Merge hashicorp 3.34.0 into main

.changelog/11967.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_parameter: Add support for `Intelligent-Tiering`
+```

.changelog/14101.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sns_topic_subscription: Add plan time validation for `subscription_role_arn` and `topic_arn`
+```
+
+```release-note:bug
+resource/aws_sns_topic_subscription: recreate subscription if topic is deleted
+```

.changelog/14193.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecr_repository_policy: Add plan time validation for `policy`
+```

.changelog/14247.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_config_configuration_aggregator: Allow name to have uppercase characters
+```

.changelog/14319.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_wafv2_web_acl_logging_configuration: Ensure `redacted_fields` are applied to the resource
+```
+
+```release-note:note
+resource/aws_wafv2_web_acl_logging_configuration: The `redacted_fields` configuration block `all_query_arguments`, `body`, and `single_query_argument` arguments have been deprecated to match the WAF API documentation
+```

.changelog/14905.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_light_instance_public_ports: Add `cidrs` argument to `port_info`
+```

.changelog/15213.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_ssm_patch_group: Allow for a single patch group to be registered with multiple patch baselines
+```
+
+```release-note:bug
+resource/aws_ssm_patch_group: Replace `Provider produced inconsistent result after apply` with actual error message
+```

.changelog/16815.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+resource/aws_cloudwatch_event_permission: Fix error in Event Bridge/CloudWatch Events bus name validation
+```
+
+```release-note:bug
+resource/aws_cloudwatch_event_rule: Fix error in Event Bridge/CloudWatch Events bus name validation
+```
+
+```release-note:bug
+resource/aws_cloudwatch_event_target: Fix error in Event Bridge/CloudWatch Events bus name validation
+```

.changelog/16930.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_route: Validate route destination and target attributes
+```
+
+```release-note:bug
+resource/aws_route: Correctly handle updates to the route target attributes (`egress_only_gateway_id`, `gateway_id`, `instance_id`,  `local_gateway_id`, `nat_gateway_id`, `network_interface_id`, `transit_gateway_id`, `vpc_peering_connection_id`)
+```

.changelog/16936.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add `deployment_circuit_breaker`
+```
+
+```release-note:bug
+resource/aws_ecs_service: Improve handling of eventual consistency including security group dependency violations on deletion
+```

.changelog/16961.txt

@@ -0,0 +1,3 @@
+```release-notes:enhancement
+resource/aws_route: Add `carrier_gateway_id` attribute
+```

.changelog/16963.txt

@@ -0,0 +1,3 @@
+```release-notes:enhancement
+data-source/aws_route: Add `carrier_gateway_id` attribute
+```

.changelog/16979.txt

@@ -0,0 +1,11 @@
+```release-notes:enhancement
+resource/aws_default_route_table: Add `arn` attribute
+```
+
+```release-notes:enhancement
+resource/aws_route_table: Add `arn` attribute
+```
+
+```release-notes:enhancement
+resource/aws_route_table: Add `carrier_gateway_id` attribute to `route` configuration block
+```

.changelog/17149.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_kinesis_stream_consumer
+```
+
+```release-note:new-resource
+aws_kinesis_stream_consumer
+```

.changelog/17387.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecs_service: Re-create service when `service_registries` changes
+```

.changelog/17465.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/aws_codebuild_project: The `source` and `secondary_sources` configuration block `auth` attributes have been deprecated to match the CodeBuild API documentation. Use the `aws_codebuild_source_credential` resource instead.
+```

.changelog/17589.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_route_tables
+```

.changelog/17596.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_admin_account: Extend creation timeout to 10 minutes
+```

.changelog/17641.txt

@@ -0,0 +1,7 @@
+```release-note:note
+data-source/aws_vpc_endpoint_service: The `service_type` argument filtering has been switched from client-side to new EC2 API functionality
+```
+
+```release-note:bug
+data-source/aws_vpc_endpoint_service: Prevent panic with incorrect `service_type` argument values
+```

.changelog/17830.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ssm_parameter: Add plan time validation to `name`, `description` and `allowed_pattern`
+```
+
+```release-note:enhancement
+resource/aws_ssm_parameter: Tag on create
+```

.changelog/17876.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_waf_rule: Fix rule deletion when still referenced by a WebACL
+```

.changelog/17909.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_parameter_group: Store all values in lowercase to prevent unexpected diffs
+```

.changelog/17958.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dms_certificate: Correctly base64 decode `certificate_wallet` value
+```

.changelog/17962.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_instance_profile: Add tagging support
+```

.changelog/17964.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iam_openid_connect_provider: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_iam_openid_connect_provider: Add plan time validation for `client_id_list` and `thumbprint_list`
+```

.changelog/17965.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iam_saml_provider: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_iam_saml_provider: Add plan time validation for `name` and `saml_metadata_document`
+```

.changelog/17967.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iam_server_certificate: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_iam_server_certificate: Add `expiration` and `upload_date` attributes
+```

.changelog/17968.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ami_from_instance: Tag on create.
+```

.changelog/17969.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_efs_file_system: Add `number_of_mount_targets`, `size_in_bytes` and `owner_id` attributes
+```

.changelog/17974.txt

@@ -0,0 +1,15 @@
+```release-note:note
+provider: New `default_tags` argument as a public preview for applying tags across all resources under a provider. Support for the functionality must be added to individual resources in the codebase and is only implemented for the `aws_subnet` and `aws_vpc` resources at this time. Until a general availability announcement, no compatibility promises are made with these provider arguments and their functionality.
+```
+
+```release-note:enhancement
+provider: Add `default_tags` argument (in public preview, see note above)
+```
+
+```release-note:enhancement
+resource/aws_subnet: Support provider-wide default tags (in public preview, see note above)
+```
+
+```release-note:enhancement
+resource/aws_vpc: Support provider-wide default tags (in public preview, see note above)
+```

.changelog/17985.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_globalaccelerator_accelerator: Correct length for `name` attribute validation
+```

.changelog/18042.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudfront_distribution: Allow `forwarded_values` to be set to empty when values were previously set
+```

.changelog/18070.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_mq_configuration: Add `ldap` as an `authentication_strategy` and `RabbitMQ` as an `engine_type`
+```

.changelog/18076.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_storagegateway_gateway: Add support for `smb_file_share_visibility`.
+```

.changelog/18129.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_codestarconnections_connection
+```

.changelog/18203.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lakeformation_permissions: Properly serialize SELECT permission for `permissions` and `permissions_with_grant_option` fields
+```

.changelog/18276.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_iam_policy: Add tagging support
+```
+
+```release-note:enhancement
+resource/aws_iam_policy: Add `policy_id` attribute
+```
+
+```release-note:enhancement
+data-source/aws_iam_policy: Add `policy_id` and `tags` attributes
+```

.changelog/18281.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_pinpoint_sms_channel: Set all params on update
+```

.changelog/18305.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_pinpoint_event_stream: Retry on eventual consistency error
+```
+
+```release-note:enhancement
+resource/aws_pinpoint_event_stream: Plan time validations for `destination_stream_arn` and `role_arn`
+```

.changelog/18313.txt

@@ -0,0 +1,11 @@
+```release-note:note
+resource/aws_storagegateway_upload_buffer: The Storage Gateway `ListLocalDisks` API operation has been implemented to support the `disk_path` attribute for Cached and VTL gateway types. Environments using restrictive IAM permissions may require updates.
+```
+
+```release-note:bug
+data-source/aws_storagegateway_local_disk: Allow `disk_path` reference on `disk_node` lookup and vice-versa
+```
+
+```release-note:enhancement
+resource/aws_storagegateway_upload_buffer: Add `disk_path` argument for Cached and VTL gateways
+```

.changelog/18314.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_pinpoint_email_channel: Add `configuration_set` argument
+```
+
+```release-note:enhancement
+resource/aws_pinpoint_email_channel: Add plan time validation for `identity` and `role_arn`
+```

.changelog/18341.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_securityhub_organization_admin_account: Retry on `ResourceConflictException` error during creation
+```

.changelog/18351.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_apigatewayv2_domain_name: Allow update of mutual TLS S3 object version
+```

.changelog/18361.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Prevents re-creation of secondary replication groups when encryption is enabled
+```

.changelog/18382.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_api_gateway_vpc_link: Persist ID of failed VPC Link to state
+```

.changelog/18384.txt

@@ -0,0 +1,4 @@
+```release-note:bug
+resource/aws_wafv2_web_acl_logging_configuration: Remove deprecation warning for `redacted_fields` `single_header` argument
+```
+

.changelog/18388.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_network_acl: Handle EC2 eventual consistency errors on creation
+```
+
+```release-note:bug
+resource/aws_network_acl_rule: Handle EC2 eventual consistency errors on creation
+```

.changelog/18391.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_vpc: Handle EC2 eventual consistency errors on creation
+```

.changelog/18392.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_subnet: Handle EC2 eventual consistency errors on creation
+```

.changelog/18404.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_synthetics_canary: Handle asynchronous IAM eventual consistency error on creation
+```

.changelog/8611.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_lightsail_instance_public_ports
+```

.github/workflows/firewatch.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Firewatch
-      uses: breathingdust/firewatch@v1
+      uses: breathingdust/firewatch@v2
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         alert_threshold: 10

.github/workflows/issues.yml

@@ -9,13 +9,13 @@ jobs:
     - uses: actions/checkout@v2
     - name: Apply Issue needs-triage Label
       if: github.event.action == 'opened' && !contains(fromJSON('["anGie44", "bflad", "bill-rich", "breathingdust", "DrFaust92", "ewbankkit", "gdavison", "maryelizbeth", "YakDriver"]'), github.actor)
-      uses: github/issue-labeler@v2.2
+      uses: github/issue-labeler@v2.3
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: .github/labeler-issue-needs-triage.yml
         enable-versioned-regex: 0
     - name: Apply Issue Triage Labels
-      uses: github/issue-labeler@v2.2
+      uses: github/issue-labeler@v2.3
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: .github/labeler-issue-triage.yml