_destroy` is `true`
+```

.changelog/24021.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Waits for available state before updating tags
+```

.changelog/24024.txt

@@ -0,0 +1,27 @@
+```release-note:bug
+resource/aws_route: Ensure that resource ID is set in case of wait-for-creation time out
+```
+
+```release-note:enhancement
+resource/aws_route: Add `core_network_arn` argument
+```
+
+```release-note:enhancement
+data-source/aws_route: Add `core_network_arn` argument
+```
+
+```release-note:enhancement
+resource/aws_route_table: Add `core_network_arn` argument to the `route` configuration block
+```
+
+```release-note:enhancement
+data-source/aws_route_table: Add 'routes.core_network_arn' attribute'
+```
+
+```release-note:enhancement
+resource/aws_default_route_table: Add `core_network_arn` argument to the `route` configuration block
+```
+
+```release-note:enhancement
+resource/aws_vpn_connection: Add `core_network_arn` and `core_network_attachment_arn` attributes
+```

.changelog/24028.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_xray_group: Add `insights_configuration` argument
+```

.changelog/24038.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_storagegateway_nfs_file_share: Add `bucket_region` and `vpc_endpoint_dns_name` arguments to support PrivateLink endpoints
+```

.changelog/24053.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_lambda_function_url
+```
+
+```release-note:new-data-source
+aws_lambda_function_url
+```