Merge branch 'main' into patch-1

.changelog/10817.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_ec2_host
+```
+
+```release-note:new-data-source
+aws_ec2_host
+```

.changelog/11795.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Retry on `PutBucketEncryption` HTTP 409 errors due to eventual consistency
+```

.changelog/12436.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_role: Retry `assume_role_policy` updates for IAM eventual consistency
+```

.changelog/13453.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_route53_record: Support `set_identifier` values containing `_`
+```

.changelog/13474.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_redshift_scheduled_action
+```

.changelog/13564.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_eks_node_groups
+```
+
+```release-note:new-data-source
+aws_eks_node_group
+```

.changelog/14627.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_msk_cluster: Don't recreate cluster if order of `broker_node_group_info.client_subnets` or `broker_node_group_info.security_groups` entries change
+```

.changelog/14671.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iot_authorizer
+```

.changelog/15167.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_log_delivery_canonical_user_id
+```

.changelog/15360.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_placement_group: Add `partition_count` argument
+```

.changelog/15661.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Add `zookeeper_connect_string_tls` attribute
+```

.changelog/16489.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_dx_hosted_connection
+```
+
+```release-note:new-resource
+aws_dx_connection_confirmation
+```
+
+```release-note:enhancement
+resource/aws_dx_lag: Add `connection_id` argument
+```

.changelog/16709.txt

@@ -0,0 +1,8 @@
+```release-note:new-resource
+aws_connect_instance
+```
+
+```release-note:new-data-source
+aws_connect_instance
+```
+

.changelog/16854.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_connect_contact_flow
+```
+
+```release-note:new-data-source
+aws_connect_contact_flow
+```

.changelog/17111.txt

@@ -0,0 +1,19 @@
+```release-note:bug
+resource/aws_rds_cluster_instance: Remove force new resource on the `engine_version` parameter to allow upgrade without remove instances
+```
+
+```release-note:enhancement
+resource/aws_rds_cluster: Add `db_instance_parameter_group_name` attribute to allow major version upgrade using custom parameter groups
+```
+
+```release-note:enhancement
+resource/rds_cluster_instance: Add `performance_insights_retention_period` attribute
+```
+
+```release-note:bug
+resource/aws_rds_cluster: Add possible pending states for cluster update
+```
+
+```release-note:enhancement
+resource/aws_rds_cluster: Add `enable_global_write_forwarding` attribute
+```

.changelog/17151.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudwatch_log_groups
+```

.changelog/17498.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_service_discovery_instance
+```

.changelog/17706.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_emr_cluster: Add `log_encryption_kms_key_id` argument
+```

.changelog/17726.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Configurable Create, Update and Delete timeouts
+```

.changelog/17859.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_instance: Add `ipv6_addresses` attribute
+```

.changelog/17897.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_client_vpn_endpoint: Add `self_service_portal` and `authentication_options.self_service_saml_provider_arn` arguments to support self-service portal
+```

.changelog/17987.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_autoscalingplans_scaling_plan: Fix updates to `scaling_instruction` argument
+```

.changelog/17991.txt

@@ -0,0 +1,4 @@
+
+```release-note:enhancement
+resource/aws_db_instance: Add `replica_mode` argument
+```

.changelog/18445.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_kinesis_firehose_delivery_stream
+```

.changelog/19368.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudtrail: Add `advanced_event_selector` argument
+```

.changelog/19394.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_managed_prefix_list_entry
+```

.changelog/19532.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_role: Add plan time validation for `path`, `permissions_boundary`, `managed_policy_arns`.
+```

.changelog/19765.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_athena_database: Read the database name from the `AwsDataCatalog`
+```

.changelog/20084.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `include_transaction_details`, `include_partition_value`, `partition_include_schema_table`, `include_table_alter_operations`, `include_control_details` and `include_null_and_empty` arguments to `kinesis_settings` configuration block
+```

.changelog/20315.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_eks_clusters
+```

.changelog/20342.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_transfer_server: Add `directory_id` argument to support Microsoft Active Directory (AD) authentication
+```
+
+```release-note:new-resource
+aws_transfer_access
+```

.changelog/20383.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+aws/resource_aws_lex_bot: Correctly determine `version` attribute
+```
+
+```release-note:bug
+aws/resource_aws_lex_intent: Correctly determine `version` attribute
+```

.changelog/20543.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appstream_fleet
+```

.changelog/20560.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_config_organization_conformance_pack: Add configurable timeouts
+```

.changelog/20600.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_config_delivery_channel: Add `s3_kms_key_arn` argument
+```

.changelog/20615.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_msk_broker_nodes
+```

.changelog/20638.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_msk_kafka_version
+```

.changelog/20667.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_chime_voice_connector_termination
+```

.changelog/20676.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_chime_voice_connector_origination
+```

.changelog/20687.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_quicksight_group_membership
+```

.changelog/20691.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_pinpoint_email_channel: When specifying the `configuration_set` parameter, use the name of the set instead of the ARN.
+```

.changelog/20710.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_quicksight_data_source
+```

.changelog/20711.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_notebook_instance: Add `platform_identifier` argument
+```

.changelog/20720.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ecs_cluster: Ensure that `setting` attribute is set consistently
+```

.changelog/20731.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource_aws_route53_health_check: Add `RECOVERY_CONTROL` health check type and `routing_control_arn` argument
+```

.changelog/20775.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource_vpn_connection: Handle paginated response when reading Transit Gateway Attachments
+```

.changelog/20779.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_db_instance: Fix updating `license_model`.
+```

.changelog/20785.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_iam_role: Change `name_prefix` validation to a range of 1 to 38 characters
+```
+
+```release-note:enhancement
+resource/aws_iam_role: `name_prefix` is now Computed 
+```

.changelog/20791.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Fix continual diff on `email_configuration.configuration_set`
+```

.changelog/20795.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_route53_health_check: Add plan time validation for `regions`
+```
+
+```release-note:bug
+resource/aws_route53_health_check: Fix update for `ip_address`
+```

.changelog/20796.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_launch_template: add support for `http_protocol_ipv6` to `metadata_options`.
+```
+
+```release-note:enhancement
+resource/aws_launch_template: add plan time validation to `spot_options.block_duration_minutes`
+```

.changelog/20797.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_managed_prefix_list: allow updating `max_entries`.
+```

.changelog/20809.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_endpoint_configuration: Add `async_inference_config` argument
+```

.changelog/20825.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_sagemaker_flow_definition
+```

.changelog/20838.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_efs_file_system_policy: Add `bypass_policy_lockout_safety_check` argument
+```

.changelog/20842.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_imagebuilder_distribution_configuration: Improve validation error message of `name` argument
+```

.changelog/20861.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_mwaa_environment: Increase resource creation timeout to 2 hours
+```

.changelog/20863.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_chime_voice_connector_logging
+```

.changelog/20874.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_efs_file_system: Add `lifecycle_policy.transition_to_primary_storage_class` argument to support Intelligent-Tiering
+```

.changelog/20877.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_iam_users
+```

.changelog/20904.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `message_format`, `include_transaction_details`, `include_partition_value`, `partition_include_schema_table`, `include_table_alter_operations`, `include_control_details`, `message_max_bytes`, `include_null_and_empty`, `security_protocol`, `ssl_client_certificate_arn`, `ssl_client_key_arn`, `ssl_client_key_password`, `ssl_ca_certificate_arn`, `sasl_username`, `sasl_password` and `no_hex_prefix` arguments to `kafka_settings` configuration block
+```

.changelog/20914.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kms_key: Extends timeouts for policy and tag propagation to 5 minutes each
+```

.changelog/20933.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_chime_voice_connector_streaming
+```

.changelog/20951.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_fsx_ontap_filesystem
+```

.changelog/20952.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_cognito_user_pool: Fix removal of `lambda_config`
+```

.changelog/20971.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/efs_file_system: Allow multiple lifecycle policies.
+```
+
+```release-note:enhancement
+data-source/efs_file_system: Add `transition_to_primary_storage_class` to `lifecycle_policy`.
+```

.changelog/21008.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_launch_template: Fix `error setting metadata_options`
+```

.changelog/21036.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_appstream_image_builder
+```

.changelog/21037.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sagemaker_app_image_config: Add tagging support.
+```