v2.68.0

FEATURES:

• New Data Source: aws_efs_access_points (#13918)
• New Resource: aws_wafv2_web_acl_logging_configuration (#13892)

ENHANCEMENTS:

• data-soruce/aws_ami: Add arn attribute (#12038)
• data-source/aws_customer_gateway: Add arn attribute (#13611)
• data-source/aws_ebs_snapshot: Add arn attribute (#13840)
• data-source/aws_vpc_endpoint: Add arn attribute (#13852)
• data-source/aws_vpc_endpoint_service: Add arn attribute (#13856)
• data-source/aws_vpn_gateway: Add arn attribute (#13827)
• resource/aws_ami: Add arn attribute and plan-time validations to architecture, volume_type and virtualization_type arguments (#12038)
• resource/aws_ami_copy: Add arn attribute (#12038)
• resource/aws_ami_from_instance: Add arn attribute (#12038)
• resource/aws_customer_gateway: Add arn attribute and plan-time validations for bgp_asn, ip_address, and type arguments (#13611)
• resource/aws_default_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments (#13819)
• resource/aws_ebs_snapshot: Add arn attribute (#13840)
• resource/aws_ebs_snapshot: Support resource import (#13895)
• resource/aws_ebs_snapshot_copy: Add arn attribute (#13840)
• resource/aws_ec2_traffic_mirror_session: Add arn attribute (#13849)
• resource/aws_ecs_service: Support deployment_controller configuration block type argument value of EXTERNAL (support external deployments) (#8134] / [#8652)
• resource/aws_ecs_task_definition: Add efs_volume_configuration configuration block authorization_config, transit_encryption, and transit_encryption_port arguments (support EFS Access Points and transit encryption) (#13136)
• resource/aws_elasticsearch_domain: Ultrawarm can now be enabled without re-creating the resource (#13907)
• resource/aws_glue_catalog_database: Add arn attribute (#13452)
• resource/aws_iot_policy: Support resource import (#13707)
• resource/aws_iot_topic_rule: Add error_action configuration block (#11922)
• resource/aws_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments (#13819)
• resource/aws_placement_group: Add arn attribute (#13838)
• resource/aws_ses_receipt_filter: Add arn attribute and plan-time validations for all arguments (#13811)
• resource/aws_vpn_connection: Add arn attribute (#13836)
• resource/aws_vpc_endpoint: Add arn attribute (#13853)
• resource/aws_vpc_endpoint_service: Add arn attribute (#13858)
• resource/aws_vpn_gateway: Add arn attribute (#13827)

BUG FIXES:

• resource/aws_batch_compute_environment: Ensure desired_vcpus is fully optional and wait for updates (#4855)
• resource/aws_batch_compute_environment: Remove resource from Terraform state when not found instead of returning error (#13935)
• resource/aws_cloudtrail: Properly configure single event_selector with no data_resource and read_write_type of ReadOnly or WriteOnly (#5448)
• resource/aws_cloudtrail: Prevent InvalidEventSelectorsException error when removing all event_selector configuration (#5448)
• resource/aws_default_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization (#13778)
• resource/aws_default_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support (#13778)
• resource/aws_ecs_service: Add plan-time validation and prevent panics with empty type argument in ordered_placement_strategy configuration block (#13926)
• resource/aws_ecs_task_definition: Prevent showing API ordering differences in container_definitions environment variables during update plans (#11463)
• resource/aws_elasticsearch_domain: Ensure empty string ("") validation in ebs_options volume_type argument continues to work for Terraform 0.11 support (#13937)
• resource/aws_iot_policy: Ensure name argument updates recreate the resource (#13707)
• resource/aws_route: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization (#13778)
• resource/aws_route: Ensure empty string ("") validation in destination_cidr_block and destination_ipv6_cidr_block arguments continues to work for Terraform 0.11 support (#13778)
• resource/aws_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization (#13778)
• resource/aws_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support (#13778)
• resource/aws_spot_fleet_request: Prevent crash with missing placement information (#13577)
• resource/aws_vpc_endpoint: Skip ModifyVpcEndpoint API call on tags only updates (#13853)
• resource/aws_vpc_endpoint: Wait for acceptance when auto_accept is enabled (#13876)
• resource/aws_wafv2_web_acl: Prevent unexpected UpdateWebACL API errors on tags only updates (#13871)