Terraform AWS Provider v6.56.0 adds new resources and enhancements
Terraform AWS provider version 6.56.0 introduces new resources for ElastiCache, S3, and Secrets Manager, alongside enhancements for EKS, MSK, and Bedrock Agent. These updates provide expanded control and configuration options for managing AWS services via Terraform. The release also includes several bug fixes, improving the stability and reliability of existing resources. This update is relevant for engineers and architects managing AWS infrastructure using Terraform.
- →New Action: aws_elasticache_apply_service_update
- →New Data Source: aws_elasticache_service_update_actions
- →New Data Source: aws_s3_buckets
- →New List Resource: aws_eks_addon
- →New List Resource: aws_s3_bucket_notification
Features (6) ›
- aws_elasticache_apply_service_update New Action: aws_elasticache_apply_service_update
- aws_elasticache_service_update_actions New Data Source: aws_elasticache_service_update_actions
- aws_s3_buckets New Data Source: aws_s3_buckets
- aws_eks_addon New List Resource: aws_eks_addon
- aws_s3_bucket_notification New List Resource: aws_s3_bucket_notification
- aws_secretsmanager_secret_policy New List Resource: aws_secretsmanager_secret_policy
Enhancements (20) ›
- aws_eks_node_group Add warm_pool_config attribute
- aws_msk_bootstrap_brokers
Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs
- aws_opensearchserverless_security_config Add iam_federation_options block
- aws_opensearchserverless_security_config Add iam_identity_center_options block
- provider
Web identity tokens can be configured via the TF_AWS_WEB_IDENTITY_TOKEN environment variable. Any value configured via assume_role_with_web_identity.web_identity_token takes precedence
- aws_autoscaling_group Add instance_lifecycle_policy configuration block
- aws_bedrockagent_data_source Add data_source_configuration.managed_knowledge_base_connector_configuration block
- aws_bedrockagent_data_source Add timeouts.update with a default value of 30m
- aws_bedrockagent_knowledge_base
Add vector_knowledge_base_configuration.bedrock_embedding_model_configuration.audio and vector_knowledge_base_configuration.bedrock_embedding_model_configuration.video configuration blocks
- aws_bedrockagent_knowledge_base Add support for Managed Knowledge Base type (type = "MANAGED") with managed_knowledge_base_configuration block
- aws_cloudwatch_log_subscription_filter Add @source.log as a valid value for emit_system_fields
- aws_eks_node_group Add warm_pool_config configuration block
- aws_flow_log Add tag_field_specification configuration block
- aws_guardduty_detector_feature Support AI_PROTECTION and AI_ANALYST feature names
- aws_guardduty_organization_configuration_feature Support AI_PROTECTION and AI_ANALYST feature names
- aws_msk_cluster
Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs
- aws_opensearch_package_association Add import support
- aws_opensearchserverless_security_config Add iam_federation_options configuration block
- aws_opensearchserverless_security_config Add iam_identity_center_options configuration block
- aws_s3tables_table Add metadata.iceberg.properties argument
Fixes (9) ›
- provider
Fix "one of assume_role_with_web_identity.0.web_identity_token,assume_role_with_web_identity.0.web_identity_token_file must be specified" errors, allowing any AWS_WEB_IDENTITY_TOKEN_FILE environment variable value to be used
- aws_bedrockagent_data_source Short-circuit waiting for creation if the resource reaches a FAILED state
- aws_datazone_domain Fixed AccessDeniedException error when deleting
- aws_fsx_lustre_file_system Fix perpetual diff in data_read_cache_configuration.size when sizing_mode is PROPORTIONAL_TO_THROUGHPUT_CAPACITY and size is not specified
- aws_mq_broker Fix perpetual shared_resources diffs for ActiveMQ brokers
- aws_mq_configuration Retry ConflictException: Configuration ID [...] is in use errors on delete
- aws_sagemaker_endpoint Prevents Cannot create already existing endpoint error when retrying creation
- aws_subnet Wait for IPAM to release its CIDR on delete
- aws_vpc_ipam_pool Fix "Error: reading EC2 VPC" when creating an IPAM VPC resource planning pool for a VPC in another account
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.56.0
Related releases
- EC2 Dedicated Hosts support host resource groups without self-managed licenses AWS What's New ·
- AWS Lambda Managed Instances logs now available in CloudWatch AWS What's New ·
- Amazon EC2 I8ge instances now available in more AWS regions AWS What's New ·
- EC2 High Memory U7i instances expand to new AWS regions AWS What's New ·
- Amazon EVS expands to additional AWS Regions AWS What's New ·
- Amazon SageMaker AI inference adds G6 instances in AWS GovCloud AWS What's New ·