ReleaseBytes
aws Terraform AWS Provider Releases · · 6.47.0

Terraform AWS Provider v6.47.0: New Resources, Enhancements, and Bug Fixes

terraforminfraawsdeprecation
feature patch

HashiCorp's Terraform AWS provider has been updated to version 6.47.0, introducing several new resources for AWS Bedrock Agent Core and S3 Control, alongside numerous enhancements and bug fixes. Key updates include additions for managing S3 multi-region access points and Bedrock agent configurations, plus deprecations for 'id' attributes in favor of more specific field names across several data sources. These changes primarily impact engineers and architects managing AWS infrastructure via Terraform, offering more granular control and improved consistency.

  • →New List Resource: aws_bedrockagentcore_online_evaluation_config
  • →New List Resource: aws_bedrockagentcore_policy_engine
  • →New List Resource: aws_bedrockagentcore_resource_policy
  • →New List Resource: aws_s3control_multi_region_access_point
  • →New List Resource: aws_s3control_multi_region_access_point_routes
Features (9) ›
  • aws_bedrockagentcore_online_evaluation_config New List Resource: aws_bedrockagentcore_online_evaluation_config
    #47209
  • aws_bedrockagentcore_policy_engine New List Resource: aws_bedrockagentcore_policy_engine
    #47108
  • aws_bedrockagentcore_resource_policy New List Resource: aws_bedrockagentcore_resource_policy
    #46844
  • aws_s3control_multi_region_access_point New List Resource: aws_s3control_multi_region_access_point
    #48081
  • aws_s3control_multi_region_access_point_routes New List Resource: aws_s3control_multi_region_access_point_routes
    #48081
  • aws_bedrockagentcore_online_evaluation_config New Resource: aws_bedrockagentcore_online_evaluation_config
    #47209
  • aws_bedrockagentcore_policy_engine New Resource: aws_bedrockagentcore_policy_engine
    #47108
  • aws_bedrockagentcore_resource_policy New Resource: aws_bedrockagentcore_resource_policy
    #46844
  • aws_s3control_multi_region_access_point_routes New Resource: aws_s3control_multi_region_access_point_routes
    #47994
Enhancements (28) ›
  • aws_arn Deprecates id in favor of arn
    #48036
  • aws_default_tags Deprecates id
    #48036
  • aws_ip_ranges Deprecates id
    #48036
  • aws_partition Deprecates id in favor of partition
    #48036
  • aws_region Deprecates id in favor of region
    #48036
  • aws_regions Deprecates id
    #48036
  • aws_route Add odb_network_arn attribute
    #48027
  • aws_route_table Add routes.odb_network_arn attribute
    #48027
  • aws_secretsmanager_secret_version Deprecates arn in favor of secret_arn
    #48011
  • aws_secretsmanager_secret_versions Deprecates arn in favor of secret_arn
    #48033
  • aws_secretsmanager_secret_versions Deprecates name in favor of secret_name
    #48033
  • aws_service Deprecates id in favor of reverse_dns_name
    #48036
  • aws_transfer_server Add ip_address_type attribute
    #48039
  • aws_acm_certificate Add private_key_wo write-only argument and private_key_wo_version argument
    #44414
  • aws_arcregionswitch_plan Add step.rds_promote_read_replica_config, step.rds_create_cross_region_read_replica_config, and report_configuration arguments
    #46965
  • aws_eks_cluster Add CGNAT IP address ranges as valid private range
    #47988
  • aws_eks_cluster Make remote_node_networks field in remote_network_config optional
    #47988
  • aws_eks_cluster Remove conflict between outpost_config and remote_network_config
    #47988
  • aws_msk_replicator Add support for log_delivery configuration block
    #48054
  • aws_quicksight_data_source Add parameters.athena.role_arn argument to allow override an account-wide role for a specific Athena data source
    #44666
  • aws_route Add odb_network_arn argument
    #48027
  • aws_route Add plan-time validation of core_network_arn
    #48027
  • aws_route_table Add route.odb_network_arn argument
    #48027
  • aws_route_table Add plan-time validation of route.core_network_arn
    #48027
  • aws_s3control_multi_region_access_point Add resource identity support
    #48081
  • aws_secretsmanager_secret_version Deprecates arn in favor of secret_arn
    #48011
  • aws_ssm_resource_data_sync Add s3_destination.destination_data_sharing argument
    #21996
  • aws_transfer_server Add ip_address_type argument
    #48039
Fixes (8) ›
  • aws_secretsmanager_secret_versions Polulates versions.*.last_accessed_date
    #48033
  • provider

    Fix lifecycle.ignore_changes for individual tags elements being bypassed when another tag in the same map is updated to an empty string, to avoid overwriting any out-of-band changes the lifecycle block was meant to preserve

    #48008
  • aws_dynamodb_table Ensure diffs are shown for GSI hash key type changes
    #47867
  • aws_eks_cluster Change securityGroupIds logic in flattenVPCConfigResponse() for Outpost clusters
    #47988
  • aws_instance

    Fix lifecycle.ignore_changes for individual tags elements being bypassed when another tag in the same map is updated to an empty string, to avoid overwriting any out-of-band changes the lifecycle block was meant to preserve

    #48008
  • aws_lb

    Fix Provider produced inconsistent final plan errors and force resource recreation for Network Load Balancers when no security groups were initially configured and updated security groups are unknown at plan-time

    #46695
  • aws_msk_replicator Mark replication_info_list.consumer_group_replication.consumer_groups_to_exclude as Computed
    #48054
  • aws_msk_replicator Mark replication_info_list.topic_replication.topics_to_exclude as Computed
    #48054
Read the original announcement →

https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.47.0

Related releases