Prerelease/5.x to main

.changelog/24005.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecs_capacity_provider: Allow an `instance_warmup_period` of `0` in the `auto_scaling_group_provider.managed_scaling` configuration block
+```

.changelog/25233.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_cloudwatch_event_target: The `ecs_target.propagate_tags` attribute now has no default value
+```

.changelog/28539.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+data-source/aws_iam_policy_document: Don't add empty `statement.sid` values to `json` attribute value
+```

.changelog/29409.txt

@@ -0,0 +1,24 @@
+```release-note:breaking-change
+resource/aws_rds_cluster: `snapshot_identifier` change now properly forces replacement
+```
+
+```release-note:breaking-change
+resource/aws_docdb_cluster: `snapshot_identifier` change now properly forces replacement
+```
+
+```release-note:breaking-change
+resource/aws_neptune_cluster: `snapshot_identifier` change now properly forces replacement
+```
+
+```release-note:note
+resource/aws_rds_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot.
+```
+
+```release-note:note
+resource/aws_docdb_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot.
+```
+
+```release-note:note
+resource/aws_neptune_cluster: Changes to the `snapshot_identifier` attribute will now trigger a replacement, rather than an in-place update. This corrects the previous behavior which resulted in a successful apply, but did not actually restore the cluster from the designated snapshot.
+```
+

.changelog/29555.txt

@@ -0,0 +1,2 @@
+```release-note:note
+resource/aws_eks_addon: The `resolve_conflicts` argument has been deprecated. Use the `resolve_conflicts_on_create` and/or `resolve_conflicts_on_update` arguments instead

.changelog/30374.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_ce_anomaly_subscription: The `threshold` attribute has been removed
+```

.changelog/30452.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_dms_endpoint: `s3_settings.ignore_headers_row` has been removed
+```

.changelog/30736.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_guardduty_organization_configuration: Add `auto_enable_organization_members` attribute
+```
+
+```release-note:note
+resource/aws_guardduty_organization_configuration: The `auto_enable` argument has been deprecated. Use the `auto_enable_organization_members` argument instead.
+ ```

.changelog/30793.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+provider: Duplicate `default_tags` can now be included and will be overwritten by resource `tags`
+```
+
+```release-note:enhancement
+provider: Allow `default_tags` and resource `tags` to include zero values `""`
+```
+
+```release-note:enhancement
+provider: Allow `computed` `tags` on resources
+```

.changelog/30804.txt

@@ -0,0 +1,16 @@
+
+```release-note:note
+resource/aws_route: Since `instance_id` can no longer be set in configurations, use `network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`.
+```
+
+```release-note:breaking-change
+resource/aws_route: `instance_id` can no longer be set in configurations. Use `network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`.
+```
+
+```release-note:note
+resource/aws_route_table: Since `route.*.instance_id` can no longer be set in configurations, use `route.*.network_interface_id` instead. For example, set `network_interface_id` to `aws_instance.test.primary_network_interface_id`.
+```
+
+```release-note:breaking-change
+resource/aws_route_table: `route.*.instance_id` can no longer be set in configurations. Use `route.*.network_interface_id` instead, for example, setting `network_interface_id` to `aws_instance.test.primary_network_interface_id`.
+```

.changelog/30828.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+resource/aws_autoscaling_attachment: `alb_target_group_arn` has been removed -- use `lb_target_group_arn` instead
+```
+
+```release-note:note
+resource/aws_autoscaling_attachment: Update configurations to use `lb_target_group_arn` instead of `alb_target_group_arn` which has been removed
+```

.changelog/30829.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+    data-source/aws_iam_policy_document: `source_json` and `override_json` have been removed -- use `source_policy_documents` and `override_policy_documents`, respectively, instead
+ ```
+
+ ```release-note:note
+ data-source/aws_iam_policy_document: Update configurations to use `source_policy_documents` and `override_policy_documents` instead of `source_json` and `override_json`, respectively, which have been removed
+ ```

.changelog/30842.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_autoscaling_group: Remove deprecated `tags` attribute
+```

.changelog/30875.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+resource/aws_networkmanager_core_network: Removed `policy_document` argument -- use `aws_networkmanager_core_network_policy_attachment` resource instead
+```
+
+```release-note:note
+resource/aws_networkmanager_core_network: Update configurations to use the `aws_networkmanager_core_network_policy_attachment` resource instead of the `policy_document` argument
+```

.changelog/30966.txt

@@ -0,0 +1,87 @@
+```release-note:breaking-change
+provider: With the retirement of EC2-Classic the `aws_db_security_group` resource has been removed
+```
+
+```release-note:breaking-change
+provider: With the retirement of EC2-Classic the `aws_elasticache_security_group` resource has been removed
+```
+
+```release-note:breaking-change
+provider: With the retirement of EC2-Classic the `aws_redshift_security_group` resource has been removed
+```
+
+```release-note:breaking-change
+resource/aws_db_instance: With the retirement of EC2-Classic the `security_group_names` attribute has been removed
+```
+
+```release-note:breaking-change
+data-source/aws_db_instance: With the retirement of EC2-Classic the `db_security_groups` attribute has been removed
+```
+
+```release-note:breaking-change
+resource/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed
+```
+
+```release-note:breaking-change
+data-source/aws_elasticache_cluster: With the retirement of EC2-Classic the `security_group_names` attribute has been removed
+```
+
+```release-note:breaking-change
+resource/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed
+```
+
+```release-note:breaking-change
+data-source/aws_redshift_cluster: With the retirement of EC2-Classic the `cluster_security_groups` attribute has been removed
+```
+
+```release-note:breaking-change
+resource/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed
+```
+
+```release-note:breaking-change
+data-source/aws_launch_configuration: With the retirement of EC2-Classic the `vpc_classic_link_id` and `vpc_classic_link_security_groups` attributes have been removed
+```
+
+```release-note:breaking-change
+resource/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed
+```
+
+```release-note:breaking-change
+resource/aws_vpc_peering_connection_accepter: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed
+```
+
+```release-note:breaking-change
+resource/aws_vpc_peering_connection_options: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed
+```
+
+```release-note:breaking-change
+data-source/aws_vpc_peering_connection: With the retirement of EC2-Classic the `allow_classic_link_to_remote_vpc` and `allow_vpc_to_remote_classic_link` attributes have been removed
+```
+
+```release-note:bug
+resource/aws_vpc_peering_connection: Fix crash in `vpcPeeringConnectionOptionsEqual`
+```
+
+```release-note:breaking-change
+resource/aws_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed
+```
+
+```release-note:breaking-change
+resource/aws_default_vpc: With the retirement of EC2-Classic the `enable_classiclink` and `enable_classiclink_dns_support` attributes have been removed
+```
+
+```release-note:breaking-change
+resource/aws_eip: With the retirement of EC2-Classic the `standard` domain is no longer supported
+```
+
+```release-note:breaking-change
+resource/aws_eip_association: With the retirement of EC2-Classic the `standard` domain is no longer supported
+```
+
+```release-note:breaking-change
+resource/aws_security_group: With the retirement of EC2-Classic non-VPC security groups are no longer supported
+```
+
+```release-note:breaking-change
+resource/aws_security_group_rule: With the retirement of EC2-Classic non-VPC security groups are no longer supported
+```

.changelog/30969.txt

@@ -0,0 +1,11 @@
+```release-note:breaking-change
+resource/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed.
+```
+
+```release-note:breaking-change
+data-source/aws_api_gateway_rest_api: `minimum_compression_size` is now a string type to allow values set via the `body` attribute to be properly computed.
+```
+
+```release-note:note
+resource/aws_api_gateway_rest_api: Update configurations with `minimum_compression_size` set to pass the value as a string. Valid values remain the same.
+```

.changelog/31006.txt

@@ -0,0 +1,3 @@
+```release-note:note
+data-source/aws_db_security_group: The `aws_redshift_service_account` data source has been deprecated and will be removed in a future version. AWS documentation [states that](https://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-bucket-permissions) a [service principal name](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) should be used instead of an AWS account ID in any relevant IAM policy
+```

.changelog/31008.txt

@@ -0,0 +1,35 @@
+```release-note:breaking-change
+resource/aws_elasticache_replication_group: Remove `availability_zones`, `number_cache_clusters`, `replication_group_description` arguments -- use `preferred_cache_cluster_azs`, `num_cache_clusters`, and `description`, respectively, instead
+```
+
+```release-note:breaking-change
+resource/aws_elasticache_replication_group: Remove `cluster_mode` configuration block -- use top-level `num_node_groups` and `replicas_per_node_group` instead
+```
+
+```release-note:note
+resource/aws_elasticache_replication_group: Update configurations to use `preferred_cache_cluster_azs` instead of the `availability_zones` argument
+```
+
+```release-note:note
+resource/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument
+```
+
+```release-note:note
+resource/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument
+```
+
+```release-note:note
+resource/aws_elasticache_replication_group: Update configurations to use top-level `num_node_groups` and `replicas_per_node_group` instead of `cluster_mode.0.num_node_groups` and `cluster_mode.0.replicas_per_node_group`, respectively
+```
+
+```release-note:breaking-change
+data-source/aws_elasticache_replication_group: Remove `number_cache_clusters`, `replication_group_description` arguments -- use `num_cache_clusters`, and `description`, respectively, instead
+```
+
+```release-note:note
+data-source/aws_elasticache_replication_group: Update configurations to use `num_cache_clusters` instead of the `number_cache_clusters` argument
+```
+
+```release-note:note
+data-source/aws_elasticache_replication_group: Update configurations to use `description` instead of the `replication_group_description` argument
+```

.changelog/31034.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_medialive_multiplex_program: The `statemux_settings` attribute has been removed. Use `statmux_settings` argument instead
+```

.changelog/31058.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+provider: With the retirement of Macie Classic the `aws_macie_member_account_association` resource has been removed
+```
+
+```release-note:breaking-change
+provider: With the retirement of Macie Classic the `aws_macie_s3_bucket_association` resource has been removed
+```

.changelog/31061.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_servicecatalog_product: Changes to `provisioning_artifact_parameters` arguments now properly trigger a replacement
+```
+
+```release-note:breaking-change
+resource/aws_servicecatalog_product: Changes to any `provisioning_artifact_parameters` arguments now properly trigger a replacement. This fixes incorrect behavior, but may technically be breaking for configurations expecting non-functional in-place updates.
+```

.changelog/31084.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_acmpca_certificate_authority: The `status` attribute has been removed
+```

.changelog/31112.txt

@@ -0,0 +1,15 @@
+```release-note:breaking-change
+resource/aws_rds_cluster: The `engine` argument is now required and has no default
+```
+
+```release-note:note
+resource/aws_rds_cluster: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster
+```
+
+```release-note:breaking-change
+resource/aws_rds_cluster_instance: The `engine` argument is now required and has no default
+```
+
+```release-note:note
+resource/aws_rds_cluster_instance: Configurations not including the `engine` argument must be updated to include `engine` as it is now required. Previously, not including `engine` was equivalent to `engine = "aurora"` and created a MySQL-5.6-compatible cluster instance
+```

.changelog/31138.txt

@@ -0,0 +1,11 @@
+```release-note:breaking-change
+resource/aws_kinesis_firehose_delivery_stream: Remove `s3` as an option for `destination`. Use `extended_s3` instead
+```
+
+```release-note:breaking-change
+resource/aws_kinesis_firehose_delivery_stream: Remove `s3_configuration` attribute from the root of the resource. `s3_configuration` is now a part of the following blocks: `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration`
+```
+
+```release-note:enhancement
+resource/aws_kinesis_firehose_delivery_stream: Add `s3_configuration` to `elasticsearch_configuration`, `opensearch_configuration`, `redshift_configuration`, `splunk_configuration`, and `http_endpoint_configuration`
+```

.changelog/31140.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+provider: The `aws_subnet_ids` data source has been removed
+```

.changelog/31141.txt

@@ -0,0 +1,11 @@
+```release-note:breaking-change
+resource/aws_kinesis_firehose_delivery_stream: Rename `s3_configuration.0.buffer_size` and `s3_configuration.0.buffer_internval` to `s3_configuration.0.buffering_size` and `s3_configuration.0.buffering_internval`, respectively
+```
+
+```release-note:breaking-change
+resource/aws_kinesis_firehose_delivery_stream: Rename `redshift_configuration.0.s3_backup_configuration.0.buffer_size` and `redshift_configuration.0.s3_backup_configuration.0.buffer_interval` to `redshift_configuration.0.s3_backup_configuration.0.buffering_size` and `redshift_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively
+```
+
+```release-note:breaking-change
+resource/aws_kinesis_firehose_delivery_stream: Rename `extended_s3_configuration.0.s3_backup_configuration.0.buffer_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffer_interval` to `extended_s3_configuration.0.s3_backup_configuration.0.buffering_size` and `extended_s3_configuration.0.s3_backup_configuration.0.buffering_interval`, respectively
+```

.changelog/31155.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+provider: The `assume_role.duration_seconds`, `assume_role_with_web_identity.duration_seconds`, `s3_force_path_style`, `shared_credentials_file` and `skip_get_ec2_platforms` attributes have been removed
+```

.changelog/31162.txt

@@ -0,0 +1,7 @@
+```release-note:note
+data-source/aws_service_discovery_service: The `tags_all` attribute has been deprecated and will be removed in a future version
+```
+
+```release-note:note
+data-source/aws_quicksight_data_set: The `tags_all` attribute has been deprecated and will be removed in a future version
+```

.changelog/31223.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+resource/aws_ec2_client_vpn_endpoint: The `status` attribute has been removed
+```
+
+```release-note:breaking-change
+resource/aws_ec2_client_vpn_network_association: The `status` attribute has been removed
+```

.changelog/31312.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+data-source/aws_identitystore_group: The `filter` argument has been removed
+```
+
+```release-note:breaking-change
+data-source/aws_identitystore_user: The `filter` argument has been removed
+```

.changelog/31324.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_msk_cluster: The `broker_node_group_info.ebs_volume_size` attribute has been removed
+```

.changelog/31346.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+resource/aws_ecs_cluster: The `capacity_providers` and `default_capacity_provider_strategy` attributes have been removed
+```

.changelog/31374.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+resource/aws_wafv2_web_acl: The `statement.managed_rule_group_statement.excluded_rule` and `statement.rule_group_reference_statement.excluded_rule` attributes have been removed
+```
+
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Support `rule_action_override` on `rule_group_reference_statement`
+```

.changelog/31376.txt

@@ -0,0 +1,7 @@
+```release-note:breaking-change
+resource/aws_connect_routing_profile: The `queue_configs_associated` attribute has been removed
+```
+
+```release-note:breaking-change
+resource/aws_connect_queue: The `quick_connect_ids_associated` attribute has been removed
+```