HashiCorp Terraform AWS Provider v6.62.0 Adds New Resources and Enhancements
The HashiCorp Terraform AWS Provider v6.62.0 introduces several new resources, including List Resources for DB Instance, DSQL Cluster, ECR Lifecycle Policy, and ECS Cluster, alongside new resources for Pinpoint SMS Voice v2 Keywords and SESv2 Multi-Region Endpoints. This release allows users to disable automatic rotation for Secrets Manager secrets managed by RDS DB instances and clusters. Additionally, it brings numerous enhancements, such as improved plan-time validation for CloudFront Functions and updates to Bedrock Agent Core resources. These updates benefit engineers and architects managing AWS infrastructure as code, offering expanded control and better configuration validation.
- →New List Resource: aws_db_instance
- →New List Resource: aws_dsql_cluster
- →New List Resource: aws_dsql_cluster_policy
- →New List Resource: aws_ecr_lifecycle_policy
- →New List Resource: aws_ecs_cluster
Features (8) ›
- aws_db_instance New List Resource: aws_db_instance
- aws_dsql_cluster New List Resource: aws_dsql_cluster
- aws_dsql_cluster_policy New List Resource: aws_dsql_cluster_policy
- aws_ecr_lifecycle_policy New List Resource: aws_ecr_lifecycle_policy
- aws_ecs_cluster New List Resource: aws_ecs_cluster
- aws_pinpointsmsvoicev2_keyword New List Resource: aws_pinpointsmsvoicev2_keyword
- aws_pinpointsmsvoicev2_keyword New Resource: aws_pinpointsmsvoicev2_keyword
- aws_sesv2_multi_region_endpoint New Resource: aws_sesv2_multi_region_endpoint
Enhancements (22) ›
- aws_resiliencehubv2_service Add associated_system.user_journey_ids attribute
- aws_bedrockagentcore_browser Add plan-time validation of name
- aws_bedrockagentcore_memory Add Resource Identity support
- aws_bedrockagentcore_memory Allow adding indexed_key entries in place instead of forcing a new resource
- aws_bedrockagentcore_memory Change indexed_key from List to Set to ignore ordering
- aws_bedrockagentcore_memory_strategy Add Resource Identity support
- aws_bedrockagentcore_memory_strategy Add configuration.self_managed_configuration argument in support of self-managed strategies
- aws_bedrockagentcore_memory_strategy Add memory_record_schema argument
- aws_bedrockagentcore_memory_strategy Add plan-time validation of description
- aws_bedrockagentcore_memory_strategy Change description to Optional and Computed
- aws_cloudfront_function Validate name, code, and comment against CloudFront's documented constraints during plan instead of failing at apply time
- aws_db_instance Add resource identity support
- aws_dsql_cluster Add resource identity support
- aws_dx_private_virtual_interface Add bgp_asn_long argument
- aws_dx_transit_virtual_interface Add bgp_asn_long argument
- aws_ecs_cluster Add resource identity support
- aws_elasticache_replication_group Add auth_token_wo and auth_token_wo_version write-only arguments
- aws_observabilityadmin_centralization_rule_for_organization
Add tag_propagation_configuration configuration block to rule.destination.destination_logs_configuration, and tag_propagation_status and tag_propagation_failure_reason attributes
- aws_resiliencehubv2_service Add user_journey_ids argument to the associated_system configuration block
- aws_secretsmanager_secret_rotation
rotation_enabled is now configurable (previously read-only) and can be set to false to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with manage_master_user_password
- aws_secretsmanager_secret_rotation rotation_rules is now optional, and must be omitted when rotation_enabled is false
- aws_workspaces_directory Add workspace_access_properties.access_endpoint_config argument
Fixes (12) ›
- aws_bedrockagentcore_harness Correct plan-time validation of name
- aws_bedrockagentcore_memory_strategy Force resource replacement when name is modified
- aws_bedrockagentcore_registry Correct plan-time validation of name
- aws_cloudwatch_log_resource_policy Fixes error when importing by identity when using resource-scope
- aws_elasticache_cluster
Add plan-time validation to reject transit_encryption_enabled for Redis and Valkey engines, which are only supported on aws_elasticache_replication_group
- aws_resiliencehubv2_input_source Change resource_configuration.resource_tag from List to Set to ignore ordering
- aws_s3_account_public_access_block Fixes eventual consistency issue on creation
- aws_savingsplan_savings_plan Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_savingsplan_savings_plan Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_savingsplan_savings_plan Mark purchase_time as Optional and Computed
- aws_savingsplan_savings_plan Treat queued as a target state during creation
- aws_savingsplans_savings_plan Mark upfront_payment_amount as Computed to fix a Provider produced inconsistent result after apply error for No Upfront savings plans
Notes (3) ›
- aws_db_instance
When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false
- aws_rds_cluster
When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false
- aws_savingsplans_savings_plan Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.62.0
Related releases
- Amazon RDS for SQL Server Adds Support for Latest Cumulative Updates AWS What's New ·
- Amazon RDS for Oracle Now Supports July 2026 Release Update AWS What's New ·
- Amazon RDS for PostgreSQL now supports recent minor versions AWS What's New ·
- Amazon RDS for MySQL Adds Support for Minor Version 8.4.11 AWS What's New ·
- AWS ARC Region switch adds automated RDS Oracle Data Guard failover block AWS What's New ·
- CloudWatch Pipelines Adds GeoIP, RDS, and XML Processors AWS What's New ·