Terraform AWS Provider v6.61.0 Adds New Resources and Enhancements
terraformsecurityawsgaengineeraws-iam
feature patch
HashiCorp has released Terraform AWS Provider v6.61.0, introducing numerous new data sources and resources across various AWS services. This update enables Infrastructure-as-Code management for newly supported AWS capabilities and enhances existing resource configurations. It includes new resources for IAM role associations, EC2 AMI launch permissions, and Security Hub features. Additionally, the release provides enhancements for services like FSx, Load Balancer, and AWS Resilience Hub, alongside several bug fixes.
- →New Data Source: aws_odb_iam_role_association
- →New List Resource: aws_ec2_ami_launch_permission
- →New List Resource: aws_iam_instance_profile
- →New List Resource: aws_lambdacore_network_connector
- →New List Resource: aws_mailmanager_relay
Features (17) ›
- aws_odb_iam_role_association New Data Source: aws_odb_iam_role_association
- aws_ec2_ami_launch_permission New List Resource: aws_ec2_ami_launch_permission
- aws_iam_instance_profile New List Resource: aws_iam_instance_profile
- aws_lambdacore_network_connector New List Resource: aws_lambdacore_network_connector
- aws_mailmanager_relay New List Resource: aws_mailmanager_relay
- aws_resiliencehubv2_assertion New List Resource: aws_resiliencehubv2_assertion
- aws_resiliencehubv2_service_function New List Resource: aws_resiliencehubv2_service_function
- aws_resiliencehubv2_user_journey New List Resource: aws_resiliencehubv2_user_journey
- aws_dsql_cluster_policy New Resource: aws_dsql_cluster_policy
- aws_lambdacore_network_connector New Resource: aws_lambdacore_network_connector
- aws_lambdamicrovms_image New Resource: aws_lambdamicrovms_image
- aws_mailmanager_relay New Resource: aws_mailmanager_relay
- aws_odb_iam_role_association New Resource: aws_odb_iam_role_association
- aws_resiliencehubv2_assertion New Resource: aws_resiliencehubv2_assertion
- aws_resiliencehubv2_service_function New Resource: aws_resiliencehubv2_service_function
- aws_resiliencehubv2_user_journey New Resource: aws_resiliencehubv2_user_journey
- aws_securityhub_feature_v2 New Resource: aws_securityhub_feature_v2
Enhancements (22) ›
- aws_fsx_ontap_file_system Add network_type attribute
- aws_fsx_windows_file_system Add network_type attribute
- aws_lb_listener_rule Add condition.source_ip.ip_address_type attribute
- aws_resiliencehubv2_service Add associated_system attribute
- aws_vpclattice_service Add idle_timeout_seconds attribute
- aws_bedrockagentcore_harness Adds attribute environment_actual
- aws_ec2_ami_launch_permission Add resource identity support
- aws_fsx_ontap_file_system Add network_type argument
- aws_fsx_openzfs_file_system Add network_type argument
- aws_fsx_windows_file_system Add network_type argument
- aws_lb_listener_rule Add condition.source_ip.ip_address_type argument
- aws_lb_listener_rule Change condition.source_ip.values to Optional
- aws_medialive_channel Add resource identity
- aws_medialive_input Add resource identity support
- aws_medialive_input_security_group Add resource identity support
- aws_medialive_multiplex Add resource identity support
- aws_medialive_multiplex_program Add resource identity
- aws_observabilityadmin_centralization_rule_for_organization Add encryption_scope argument to the logs_encryption_configuration configuration block
- aws_pinpointsmsvoicev2_phone_number Add status attribute
- aws_pinpointsmsvoicev2_phone_number
Add wait_for_active argument to allow create and update to return without waiting for the phone number to reach ACTIVE status. Number types gated on carrier or registration approval (for example TEN_DLC, TOLL_FREE, or any number submitted with registration_id) can remain PENDING for days to weeks, which previously caused terraform apply to time out
- aws_resiliencehubv2_service Add associated_system configuration block
- aws_vpclattice_service Add idle_timeout_seconds argument
Fixes (11) ›
- list-resource/aws_bedrockagentcore_harness: Prevents error when remote resource disappears during List
- list-resource/aws_bedrockagentcore_online_evaluation_config: Prevents error when remote resource disappears during List
- list-resource/aws_bedrockagentcore_policy_engine: Prevents error when remote resource disappears during List
- list-resource/aws_bedrockagentcore_registry: Prevents error when remote resource disappears during List
- list-resource/aws_bedrockagentcore_resource_policy: Prevents error when remote resource disappears during List
- aws_bedrockagentcore_harness Fix Provider produced inconsistent result after apply error for environment
- aws_bedrockagentcore_online_evaluation_config Retries additional IAM propagation errors on creation
- aws_mailmanager_ingress_point Include FAILED as a pending state while an ingress point is deleting
- aws_nat_gateway Allow updating secondary_private_ip_address_count in-place for private NAT gateways
- aws_observabilityadmin_telemetry_enrichment Prevent couldn't find resource (21 retries) errors on delete if enrichment has never been started in the Region
- aws_observabilityadmin_telemetry_evaluation Include NOT_STARTED as a target state while the resource is deleting
Read the original announcement →
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.61.0
Related releases
- AWS Lambda functions now support full IAM resource-based policies AWS What's New ·
- Amazon EKS now supports multiple external OIDC identity providers per cluster AWS What's New ·
- Amazon DynamoDB Streams now supports attribute-based access control (ABAC) AWS What's New ·
- AWS Partner Central agents MCP Server now supports OAuth with AWS Sign-In AWS What's New ·
- AWS IAM Increases Default Managed Policies Per Role to 20 AWS What's New ·
- AWS details external web access for Amazon Bedrock's Web Search AWS What's New ·