Terraform AWS Provider v6.43.0 Adds New Data Sources and Resources
terraforminfraawsgadeprecationengineeraws-s3
feature patch
Terraform AWS Provider version 6.43.0 introduces several new data sources and resources, including capabilities for Security Hub, DB Subnet Groups, and EC2 Network Insights. Enhancements focus on resource identity support across various services like Audit Manager and Security Hub, alongside a deprecation for `current_deployment` in `aws_ecs_express_gateway_service`. Several bug fixes address plan-time errors and improve handling of transient API issues, benefiting users managing AWS infrastructure.
- →New Data Source: aws_securityhub_enabled_standards
- →New Data Source: aws_securityhub_security_controls
- →New List Resource: aws_db_subnet_group
- →New List Resource: aws_ec2_network_insights_access_scope
- →New List Resource: aws_iam_group_policy_attachment
Features (10) ›
- aws_securityhub_enabled_standards New Data Source: aws_securityhub_enabled_standards
- aws_securityhub_security_controls New Data Source: aws_securityhub_security_controls
- aws_db_subnet_group New List Resource: aws_db_subnet_group
- aws_ec2_network_insights_access_scope New List Resource: aws_ec2_network_insights_access_scope
- aws_iam_group_policy_attachment New List Resource: aws_iam_group_policy_attachment
- aws_lambda_event_source_mapping New List Resource: aws_lambda_event_source_mapping
- aws_securityhub_insight New List Resource: aws_securityhub_insight
- aws_arczonalshift_autoshift_observer_notification_status New Resource: aws_arczonalshift_autoshift_observer_notification_status
- aws_ec2_network_insights_access_scope New Resource: aws_ec2_network_insights_access_scope
- aws_securityhub_account_v2 New Resource: aws_securityhub_account_v2
Enhancements (25) ›
- aws_arczonalshift_autoshift_observer_notification_status Add resource identity support
- aws_auditmanager_assessment Add resource identity support
- aws_auditmanager_control Add resource identity support
- aws_auditmanager_framework Add resource identity support
- aws_auditmanager_framework_share Add resource identity support
- aws_bedrockagentcore_memory_strategy Support EPISODIC as a valid value for type
- aws_ecs_express_gateway_service Deprecates current_deployment
- aws_iam_group_policy_attachment Add resource identity support
- aws_lambda_event_source_mapping Add resource identity support
- aws_securityhub_action_target Add Resource Identity support
- aws_securityhub_configuration_policy Add Resource Identity support
- aws_securityhub_configuration_policy_association Add Resource Identity support
- aws_securityhub_configuration_policy_association Add support for SELF_MANAGED_SECURITY_HUB as a policy_id value
- aws_securityhub_finding_aggregator Add Resource Identity support
- aws_securityhub_finding_aggregator Add arn attribute
- aws_securityhub_insight Add Resource Identity support
- aws_securityhub_member Add Resource Identity support
- aws_securityhub_organization_admin_account Add Resource Identity support
- aws_securityhub_product_subscription Add Resource Identity support
- aws_securityhub_standards_control Add Resource Identity support
- aws_securityhub_standards_control_association Add Resource Identity support
- aws_securityhub_standards_subscription Add Resource Identity support
- aws_securityhub_standards_subscription Add arn attribute
- aws_subnet Automatically detect and dissociate GuardDuty-managed VPC endpoints during terraform destroy when they block subnet deletion
- aws_vpc Automatically detect and remove GuardDuty-managed VPC endpoints and security groups during terraform destroy when they block VPC deletion
Fixes (9) ›
- aws_cloudwatch_metric_alarm
Fix invalid One of 'metric_name', 'metric_query', or 'evaluation_criteria' must be set for a cloudwatch metric alarm plan-time errors. This fixes a regression introduced in v6.42.0
- aws_ecs_express_gateway_service Handles more transient API errors during creation and deletion
- aws_ecs_express_gateway_service Marks resource for re-creation if it fails while waiting for creation
- aws_ecs_express_gateway_service Prevents errors when value of current_deployment changes
- aws_ecs_express_gateway_service Waits until the service is INACTIVE instead of DRAINING
- aws_flow_log Prevents error when updating from earlier versions of the provider or importing VPC Flow Logs
- aws_globalaccelerator_cross_account_attachment Fix runtime error: invalid memory address or nil pointer dereference panics when removing resource blocks
- aws_pinpoint_app Lower minimum of limits.messages_per_second from 50 to 1 to match the AWS API
- aws_s3_bucket
Fix bucket creation on third-party S3-compatible APIs (e.g. OVH, Ceph RGW) by handling MalformedXML errors during tag-on-create and CreateBucketConfiguration operations
Read the original announcement →
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.43.0
Related releases
- Amazon MSK Express delivers Kafka data to Apache Iceberg streaming tables AWS What's New ·
- Amazon MSK Express delivers Kafka data to Amazon S3 AWS What's New ·
- Amazon OpenSearch Service Adds OpenSearch 3.7 Support AWS What's New ·
- AWS Parallel Computing Service adds node lifecycle actions AWS What's New ·
- Amazon S3 Tables add Variant type for Apache Iceberg V3 AWS What's New ·
- AWS Glue Data Quality Adds Distribution Statistics for Data Profiling AWS What's New ·