Support IoT ATS endpoints and make them default

[rafaljanicki]

Hello,

AWS has changed the default behavior of IoT certificates and by default they use an ATS certificate root instead of the previous Verisign. However, the default endpoint returned by CLI is the Verisign hence it breaks on connection (more details: https://aws.amazon.com/blogs/iot/aws-iot-core-ats-endpoints/ ).

The aws_iot_endpoint data provider should allow for a flag if the ATS endpoint should be requested or the old one.

[bflad]

Pull request submitted: #6215

[bflad]

Support for an endpoint_type argument has been merged and will release with version 1.42.0 of the AWS provider, likely in the next day or two. To maintain backwards compatibility with existing configurations, it will remain unset and return the region default endpoint, but can be explicitly set to endpoint_type = "iot:Data-ATS" to always return the Amazon Trust Services certificate endpoint.

[bflad]

This has been released in version 1.42.0 of the AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!