aws Terraform AWS Provider Releases · · 6.42.0

Terraform AWS Provider v6.42.0: New resources, breaking change, and enhancements

terraforminfraawsaws-s3aws-iam
breaking feature patch announcement

HashiCorp's AWS provider has released version 6.42.0, introducing multiple new resources and enhancements across various AWS services. A notable breaking change affects `aws_mq_configuration` resource destruction, now requiring explicit `mq:DeleteConfiguration` IAM permissions or opting into `skip_destroy`. This release adds new data sources and list resources for services including EC2, API Gateway, CloudWatch, and EBS, benefiting engineers managing cloud infrastructure via Terraform.

  • New Data Source: aws_ec2_service_link_virtual_interface
  • New Data Source: aws_ec2_service_link_virtual_interfaces
  • New List Resource: aws_apigatewayv2_api
  • New List Resource: aws_cloudwatch_log_metric_filter
  • New List Resource: aws_config_remediation_configuration
Breaking changes (1)
  • aws_mq_configuration

    Destruction of this resource will now delete the configuration. Previously delete was a no-op due to missing API operations, leaving resources in an unmanaged state. For this reason a breaking change was deemed acceptable in a minor version. This functionality requires the mq:DeleteConfiguration IAM permission. To restore the previous no-op behavior, set skip_destroy to true

Features (18)
  • aws_ec2_service_link_virtual_interface New Data Source: aws_ec2_service_link_virtual_interface
  • aws_ec2_service_link_virtual_interfaces New Data Source: aws_ec2_service_link_virtual_interfaces
  • aws_apigatewayv2_api New List Resource: aws_apigatewayv2_api
  • aws_cloudwatch_log_metric_filter New List Resource: aws_cloudwatch_log_metric_filter
  • aws_config_remediation_configuration New List Resource: aws_config_remediation_configuration
  • aws_ebs_volume New List Resource: aws_ebs_volume
  • aws_ebs_volume_attachment New List Resource: aws_ebs_volume_attachment
  • aws_eip New List Resource: aws_eip
  • aws_iam_user_policy_attachment New List Resource: aws_iam_user_policy_attachment
  • aws_internet_gateway New List Resource: aws_internet_gateway
  • aws_lambda_layer_version New List Resource: aws_lambda_layer_version
  • aws_launch_template New List Resource: aws_launch_template
  • aws_route53_zone New List Resource: aws_route53_zone
  • aws_sagemaker_hyper_parameter_tuning_job New List Resource: aws_sagemaker_hyper_parameter_tuning_job
  • aws_sqs_queue_policy New List Resource: aws_sqs_queue_policy
  • aws_cloudwatch_otel_enrichment New Resource: aws_cloudwatch_otel_enrichment
  • aws_ebs_volume_copy New Resource: aws_ebs_volume_copy
  • aws_sagemaker_hyper_parameter_tuning_job New Resource: aws_sagemaker_hyper_parameter_tuning_job
Enhancements (33)
  • aws_identitystore_user Add user_status attribute
  • aws_identitystore_users Add user_status attribute
  • aws_network_interface Add ena_srd_specification attribute
  • aws_odb_network Enhancements to support cross-region restore
  • aws_cloudwatch_log_metric_filter Add Resource Identity support
  • aws_cloudwatch_metric_alarm

    Add evaluation_criteria and evaluation_interval arguments in support of PromQL queries. Change comparison_operator and evaluation_periods to Optional

  • aws_ebs_volume_attachment Add resource identity support
  • aws_eip Add resource identity support
  • aws_eks_access_entry Add Resource Identity support
  • aws_eks_access_policy_association Add Resource Identity support
  • aws_eks_addon Add Resource Identity support
  • aws_eks_addon Add namespace_config argument
  • aws_eks_capability Add Resource Identity support
  • aws_eks_identity_provider_config Add Resource Identity support
  • aws_eks_identity_provider_config Add identity_provider_config_name attribute
  • aws_eks_node_group Add Resource Identity support
  • aws_eks_pod_identity_association Add Resource Identity support
  • aws_fargate_profile Add Resource Identity support
  • aws_identitystore_user Add user_status attribute
  • aws_imagebuilder_lifecycle_policy Support wildcard semantic version for resource_selection.recipe.semantic_version
  • aws_lambda_layer_version Add resource identity support
  • aws_launch_template Add resource identity support
  • aws_mq_configuration Add skip_destroy argument
  • aws_mq_configuration Implement resource deletion
  • aws_network_interface Add ena_srd_specification argument to support ENA Express
  • aws_networkmanager_site_to_site_vpn_attachment

    Enable in-place updates of routing_policy_label argument. This functionality requires the networkmanager: PutAttachmentRoutingPolicyLabel and networkmanager: RemoveAttachmentRoutingPolicyLabel IAM permissions

  • aws_odb_network Enhancements to support cross-region restore
  • aws_rds_integration Add integration_identifier attribute
  • aws_rds_integration Support in-place update of data_filter and integration_name
  • aws_s3_bucket_inventory Support S3 Inventory for directory buckets
  • aws_s3control_storage_lens_configuration Add storage_lens_configuration.expanded_prefixes_data_export and storage_lens_configuration.prefix_delimiter arguments
  • aws_s3files_file_system Add accept_bucket_warning argument
  • network_peering_connection Peer cidr management through peer_network_cidrs argument
Fixes (8)
  • aws_appintegrations_data_integration Fix source_uri regular expression validation
  • aws_bedrock_guardrail Update maximum length of topic_policy_config.topics_config.definition from 200 to 1000 to support standard tier
  • aws_cloudwatch_alarm_mute_rule Fix mute_targets.alarm_names ordering causing "Provider produced inconsistent result after apply" errors
  • aws_ecs_service Excludes Express-Mode Services from listing
  • aws_eip Gracefully handle UnsupportedOperation errors in isolated regions
  • aws_msk_cluster

    Fix a request parameter error when updating broker_node_group_info.vpc_connectivity configuration block. This fixes a regression introduced in v6.40.0

  • aws_odb_network

    Fix runtime error: invalid memory address or nil pointer dereference panic in statusManagedService() and statusNetwork() when FindOracleDBNetworkResourceByID returns a nil result during resource creation

  • aws_securityhub_member Only set email if returned by AWS API and don't recompute invite from member_status. This prevents drift for organization members
Notes (2)
  • documentation CDKTF documentation has been removed from the provider
  • aws_eip Because we cannot easily test this behavior in isolated regions, it is best effort and we ask for community help in testing
Read the original announcement →

https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.42.0

Related releases