ReleaseBytes
aws Terraform AWS Provider Releases · · 6.66.0

Terraform AWS Provider v6.66.0 Introduces New EFS, IAM, and MSK Resources

terraforminfraawsgaengineeraws-ecs
feature patch announcement

HashiCorp's Terraform AWS Provider v6.66.0 introduces new resources for managing AWS EFS Mount Targets, IAM OpenID Connect Providers, and MSK Channels. This release also enhances the `aws_ecs_service` resource with new attributes for lifecycle hook configuration, improving deployment control. These updates expand Infrastructure as Code capabilities for EFS, IAM identity federation, Apache Kafka cluster management, and Bedrock Agent Core. Notably, the IAM OIDC provider functionality is considered best effort and requires community testing.

  • →New List Resource: aws_efs_mount_target
  • →New List Resource: aws_iam_openid_connect_provider
  • →New Resource: aws_msk_channel
  • →Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
  • →Add target_type and timeout_configuration attributes to the lifecycle_hook block
Features (3) ›
  • aws_efs_mount_target New List Resource: aws_efs_mount_target
    #50057
  • aws_iam_openid_connect_provider New List Resource: aws_iam_openid_connect_provider
    #50024
  • aws_msk_channel New Resource: aws_msk_channel
    #49266
Enhancements (10) ›
  • aws_ecs_service Add target_type and timeout_configuration attributes to the lifecycle_hook block
    #48128
  • aws_bedrockagentcore_api_key_credential_provider Add Resource Identity support
    #48629
  • aws_bedrockagentcore_api_key_credential_provider Add api_key_secret_source argument and api_key_secret_config configuration block to support customer-managed AWS Secrets Manager secrets
    #48629
  • aws_ecs_service

    Add target_type and timeout_configuration arguments to the lifecycle_hook configuration block to support ECS PAUSE deployment hooks. hook_target_arn and role_arn are now Optional (still required for AWS_LAMBDA hooks)

    #48128
  • aws_efs_access_point Add Resource Identity support
    #50026
  • aws_efs_backup_policy Add Resource Identity support
    #50026
  • aws_efs_file_system Add Resource Identity support
    #50026
  • aws_efs_file_system_policy Add Resource Identity support
    #50026
  • aws_efs_mount_target Add Resource Identity support
    #50026
  • aws_efs_replication_configuration Add Resource Identity support
    #50026
Fixes (3) ›
  • list-resource/aws_rds_cluster_instance: Cache cluster using the DBClusterIdentifier as the key
    #50040
  • aws_pipes_pipe

    Fix source_parameters.self_managed_kafka_parameters.server_root_ca_certificate being sent to the API as an empty string instead of being omitted, which caused UpdatePipe to fail with a ValidationException when the attribute was unset

    #40116
  • aws_redshiftserverless_workgroup Filter server-only config_parameter entries from state and allow newly returned config parameter keys without a provider update
    #49939
Notes (1) ›
  • aws_iam_openid_connect_provider Because we cannot easily test this functionality, it is best effort and we ask for community help in testing
    #50024
Read the original announcement →

https://github.com/hashicorp/terraform-provider-aws/releases/tag/v6.66.0

Related releases