Update Terraform aws to v5 #1850
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
requested review from
jeff-mccoy,
YrrepNoj,
Racer159 and
Noxsios
as code owners
✅ Deploy Preview for zarf-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
ca9c2bd to
d51a626
Compare
renovate
bot
force-pushed
the
renovate/aws-5.x
branch
from
d51a626 to
9f462ef
Compare
renovate
bot
changed the title
1 task
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~> 3.37.0->~> 5.5.0⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
hashicorp/terraform-provider-aws (aws)
v5.5.0Compare Source
NOTES:
trust-adoption in/etc/resolv.confand, if set, will set the "authentic data" option in outgoing DNS requests in order to better match the behavior of the GNU libc resolver. (#32108)FEATURES:
aws_sesv2_email_identity(#32026)aws_sesv2_email_identity_mail_from_attributes(#32026)aws_chimesdkvoice_sip_rule(#32070)aws_organizations_resource_policy(#32056)ENHANCEMENTS:
TF_LOGlevel isTRACE(#32174)exclusion_by_resource_typesandrecording_strategyattributes to therecording_groupconfiguration block (#32007)object_tagsattribute tooptionsconfiguration block (#27811)BUG FIXES:
binary_media_typesisnull(#32169)server_certificateargument (#27811)reading EC2 EIP (eipalloc-abcd1234): couldn't find resourceerrors when reading new resource (#32016)waiting for completion: unexpected state 'AVAILABLE'errors when deleting resource (#32067)reading Route Table (rtb-abcd1234): couldn't find resourceerrors when reading new resource (#30999)kms_encryptedistruebutkms_key_arnis not sent in the request (#32171)v5.4.0Compare Source
FEATURES:
aws_organizations_policies(#31545)aws_organizations_policies_for_target(#31682)aws_chimesdkvoice_sip_media_application(#31937)aws_opensearchserverless_collection(#31091)aws_opensearchserverless_security_config(#28776)aws_opensearchserverless_vpc_endpoint(#28651)ENHANCEMENTS:
catalog_idargument totarget_tableblock (#31926)BUG FIXES:
index out of range [0] with length 0panic (#32004)subnetsis updated to an empty list (#31976)function_nameargument now properly handles ARN values (#31933)*conns.AWSClient is not ssm.ssmClient: missing method SSMClientpanic (#31928)v5.3.0Compare Source
NOTES:
metadata_options.http_endpointargument now correctly defaults toenabled. (#24774)replace_security_groups_on_destroyandreplacement_security_group_idsattributes are being deprecated as AWS no longer supports this operation. These attributes now have no effect, and will be removed in a future major version. (#31904)FEATURES:
aws_quicksight_theme(#31900)aws_opensearchserverless_access_policy(#28518)aws_opensearchserverless_security_policy(#28470)aws_quicksight_theme(#31900)ENHANCEMENTS:
cluster_namespace_arnattribute (#31884)cluster_namespace_arnattribute (#31884)private_dns_only_for_inbound_resolver_endpointattribute to thedns_optionsconfiguration block (#31873)BUG FIXES:
efs_volume_configurationhas bothroot_volumeandauthorization_configset. (#26880)metadata_options.http_endpointargument. (#24774)name(#31352)keyspace_name,table_nameand column names (#31352)availability_zone_relocation_enabledto betruewhenpublicly_accessibleistrue(#31886)reading EC2 VPC (vpc-abcd1234) Attribute (enableDnsSupport): couldn't find resourceerrors when reading new resource (#31877)v5.2.0Compare Source
NOTES:
FEATURES:
aws_budgets_budget(#31691)aws_ecr_pull_through_cache_rule(#31696)aws_guardduty_finding_ids(#31711)aws_iam_principal_policy_simulation(#25569)aws_chimesdkvoice_global_settings(#31365)aws_finspace_kx_cluster(#31806)aws_finspace_kx_database(#31803)aws_finspace_kx_environment(#31802)aws_finspace_kx_user(#31804)ENHANCEMENTS:
bgp_peer_addressandbgp_transit_gateway_addressesattributes (#31752)retry_modeparameter (#31745)bgp_peer_addressandbgp_transit_gateway_addressesattributes (#31752)replace_existing_associationargument (#31452)Volumestoactions.*.target(#31499)instance_market_optionsconfiguration block andinstance_lifecycleandspot_instance_request_idattributes (#31495)ruby3.2runtimevalue (#31842)ruby3.2compatible_runtimesvalue (#31842)CREATING_SNAPSHOTa valid pending state for resource update (#31833)stream_exception_policyoption tofirewall_policy.stateful_engine_options(#31541)config_parameter.parameter_key(#31747)container.model_package_nameandprimary_container.model_package_namearguments (#31755)BUG FIXES:
modifyingstate (#31772)default_tagsto resourcetags, and vice versa (#31826)Failedscaling activities due to IAM eventual consistency (#31282)vlan_idfromTypeStringtoTypeIntin Terraform state for existing resources. This fixes a regression introduced in v5.1.0 causinga number is requirederrors (#31735)endpoint_configuration.weightto0(#31767)hls_cdn_settingsexpander. (#31844)iam_rolesdiffs when the namespace contains a workgroup (#31749)config_parameterfromTypeListtoTypeSetas order is not significant (#31747)ValidationException: Can't update multiple configurations at the same timeerrors (#31747)v5.1.0Compare Source
BREAKING CHANGES:
role_last_usedattribute has been removed. Use theaws_iam_roledata source instead. (#31656)NOTES:
load_balancersandtarget_group_arnsattributes have been changed toComputed. This means that omitting this argument is interpreted as ignoring any existing load balancer or target group attachments. To remove all load balancer or target group attachments an empty list should be specified. (#31527)role_last_usedattribute has been removed. Use theaws_iam_roledata source instead. See the community feedback provided in the linked issue for additional justification on this change. As the attribute is read-only, unlikely to be used as an input to another resource, and available in the corresponding data source, a breaking change in a minor version was deemed preferable to a long deprecation/removal cycle in this circumstance. (#31656)aqua_configuration_status, since the AWS API ignores it. Now always returnsauto. (#31612)FEATURES:
aws_vpclattice_resource_policy(#31372)aws_autoscaling_traffic_source_attachment(#31527)aws_emrcontainers_job_template(#31399)aws_glue_data_quality_ruleset(#31604)aws_quicksight_analysis(#31542)aws_quicksight_dashboard(#31448)aws_resourcegroups_resource(#31430)ENHANCEMENTS:
traffic_sourceattribute (#31527)off_peak_window_optionsattribute (#35970)visibilityargument (#31369)log_config.cloudwatch_logs_role_arn(#31369)traffic_sourceconfiguration block (#31527)managed_executionargument (#25210)skip_final_backupargument (#31544)security_styleargument and mark as Computed (#31544)ontap_volume_typeattribute to be configurable (#31544)junction_pathis Optional (#31544)storage_efficiency_enabledis Optional (#31544)skip_destroyattribute (#29571)skip_destroyargument (#31646)off_peak_window_optionsconfiguration block (#35970)shadow_production_variants.serverless_config.provisioned_concurrencyarguments (#31398)TransferSecurityPolicy-2023-05security_policy_namevalue (#31536)BUG FIXES:
vlan_idbeing returned as null (#31480)tagsarenulland others arecomputed(#31687)The AutoRollback parameter cannot be set to true when the DesiredConfiguration parameter is emptyerrors when refreshing instances (#31715)origin_keepalive_timeout(#31608)CREATION_FAILEDstatus (#31689)tagsin state (#31716)vlan_idbeing returned as null (#31480)alarmsis updated (#31683)storage_virtual_machine_idto ForceNew (#31544)volume_typeto ForceNew (#31544)user_group_resolution_modevalue to state after creation (#31669)hls_cdn_settingsexpand (#31647)resource_tagsblocks are configured (#31393)db_cluster_instance_class(#31709)Maintenance(#31612)ConcurrentModificationerror (#31588)v5.0.1Compare Source
BUG FIXES:
null(#31587)v5.0.0Compare Source
BREAKING CHANGES:
minimum_compression_sizeis now a string type to allow values set via thebodyattribute to be properly computed. (#30969)hours_of_operation_arnattribute has been removed (#31484)db_security_groupsattribute has been removed (#30966)security_group_namesattribute has been removed (#30966)number_cache_clusters,replication_group_descriptionarguments -- usenum_cache_clusters, anddescription, respectively, instead (#31008)statement.sidvalues tojsonattribute value (#28539)source_jsonandoverride_jsonhave been removed -- usesource_policy_documentsandoverride_policy_documents, respectively, instead (#30829)filterargument has been removed (#31312)filterargument has been removed (#31312)vpc_classic_link_idandvpc_classic_link_security_groupsattributes have been removed (#30966)cluster_security_groupsattribute has been removed (#30966)rotation_enabled,rotation_lambda_arnandrotation_rulesattributes have been removed (#31487)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)assume_role.duration_seconds,assume_role_with_web_identity.duration_seconds,s3_force_path_style,shared_credentials_fileandskip_get_ec2_platformsattributes have been removed (#31155)aws_subnet_idsdata source has been removed (#31140)aws_db_security_groupresource has been removed (#30966)aws_elasticache_security_groupresource has been removed (#30966)aws_redshift_security_groupresource has been removed (#30966)aws_macie_member_account_associationresource has been removed (#31058)aws_macie_s3_bucket_associationresource has been removed (#31058)statusattribute has been removed (#31084)minimum_compression_sizeis now a string type to allow values set via thebodyattribute to be properly computed. (#30969)alb_target_group_arnhas been removed -- uselb_target_group_arninstead (#30828)tagsattribute (#30842)cost_filtersattribute has been removed (#31395)thresholdattribute has been removed (#30374)ecs_target.propagate_tagsattribute now has no default value (#25233)secondary_sources.authandsource.authattributes have been removed (#31483)hours_of_operation_arnattribute has been removed (#31484)quick_connect_ids_associatedattribute has been removed (#31376)queue_configs_associatedattribute has been removed (#31376)name- usedb_nameinstead (#31232)security_group_namesattribute has been removed (#30966)idis no longer the AWS databaseidentifier-idis now thedbi-resource-id. Refer toidentifierinstead ofidto use the database's identifier (#31232)enable_classiclinkandenable_classiclink_dns_supportattributes have been removed (#30966)s3_settings.ignore_headers_rowhas been removed (#30452)snapshot_identifierchange now properly forces replacement (#29409)statusattribute has been removed (#31223)security_groupsattribute has been removed (#31396)statusattribute has been removed (#31223)capacity_providersanddefault_capacity_provider_strategyattributes have been removed (#31346)standarddomain is no longer supported (#30966)standarddomain is no longer supported (#30966)security_group_namesattribute has been removed (#30966)availability_zones,number_cache_clusters,replication_group_descriptionarguments -- usepreferred_cache_cluster_azs,num_cache_clusters, anddescription, respectively, instead (#31008)cluster_modeconfiguration block -- use top-levelnum_node_groupsandreplicas_per_node_groupinstead (#31008)s3_configurationattribute from the root of the resource.s3_configurationis now a part of the following blocks:elasticsearch_configuration,opensearch_configuration,redshift_configuration,splunk_configuration, andhttp_endpoint_configuration(#31138)s3as an option fordestination. Useextended_s3instead (#31138)extended_s3_configuration.0.s3_backup_configuration.0.buffer_sizeandextended_s3_configuration.0.s3_backup_configuration.0.buffer_intervaltoextended_s3_configuration.0.s3_backup_configuration.0.buffering_sizeandextended_s3_configuration.0.s3_backup_configuration.0.buffering_interval, respectively (#31141)redshift_configuration.0.s3_backup_configuration.0.buffer_sizeandredshift_configuration.0.s3_backup_configuration.0.buffer_intervaltoredshift_configuration.0.s3_backup_configuration.0.buffering_sizeandredshift_configuration.0.s3_backup_configuration.0.buffering_interval, respectively (#31141)s3_configuration.0.buffer_sizeands3_configuration.0.buffer_internvaltos3_configuration.0.buffering_sizeands3_configuration.0.buffering_internval, respectively (#31141)vpc_classic_link_idandvpc_classic_link_security_groupsattributes have been removed (#30966)ipv6_addressattribute has been removed (#31489)statemux_settingsattribute has been removed. Usestatmux_settingsargument instead (#31034)broker_node_group_info.ebs_volume_sizeattribute has been removed (#31324)snapshot_identifierchange now properly forces replacement (#29409)policy_documentargument -- useaws_networkmanager_core_network_policy_attachmentresource instead (#30875)engineargument is now required and has no default (#31112)snapshot_identifierchange now properly forces replacement (#29409)engineargument is now required and has no default (#31112)cluster_security_groupsattribute has been removed (#30966)instance_idcan no longer be set in configurations. Usenetwork_interface_idinstead, for example, settingnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)route.*.instance_idcan no longer be set in configurations. Useroute.*.network_interface_idinstead, for example, settingnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)rotation_enabled,rotation_lambda_arnandrotation_rulesattributes have been removed (#31487)provisioning_artifact_parametersarguments now properly trigger a replacement. This fixes incorrect behavior, but may technically be breaking for configurations expecting non-functional in-place updates. (#31061)enable_classiclinkandenable_classiclink_dns_supportattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)allow_classic_link_to_remote_vpcandallow_vpc_to_remote_classic_linkattributes have been removed (#30966)statement.managed_rule_group_statement.excluded_ruleandstatement.rule_group_reference_statement.excluded_ruleattributes have been removed (#31374)redacted_fields.all_query_arguments,redacted_fields.bodyandredacted_fields.single_query_argumentattributes have been removed (#31486)NOTES:
descriptioninstead of thereplication_group_descriptionargument (#31008)num_cache_clustersinstead of thenumber_cache_clustersargument (#31008)kibana_endpointattribute has been deprecated. All configurations usingkibana_endpointshould be updated to use thedashboard_endpointattribute instead (#31490)tags_allattribute has been deprecated and will be removed in a future version (#31162)aws_redshift_service_accountdata source has been deprecated and will be removed in a future version. AWS documentation states that a service principal name should be used instead of an AWS account ID in any relevant IAM policy (#31006)tags_allattribute has been deprecated and will be removed in a future version (#31162)minimum_compression_sizeset to pass the value as a string. Valid values remain the same. (#30969)lb_target_group_arninstead ofalb_target_group_arnwhich has been removed (#30828)source_idsusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,source_ids = [aws_db_instance.example.id]must be updated tosource_ids = [aws_db_instance.example.identifier](#31232)replicate_source_dbusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,replicate_source_db = aws_db_instance.example.idmust be updated toreplicate_source_db = aws_db_instance.example.identifier(#31232)idis, namely, a DBI Resource ID now versus DB Identifier previously, has far-reaching consequences. Configurations that refer to, for example,aws_db_instance.example.idwill now have errors and must be changed to useidentifierinstead, for example,aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)db_instance_identifierusing theidattribute ofaws_db_instancemust be updated to useidentifierinstead - for example,db_instance_identifier = aws_db_instance.example.idmust be updated todb_instance_identifier = aws_db_instance.example.identifier(#31232)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)vpn_gateway_idattribute has been deprecated. All configurations usingvpn_gateway_idshould be updated to use theassociated_gateway_idattribute instead (#31384)descriptioninstead of thereplication_group_descriptionargument (#31008)num_cache_clustersinstead of thenumber_cache_clustersargument (#31008)preferred_cache_cluster_azsinstead of theavailability_zonesargument (#31008)num_node_groupsandreplicas_per_node_groupinstead ofcluster_mode.0.num_node_groupsandcluster_mode.0.replicas_per_node_group, respectively (#31008)log_group_nameattribute has been deprecated. All configurations usinglog_group_nameshould be updated to use thelog_destinationattribute instead (#31382)auto_enableargument has been deprecated. Use theauto_enable_organization_membersargument instead. (#30736)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)aws_networkmanager_core_network_policy_attachmentresource instead of thepolicy_documentargument (#30875)engine_versionattribute no longer has a default value. When omitted, the underlying AWS API will use the latest OpenSearch engine version. (#31568)kibana_endpointattribute has been deprecated. All configurations usingkibana_endpointshould be updated to use thedashboard_endpointattribute instead (#31490)snapshot_identifierattribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot. (#29409)engineargument must be updated to includeengineas it is now required. Previously, not includingenginewas equivalent toengine = "aurora"and created a MySQL-5.6-compatible cluster (#31112)engineargument must be updated to includeengineas it is now required. Previously, not includingenginewas equivalent toengine = "aurora"and created a MySQL-5.6-compatible cluster instance (#31112)instance_idcan no longer be set in configurations, usenetwork_interface_idinstead. For example, setnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)route.*.instance_idcan no longer be set in configurations, useroute.*.network_interface_idinstead. For example, setnetwork_interface_idtoaws_instance.test.primary_network_interface_id. (#30804)instance_idattribute has been deprecated. All configurations usinginstance_idshould be updated to use thetargetsattribute instead (#31380)ENHANCEMENTS:
computedtagson resources (#30793)default_tagsand resourcetagsto include zero values""(#30793)default_tagscan now be included and will be overwritten by resourcetags(#30793)identifierandidentifier_prefixwill no longer cause the database instance to be destroyed and recreated (#31232)vpcattribute. Usedomaininstead (#31567)auto_enable_organization_membersattribute (#30736)s3_configurationtoelasticsearch_configuration,opensearch_configuration,redshift_configuration,splunk_configuration, andhttp_endpoint_configuration(#31138)engine_versiondefault value (#31568)rule_action_overrideonrule_group_reference_statement(#31374)BUG FIXES:
instance_warmup_periodof0in theauto_scaling_group_provider.managed_scalingconfiguration block (#24005)metadata_optionsto allow default condition (#30545)acldefault in order to work with S3 buckets that have ACL disabled (#27197)acldefault in order to work with S3 buckets that have ACL disabled (#27197)provisioning_artifact_parametersarguments now properly trigger a replacement (#31061)vpcPeeringConnectionOptionsEqual(#30966)v4.67.0Compare Source
NOTES:
idattribute is now comma-delimited (#30820)FEATURES:
aws_connect_user(#26156)aws_connect_vocabulary(#26158)aws_organizations_policy(#30920)aws_redshiftserverless_namespace(#31250)aws_quicksight_template(#30453)aws_quicksight_template_alias(#31310)aws_quicksight_vpc_connection(#31309)ENHANCEMENTS:
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.