Merge branch 'main' into HEAD

# Conflicts:
#	internal/service/rds/cluster_test.go

Author: ewbankkit

.actrc

@@ -2,3 +2,4 @@
 # The `full` variants are needed for Maven for TeamCity configuration validation
 -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
 -P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/34474.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```
+
+```release-note:enhancement
+data-source/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```

.changelog/35003.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_certificate
+```

.changelog/35168.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkfirewall_tls_inspection_configuration
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add plan-time validation of `firewall_arn`
+```

.changelog/35722.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkmonitor_monitor
+```
+
+```release-note:new-resource
+aws_networkmonitor_probe
+```

.changelog/36286.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iot_topic_rule: Retry IAM eventual consistency errors on Update
+```

.changelog/36301.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_control
+```

.changelog/36423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: Use the configured `ip_address_type` value when `target_type` is `instance`
+```

.changelog/36568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_api_key: Add `api_key_id` attribute
+```

.changelog/36754.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add configurable timeouts
+```
+
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Retry `InsufficientInstanceCapacity` errors
+```

.changelog/36772.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `cloudwatch_logs.batch_mode` and `error_action.cloudwatch_logs.batch_mode` arguments
+```

.changelog/36830.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_account_subscription: Add `iam_identity_center_instance_arn` attribute
+```

.changelog/36900.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `experiment_options` configuration block
+```

.changelog/36902.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_peering_attachment: Add `options` argument
+```

.changelog/36962.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_applicationinsights_application: Change `resource_group_name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```
+
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_session: Mark `packet_length` as Computed
+```

.changelog/36966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_network_insights_path: Mark `destination` as Optional
+```

.changelog/36968.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_replicator: Add `starting_position` argument
+```

.changelog/37082.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_target_group: Add `target_group_health` configuration block
+```

.changelog/37105.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_amplify_domain_association: Add `certificate_settings` argument
+```

.changelog/37108.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `ca_certificate_identifier` argument and `ca_certificate_valid_till` attribute
+```

.changelog/37127.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_capacity_reservation: Fix `InvalidCapacityReservationId.NotFound` errors during Read and Delete when resource is manually deleted
+```

.changelog/37139.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_user_profile: Add `user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```

.changelog/37142.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_launch_template: Add `network_interfaces.primary_ipv6` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `network_interfaces.primary_ipv6` attribute
+```

.changelog/37152.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_iot_authorizer: Add `tags` argument
+```
+
+```release-note:bug
+resource/aws_iot_provisioning_template: Fix `pre_provisioning_hook` update operation
+```

.changelog/37153.txt

@@ -0,0 +1,8 @@
+
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.code_editor_app_settings.custom_image` configuration block
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_user_profile: Add `user_settings.code_editor_app_settings.custom_image` configuration block
+```

.changelog/37174.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_autoscaling_group: Fix bug updating `warm_pool.max_group_prepared_capacity` to `0`
+```
+
+```release-note:enhancement
+resource/aws_autoscaling_group: Add plan-time validation of `warm_pool.max_group_prepared_capacity` and `warm_pool.min_size`
+```

.changelog/37226.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_endpoint: Add `subnet_configuration` argument to support user defined IP addresses
+```

.changelog/37237.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_opensearch_domain: Add `ip_address_type` argument
+```
+
+```release-note:enhancement
+data-source/aws_opensearch_domain: Add `ip_address_type` argument
+```

.changelog/37242.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_route53_resolver_firewall_rule: Add `firewall_domain_redirection_action` argument
+```

.changelog/37291.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_ingestion
+```

.changelog/37317.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_pipeline: Add `execution_role` and `workflow` arguments
+```

.changelog/37348.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_lb_listener: Correctly set `default_action.target_group_arn`
+```

.changelog/37399.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cognito_user_pool
+```

.changelog/37468.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_app_authorization
+```

.changelog/37528.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_ec2_capacity_block_reservation
+```
+
+```release-note:new-data-source
+aws_ec2_capacity_block_offering
+```
+
+```release-note:note
+resource/aws_ec2_capacity_block_reservation: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
+```

.changelog/37542.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_app_bundle
+```

.changelog/37627.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appfabric_ingestion_destination
+```

.changelog/37716.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_docdb_cluster: Add `restore_to_point_in_time` argument
+```

.changelog/37726.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add support for `InputAndOutput` in `capture_mode`
+```

.changelog/37748.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_codebuild_project: Fix unsetting `concurrent_build_limit`
+```

.changelog/37760.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_job: Add `maintenance_window` argument
+```

.changelog/37767.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_fms_resource_set
+```

.changelog/37890.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_backup_plan: Add `rule` attribute
+```

.changelog/37891.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_glue_catalog_table: Add `additional_locations` argument in `storage_descriptor`
+```
+
+```release-note:enhancement
+data-source/aws_glue_catalog_table: Add `additional_locations` argument in `storage_descriptor`
+```

.changelog/37893.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route53_zone: Fix `InvalidInput: 1 validation error detected: Value '...' at 'resourceId' failed to satisfy constraint: Member must have length less than or equal to 32` errors for resources imported with a `/hostedzone/` prefix
+```

.changelog/37898.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set_instance: Extend `deployment_targets` argument.
+```
+
+```release-note:bug
+resource/aws_cloudformation_stack_set_instance: Add `ForceNew` to deployment_targets attributes to ensure a new resource is recreated when the deployment_targets argument is changed, which was not the case previously.
+```

.changelog/37902.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+service/apigatewayv2: Retry on `ConflictException: Unable to complete operation due to concurrent modification` errors
+```

.changelog/37919.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_guardduty_malware_protection_plan
+```

.changelog/37924.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_dynamodb_table: Fix `UnknownOperationException: Tagging is not currently supported in DynamoDB Local` errors on resource Read
+```

.changelog/37932.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_cluster: Add `configuration.managed_storage_configuration` argument
+```

.changelog/37958.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_ami: Fix query returning no results
+```

.changelog/37966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Fixes an error where some data sources were not returning `tags`
+```

.changelog/37970.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_codebuild_project: Increase maximum values of `build_batch_config.timeout_in_mins` and `build_timeout` from `480` (8 hours) to `2160` (36 hours)
+```

.changelog/37977.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_ami: Fix `interface conversion: interface {} is types.ProductCodeValues, not string` panic
+```

.changelog/37980.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_event_source_mapping: Remove the upper limit on `scaling_config.maximum_concurrency`
+```

.changelog/37991.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_dynamodb_table: Fixes perpetual diff when `ttl.attribute_name` is set when `ttl.enabled` is not set.
+```
+
+```release-note:enhancement
+resource/aws_dynamodb_table: Adds validation for `ttl` values.
+```

.changelog/38003.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_launch_template: Add `instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+resource/aws_ec2_fleet: Add `launch_template_config.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+resource/aws_autoscaling_group: Add `mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` argument
+```
+
+```release-note:enhancement
+data-source/aws_autoscaling_group: Add `mixed_instances_policy.launch_template.override.instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` attribute
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `instance_requirements.max_spot_price_as_percentage_of_optimal_on_demand_price` attribute
+```

.changelog/38010.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_api_gateway_integration: Increase maximum value of `timeout_milliseconds` from `29000` (29 seconds) to `300000` (5 minutes)
+```

.changelog/38011.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+service/transitgateway: Fix resource Read pagination regression causing `NotFound` errors
+```

.changelog/38013.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `attachment_policies.action.add_to_network_function_group` argument
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `send-via` and `send-to` as valid values for `segment_actions.action`
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `single-hop` and `dual-hop` as valid values for `segment_actions.mode`
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `when_sent_to` and `via` configuration blocks to `segment_actions`
+```
+
+```release-note:bug
+data-source/aws_networkmanager_core_network_policy_document: Add correct `except` values to the returned JSON document when `segment_actions.share_with_except` is configured
+```
+
+```release-note:enhancement
+data-source/aws_networkmanager_core_network_policy_document: Add `network_function_groups` configuration block
+```

.changelog/38057.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Now falls back to non-FIPS endpoint if `use_fips_endpoint` is set and no FIPS endpoint is available
+```

.changelog/38067.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_ecs_service: Correctly set `tags`
+```