Merge tag 'v3.44.0'

.changelog/10539.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudformation_stack: Avoid conflicts with `on_failure` and `disable_rollback`
+```

.changelog/11936.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_backend_environment
+```

.changelog/11937.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_amplify_branch
+```
+
+```release-note:bug
+resource/aws_amplify_app: Mark the `enable_performance_mode` argument in the `auto_branch_creation_config` configuration block as `ForceNew`
+```

.changelog/11938.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_domain_association
+```

.changelog/11939.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_webhook
+```

.changelog/15966.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_amplify_app
+```

.changelog/16049.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudfront_distribution: Add `connection_attempts`, `connection_timeout`, and `origin_shield`.
+```

.changelog/17571.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_configuration: `kafka_versions` argument is optional
+```

.changelog/17573.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_vpn_connection: Allow `local_ipv4_network_cidr`, `remote_ipv4_network_cidr`, `local_ipv6_network_cidr`, and `remote_ipv6_network_cidr` to be CIDRs of any size
+```

.changelog/18905.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_cloudwatch_event_connection
+```
+
+```release-note:new-resource
+aws_cloudwatch_event_api_destination
+```
+
+```release-note:new-data-source
+aws_cloudwatch_event_connection
+```

.changelog/19100.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_schemas_discoverer
+```
+
+```release-note:new-resource
+aws_schemas_registry
+```
+
+```release-note:new-resource
+aws_schemas_schema
+```

.changelog/19316.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_provisioning_artifact
+```

.changelog/19375.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_connection: `connection_properties` are optional
+```

.changelog/19391.txt

@@ -0,0 +1,3 @@
+```release-notes:new-data-source
+aws_default_tags
+```

.changelog/19404.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+data-source/aws_msk_cluster: Add `bootstrap_brokers_sasl_iam` attribute
+```
+
+```release-note:enhancement
+resource/aws_msk_cluster: Add `bootstrap_brokers_sasl_iam` attribute
+```
+
+```release-note:enhancement
+resource/aws_msk_cluster: Add `iam` argument to `client_authentication.sasl` configuration block
+```

.changelog/19415.txt

@@ -0,0 +1,15 @@
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Add `custom_request_handling` to `allow` and `count` default action and rule actions.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_web_acl: Add `custom_response` to `block` default action and rule actions.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Add `custom_request_handling` to `allow` and `count` rule actions.
+```
+
+```release-notes:enhancement
+resource/aws_wafv2_rule_group: Add `custom_response` to `block` rule actions.
+```

.changelog/19425.txt

@@ -0,0 +1,15 @@
+```release-notes:enhancement
+resource/aws_lambda_event_source_mapping: Add `self_managed_event_source` and `source_access_configuration` arguments to support self-managed Apache Kafka event sources
+```
+
+```release-notes:enhancement
+resource/aws_lambda_event_source_mapping: Add `tumbling_window_in_seconds` argument to support AWS Lambda streaming analytics calculations
+```
+
+```release-notes:enhancement
+resource/aws_lambda_event_source_mapping: Add `function_response_types` argument to support AWS Lambda checkpointing
+```
+
+```release-notes:enhancement
+resource/aws_lambda_event_source_mapping: Add `queues` argument to support Amazon MQ for Apache ActiveMQ event sources
+```

.changelog/19448.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_tag_option_resource_association
+```

.changelog/19452.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_budget_resource_association
+```

.changelog/19454.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_eks_addon: Use `service_account_role_arn`, if set, on updates
+```

.changelog/19470.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_servicecatalog_principal_portfolio_association
+```

.changelog/19471.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_apprunner_service: Correctly configure `authentication_configuration`, `code_configuration`, and `image_configuration` nested arguments in API requests
+```

.changelog/19482.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_eks_node_group: Add `taint` argument
+```

.changelog/19483.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_apprunner_service: Handle asynchronous IAM eventual consistency error on creation
+```
+
+```release-note:bug
+resource/aws_apprunner_service: Suppress `instance_configuration` `cpu` and `memory` differences
+```

.changelog/19492.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_launch_template: Add `interface_type` to `network_interfaces` attribute
+```

.changelog/19496.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_listener_rule: Allow blank string for `action.redirect.query` nested argument
+```

.changelog/19499.txt

@@ -0,0 +1,3 @@
+```release-notes:new-data-source
+aws_servicecatalog_constraint
+```

.changelog/19502.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_mq_broker: Correct type for `logs.audit` attribute
+```

.changelog/19505.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_batch_job_definition: Don't crash when setting `timeout.attempt_duration_seconds` to `null`
+```

.changelog/19515.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_synthetics_canary: Change minimum `timeout_in_seconds` in `run_config` from `60` to `3`
+```

.changelog/19517.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_managed_prefix_list: Fix crash with multiple description-only updates
+```

.changelog/19528.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_sns_topic: Add `firehose_success_feedback_role_arn`, `firehose_success_feedback_sample_rate` and `firehose_failure_feedback_role_arn` arguments.
+```
+
+```release-note:enhancement
+resource/aws_sns_topic: Add plan time validation for `application_success_feedback_role_arn`, `application_failure_feedback_role_arn`, `http_success_feedback_role_arn`, `http_failure_feedback_role_arn`, `lambda_success_feedback_role_arn`, `lambda_failure_feedback_role_arn`, `sqs_success_feedback_role_arn`, `sqs_failure_feedback_role_arn`.
+```
+
+```release-note:enhancement
+resource/aws_sns_topic: Add `owner` attribute.
+```

.changelog/19535.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add `outpost_arn` argument
+```

.changelog/19551.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_parameter_group: Add `tags` argument and `arn` and `tags_all` attributes
+```

.changelog/19557.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add support for ECS Anywhere with the `launch_type` `EXTERNAL`
+```

.changelog/19559.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudtrail: Add `AWS::DynamoDB::Table` as an option for `event_selector`.`data_resource`.`type`
+```

.changelog/19568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_lustre_filesystem: Allow updating `storage_capacity`.
+```

.changelog/19571.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_metric_alarm: Add plan time validation to `metric_query.metric.stat`.
+```

.changelog/19574.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_devicefarm_project: Add `default_job_timeout_minutes` and `tags` argument
+```
+
+```release-note:enhancement
+resource/aws_devicefarm_project: Add plan time validation for `name`
+```

.changelog/19578.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_acmpca_certificate_authority: Add `s3_object_acl` argument to `revocation_configuration.crl_configuration` configuration block
+```

.changelog/19594.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_event_api_destination: Reduce the maximum allowed value for the `invocation_rate_limit_per_second` argument to `300`
+```

.changelog/19606.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_access_key: Fix status not defaulting to Active
+```

.changelog/19615.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_cluster: Fix provider-level `default_tags` support for resource
+```

.changelog/19625.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_log_metric_filter: Add `dimensions` argument to `metric_transformation` configuration block
+```

.changelog/19632.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_launch_configuration: Add `throughput` argument to `ebs_block_device` and `root_block_device` configuration blocks to support GP3 volumes
+```
+
+```release-note:enhancement
+data-source/aws_launch_configuration: Add `throughput` attribute to `ebs_block_device` and `root_block_device` configuration blocks to support GP3 volumes
+```

.changelog/19654.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cloudwatch_event_api_destination: Fix crash on resource update
+```