Terraform AWS Provider v6.64.0 Adds New Resources and Bedrock Agent Enhancements
The Terraform AWS Provider v6.64.0 introduces several new data sources and resources, expanding support for services like AWS Account Access, Agent Registry, Bedrock, and DMS. Key enhancements in this release focus on Bedrock Agent Core, offering more granular model configuration, skill integration (AWS Skills, Git, S3), and improved OAuth2 credential provider support. Additionally, it brings enhanced event handling for AWS RDS instances and clusters, along with advanced authentication, encryption, and self-managed Kafka cluster support for MSK replicators. These updates provide Terraform users with expanded infrastructure as code capabilities for managing AWS environments, especially for AI/ML workloads and database operations.
- →New Data Source: aws_accountaccess_application
- →New Data Source: aws_accountaccess_entitlements
- →New Data Source: aws_agentregistry_registry
- →New Data Source: aws_rds_events
- →New List Resource: aws_accountaccess_entitlement
Features (17) ›
- aws_accountaccess_application New Data Source: aws_accountaccess_application
- aws_accountaccess_entitlements New Data Source: aws_accountaccess_entitlements
- aws_agentregistry_registry New Data Source: aws_agentregistry_registry
- aws_rds_events New Data Source: aws_rds_events
- aws_accountaccess_entitlement New List Resource: aws_accountaccess_entitlement
- aws_agentregistry_registry New List Resource: aws_agentregistry_registry
- aws_bedrock_model_invocation_job New List Resource: aws_bedrock_model_invocation_job
- aws_dms_data_provider New List Resource: aws_dms_data_provider
- aws_dms_instance_profile New List Resource: aws_dms_instance_profile
- aws_fis_safety_lever_state New List Resource: aws_fis_safety_lever_state
- aws_lambda_alias New List Resource: aws_lambda_alias
- aws_accountaccess_entitlement New Resource: aws_accountaccess_entitlement
- aws_agentregistry_registry New Resource: aws_agentregistry_registry
- aws_bedrock_model_invocation_job New Resource: aws_bedrock_model_invocation_job
- aws_dms_data_provider New Resource: aws_dms_data_provider
- aws_dms_instance_profile New Resource: aws_dms_instance_profile
- aws_fis_safety_lever_state New Resource: aws_fis_safety_lever_state
Enhancements (20) ›
- aws_workspaces_directory Add workspace_access_properties.access_endpoint_config attribute
- aws_appconfig_hosted_configuration_version Add version_label argument
- aws_bedrockagentcore_harness Add model.bedrock_model_config.additional_params argument
- aws_bedrockagentcore_harness Add model.bedrock_model_config.api_format and model.openai_model_config.api_format arguments
- aws_bedrockagentcore_harness Add model.gemini_model_config.additional_params and model.openai_model_config.additional_params arguments
- aws_bedrockagentcore_harness Add model.litellm_model_config configuration block
- aws_bedrockagentcore_harness Add skill.aws_skills, skill.git, and skill.s3 configuration blocks
- aws_bedrockagentcore_harness Change max_tokens to Optional and Computed
- aws_bedrockagentcore_harness Change skill.path to Optional
- aws_bedrockagentcore_harness Change system_prompt to Required
- aws_bedrockagentcore_oauth2_credential_provider Add Resource Identity support
- aws_bedrockagentcore_oauth2_credential_provider Add configurable resource timeouts
- aws_cloudwatch_metric_alarm Add warm_up_configuration configuration block
- aws_db_instance
Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission
- aws_ecs_capacity_provider Add managed_instances_provider.auto_repair_configuration configuration block
- aws_msk_replicator Add kafka_cluster.client_authentication to configure mtls or sasl_scram authentication to an Apache Kafka cluster
- aws_msk_replicator Add kafka_cluster.encryption_in_transit to supply a custom root CA certificate for an Apache Kafka cluster
- aws_msk_replicator
Support self-managed and on-premises Apache Kafka clusters as a replication source or target, via the kafka_cluster.apache_kafka_cluster block and the replication_info_list.source_kafka_cluster_id and target_kafka_cluster_id arguments
- aws_rds_cluster
Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission
- aws_rds_cluster_instance
Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission
Fixes (4) ›
- aws_workspaces_directory Fix setting workspace_access_properties: Invalid address to set errors
- aws_bedrockagentcore_harness
Retry Role validation failed for '...'. Please verify that the role exists and its trust policy allows assumption by this service IAM eventual consistency errors on Create. Because this error is returned while waiting for a newly-created harness to stabilize, the failed harness is deleted and creation is restarted. You may see CloudTrail events that reflect this sequence of operations
- aws_db_instance Fix error when restoring multi-az SQL Server from snapshot
- aws_rds_global_cluster Fix potential eventual consistency error when re-creating resource
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.64.0
Related releases
- Amazon S3 Object Lock now supports variable retention with event holds AWS What's New ·
- Amazon Bedrock Knowledge Bases add automatic sync scheduling for data sources AWS What's New ·
- Amazon SageMaker Batch Transform adds support for G6e instances AWS What's New ·
- AWS MCP Server adds serverless diagnostics for Lambda functions with AI agents AWS What's New ·
- AWS guide to CloudTrail investigation for multi-stage Bedrock attacks AWS Security Blog ·
- Amazon S3 Adds PrivateLink Support for FIPS Endpoints AWS What's New ·