Terraform AWS Provider v6.47.0: New Resources, Enhancements, and Bug Fixes
HashiCorp's Terraform AWS provider has been updated to version 6.47.0, introducing several new resources for AWS Bedrock Agent Core and S3 Control, alongside numerous enhancements and bug fixes. Key updates include additions for managing S3 multi-region access points and Bedrock agent configurations, plus deprecations for 'id' attributes in favor of more specific field names across several data sources. These changes primarily impact engineers and architects managing AWS infrastructure via Terraform, offering more granular control and improved consistency.
- →New List Resource: aws_bedrockagentcore_online_evaluation_config
- →New List Resource: aws_bedrockagentcore_policy_engine
- →New List Resource: aws_bedrockagentcore_resource_policy
- →New List Resource: aws_s3control_multi_region_access_point
- →New List Resource: aws_s3control_multi_region_access_point_routes
Features (9) ›
- aws_bedrockagentcore_online_evaluation_config New List Resource: aws_bedrockagentcore_online_evaluation_config
- aws_bedrockagentcore_policy_engine New List Resource: aws_bedrockagentcore_policy_engine
- aws_bedrockagentcore_resource_policy New List Resource: aws_bedrockagentcore_resource_policy
- aws_s3control_multi_region_access_point New List Resource: aws_s3control_multi_region_access_point
- aws_s3control_multi_region_access_point_routes New List Resource: aws_s3control_multi_region_access_point_routes
- aws_bedrockagentcore_online_evaluation_config New Resource: aws_bedrockagentcore_online_evaluation_config
- aws_bedrockagentcore_policy_engine New Resource: aws_bedrockagentcore_policy_engine
- aws_bedrockagentcore_resource_policy New Resource: aws_bedrockagentcore_resource_policy
- aws_s3control_multi_region_access_point_routes New Resource: aws_s3control_multi_region_access_point_routes
Enhancements (28) ›
- aws_arn Deprecates id in favor of arn
- aws_default_tags Deprecates id
- aws_ip_ranges Deprecates id
- aws_partition Deprecates id in favor of partition
- aws_region Deprecates id in favor of region
- aws_regions Deprecates id
- aws_route Add odb_network_arn attribute
- aws_route_table Add routes.odb_network_arn attribute
- aws_secretsmanager_secret_version Deprecates arn in favor of secret_arn
- aws_secretsmanager_secret_versions Deprecates arn in favor of secret_arn
- aws_secretsmanager_secret_versions Deprecates name in favor of secret_name
- aws_service Deprecates id in favor of reverse_dns_name
- aws_transfer_server Add ip_address_type attribute
- aws_acm_certificate Add private_key_wo write-only argument and private_key_wo_version argument
- aws_arcregionswitch_plan Add step.rds_promote_read_replica_config, step.rds_create_cross_region_read_replica_config, and report_configuration arguments
- aws_eks_cluster Add CGNAT IP address ranges as valid private range
- aws_eks_cluster Make remote_node_networks field in remote_network_config optional
- aws_eks_cluster Remove conflict between outpost_config and remote_network_config
- aws_msk_replicator Add support for log_delivery configuration block
- aws_quicksight_data_source Add parameters.athena.role_arn argument to allow override an account-wide role for a specific Athena data source
- aws_route Add odb_network_arn argument
- aws_route Add plan-time validation of core_network_arn
- aws_route_table Add route.odb_network_arn argument
- aws_route_table Add plan-time validation of route.core_network_arn
- aws_s3control_multi_region_access_point Add resource identity support
- aws_secretsmanager_secret_version Deprecates arn in favor of secret_arn
- aws_ssm_resource_data_sync Add s3_destination.destination_data_sharing argument
- aws_transfer_server Add ip_address_type argument
Fixes (8) ›
- aws_secretsmanager_secret_versions Polulates versions.*.last_accessed_date
- provider
Fix lifecycle.ignore_changes for individual tags elements being bypassed when another tag in the same map is updated to an empty string, to avoid overwriting any out-of-band changes the lifecycle block was meant to preserve
- aws_dynamodb_table Ensure diffs are shown for GSI hash key type changes
- aws_eks_cluster Change securityGroupIds logic in flattenVPCConfigResponse() for Outpost clusters
- aws_instance
Fix lifecycle.ignore_changes for individual tags elements being bypassed when another tag in the same map is updated to an empty string, to avoid overwriting any out-of-band changes the lifecycle block was meant to preserve
- aws_lb
Fix Provider produced inconsistent final plan errors and force resource recreation for Network Load Balancers when no security groups were initially configured and updated security groups are unknown at plan-time
- aws_msk_replicator Mark replication_info_list.consumer_group_replication.consumer_groups_to_exclude as Computed
- aws_msk_replicator Mark replication_info_list.topic_replication.topics_to_exclude as Computed
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.47.0
Related releases
- Amazon Aurora DSQL adds multi-Region cluster support in four more Regions AWS What's New ·
- CloudWatch adds managed Prometheus collectors AWS What's New ·
- Amazon EC2 C7i Instances Expand to New Regions AWS What's New ·
- EC2 C7i-flex instances now available in Europe (Milan) region AWS What's New ·
- AWS CodeDeploy Expands to Five New Regions AWS What's New ·
- Redis 8.0 end-of-life date moved to 2026-12-01 endoflife.date ·