HashiCorp Terraform AWS Provider v6.65.0 Adds New Resources and Enhancements
Version 6.65.0 of the Terraform AWS Provider introduces numerous new list and standard resources, expanding coverage for services like API Gateway, DMS, EC2 Transit Gateway, Glue, IAM, Lambda, Network ACLs, RDS, and WAFv2. This update enables users to manage a broader range of AWS configurations programmatically using infrastructure as code. Key enhancements include expanded attributes for Agent Registry and Bedrock Agent Core, alongside `bgp_asn_long` for Direct Connect BGP peers, enhancing flexibility and control. The release primarily affects engineers and architects managing AWS infrastructure with Terraform, offering more granular control over AWS services.
- →New List Resource: aws_api_gateway_deployment
- →New List Resource: aws_apigatewayv2_integration
- →New List Resource: aws_dms_migration_project
- →New List Resource: aws_ec2_transit_gateway_policy_table_entry
- →New List Resource: aws_glue_catalog_table
Features (15) ›
- aws_api_gateway_deployment New List Resource: aws_api_gateway_deployment
- aws_apigatewayv2_integration New List Resource: aws_apigatewayv2_integration
- aws_dms_migration_project New List Resource: aws_dms_migration_project
- aws_ec2_transit_gateway_policy_table_entry New List Resource: aws_ec2_transit_gateway_policy_table_entry
- aws_glue_catalog_table New List Resource: aws_glue_catalog_table
- aws_iam_group New List Resource: aws_iam_group
- aws_iam_user_policy New List Resource: aws_iam_user_policy
- aws_lambda_resource_policy New List Resource: aws_lambda_resource_policy
- aws_network_acl New List Resource: aws_network_acl
- aws_network_acl_rule New List Resource: aws_network_acl_rule
- aws_rds_cluster_instance New List Resource: aws_rds_cluster_instance
- aws_wafv2_ip_set New List Resource: aws_wafv2_ip_set
- aws_dms_migration_project New Resource: aws_dms_migration_project
- aws_ec2_transit_gateway_policy_table_entry New Resource: aws_ec2_transit_gateway_policy_table_entry
- aws_lambda_resource_policy New Resource: aws_lambda_resource_policy
Enhancements (26) ›
- aws_agentregistry_registry
Add discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint and discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint_override attributes
- aws_agentregistry_registry Add encryption_configuration attribute
- aws_agentregistry_registry Add auto_detection_configuration and encryption_configuration configuration blocks
- aws_agentregistry_registry
Add discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint and discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint_override configuration blocks
- aws_api_gateway_deployment Add resource identity support
- aws_apigatewayv2_integration Add resource identity support
- aws_bedrockagentcore_oauth2_credential_provider Add callback_url attribute
- aws_bedrockagentcore_oauth2_credential_provider
Add client_authentication_method, on_behalf_of_token_exchange_config, private_endpoint, private_endpoint_override, and private_key_jwt_config arguments to oauth2_provider_config.custom_oauth2_provider_config configuration block
- aws_bedrockagentcore_oauth2_credential_provider
Add client_secret_config and client_secret_source arguments to oauth2_provider_config.custom_oauth2_provider_config, oauth2_provider_config.github_oauth2_provider_config, oauth2_provider_config.google_oauth2_provider_config, oauth2_provider_config.microsoft_oauth2_provider_config, oauth2_provider_config.salesforce_oauth2_provider_config, and oauth2_provider_config.slack_oauth2_provider_config configuration blocks
- aws_bedrockagentcore_oauth2_credential_provider
Add oauth2_provider_config.atlassian_oauth2_provider_config, oauth2_provider_config.included_oauth2_provider_config, and oauth2_provider_config.linkedin_oauth2_provider_config configuration blocks
- aws_bedrockagentcore_oauth2_credential_provider
Add oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id, oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id_wo, and oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id_wo_version arguments
- aws_bedrockagentcore_oauth2_credential_provider Add token_endpoint_auth_methods attribute to all oauth2_provider_config.*.oauth_discovery configuration blocks
- aws_dx_bgp_peer Add bgp_asn_long argument
- aws_dx_hosted_private_virtual_interface Add bgp_asn_long argument
- aws_dx_hosted_public_virtual_interface Add bgp_asn_long argument
- aws_dx_hosted_transit_virtual_interface Add bgp_asn_long argument
- aws_dx_public_virtual_interface Add bgp_asn_long argument
- aws_glue_catalog_table Add resource identity support
- aws_glue_catalog_table
Change storage_descriptor.additional_locations, storage_descriptor.bucket_columns, storage_descriptor.columns.parameters, storage_descriptor.parameters, storage_descriptor.ser_de_info, storage_descriptor.ser_de_info.parameters, view_definition, view_definition.definer, view_definition.is_protected, view_definition.representations.validation_connection, view_definition.representations.view_expanded_text, view_definition.representations.view_original_text, view_definition.sub_object_version_ids, and view_definition.sub_objects to Optional and Computed
- aws_iam_group Add resource identity support
- aws_iam_user_policy Add resource identity support
- aws_mailmanager_ingress_point Add status_to_update argument
- aws_network_acl Add resource identity support
- aws_network_acl_rule Remove filtering of default Ipv4 and Ipv6 rules from list
- aws_rds_cluster_instance Add resource identity support
- aws_wafv2_ip_set Add Resource Identity support
Fixes (8) ›
- aws_agentregistry_registry
Correct attribute validation so that at least one of discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_audience, discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_clients, or discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_scopes is configured
- aws_amplify_app Fix BadRequestException: Environment variables cannot have an empty key when clearing auto_branch_creation_config.environment_variables
- aws_amplify_branch Fix BadRequestException: Environment variables cannot have an empty key when clearing environment_variables
- aws_bedrockagent_data_source
Change data_source_configuration.managed_knowledge_base_connector_configuration.deletion_protection_configuration.deletion_protection_threshold to Optional and Computed
- aws_mailmanager_traffic_policy Make policy_statement optional
- aws_secretsmanager_secret Fix removal of all replica blocks not being detected as a change
- aws_wafv2_rule_group
Fix field_to_match.single_header.name and field_to_match.single_query_argument.name rejecting values the AWS WAF API accepts, such as names containing
- aws_wafv2_web_acl
Fix field_to_match.single_header.name and field_to_match.single_query_argument.name rejecting values the AWS WAF API accepts, such as names containing
Notes (5) ›
- aws_dx_bgp_peer Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_dx_hosted_private_virtual_interface Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_dx_hosted_public_virtual_interface Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_dx_hosted_transit_virtual_interface Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
- aws_dx_public_virtual_interface Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.65.0
Related releases
- Architecting a Secure Landing Zone in the AWS European Sovereign Cloud AWS Security Blog ·
- Amazon Connect Customer enables API management for custom metrics AWS What's New ·
- Amazon Connect Custom Metrics Now Support Tag-Based Access Control AWS What's New ·
- Amazon WorkSpaces adds support for NVIDIA Blackwell GPU instances AWS What's New ·
- AWS Client VPN Adds Support for macOS 27 Golden Gate AWS What's New ·
- AWS launches simplified experience for faster project setup and deployment AWS What's New ·