Merge branch 'main' into HEAD

.actrc

@@ -1,4 +1,7 @@
 # Needed for testing our workflows
 # The `full` variants are needed for Maven for TeamCity configuration validation
--P ubuntu-latest=ghcr.io/catthehacker/ubuntu:full-20.04
--P linux=ghcr.io/catthehacker/ubuntu:full-20.04
+-P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
+-P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-large=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-xl=ghcr.io/catthehacker/ubuntu:act-22.04

.archive/changelog/36595.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_dynamodb_resource_policy
+```

.changelog/14270.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudformation_stack: CRLF line endings in `template_body` no longer cause erroneous diffs
+```
+
+```release-note:note
+provider: When using YAML or JSON documents, such as in `template_body` of `aws_cloudformation_stack`, CRLF was previously treated as different from LF but these are now treated as equivalent in many situations
+```

.changelog/15136.txt

@@ -0,0 +1,19 @@
+```release-note:bug
+resource/aws_config_configuration_recorder: Fix `panic: interface conversion: interface {} is nil, not map[string]interface {}` when `recording_group.exclusion_by_resource_types` is empty
+```
+
+```release-note:enhancement
+resource/aws_config_configuration_recorder: Add plan-time validation of `aws_config_organization_custom_rule.lambda_function_arn`
+```
+
+```release-note:bug
+resource/aws_config_rule: Change `name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```
+
+```release-note:new-resource
+aws_config_retention_configuration
+```
+
+```release-note:bug
+resource/aws_config_rule: Fix `InvalidParameterValueException: PolicyText is required when Owner is CUSTOM_POLICY` errors on resource Update
+```

.changelog/17457.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_route53_zones
+```

.changelog/19943.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_secretsmanager_secret_version: Fix `InvalidParameterException: The parameter RemoveFromVersionId can't be empty. Staging label AWSCURRENT is currently attached to version ..., so you must explicitly reference that version in RemoveFromVersionId` errors when a secret is updated outside Terraform
+```

.changelog/20386.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Fixes error when `schema` has empty `string_attribute_constraints` or `number_attribute_constraints`
+```

.changelog/21834.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_batch_job_definition: Suppress unnecessary differences in `container_properties.environment`
+```

.changelog/24183.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+data-source/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp
+```
+
+```release-note:bug
+resource/aws_eks_cluster: Return `created_at` as an [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted timestamp
+```

.changelog/24526.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_ecr_image: Add `image_uri` attribute
+```

.changelog/25036.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_pinpointsmsvoicev2_phone_number
+```
+
+```release-note:new-resource
+aws_pinpointsmsvoicev2_opt_out_list
+```

.changelog/25468.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elastic_beanstalk_application_version: Add `process` argument
+```

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/25967.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_iam_policy_document: When using multiple principals, sort them to avoid differences based only on order
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/26755.txt

@@ -0,0 +1,4 @@
+```release-note:bug
+resource/aws_cloudwatch_event_connection: Add plan-time validation preventing empty `auth_parameters.oauth.oauth_http_parameters` or `auth_parameters.invocation_http_parameters`
+`body`, `header` and `query_string` configuration blocks
+```

.changelog/26964.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kinesis_firehose_delivery_stream: Fix `InvalidArgumentException: Both BufferSizeInMBs and BufferIntervalInSeconds are required to configure buffering for lambda processor` errors on resource Update
+```

.changelog/27274.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Add `assign_generated_ipv6_cidr_block` and `ipv6_pool` arguments
+```

.changelog/29034.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_data_source: Add `credentials.secret_arn` argument
+```

.changelog/29415.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `performance_insights_enabled`, `performance_insights_kms_key_id`, and `performance_insights_retention_period` arguments
+```

.changelog/29470.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `elasticsearch_settings.use_new_mapping_type` argument
+```

.changelog/29663.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_db_option_group: Add `skip_destroy` argument
+```
+
+```release-note:enhancement
+resource/aws_db_parameter_group: Add `skip_destroy` argument
+```

.changelog/29671.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sesv2_configuration_set: Allow `suppression_options.suppressed_reasons` to be an empty list (`[]`) in order to disable the suppression list
+```

.changelog/29832.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_elasticache_reserved_cache_node
+```
+
+```release-note:new-data-source
+aws_elasticache_reserved_cache_node_offering
+```

.changelog/29921.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_function: Ensure lambda does not get deployed if `source_code_hash` does not change.
+```

.changelog/30154.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_task_definition: Add `track_latest` argument
+```

.changelog/30167.txt

@@ -0,0 +1,4 @@
+```release-note:enhancement
+resource/aws_route53_resolver_endpoint: Add `resolver_endpoint_type` argument
+resource/aws_route53_resolver_rule: Add `ipv6` optional argument to the `target_ip` object
+```

.changelog/30354.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_log_group: Fix `invalid new value for .skip_destroy: was cty.False, but now null` errors 
+```

.changelog/30399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_dynamodb_table_export
+```

.changelog/30403.txt

@@ -0,0 +1,9 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Fix excessive delay on read
+```
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add `transit_encryption_mode` argument
+```
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Changes to the `transit_encryption_enabled` argument can now be done in-place for engine versions > `7.0.5`
+```

.changelog/30493.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Fix `unexpected state 'snapshotting'` errors when increasing or decreasing replica count
+```

.changelog/30721.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_replication_task: Remove [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) from `replication_instance_arn`, allowing in-place migration between DMS instances
+```

.changelog/30862.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ce_cost_category: Allow up to 3 levels of `and`, `not` and `or` operand nesting for the `rule` argument
+```

.changelog/31077.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_memorydb_cluster: Treat `snapshotting` status as pending when creating cluster
+```

.changelog/31216.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_kms_key: Add `xks_key_id` attribute
+```

.changelog/31284.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dynamodb_table: Fix changing replicas to the default `Managed by DynamoDB` encryption setting
+```

.changelog/31436.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_lb_target_group: Fix diff on `stickiness.cookie_name` when `stickiness.type` is `lb_cookie`
+```
+
+```release-note:bug
+data-source/aws_lb_target_group: Change `deregistration_delay` from `TypeInt` to `TypeString`
+```

.changelog/31453.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_acm_certificate: Mark `domain` and `tags` as Optional. This enables certificates to be matched based on tags
+```

.changelog/31737.txt

@@ -0,0 +1,11 @@
+```release-note:new-data-source
+aws_quicksight_analysis
+```
+
+```release-note:bug
+resource/aws_quicksight_analysis: Properly send `theme_arn` argument on create and update when configured
+```
+
+```release-note:enhancement
+resource/aws_quicksight_data_source: Add `parameters.databricks` argument
+```

.changelog/31917.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_replication_task: Allow `cdc_start_time` to use [RFC3339](https://www.rfc-editor.org/rfc/rfc3339) formatted dates in addition to UNIX timestamps
+```

.changelog/32027.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_memorydb_user: Support IAM authentication mode
+```

.changelog/32204.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_verifiedpermissions_policy_store
+```
+
+```release-note:new-resource
+aws_verifiedpermissions_schema
+```
+
+```release-note:new-data-source
+aws_verifiedpermissions_policy_store
+```

.changelog/32205.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_verifiedpermissions_policy_template
+```

.changelog/32484.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_msk_bootstrap_brokers
+```

.changelog/32710.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_ssmcontacts_rotation
+```
+
+```release-note:new-data-source
+aws_ssmcontacts_rotation
+```

.changelog/33205.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_lb: Allow the number of `subnets` for Network Load Balancers to be increased without recreating the resource
+```
+
+```release-note:enhancement
+resource/aws_lb: Add plan-time validation that exactly one of either `subnets` or `subnet_mapping` is configured
+```
+
+```release-note:enhancement
+resource/aws_lb: Allow the number of `subnet_mapping`s for Network Load Balancers to be increased without recreating the resource
+```
+
+```release-note:enhancement
+resource/aws_lb: Allow the number of `subnet_mapping`s for Application Load Balancers to be changed without recreating the resource
+```
+
+```release-note:bug
+resource/aws_lb: Correct in-place update of `security_groups` for Network Load Balancers when the new value is Computed
+```

.changelog/33266.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_pinpoint_email_template
+```

.changelog/33298.txt

@@ -0,0 +1,3 @@
+```release-notes:enhancement
+resource/aws_lakeformation_permissions: Allow `principal` to be an AWS federated-user arn
+```

.changelog/33339.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Allow `default_tags` to be set by environment variables
+```

.changelog/33393.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecs_account_setting_default: Remove plan-time validation of `value`
+```

.changelog/33402.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Add `json` attribute to facilitate use with S3 buckets
+```
+
+```release-note:enhancement
+data-source/aws_ssm_patch_baseline: Add `json` attribute to facilitate use with S3 buckets
+```

.changelog/33410.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_medialive_channel: Fixed errors related to setting the `failover_condition` argument
+```

.changelog/33412.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Fix `ReservationCapacityExceeded` errors when updating `instance_type` and `capacity_reservation_specification.capacity_reservation_target.capacity_reservation_id`
+```

.changelog/33484.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_security_group_rule: Fix `UnsupportedOperation: The functionality you requested is not available in this region` errors on Read in certain partitions
+```

.changelog/33596.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_route53domains_delegation_signer_record
+```
+
+```release-note:enhancement
+resource/aws_route53domains_registered_domain: Support resource import
+```

.changelog/33653.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_backup_plan: Add `rule.schedule_expression_timezone` argument
+```
+
+```release-note:enhancement
+data-source/aws_backup_plan: Add `rule.schedule_expression_timezone` attribute
+```

.changelog/33713.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appautoscaling_scheduled_action: Always send `start_time` and `end_time` values on update when configured
+```

.changelog/33731.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_event_subscription: `source_ids` and `source_type` are Required
+```

.changelog/33769.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_instance: Apply default tags to volumes/block devices managed through an `aws_instance`, add `ebs_block_device.*.tags_all` and `root_block_device.*.tags_all` attributes which include default tags
+```

.changelog/34044.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Use the configured `copy_tags_to_snapshot` value when `restore_to_point_in_time` is set
+```

.changelog/34046.txt

@@ -0,0 +1,6 @@
+```release-note:new-data-source
+aws_cognito_user_group
+```
+```release-note:new-data-source
+aws_cognito_user_groups
+```

.changelog/34055.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_verifiedaccess_group: Add `sse_configuration` argument
+```

.changelog/34099.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_instance_profile: Detect when the associated `role` no longer exists
+```

.changelog/34121.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_codebuild_project: Allow `build_batch_config` to be removed on Update
+```