Skip to content

Latest commit

 

History

History
1339 lines (1092 loc) · 150 KB

CHANGELOG.md

File metadata and controls

1339 lines (1092 loc) · 150 KB
Raw

1.25.0 (Unreleased)

FEATURES:

  • New Data Source: aws_codecommit_repository [GH-4934]

ENHANCEMENTS:

  • resource/aws_codebuild_project: Support WINDOWS_CONTAINER as valid environment type [GH-4960]
  • resource/aws_iam_instance_profile: Add create_date attribute [GH-4932]
  • resource/aws_sqs_queue: Add .fifo suffix for FIFO queues using name_prefix [GH-4929]
  • resource/aws_vpc: Support update of instance_tenancy from dedicated to default [GH-2514]

BUG FIXES:

  • data-source/aws_rds_cluster: Prevent panic with new CloudWatch logs support (enabled_cloudwatch_logs_exports) introduced in 1.23.0 [GH-4927]
  • resource/aws_codebuild_webhook: Prevent panic when webhook is missing during read [GH-4917]
  • resource/aws_db_instance: Properly raise any ListTagsForResource error instead of presenting a perpetual difference with tags [GH-4943]
  • resource/aws_instance: Prevent extraneous ModifyInstanceAttribute call for disable_api_termination on resource creation [GH-4941]
  • resource/aws_launch_template: Prevent error when using valid_until [GH-4952]
  • resource/aws_route: Properly force resource recreation when updating route_table_id [GH-4946]
  • resource/aws_route53_zone: Further prevent HostedZoneAlreadyExists with specified caller reference errors [GH-4903]

1.24.0 (June 21, 2018)

FEATURES:

  • New Data Source: aws_cloudformation_export (#2180)
  • New Data Source: aws_vpc_dhcp_options (#4878)
  • New Resource: aws_dx_gateway (#4896)
  • New Resource: aws_dx_gateway_association (#4896)
  • New Resource: aws_glue_crawler (#4484)
  • New Resource: aws_neptune_cluster_parameter_group (#4860)
  • New Resource: aws_neptune_subnet_group (#4782)

ENHANCEMENTS:

  • resource/aws_api_gateway_rest_api: Support PRIVATE endpoint type (#4888)
  • resource/aws_codedeploy_app: Add compute_platform argument (#4811)
  • resource/aws_kinesis_firehose_delivery_stream: Support extended S3 destination data_format_conversion_configuration (#4842)
  • resource/aws_kms_grant: Support ARN for key_id argument (external CMKs) (#4886)
  • resource/aws_neptune_parameter_group: Add tags argument and arn attribute (#4873)
  • resource/aws_rds_cluster: Add enabled_cloudwatch_logs_exports argument (#4875)

BUG FIXES:

  • resource/aws_batch_job_definition: Force resource recreation on retry_strategy attempts updates (#4854)
  • resource/aws_cognito_user_pool_client: Prevent panic with updating refresh_token_validity (#4868)
  • resource/aws_instance: Prevent extraneous ModifyInstanceCreditSpecification call on resource creation (#4898)
  • resource/aws_s3_bucket: Properly detect cors_rule drift when it is deleted outside Terraform (#4887)
  • resource/aws_vpn_gateway_attachment: Fix error handling for missing VPN gateway (#4895)

1.23.0 (June 14, 2018)

NOTES:

  • resource/aws_elasticache_cluster: The availability_zones argument has been deprecated in favor of a new preferred_availability_zones argument to allow specifying the same Availability Zone more than once in larger Memcached clusters that also need to specifically set Availability Zones. The argument is still optional and the API will continue to automatically choose Availability Zones for nodes if not specified. The new argument will also continue to match the APIs required behavior that the length of the list must be the same as num_cache_nodes. Migration will require recreating the resource or using the resource lifecycle configuration of ignore_changes = ["availability_zones"] to prevent recreation. See the resource documentation for additional details.

FEATURES:

  • New Data Source: aws_vpcs (#4736)
  • New Resource: aws_neptune_parameter_group (#4724)

ENHANCEMENTS:

  • resource/aws_db_instance: Display input arguments when receiving InvalidParameterValue error on resource creation (#4803)
  • resource/aws_elasticache_cluster: Migrate from availability_zones TypeSet attribute to preferred_availability_zones TypeList attribute (allow duplicate Availability Zone elements) (#4741)
  • resource/aws_launch_template: Add tags argument (support tagging the resource itself) (#4763)
  • resource/aws_launch_template: Add plan time validation for tag_specifications resource_type (#4765)
  • resource/aws_waf_ipset: Add arn attribute (#4784)
  • resource/aws_wafregional_ipset: Add arn attribute (#4816)

BUG FIXES:

  • resource/aws_codebuild_webhook: Properly export secret (the CodeBuild API only provides its value during resource creation) (#4775)
  • resource/aws_codecommit_repository: Prevent error and trigger recreation when not found during read (#4761)
  • resource/aws_eks_cluster: Properly export arn attribute (#4766] / [#4767)
  • resource/aws_elasticsearch_domain: Skip EBS options update/refresh if EBS is not enabled (#4802)

1.22.0 (June 05, 2018)

FEATURES:

  • New Data Source: aws_ecs_service (#3617)
  • New Data Source: aws_eks_cluster (#4749)
  • New Guide: EKS Getting Started
  • New Resource: aws_config_aggregate_authorization (#4263)
  • New Resource: aws_config_configuration_aggregator (#4262)
  • New Resource: aws_eks_cluster (#4749)

ENHANCEMENTS:

  • provider: Support custom endpoint for EFS (#4716)
  • resource/aws_api_gateway_method: Add authorization_scopes argument (#4533)
  • resource/aws_api_gateway_rest_api: Add api_key_source argument (#4717)
  • resource/aws_cloudfront_distribution: Allow create and update retries on InvalidViewerCertificate for eventual consistency with ACM/IAM services (#4698)
  • resource/aws_cognito_identity_pool: Add arn attribute (#4719)
  • resource/aws_cognito_user_pool: Add endpoint attribute (#4718)

BUG FIXES:

  • resource/aws_service_discovery_private_dns_namespace: Prevent creation error with names longer than 34 characters (#4702)
  • resource/aws_vpn_connection: Allow period in tunnel[1-2]_preshared_key validation (#4731)

1.21.0 (May 31, 2018)

FEATURES:

  • New Data Source: aws_route (#4529)
  • New Resource: aws_codebuild_webhook (#4473)
  • New Resource: aws_cognito_identity_provider (#3601)
  • New Resource: aws_cognito_resource_server (#4530)
  • New Resource: aws_glue_classifier (#4472)

ENHANCEMENTS:

  • provider: Support custom endpoint for SSM (#4670)
  • resource/aws_codebuild_project: Add badge_enabled argument and badge_url attribute (#3504)
  • resource/aws_codebuild_project: Add environment_variable argument type (support parameter store environment variables) (#2811] / [#4021)
  • resource/aws_codebuild_project: Add source argument git_clone_depth and insecure_ssl (#3929)
  • resource/aws_elasticache_replication_group: Support number_cache_nodes updates (#4504)
  • resource/aws_lb_target_group: Add slow_start argument (#4661)
  • resource/aws_redshift_cluster: Add dns_name attribute (#4582)
  • resource/aws_s3_bucket: Add bucket_regional_domain_name attribute (#4556)

BUG FIXES:

  • data-source/aws_lambda_function: Qualifiers explicitly set are now honoured (#4654)
  • resource/aws_batch_job_definition: Properly force new resource when updating timeout attempt_duration_seconds argument (#4697)
  • resource/aws_budgets_budget: Force new resource when updating name (#4656)
  • resource/aws_dms_endpoint: Additionally specify MongoDB connection info in the top-level API namespace to prevent issues connecting (#4636)
  • resource/aws_rds_cluster: Prevent additional retry error during S3 import for IAM/S3 eventual consistency (#4683)
  • resource/aws_sns_sms_preferences: Properly add SNS preferences to website docs (#4694)

1.20.0 (May 23, 2018)

NOTES:

  • resource/aws_guardduty_member: Terraform will now try to properly detect if a member account has been invited based on its relationship status (Disabled/Enabled/Invited) and appropriately flag the new invite argument for update. You will want to set invite = true in your Terraform configuration if you previously handled the invitation process for a member, otherwise the resource will attempt to disassociate the member upon updating the provider to this version.

FEATURES:

  • New Data Source: aws_glue_script (#4481)
  • New Resource: aws_glue_trigger (#4464)

ENHANCEMENTS:

  • resource/aws_api_gateway_domain_name: Add endpoint_configuration argument, regional_certificate_arn argument, regional_certificate_name argument, regional_domain_name attribute, and regional_zone_id attribute (support regional domain names) (#2866)
  • resource/aws_api_gateway_rest_api: Add endpoint_configuration argument (support regional endpoint type) (#2866)
  • resource/aws_appautoscaling_policy: Add retry logic for rate exceeded errors during read, update and delete (#4594)
  • resource/aws_ecs_service: Add container_name and container_port arguments for service_registry (support bridge and host network mode for service registry) (#4623)
  • resource/aws_emr_cluster: Add additional_info argument (#4590)
  • resource/aws_guardduty_member: Support member account invitation on creation (#4357)
  • resource/aws_guardduty_member: Support invite argument updates (invite or disassociate on update) (#4604)
  • resource/aws_ssm_patch_baseline: Add approval_rule enable_non_security argument (#4546)

BUG FIXES:

  • resource/aws_api_gateway_rest_api: Prevent error with policy containing special characters (e.g. forward slashes in CIDRs) (#4606)
  • resource/aws_cloudwatch_event_rule: Prevent multiple names on creation (#4579)
  • resource/aws_dynamodb_table: Prevent error with APIs that do not support point in time recovery (e.g. AWS China) (#4573)
  • resource/aws_glue_catalog_table: Prevent multiple potential panic scenarios (#4621)
  • resource/aws_kinesis_stream: Handle tag additions/removals of more than 10 tags (#4574)
  • resource/aws_kinesis_stream: Prevent perpetual encryption_type difference with APIs that do not support encryption (e.g. AWS China) (#4575)
  • resource/aws_s3_bucket: Prevent panic from CORS reading errors (#4603)
  • resource/aws_spot_fleet_request: Prevent empty iam_instance_profile_arn from overwriting iam_instance_profile (#4591)

1.19.0 (May 16, 2018)

NOTES:

  • data-source/aws_iam_policy_document: Please note there is a behavior change in the rendering of principal/not_principal in the case of type = "AWS" and identifiers = ["*"]. This will now render as Principal": {"AWS": "*"} instead of "Principal": "*". This change is required for IAM role trust policy support as well as differentiating between anonymous access versus AWS access in policies. To keep the old behavior of anonymous access, use type = "*" and identifiers = ["*"], which will continue to render as "Principal": "*". For additional information, see the aws_iam_policy_document documentation.

FEATURES:

  • New Data Source: aws_arn (#3996)
  • New Data Source: aws_lambda_invocation (#4222)
  • New Resource: aws_sns_sms_preferences (#3858)

ENHANCEMENTS:

  • data-source/aws_iam_policy_document: Allow rendering of "Principal": {"AWS": "*"} (required for IAM role trust policies) (#4248)
  • resource/aws_api_gateway_rest_api: Add execution_arn attribute (#3968)
  • resource/aws_db_event_subscription: Add name_prefix argument (#2754)
  • resource/aws_dms_endpoint: Add azuredb for engine_name validation (#4506)
  • resource/aws_rds_cluster: Add backtrack_window argument and wait for updates to complete (#4524)
  • resource/aws_spot_fleet_request: Add launch_specification iam_instance_profile_arn argument (#4511)

BUG FIXES:

  • data-source/aws_autoscaling_groups: Use pagination function for DescribeTags filtering (#4535)
  • resource/aws_elb: Ensure bucket_prefix for access logging can be updated to "" (#4383)
  • resource/aws_kinesis_firehose_delivery_stream: Retry on Elasticsearch destination IAM role errors and update IAM errors (#4518)
  • resource/aws_launch_template: Allow network_interfaces device_index to be set to 0 (#4367)
  • resource/aws_lb: Ensure bucket_prefix for access logging can be updated to "" (#4383)
  • resource/aws_lb: Ensure access_logs is properly set into Terraform state (#4517)
  • resource/aws_security_group: Fix rule description handling when gathering multiple rules with same permissions (#4416)

1.18.0 (May 10, 2018)

FEATURES:

  • New Data Source: aws_acmpca_certificate_authority (#4458)
  • New Resource: aws_acmpca_certificate_authority (#4458)
  • New Resource: aws_glue_catalog_table (#4368)

ENHANCEMENTS:

  • provider: Lower retry threshold for DNS resolution failures (#4459)
  • resource/aws_dms_endpoint: Support s3 engine_name and add s3_settings argument (#1685] and [#4447)
  • resource/aws_glue_job: Add timeout argument (#4460)
  • resource/aws_lb_target_group: Add proxy_protocol_v2 argument (#4365)
  • resource/aws_spot_fleet_request: Mark spot_price optional (defaults to on-demand price) (#4424)
  • resource/aws_spot_fleet_request: Add plan time validation for valid_from and valid_until arguments (#4463)
  • resource/aws_spot_instance_request: Mark spot_price optional (defaults to on-demand price) (#4424)

BUG FIXES:

  • data-source/aws_autoscaling_groups: Correctly paginate through over 50 results (#4433)
  • resource/aws_elastic_beanstalk_environment: Correctly handle cname_prefix attribute in China partition (#4485)
  • resource/aws_glue_job: Remove allocated_capacity and max_concurrent_runs upper plan time validation limits (#4461)
  • resource/aws_instance: Fix root_device_mapping matching of expected root device name with multiple block devices. (#4489)
  • resource/aws_launch_template: Prevent parameter iops is not supported for gp2 volumes error (#4344)
  • resource/aws_launch_template: Prevent 'iamInstanceProfile.name' may not be used in combination with 'iamInstanceProfile.arn' error (#4344)
  • resource/aws_launch_template: Prevent parameter groupName cannot be used with the parameter subnet error (#4344)
  • resource/aws_launch_template: Separate usage of ipv4_address_count/ipv6_address_count from ipv4_addresses/ipv6_addresses (#4344)
  • resource/aws_redshift_cluster: Properly send all required parameters when resizing (#3127)
  • resource/aws_s3_bucket: Prevent crash from empty string CORS arguments (#4465)
  • resource/aws_ssm_document: Add missing account ID to arn attribute (#4436)

1.17.0 (May 02, 2018)

NOTES:

  • resource/aws_ecs_service: Please note the placement_strategy argument (an unordered list) has been marked deprecated in favor of the ordered_placement_strategy argument (an ordered list based on the Terraform configuration ordering).

FEATURES:

  • New Data Source: aws_mq_broker (#3163)
  • New Resource: aws_budgets_budget (#1879)
  • New Resource: aws_iam_user_group_membership (#3365)
  • New Resource: aws_vpc_peering_connection_options (#3909)

ENHANCEMENTS:

  • data-source/aws_route53_zone: Add name_servers attribute (#4336)
  • resource/aws_api_gateway_stage: Add access_log_settings argument (Support access logging) (#4369)
  • resource/aws_autoscaling_group: Add launch_template argument (#4305)
  • resource/aws_batch_job_definition: Add timeout argument (#4386)
  • resource/aws_cloudwatch_event_rule: Add name_prefix argument (#2752)
  • resource/aws_cloudwatch_event_rule: Make name optional (Terraform can generate unique ID) (#2752)
  • resource/aws_codedeploy_deployment_group: Add ec2_tag_set argument (tag group support) (#4324)
  • resource/aws_default_subnet: Allow map_public_ip_on_launch updates (#4396)
  • resource/aws_dms_endpoint: Support mongodb engine_name and mongodb_settings argument (#4406)
  • resource/aws_dynamodb_table: Add point_in_time_recovery argument (#4063)
  • resource/aws_ecs_service: Add ordered_placement_strategy argument, deprecate placement_strategy argument (#4390)
  • resource/aws_ecs_service: Allow health_check_grace_period_seconds up to 7200 seconds (#4420)
  • resource/aws_lambda_permission: Add statement_id_prefix argument (#2743)
  • resource/aws_lambda_permission: Make statement_id optional (Terraform can generate unique ID) (#2743)
  • resource/aws_rds_cluster: Add s3_import argument (Support MySQL Backup Restore from S3) (#4366)
  • resource/aws_vpc_peering_connection: Support configurable timeouts (#3909)

BUG FIXES:

  • data-source/aws_instance: Bypass UnsupportedOperation errors with DescribeInstanceCreditSpecifications call (#4362)
  • resource/aws_iam_group_policy: Properly handle generated policy name updates (#4379)
  • resource/aws_instance: Bypass UnsupportedOperation errors with DescribeInstanceCreditSpecifications call (#4362)
  • resource/aws_launch_template: Appropriately set security_groups in network interfaces (#4364)
  • resource/aws_rds_cluster: Add retries for IAM eventual consistency (#4371)
  • resource/aws_rds_cluster_instance: Add retries for IAM eventual consistency (#4370)
  • resource/aws_route53_zone: Add domain name to CallerReference to prevent creation issues with count greater than one (#4341)

1.16.0 (April 25, 2018)

FEATURES:

  • New Data Source: aws_batch_compute_environment (#4270)
  • New Data Source: aws_batch_job_queue (#4288)
  • New Data Source: aws_iot_endpoint (#4303)
  • New Data Source: aws_lambda_function (#2984)
  • New Data Source: aws_redshift_cluster (#2603)
  • New Data Source: aws_secretsmanager_secret (#4272)
  • New Data Source: aws_secretsmanager_secret_version (#4272)
  • New Resource: aws_dax_parameter_group (#4299)
  • New Resource: aws_dax_subnet_group (#4302)
  • New Resource: aws_organizations_policy (#4249)
  • New Resource: aws_organizations_policy_attachment (#4253)
  • New Resource: aws_secretsmanager_secret (#4272)
  • New Resource: aws_secretsmanager_secret_version (#4272)

ENHANCEMENTS:

  • data-source/aws_cognito_user_pools: Add arns attribute (#4256)
  • data-source/aws_ecs_cluster Return error on multiple clusters (#4286)
  • data-source/aws_iam_instance_profile: Add role_arn and role_name attributes (#4300)
  • data-source/aws_instance: Add disable_api_termination attribute (#4314)
  • resource/aws_api_gateway_rest_api: Add policy argument (#4211)
  • resource/aws_api_gateway_stage: Add tags argument (#2858)
  • resource/aws_api_gateway_stage: Add execution_arn and invoke_url attributes (#3469)
  • resource/aws_api_gateway_vpc_link: Support import (#4306)
  • resource/aws_cloudwatch_event_target: Add batch_target argument (#4312)
  • resource/aws_cloudwatch_event_target: Add kinesis_target and sqs_target arguments (#4323)
  • resource/aws_cognito_user_pool: Support user_migration in lambda_config (#4301)
  • resource/aws_db_instance: Add s3_import argument (#2728)
  • resource/aws_elastic_beanstalk_application: Add appversion_lifecycle argument (#1907)
  • resource/aws_instance: Add credit_specification argument (e.g. t2.unlimited support) (#2619)
  • resource/aws_kinesis_firehose_delivery_stream: Support Redshift processing_configuration (#4251)
  • resource/aws_launch_configuration: Add user_data_base64 argument (#4257)
  • resource/aws_s3_bucket: Add support for ONEZONE_IA storage class (#4287)
  • resource/aws_s3_bucket_object: Add support for ONEZONE_IA storage class (#4287)
  • resource/aws_spot_instance_request: Add valid_from and valid_until arguments (#4018)
  • resource/aws_ssm_patch_baseline: Support CENTOS operating_system argument (#4268)

BUG FIXES:

  • data-source/aws_iam_policy_document: Prevent crash with multiple value principal identifiers (#4277)
  • data-source/aws_lb_listener: Ensure attributes are properly set when not used as arguments (#4317)
  • resource/aws_codebuild_project: Mark auth resource attribute as sensitive (#4284)
  • resource/aws_cognito_user_pool_client: Fix import to include user pool ID (#3762)
  • resource/aws_elasticache_cluster: Remove extraneous plan-time validation for node_type and subnet_group_name (#4333)
  • resource/aws_launch_template: Allow dashes in name and name_prefix arguments (#4321)
  • resource/aws_launch_template: Properly set block_device_mappings EBS information into Terraform state (#4321)
  • resource/aws_launch_template: Properly pass block_device_mappings information to EC2 API (#4321)
  • resource/aws_s3_bucket: Prevent panic on lifecycle rule reading errors (#4282)

1.15.0 (April 18, 2018)

NOTES:

  • resource/aws_cloudfront_distribution: Please note the cache_behavior argument (an unordered list) has been marked deprecated in favor of the ordered_cache_behavior argument (an ordered list based on the Terraform configuration ordering). This is to support proper cache behavior precedence within a CloudFront distribution.

FEATURES:

  • New Data Source: aws_api_gateway_rest_api (#4172)
  • New Data Source: aws_cloudwatch_log_group (#4167)
  • New Data Source: aws_cognito_user_pools (#4212)
  • New Data Source: aws_sqs_queue (#2311)
  • New Resource: aws_directory_service_conditional_forwarder (#4071)
  • New Resource: aws_glue_connection (#4016)
  • New Resource: aws_glue_job (#4028)
  • New Resource: aws_iam_service_linked_role (#2985)
  • New Resource: aws_launch_template (#2927)
  • New Resource: aws_ses_domain_identity_verification (#4108)

ENHANCEMENTS:

  • data-source/aws_iam_server_certificate: Filter by path_prefix (#3801)
  • resource/aws_api_gateway_integration: Support VPC connection (#3428)
  • resource/aws_cloudfront_distribution: Added ordered_cache_behavior argument, deprecate cache_behavior (#4117)
  • resource/aws_db_instance: Support enabled_cloudwatch_logs_exports argument (#4111)
  • resource/aws_db_option_group: Support option version argument (#2590)
  • resource/aws_ecs_service: Support ServiceRegistries (#3906)
  • resource/aws_iam_service_linked_role: Support custom_suffix and description arguments (#4188)
  • resource/aws_service_discovery_service: Support health_check_custom_config argument (#4083)
  • resource/aws_spot_fleet_request: Support configurable delete timeout (#3940)
  • resource/aws_spot_instance_request: Support optionally fetching password data (#4189)
  • resource/aws_waf_rate_based_rule: Support RegexMatch predicate type (#4069)
  • resource/aws_waf_rule: Support RegexMatch predicate type (#4069)
  • resource/aws_wafregional_rate_based_rule: Support RegexMatch predicate type (#4069)

BUG FIXES:

  • resource/aws_athena_database: Handle database names with uppercase and underscores (#4133)
  • resource/aws_codebuild_project: Retry UpdateProject for IAM eventual consistency (#4238)
  • resource/aws_codedeploy_deployment_config: Force new resource for minimum_healthy_hosts updates (#4194)
  • resource/aws_cognito_user_group: Fix role_arn updates (#4237)
  • resource/aws_elasticache_replication_group: Increase default create timeout to 60 minutes (#4093)
  • resource/aws_emr_cluster: Force new resource if any of the ec2_attributes change (#4218)
  • resource/aws_iam_role: Suppress NoSuchEntity errors while detaching policies from role during deletion (#4209)
  • resource/aws_lb: Force new resource if any of the subnet_mapping attributes change (#4086)
  • resource/aws_rds_cluster: Properly handle engine_version with snapshot_identifier (#4215)
  • resource/aws_route53_record: Improved handling of non-alphanumeric record names (#4183)
  • resource/aws_spot_instance_request: Fix instance_interuption_behaviour hibernate and stop handling with placement (#1986)
  • resource/aws_vpc_dhcp_options: Handle plural and non-plural InvalidDhcpOptionsID.NotFound errors (#4136)

1.14.1 (April 11, 2018)

ENHANCEMENTS:

  • resource/aws_db_event_subscription: Add arn attribute (#4151)
  • resource/aws_db_event_subscription: Support configurable timeouts (#4151)

BUG FIXES:

  • resource/aws_codebuild_project: Properly handle setting cache type NO_CACHE (#4134)
  • resource/aws_db_event_subscription: Fix tag ARN handling (#4151)
  • resource/aws_dynamodb_table_item: Trigger destructive update if range_key has changed (#3821)
  • resource/aws_elb: Return any errors when updating listeners (#4159)
  • resource/aws_emr_cluster: Prevent crash with missing StateChangeReason (#4165)
  • resource/aws_iam_user: Retry user login profile deletion on EntityTemporarilyUnmodifiable (#4143)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent crash with missing CloudWatch logging options (#4148)
  • resource/aws_lambda_alias: Force new resource on name change (#4106)
  • resource/aws_lambda_function: Prevent perpetual difference when removing dead_letter_config (#2684)
  • resource/aws_launch_configuration: Properly read security_groups, user_data, and vpc_classic_link_security_groups attributes into Terraform state (#2800)
  • resource/aws_network_acl: Prevent error on deletion with already deleted subnets (#4119)
  • resource/aws_network_acl: Prevent error on update with removing associations for already deleted subnets (#4119)
  • resource/aws_rds_cluster: Properly handle engine_version during regular creation (#4139)
  • resource/aws_rds_cluster: Set port updates to force new resource (#4144)
  • resource/aws_route53_zone: Suppress name difference with trailing period (#3982)
  • resource/aws_vpc_peering_connection: Allow active pending state during deletion for eventual consistency (#4140)

1.14.0 (April 06, 2018)

NOTES:

  • resource/aws_organizations_account: As noted in the resource documentation, resource deletion from Terraform will not automatically close AWS accounts due to the behavior of the AWS Organizations service. There are also various manual steps required by AWS before the account can be removed from an organization and made into a standalone account, then manually closed if desired.

FEATURES:

  • New Resource: aws_organizations_account (#3524)
  • New Resource: aws_ses_identity_notification_topic (#2640)

ENHANCEMENTS:

  • provider: Fallback to SDK default credential chain if credentials not found using provider credential chain (#2883)
  • data-source/aws_iam_role: Add max_session_duration attribute (#4092)
  • resource/aws_cloudfront_distribution: Add cache_behavior field_level_encryption_id attribute (#4102)
  • resource/aws_codebuild_project: Support cache configuration (#2860)
  • resource/aws_elasticache_replication_group: Support Cluster Mode Enabled online shard reconfiguration (#3932)
  • resource/aws_elasticache_replication_group: Configurable create, update, and delete timeouts (#3932)
  • resource/aws_iam_role: Add max_session_duration argument (#3977)
  • resource/aws_kinesis_firehose_delivery_stream: Add Elasticsearch destination processing configuration support (#3621)
  • resource/aws_kinesis_firehose_delivery_stream: Add Extended S3 destination backup mode support (#2987)
  • resource/aws_kinesis_firehose_delivery_stream: Add Splunk destination processing configuration support (#3944)
  • resource/aws_lambda_function: Support nodejs8.10 runtime (#4020)
  • resource/aws_launch_configuration: Add support for ebs_block_device.*.no_device (#4070)
  • resource/aws_ssm_maintenance_window_target: Make resource updatable (#4074)
  • resource/aws_wafregional_rule: Validate all predicate types (#4046)

BUG FIXES:

  • resource/aws_cognito_user_pool: Trim custom: prefix of developer_only_attribute = false schema attributes (#4041)
  • resource/aws_cognito_user_pool: Fix email_message_by_link max length validation (#4051)
  • resource/aws_elasticache_replication_group: Properly set cluster_mode in state (#3932)
  • resource/aws_iam_user_login_profile: Changed password generation to use crypto/rand (#3989)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent additional crash scenarios with optional configurations (#4047)
  • resource/aws_lambda_function: IAM retry for "The role defined for the function cannot be assumed by Lambda" on update (#3988)
  • resource/aws_lb: Suppress differences for non-applicable attributes (#4032)
  • resource/aws_rds_cluster_instance: Prevent crash on importing non-cluster instances (#3961)
  • resource/aws_route53_record: Fix ListResourceRecordSet pagination (#3900)

1.13.0 (March 28, 2018)

NOTES:

This release is happening outside the normal release schedule to accomodate a crash fix for the aws_lb_target_group resource. It appears an ELBv2 service update rolling out currently is the root cause. The potential for this crash has been present since the initial resource in Terraform 0.7.7 and all versions of the AWS provider up to v1.13.0.

FEATURES:

  • New Resource: aws_appsync_datasource (#2758)
  • New Resource: aws_waf_regex_match_set (#3947)
  • New Resource: aws_waf_regex_pattern_set (#3913)
  • New Resource: aws_waf_rule_group (#3898)
  • New Resource: aws_wafregional_geo_match_set (#3915)
  • New Resource: aws_wafregional_rate_based_rule (#3871)
  • New Resource: aws_wafregional_regex_match_set (#3950)
  • New Resource: aws_wafregional_regex_pattern_set (#3933)
  • New Resource: aws_wafregional_rule_group (#3948)

ENHANCEMENTS:

  • provider: Support custom Elasticsearch endpoint (#3941)
  • resource/aws_appsync_graphql_api: Support import (#3500)
  • resource/aws_elasticache_cluster: Allow port to be optional (#3835)
  • resource/aws_elasticache_cluster: Add replication_group_id argument (#3869)
  • resource/aws_elasticache_replication_group: Allow port to be optional (#3835)

BUG FIXES:

  • resource/aws_autoscaling_group: Fix updating of service_linked_role (#3942)
  • resource/aws_autoscaling_group: Properly set empty enabled_metrics in the state during read (#3899)
  • resource/aws_autoscaling_policy: Fix conditional logic based on policy_type (#3739)
  • resource/aws_batch_compute_environment: Correctly set compute_resources in state (#3824)
  • resource/aws_cognito_user_pool: Correctly set schema in state (#3789)
  • resource/aws_iam_user_login_profile: Fix password_length validation function regression from 1.12.0 (#3919)
  • resource/aws_lb: Store correct state for http2 and ensure attributes are set on create (#3854)
  • resource/aws_lb: Correctly set subnet_mappings in state (#3822)
  • resource/aws_lb_listener: Retry CertificateNotFound errors on update for IAM eventual consistency (#3901)
  • resource/aws_lb_target_group: Prevent crash from missing matcher during read (#3954)
  • resource/aws_security_group: Retry read on creation for EC2 eventual consistency (#3892)

1.12.0 (March 23, 2018)

NOTES:

  • provider: For resources implementing the IAM policy equivalence library (https://github.com/jen20/awspolicyequivalence/) on an attribute via suppressEquivalentAwsPolicyDiffs, the dependency has been updated, which should mark additional IAM policies as equivalent. (#3832)

FEATURES:

  • New Resource: aws_kms_grant (#3038)
  • New Resource: aws_waf_geo_match_set (#3275)
  • New Resource: aws_wafregional_rule (#3756)
  • New Resource: aws_wafregional_size_constraint_set (#3796)
  • New Resource: aws_wafregional_sql_injection_match_set (#1013)
  • New Resource: aws_wafregional_web_acl (#3754)
  • New Resource: aws_wafregional_web_acl_association (#3755)
  • New Resource: aws_wafregional_xss_match_set (#1014)

ENHANCEMENTS:

  • provider: Treat IAM policies with account ID principals as equivalent to IAM account root ARN (#3832)
  • provider: Treat additional IAM policy scenarios with empty principal trees as equivalent (#3832)
  • resource/aws_acm_certificate: Retry on ResourceInUseException during deletion for eventual consistency (#3868)
  • resource/aws_api_gateway_rest_api: Add support for content encoding (#3642)
  • resource/aws_autoscaling_group: Add service_linked_role_arn argument (#3812)
  • resource/aws_cloudfront_distribution: Validate origin domain_name and origin_id at plan time (#3767)
  • resource/aws_eip: Support configurable timeouts (#3769)
  • resource/aws_elasticache_cluster: Support plan time validation of az_mode (#3857)
  • resource/aws_elasticache_cluster: Support plan time validation of node_type requiring VPC for cache.t2 instances (#3857)
  • resource/aws_elasticache_cluster: Support plan time validation of num_cache_nodes > 1 for redis (#3857)
  • resource/aws_elasticache_cluster: ForceNew on node_type changes for memcached engine (#3857)
  • resource/aws_elasticache_cluster: ForceNew on engine_version downgrades (#3857)
  • resource/aws_emr_cluster: Add step support (#3673)
  • resource/aws_instance: Support optionally fetching encrypted Windows password data (#2219)
  • resource/aws_launch_configuration: Validate user_data length during plan (#2973)
  • resource/aws_lb_target_group: Validate health check threshold for TCP protocol during plan (#3782)
  • resource/aws_security_group: Add arn attribute (#3751)
  • resource/aws_ses_domain_identity: Support trailing period in domain name (#3840)
  • resource/aws_sqs_queue: Support lack of ListQueueTags for all non-standard AWS implementations (#3794)
  • resource/aws_ssm_document: Add document_format argument to support YAML (#3814)
  • resource/aws_s3_bucket_object: New content_base64 argument allows uploading raw binary data created in-memory, rather than reading from disk as with source. (#3788)

BUG FIXES:

  • resource/aws_api_gateway_client_certificate: Export *_date fields correctly (#3805)
  • resource/aws_cognito_user_pool: Detect auto_verified_attributes changes (#3786)
  • resource/aws_cognito_user_pool_client: Fix callback_urls updates (#3404)
  • resource/aws_db_instance: Support incompatible-parameters and storage-full state (#3708)
  • resource/aws_dynamodb_table: Update and validate attributes correctly (#3194)
  • resource/aws_ecs_task_definition: Correctly read volume attribute into Terraform state (#3823)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent crash on malformed ID for import (#3834)
  • resource/aws_lambda_function: Only retry IAM eventual consistency errors for one minute (#3765)
  • resource/aws_ssm_association: Prevent AssociationDoesNotExist error (#3776)
  • resource/aws_vpc_endpoint: Prevent perpertual diff in non-standard partitions (#3317)

1.11.0 (March 09, 2018)

FEATURES:

  • New Data Source: aws_kms_key (#2224)
  • New Resource: aws_organizations_organization (#903)
  • New Resource: aws_iot_thing (#3521)

ENHANCEMENTS:

  • resource/aws_api_gateway_authorizer: Support COGNITO_USER_POOLS type (#3156)
  • resource/aws_cloud9_environment_ec2: Retry creation for IAM eventual consistency (#3651)
  • resource/aws_cloudfront_distribution: Make default_ttl, max_ttl, and min_ttl arguments optional (#3571)
  • resource/aws_dms_endpoint: Add aurora-postgresql as a target (#2615)
  • resource/aws_dynamodb_table: Support Server Side Encryption (#3303)
  • resource/aws_elastic_beanstalk_environment: Support modifying tags (#3513)
  • resource/aws_emr_cluster: Add Kerberos support (#3553)
  • resource/aws_iam_account_alias: Improve error messages to include API errors (#3590)
  • resource/aws_iam_user_policy: Add support for import (#3198)
  • resource/aws_lb: Add enable_cross_zone_load_balancing argument for NLBs (#3537)
  • resource/aws_lb: Add enable_http2 argument for ALBs (#3609)
  • resource/aws_route: Add configurable timeouts (#3639)
  • resource/aws_security_group: Add configurable timeouts (#3599)
  • resource/aws_spot_fleet_request: Add load_balancers and target_group_arns arguments (#2564)
  • resource/aws_ssm_parameter: Add allowed_pattern, description, and tags arguments (#1520)
  • resource/aws_ssm_parameter: Allow key_id updates (#1520)

BUG FIXES:

  • data-source/aws_db_instance: Prevent crash with EC2 Classic (#3619)
  • data-source/aws_vpc_endpoint_service: Fix aws-us-gov partition handling (#3514)
  • resource/aws_api_gateway_vpc_link: Ensure target_arns is properly read (#3569)
  • resource/aws_batch_compute_environment: Fix state updates (#3508)
  • resource/aws_ebs_snapshot: Prevent crash with outside snapshot deletion (#3462)
  • resource/aws_ecs_service: Prevent crash when importing non-existent service (#3672)
  • resource/aws_eip_association: Prevent deletion error InvalidAssociationID.NotFound (#3653)
  • resource/aws_instance: Ensure at least one security group is being attached when modifying vpc_security_group_ids (#2850)
  • resource/aws_lambda_function: Allow PutFunctionConcurrency retries on creation (#3570)
  • resource/aws_spot_instance_request: Retry for 1 minute instead of 15 seconds for IAM eventual consistency (#3561)
  • resource/aws_ssm_activation: Prevent crash with expiration_date (#3597)

1.10.0 (February 24, 2018)

NOTES:

  • resource/aws_dx_lag: number_of_connections was deprecated and will be removed in future major version. Use aws_dx_connection and aws_dx_connection_association resources instead. Default connections will be removed as part of LAG creation automatically in future major version. (#3367)

FEATURES:

  • New Data Source: aws_inspector_rules_packages (#3175)
  • New Resource: aws_api_gateway_vpc_link (#2512)
  • New Resource: aws_appsync_graphql_api (#2494)
  • New Resource: aws_dax_cluster (#2884)
  • New Resource: aws_gamelift_alias (#3353)
  • New Resource: aws_gamelift_fleet (#3327)
  • New Resource: aws_lb_listener_certificate (#2686)
  • New Resource: aws_s3_bucket_metric (#916)
  • New Resource: aws_ses_domain_mail_from (#2029)
  • New Resource: aws_iot_thing_type (#3302)

ENHANCEMENTS:

  • data-source/aws_kms_alias: Always return target_key_arn (#3304)
  • resource/aws_autoscaling_policy: Add support for target_tracking_configuration (#2611)
  • resource/aws_codebuild_project: Support VPC configuration (#2547] [#3324)
  • resource/aws_cloudtrail: Add event_selector argument (#2258)
  • resource/aws_codedeploy_deployment_group: Validate DeploymentReady and InstanceReady trigger_events (#3412)
  • resource/aws_db_parameter_group: Validate underscore name during plan (#3396)
  • resource/aws_directory_service_directory Add edition argument (#3421)
  • resource/aws_directory_service_directory Validate size argument (#3453)
  • resource/aws_dx_connection: Add support for tagging (#2990)
  • resource/aws_dx_connection: Add support for import (#2992)
  • resource/aws_dx_lag: Add support for tagging (#2990)
  • resource/aws_dx_lag: Add support for import (#2992)
  • resource/aws_emr_cluster: Add autoscaling_policy argument (#2877)
  • resource/aws_emr_cluster: Add scale_down_behavior argument (#3063)
  • resource/aws_instance: Expose reason of shutting-down state during creation (#3371)
  • resource/aws_instance: Include size of user_data in validation error message (#2971)
  • resource/aws_instance: Remove extra API call on creation for SGs (#3426)
  • resource/aws_lambda_function: Recompute version and qualified_arn attributes on publish (#3032)
  • resource/aws_lb_target_group: Allow stickiness block set to false with TCP (#2954)
  • resource/aws_lb_listener_rule: Validate priority over 50000 (#3379)
  • resource/aws_lb_listener_rule: Make priority argument optional (#3219)
  • resource/aws_rds_cluster: Add hosted_zone_id attribute (#3267)
  • resource/aws_rds_cluster: Add support for source_region (encrypted cross-region replicas) (#3415)
  • resource/aws_rds_cluster_instance: Support availability_zone (#2812)
  • resource/aws_rds_cluster_parameter_group: Validate underscore name during plan (#3396)
  • resource/aws_route53_record Add allow_overwrite argument (#2926)
  • resource/aws_s3_bucket Ssupport for SSE-KMS replication configuration (#2625)
  • resource/aws_spot_fleet_request: Validate iam_fleet_role as ARN during plan (#3431)
  • resource/aws_sqs_queue: Validate name during plan (#2837)
  • resource/aws_ssm_association: Allow updating targets (#2807)
  • resource/aws_service_discovery_service: Support routing policy and update the type of DNS record (#3273)

BUG FIXES:

  • data-source/aws_elb_service_account: Correct GovCloud region (#3315)
  • resource/aws_acm_certificate_validation: Prevent crash on validation_record_fqdns (#3336)
  • resource/aws_acm_certificate_validation: Fix validation_record_fqdns handling with combined root and wildcard requests (#3366)
  • resource/aws_autoscaling_policy: cooldown with zero value not set correctly (#2809)
  • resource/aws_cloudtrail: Now respects initial include_global_service_events = false (#2817)
  • resource/aws_dynamodb_table: Retry deletion on ResourceInUseException (#3355)
  • resource/aws_dx_lag: number_of_connections deprecated (made Optional). Omitting field may now prevent spurious diffs. (#3367)
  • resource/aws_ecs_service: Retry DescribeServices after creation (#3387)
  • resource/aws_ecs_service: Fix reading load_balancer into state (#3502)
  • resource/aws_elasticsearch_domain: Retry creation on ValidationException (#3375)
  • resource/aws_iam_user_ssh_key: Correctly set status after creation (#3390)
  • resource/aws_instance: Bump deletion timeout to 20mins (#3452)
  • resource/aws_kinesis_firehose_delivery_stream: Retry on additional IAM eventual consistency errors (#3381)
  • resource/aws_route53_record: Trim trailing dot during import (#3321)
  • resource/aws_s3_bucket: Prevent crashes on location and replication read retry timeouts (#3338)
  • resource/aws_s3_bucket: Always set replication_configuration in state (#3349)
  • resource/aws_security_group: Allow empty rule description (#2846)
  • resource/aws_sns_topic: Fix exit after updating first attribute (#3360)
  • resource/aws_spot_instance_request: Bump delete timeout to 20mins (#3435)
  • resource/aws_sqs_queue: Skip SQS ListQueueTags in aws-us-gov partition (#3376)
  • resource/aws_vpc_endpoint: Treat pending as expected state during deletion (#3370)
  • resource/aws_vpc_peering_connection: Treat pending-acceptance as expected during deletion (#3393)
  • resource/aws_cognito_user_pool_client: support USER_PASSWORD_AUTH for explicit_auth_flows (#3417)

1.9.0 (February 09, 2018)

NOTES:

  • data-source/aws_region: current field is deprecated and the data source defaults to the provider region if no endpoint or name is specified (#3157)
  • data-source/aws_iam_policy_document: Statements are now de-duplicated per Sids (#2890)

FEATURES:

  • New Data Source: aws_elastic_beanstalk_hosted_zone (#3208)
  • New Data Source: aws_iam_policy (#1999)
  • New Resource: aws_acm_certificate (#2813)
  • New Resource: aws_acm_certificate_validation (#2813)
  • New Resource: aws_api_gateway_documentation_version (#3287)
  • New Resource: aws_cloud9_environment_ec2 (#3291)
  • New Resource: aws_cognito_user_group (#3010)
  • New Resource: aws_dynamodb_table_item (#3238)
  • New Resource: aws_guardduty_ipset (#3161)
  • New Resource: aws_guardduty_threatintelset (#3200)
  • New Resource: aws_iot_topic_rule (#1858)
  • New Resource: aws_sns_platform_application (#1101] [#3283)
  • New Resource: aws_vpc_endpoint_service_allowed_principal (#2515)
  • New Resource: aws_vpc_endpoint_service_connection_notification (#2515)
  • New Resource: aws_vpc_endpoint_service (#2515)
  • New Resource: aws_vpc_endpoint_subnet_association (#2515)

ENHANCEMENTS:

  • provider: Automatically determine AWS partition from configured region (#3173)
  • provider: Automatically validate new regions from AWS SDK (#3159)
  • data-source/aws_acm_certificate Add most_recent attribute for filtering (#1837)
  • data-source/aws_iam_policy_document: Support layering via source_json and override_json attributes (#2890)
  • data-source/aws_lb_listener: Support load_balancer_arn and port arguments (#2886)
  • data-source/aws_network_interface: Add filter attribute (#2851)
  • data-source/aws_region: Remove EC2 API call and default to current if no endpoint or name specified (#3157)
  • data-source/aws_vpc_endpoint: Support AWS PrivateLink (#2515)
  • data-source/aws_vpc_endpoint_service: Support AWS PrivateLink (#2515)
  • resource/aws_athena_named_query: Support import (#3231)
  • resource/aws_dynamodb_table: Add custom creation timeout (#3195)
  • resource/aws_dynamodb_table: Validate attribute types (#3188)
  • resource/aws_ecr_lifecycle_policy: Support import (#3246)
  • resource/aws_ecs_service: Support import (#2764)
  • resource/aws_ecs_service: Add public_assign_ip argument for Fargate services (#2559)
  • resource/aws_kinesis_firehose_delivery_stream: Add splunk configuration (#3117)
  • resource/aws_mq_broker: Validate user password (#3164)
  • resource/aws_service_discovery_public_dns_namespace: Support import (#3229)
  • resource/aws_service_discovery_service: Support import (#3227)
  • resource/aws_rds_cluster: Add support for Aurora MySQL 5.7 (#3278)
  • resource/aws_sns_topic: Add support for delivery status (#2872)
  • resource/aws_sns_topic: Add support for name prefixes and fully generated names (#2753)
  • resource/aws_sns_topic_subscription: Support filter policy (#2806)
  • resource/aws_ssm_resource_data_sync: Support import (#3232)
  • resource/aws_vpc_endpoint: Support AWS PrivateLink (#2515)
  • resource/aws_vpc_endpoint_service: Support AWS PrivateLink (#2515)
  • resource/aws_vpn_gateway: Add support for Amazon side private ASN (#1888)

BUG FIXES:

  • data-source/aws_kms_alias: Prevent crash on aliases without target key (#3203)
  • data-source/aws_ssm_parameter: Fix wrong arn attribute for full path parameter names (#3211)
  • resource/aws_instance: Fix perpertual diff on default VPC instances using vpc_security_group_ids (#2338)
  • resource/aws_codebuild_project: Prevent crash when using source auth configuration (#3271)
  • resource/aws_cognito_identity_pool_roles_attachment: Fix validation for Token types (#2894)
  • resource/aws_db_parameter_group: fix permanent diff when specifying parameters with database-default values (#3182)
  • resource/aws_ecs_service: Retry only on ECS and IAM related InvalidParameterException (#3240)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent crashes on empty CloudWatchLoggingOptions (#3301)
  • resource/aws_kinesis_firehose_delivery_stream: Fix extended_s3_configuration kms_key_arn handling from AWS API (#3301)
  • resource/aws_kinesis_stream: Retry deletion on LimitExceededException (#3108)
  • resource/aws_route53_record: Fix dualstack alias name regression trimming too many characters (#3187)
  • resource/aws_ses_template: Send only specified attributes for update (#3214)
  • resource/aws_dynamodb_table: Allow disabling stream with empty stream_view_type (#3197] [#3224)
  • resource/aws_dx_connection_association: Retry disassociation (#3212)
  • resource/aws_volume_attachment: Allow updating skip_destroy and force_detach (#2810)

1.8.0 (January 29, 2018)

FEATURES:

  • New Resource: aws_dynamodb_global_table (#2517)
  • New Resource: aws_gamelift_build (#2843)

ENHANCEMENTS:

  • provider: cn-northwest-1 region is now supported (#3142)
  • data-source/aws_kms_alias: Add target_key_arn attribute (#2551)
  • resource/aws_api_gateway_integration: Allow update of content_handling attributes (#3123)
  • resource/aws_appautoscaling_target: Support updating max_capacity, min_capacity, and role_arn attributes (#2950)
  • resource/aws_cloudwatch_log_subscription_filter: Add support for distribution (#3046)
  • resource/aws_cognito_user_pool: support pre_token_generation in lambda_config (#3093)
  • resource/aws_elasticsearch_domain: Add support for encrypt_at_rest (#2632)
  • resource/aws_emr_cluster: Support CustomAmiId (#2766)
  • resource/aws_kms_alias: Add target_key_arn attribute (#3096)
  • resource/aws_route: Allow adding IPv6 routes to instances and network interfaces (#2265)
  • resource/aws_sqs_queue: Retry queue creation on QueueDeletedRecently error (#3113)
  • resource/aws_vpn_connection: Add inside CIDR and pre-shared key attributes (#1862)

BUG FIXES:

  • resource/aws_appautoscaling_policy: Support additional predefined metric types in validation [#3122]]
  • resource/aws_dynamodb_table: Recognize changes in non_key_attributes (#3136)
  • resource/aws_ebs_snapshot: Fix kms_key_id attribute handling (#3085)
  • resource/aws_eip_assocation: Retry association for pending instances (#3072)
  • resource/aws_elastic_beanstalk_application: Prevent crash on reading missing application (#3171)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent panic on missing S3 configuration prefix (#3073)
  • resource/aws_lambda_function: Retry updates for IAM eventual consistency (#3116)
  • resource/aws_route53_record: Suppress uppercase alias name diff (#3119)
  • resource/aws_sqs_queue_policy: Prevent missing policy error on read (#2739)
  • resource/aws_rds_cluster: Retry deletion on InvalidDBClusterStateFault (#3028)

1.7.1 (January 19, 2018)

BUG FIXES:

  • data-source/aws_db_snapshot: Prevent crash on unfinished snapshots (#2960)
  • resource/aws_cloudfront_distribution: Retry deletion on DistributionNotDisabled (#3034)
  • resource/aws_codebuild_project: Prevent crash on empty source buildspec and location (#3011)
  • resource/aws_codepipeline: Prevent crash on empty artifacts (#2998)
  • resource/aws_appautoscaling_policy: Match correct policy when multiple policies with same name and service (#3012)
  • resource/aws_eip: Do not disassociate EIP on tags-only update (#2975)
  • resource/aws_elastic_beanstalk_application: Retry DescribeApplication after creation (#3064)
  • resource/aws_emr_cluster: Retry creation on ValidationException (IAM) (#3027)
  • resource/aws_emr_cluster: Retry creation on AccessDeniedException (IAM) (#3050)
  • resource/aws_iam_instance_profile: Allow cleanup during destruction without refresh (#2983)
  • resource/aws_iam_role: Prevent missing attached policy results (#2857)
  • resource/aws_iam_user: Prevent state removal during name attribute update (#2979)
  • resource/aws_iam_user: Allow path attribute update (#2940)
  • resource/aws_iam_user_policy: Fix updates with generated policy names and validate JSON (#3031)
  • resource/aws_instance: Retry IAM instance profile (re)association for eventual consistency on update (#3055)
  • resource/aws_lambda_function: Make EC2 rate limit errors retryable on update (#2964)
  • resource/aws_lambda_function: Retry creation on EC2 throttle error (#3062)
  • resource/aws_lb_target_group: Allow a blank health check path, for TCP healthchecks (#2980)
  • resource/aws_sns_topic_subscription: Prevent crash on subscription attribute update (#2967)
  • resource/aws_kinesis_firehose_delivery_stream: Fix import for S3 destinations (#2970)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent crash on empty Redshift's S3 Backup Description (#2970)
  • resource/aws_kinesis_firehose_delivery_stream: Detect drifts in processing_configuration (#2970)
  • resource/aws_kinesis_firehose_delivery_stream: Prevent crash on empty CloudWatch logging opts (#3052)

1.7.0 (January 12, 2018)

FEATURES:

  • New Resource: aws_api_gateway_documentation_part (#2893)
  • New Resource: aws_cloudwatch_event_permission (#2888)
  • New Resource: aws_cognito_user_pool_client (#1803)
  • New Resource: aws_cognito_user_pool_domain (#2325)
  • New Resource: aws_glue_catalog_database (#2175)
  • New Resource: aws_guardduty_detector (#2524)
  • New Resource: aws_guardduty_member (#2911)
  • New Resource: aws_route53_query_log (#2770)
  • New Resource: aws_service_discovery_service (#2613)

ENHANCEMENTS:

  • provider: eu-west-3 is now supported (#2707)
  • provider: Endpoints can now be specified for ACM, ECR, ECS, STS and Route 53 (#2795)
  • provider: Endpoints can now be specified for API Gateway and Lambda (#2641)
  • data-source/aws_iam_server_certificate: Add support for retrieving public key (#2749)
  • data-source/aws_vpc_peering_connection: Add support for cross-region VPC peering (#2508)
  • data-source/aws_ssm_parameter: Support returning raw encrypted SecureString value (#2777)
  • resource/aws_kinesis_firehose_delivery_stream: Import is now supported (#2082)
  • resource/aws_cognito_user_pool: The ARN for the pool is now computed and exposed as an attribute (#2723)
  • resource/aws_directory_service_directory: Add security_group_id field (#2688)
  • resource/aws_rds_cluster_instance: Support Performance Insights (#2331)
  • resource/aws_rds_cluster_instance: Set db_subnet_group_name in state on read if available (#2606)
  • resource/aws_eip: Tagging is now supported (#2768)
  • resource/aws_codepipeline: ARN is now exposed as an attribute (#2773)
  • resource/aws_appautoscaling_scheduled_action: min_capacity argument is now honoured (#2794)
  • resource/aws_rds_cluster: Clusters in the resetting-master-credentials state no longer cause an error (#2791)
  • resource/aws_cloudwatch_metric_alarm: Support optional datapoints_to_alarm configuration (#2609)
  • resource/aws_ses_event_destination: Add support for SNS destinations (#1737)
  • resource/aws_iam_role: Delete inline policies when force_detach_policies = true (#2388)
  • resource/aws_lb_target_group: Improve health_check validation (#2580)
  • resource/aws_ecs_service: Add health_check_grace_period_seconds attribute (#2788)
  • resource/aws_vpc_peering_connection: Add support for cross-region VPC peering (#2508)
  • resource/aws_vpc_peering_connection_accepter: Add support for cross-region VPC peering (#2508)
  • resource/aws_elasticsearch_domain: export kibana endpoint (#2804)
  • resource/aws_ssm_association: Allow for multiple targets (#2297)
  • resource/aws_instance: Add computed field for volume_id of block device (#1489)
  • resource/aws_api_gateway_integration: Allow update of URI attributes (#2834)
  • resource/aws_ecs_cluster: Support resource import (#2762)

BUG FIXES:

  • resource/aws_cognito_user_pool: Update Cognito email message length to 20,000 (#2692)
  • resource/aws_volume_attachment: Changing device name without changing volume or instance ID now correctly produces a diff (#2720)
  • resource/aws_s3_bucket_object: Object tagging is now supported in GovCloud (#2665)
  • resource/aws_elasticsearch_domain: Fixed a crash when no Cloudwatch log group is configured (#2787)
  • resource/aws_s3_bucket_policy: Set the resource ID after successful creation (#2820)
  • resource/aws_db_event_subscription: Set the source type when updating categories (#2833)
  • resource/aws_db_parameter_group: Remove group from state if it's gone (#2868)
  • resource/aws_appautoscaling_target: Make role_arn optional & computed (#2889)
  • resource/aws_ssm_maintenance_window: Respect enabled during updates (#2818)
  • resource/aws_lb_target_group: Fix max prefix length check (#2790)
  • resource/aws_config_delivery_channel: Retry deletion (#2910)
  • resource/aws_lb+aws_elb: Fix regression with undefined name (#2939)
  • resource/aws_lb_target_group: Fix validation rules for LB's healthcheck (#2906)
  • provider: Fix regression affecting empty Optional+Computed fields (#2348)

1.6.0 (December 18, 2017)

FEATURES:

  • New Data Source: aws_network_interface (#2316)
  • New Data Source: aws_elb (#2004)
  • New Resource: aws_dx_connection_association (#2360)
  • New Resource: aws_appautoscaling_scheduled_action (#2231)
  • New Resource: aws_cloudwatch_log_resource_policy (#2243)
  • New Resource: aws_media_store_container (#2448)
  • New Resource: aws_service_discovery_public_dns_namespace (#2569)
  • New Resource: aws_service_discovery_private_dns_namespace (#2589)

IMPROVEMENTS:

  • resource/aws_ssm_association: Add association_name (#2257)
  • resource/aws_ecs_service: Add network_configuration (#2299)
  • resource/aws_lambda_function: Add reserved_concurrent_executions (#2504)
  • resource/aws_ecs_service: Add launch_type (Fargate support) (#2483)
  • resource/aws_ecs_task_definition: Add cpu, memory, execution_role_arn & requires_compatibilities (Fargate support) (#2483)
  • resource/aws_ecs_cluster: Add arn attribute (#2552)
  • resource/aws_elasticache_security_group: Add import support (#2277)
  • resource/aws_sqs_queue_policy: Support import by queue URL (#2544)
  • resource/aws_elasticsearch_domain: Add log_publishing_options (#2285)
  • resource/aws_athena_database: Add force_destroy field (#2363)
  • resource/aws_elasticache_replication_group: Add support for Redis auth, in-transit and at-rest encryption (#2090)
  • resource/aws_s3_bucket: Add server_side_encryption_configuration block (#2472)

BUG FIXES:

  • data-source/aws_instance: Set placement_group if available (#2400)
  • resource/aws_elasticache_parameter_group: Add StateFunc to make name lowercase (#2426)
  • resource/aws_elasticache_replication_group: Modify validation, make replication_group_id lowercase (#2432)
  • resource/aws_db_instance: Treat storage-optimization as valid state (#2409)
  • resource/aws_dynamodb_table: Ensure ttl is properly read (#2452)
  • resource/aws_lb_target_group: fixes to behavior based on protocol type (#2380)
  • resource/aws_mq_broker: Fix crash in hashing function (#2598)
  • resource/aws_ebs_volume_attachment: Allow attachments to instances which are stopped (#1444)
  • resource/aws_ssm_parameter: Path names with a leading '/' no longer generate incorrect ARNs (#2604)

1.5.0 (November 29, 2017)

FEATURES:

  • New Resource: aws_mq_broker (#2466)
  • New Resource: aws_mq_configuration (#2466)

1.4.0 (November 29, 2017)

BUG FIXES:

  • resource/aws_cognito_user_pool: Fix email_subject_by_link (#2395)
  • resource/aws_api_gateway_method_response: Fix conflict exception in API gateway method response (#2393)
  • resource/aws_api_gateway_method: Fix typo authorization_type -> authorization (#2430)

IMPROVEMENTS:

  • data-source/aws_nat_gateway: Add missing address attributes to the schema (#2209)
  • resource/aws_ssm_maintenance_window_target: Change MaxItems of targets (#2361)
  • resource/aws_sfn_state_machine: Support Update State machine call (#2349)
  • resource/aws_instance: Set placement_group in state on read if available (#2398)

1.3.1 (November 20, 2017)

BUG FIXES:

  • resource/aws_ecs_task_definition: Fix equivalency comparator (#2339)
  • resource/aws_batch_job_queue: Return errors correctly if deletion fails (#2322)
  • resource/aws_security_group_rule: Parse description correctly (#1959)
  • Fixed Cognito Lambda Config Validation for optional ARN configurations (#2370)
  • resource/aws_cognito_identity_pool_roles_attachment: Fix typo "authenticated" -> "unauthenticated" (#2358)

1.3.0 (November 16, 2017)

NOTES:

  • resource/aws_redshift_cluster: Field enable_logging, bucket_name and s3_key_prefix were deprecated in favour of a new logging block (#2230)
  • resource/aws_lb_target_group: We no longer provide defaults for health_check's path nor matcher in order to support network load balancers where these arguments aren't valid. Creating new ALB will therefore require you to specify these two arguments. Existing deployments are unaffected. (#2251)

FEATURES:

  • New Data Source: aws_rds_cluster (#2070)
  • New Data Source: aws_elasticache_replication_group (#2124)
  • New Data Source: aws_instances (#2266)
  • New Resource: aws_ses_template (#2003)
  • New Resource: aws_dx_lag (#2154)
  • New Resource: aws_dx_connection (#2173)
  • New Resource: aws_athena_database (#1922)
  • New Resource: aws_athena_named_query (#1893)
  • New Resource: aws_ssm_resource_data_sync (#1895)
  • New Resource: aws_cognito_user_pool (#1419)

IMPROVEMENTS:

  • provider: Add support for assuming roles via profiles defined in ~/.aws/config (#1608)
  • data-source/efs_file_system: Added dns_name (#2105)
  • data-source/aws_ssm_parameter: Add arn attribute (#2273)
  • data-source/aws_ebs_volume: Add arn attribute (#2271)
  • resource/aws_batch_job_queue: Add validation for name (#2159)
  • resource/aws_batch_compute_environment: Improve validation for compute_environment_name (#2159)
  • resource/aws_ssm_parameter: Add support for import (#2234)
  • resource/aws_redshift_cluster: Add support for snapshot_copy (#2238)
  • resource/aws_ecs_task_definition: Print container_definitions as JSON instead of checksum (#1195)
  • resource/aws_ssm_parameter: Add arn attribute (#2273)
  • resource/aws_elb: Add listener ssl_certificate_id ARN validation (#2276)
  • resource/aws_cloudformation_stack: Support updating tags (#2262)
  • resource/aws_elb: Add arn attribute (#2272)
  • resource/aws_ebs_volume: Add arn attribute (#2271)

BUG FIXES:

  • resource/aws_appautoscaling_policy: Retry putting policy on invalid token (#2135)
  • resource/aws_batch_compute_environment: compute_environment_name allows hyphens (#2126)
  • resource/aws_batch_job_definition: name allows hyphens (#2126)
  • resource/aws_elasticache_parameter_group: Raise timeout for retry on pending changes (#2134)
  • resource/aws_kms_key: Retry GetKeyRotationStatus on NotFoundException (#2133)
  • resource/aws_lb_target_group: Fix issue that prevented using aws_lb_target_group with Network type load balancers (#2251)
  • resource/aws_lb: mark subnets as ForceNew for network load balancers (#2310)
  • resource/aws_redshift_cluster: Make master_username ForceNew (#2202)
  • resource/aws_cloudwatch_log_metric_filter: Fix pattern length check (#2107)
  • resource/aws_cloudwatch_log_group: Use ID as name (#2190)
  • resource/aws_elasticsearch_domain: Added ForceNew to vpc_options (#2157)
  • resource/aws_redshift_cluster: Make snapshot identifiers ForceNew (#2212)
  • resource/aws_elasticsearch_domain_policy: Fix typo in err code (#2249)
  • resource/aws_appautoscaling_policy: Retry PutScalingPolicy on rate exceeded message (#2275)
  • resource/aws_dynamodb_table: Retry creation on LimitExceededException w/ different error message (#2274)

1.2.0 (October 31, 2017)

INTERNAL:

  • Remove id fields from schema definitions (#1626)

FEATURES:

  • New Resource: aws_servicecatalog_portfolio (#1694)
  • New Resource: aws_ses_domain_dkim (#1786)
  • New Resource: aws_cognito_identity_pool_roles_attachment (#863)
  • New Resource: aws_ecr_lifecycle_policy (#2096)
  • New Data Source: aws_nat_gateway (#1294)
  • New Data Source: aws_dynamodb_table (#2062)
  • New Data Source: aws_cloudtrail_service_account (#1774)

IMPROVEMENTS:

  • resource/aws_ami: Support configurable timeouts (#1811)
  • resource/ami_copy: Support configurable timeouts (#1811)
  • resource/ami_from_instance: Support configurable timeouts (#1811)
  • data-source/aws_security_group: add description (#1943)
  • resource/aws_cloudfront_distribution: Change the default minimum_protocol_version to TLSv1 (#1856)
  • resource/aws_sns_topic: Support SMS in protocols (#1813)
  • resource/aws_spot_fleet_request: Add support for tags (#2042)
  • resource/aws_kinesis_firehose_delivery_stream: Add s3_backup_mode option (#1830)
  • resource/aws_elasticsearch_domain: Support VPC configuration (#1958)
  • resource/aws_alb_target_group: Add support for target_type (#1589)
  • resource/aws_sqs_queue: Add support for tags (#1987)
  • resource/aws_security_group: Add revoke_rules_on_delete option to force a security group to revoke rules before deleting the grou (#2074)
  • resource/aws_cloudwatch_log_metric_filter: Add support for DefaultValue (#1578)
  • resource/aws_emr_cluster: Expose error on TERMINATED_WITH_ERRORS (#2081)

BUG FIXES:

  • resource/aws_elasticache_parameter_group: Add missing return to retry logic (#1891)
  • resource/aws_batch_job_queue: Wait for update completion when disabling (#1892)
  • resource/aws_snapshot_create_volume_permission: Raise creation timeout to 10mins (#1894)
  • resource/aws_snapshot_create_volume_permission: Raise creation timeout to 20mins (#2049)
  • resource/aws_kms_alias: Retry creation on NotFoundException (#1896)
  • resource/aws_kms_key: Retry reading tags on NotFoundException (#1900)
  • resource/aws_db_snapshot: Raise creation timeout to 20mins (#1905)
  • resource/aws_lb: Allow assigning EIP to network LB (#1956)
  • resource/aws_s3_bucket: Retry tagging on OperationAborted (#2008)
  • resource/aws_cognito_identity_pool: Fixed refresh of providers (#2015)
  • resource/aws_elasticache_replication_group: Raise creation timeout to 50mins (#2048)
  • resource/aws_api_gateway_usag_plan: Fixed setting of rate_limit (#2076)
  • resource/aws_elastic_beanstalk_application: Expose error leading to failed deletion (#2080)
  • resource/aws_s3_bucket: Accept query strings in redirect hosts (#2059)

1.1.0 (October 16, 2017)

NOTES:

  • resource/aws_alb_* & data-source/aws_alb_*: In order to support network LBs, ALBs were renamed to aws_lb_* due to the way APIs "new" (non-Classic) load balancers are structured in AWS. All existing ALB functionality remains untouched and new resources work the same way. aws_alb_* resources are still in place as "aliases", but documentation will only mention aws_lb_*. aws_alb_* aliases will be removed in future major version. (#1806)
  • Deprecated:
    • data-source/aws_alb
    • data-source/aws_alb_listener
    • data-source/aws_alb_target_group
    • resource/aws_alb
    • resource/aws_alb_listener
    • resource/aws_alb_listener_rule
    • resource/aws_alb_target_group
    • resource/aws_alb_target_group_attachment

FEATURES:

  • New Resource: aws_batch_job_definition (#1710)
  • New Resource: aws_batch_job_queue (#1710)
  • New Resource: aws_lb (#1806)
  • New Resource: aws_lb_listener (#1806)
  • New Resource: aws_lb_listener_rule (#1806)
  • New Resource: aws_lb_target_group (#1806)
  • New Resource: aws_lb_target_group_attachment (#1806)
  • New Data Source: aws_lb (#1806)
  • New Data Source: aws_lb_listener (#1806)
  • New Data Source: aws_lb_target_group (#1806)
  • New Data Source: aws_iam_user (#1805)
  • New Data Source: aws_s3_bucket (#1505)

IMPROVEMENTS:

  • data-source/aws_redshift_service_account: Add arn attribute (#1775)
  • data-source/aws_vpc_endpoint: Expose prefix_list_id (#1733)
  • resource/aws_kinesis_stream: Add support for encryption (#1139)
  • resource/aws_cloudwatch_log_group: Add support for encryption via kms_key_id (#1751)
  • resource/aws_spot_instance_request: Add support for instance_interruption_behaviour (#1735)
  • resource/aws_ses_event_destination: Add support for open & click event types (#1773)
  • resource/aws_efs_file_system: Expose dns_name (#1825)
  • resource/aws_security_group+aws_security_group_rule: Add support for rule description (#1587)
  • resource/aws_emr_cluster: enable configuration of ebs root volume size (#1375)
  • resource/aws_ami: Add root_snapshot_id attribute (#1572)
  • resource/aws_vpn_connection: Mark preshared keys as sensitive (#1850)
  • resource/aws_codedeploy_deployment_group: Support blue/green and in-place deployments with traffic control (#1162)
  • resource/aws_elb: Update ELB idle timeout to 4000s (#1861)
  • resource/aws_spot_fleet_request: Add support for instance_interruption_behaviour (#1847)
  • resource/aws_kinesis_firehose_delivery_stream: Specify kinesis stream as the source of a aws_kinesis_firehose_delivery_stream (#1605)
  • resource/aws_kinesis_firehose_delivery_stream: Output complete error when creation fails (#1881)

BUG FIXES:

  • data-source/aws_db_instance: Make db_instance_arn expose ARN instead of identifier (use db_cluster_identifier for identifier) (#1766)
  • data-source/aws_db_snapshot: Expose storage_type (was not exposed) (#1833)
  • data-source/aws_ami: Update the tags structure for easier referencing (#1706)
  • data-source/aws_ebs_snapshot: Update the tags structure for easier referencing (#1706)
  • data-source/aws_ebs_volume: Update the tags structure for easier referencing (#1706)
  • data-source/aws_instance: Update the tags structure for easier referencing (#1706)
  • resource/aws_spot_instance_request: Handle closed request correctly (#1903)
  • resource/aws_cloudtrail: Raise update retry timeout (#1820)
  • resource/aws_elasticache_parameter_group: Retry resetting group on pending changes (#1821)
  • resource/aws_kms_key: Retry getting rotation status (#1818)
  • resource/aws_kms_key: Retry getting key policy (#1854)
  • resource/aws_vpn_connection: Raise timeout to 40mins (#1819)
  • resource/aws_kinesis_firehose_delivery_stream: Fix crash caused by missing processing_configuration (#1738)
  • resource/aws_rds_cluster_instance: Treat configuring-enhanced-monitoring as pending state (#1744)
  • resource/aws_rds_cluster_instance: Treat more states as pending (#1790)
  • resource/aws_route_table: Increase number of not-found checks/retries after creation (#1791)
  • resource/aws_batch_compute_environment: Fix ARN attribute name/value (ecc_cluster_arn -> ecs_cluster_arn) (#1809)
  • resource/aws_kinesis_stream: Retry creation of the stream on LimitExceededException (handle throttling) (#1339)
  • resource/aws_vpn_connection_route: Treat route in state deleted as deleted (#1848)
  • resource/aws_eip: Avoid disassociating if there's no association (#1683)
  • resource/aws_elasticache_cluster: Allow scaling up cluster by modifying az_mode (avoid recreation) (#1758)
  • resource/aws_lambda_function: Fix Lambda Function Updates When Published (#1797)
  • resource/aws_appautoscaling_*: Use dimension to uniquely identify target/policy (#1808)
  • resource/aws_vpn_connection_route: Wait until route is available/deleted (#1849)
  • resource/aws_cloudfront_distribution: Ignore minimum_protocol_version if default certificate is used (#1785)
  • resource/aws_security_group: Using self = false with cidr_blocks should be allowed (#1839)
  • resource/aws_instance: Check VPC array size to avoid crashes on Eucalyptus Cloud (#1882)

1.0.0 (September 27, 2017)

NOTES:

  • resource/aws_appautoscaling_policy: Nest step scaling policy fields, deprecate 1st level fields (#1620)

FEATURES:

  • New Resource: aws_waf_rate_based_rule (#1606)
  • New Resource: aws_batch_compute_environment (#1048)

IMPROVEMENTS:

  • provider: Expand shared_credentials_file (#1511)
  • provider: Add support for Task Roles when running on ECS or CodeBuild (#1425)
  • resource/aws_instance: New user_data_base64 attribute that allows non-UTF8 data (such as gzip) to be assigned to user-data without corruption (#850)
  • data-source/aws_vpc: Expose enable_dns_* in aws_vpc data_source (#1373)
  • resource/aws_appautoscaling_policy: Add support for DynamoDB (#1650)
  • resource/aws_directory_service_directory: Add support for tags (#1398)
  • resource/aws_rds_cluster: Allow setting of rds cluster engine (#1415)
  • resource/aws_ssm_association: now supports update for parameters, schedule_expression,output_location (#1421)
  • resource/aws_ssm_patch_baseline: now supports update for multiple attributes (#1421)
  • resource/aws_cloudformation_stack: Add support for Import (#1432)
  • resource/aws_rds_cluster_instance: Expose availability_zone attribute (#1439)
  • resource/aws_efs_file_system: Add support for encryption (#1420)
  • resource/aws_db_parameter_group: Allow underscores in names (#1460)
  • resource/aws_elasticsearch_domain: Assign tags right after creation (#1399)
  • resource/aws_route53_record: Allow CAA record type (#1467)
  • resource/aws_codebuild_project: Allowed for BITBUCKET source type (#1468)
  • resource/aws_emr_cluster: Add instance_group parameter for EMR clusters (#1071)
  • resource/aws_alb_listener_rule: Populate listener_arn field (#1303)
  • resource/aws_api_gateway_rest_api: Add a body property to API Gateway RestAPI for Swagger import support (#1197)
  • resource/aws_opsworks_stack: Add support for tags (#1523)
  • Add retries for AppScaling policies throttling exceptions (#1430)
  • resource/aws_ssm_patch_baseline: Add compliance level to patch approval rules (#1531)
  • resource/aws_ssm_activation: Export ssm activation activation_code (#1570)
  • resource/aws_network_interface: Added private_dns_name to network_interface (#1599)
  • data-source/aws_redshift_service_account: updated with latest redshift service account ID's (#1614)
  • resource/aws_ssm_parameter: Refresh from state on 404 (#1436)
  • resource/aws_api_gateway_rest_api: Allow binary media types to be updated (#1600)
  • resource/aws_waf_rule: Make predicates' data_id required (it always was on the API's side, it's just reflected in the schema) (#1606)
  • resource/aws_waf_web_acl: Introduce new type field in rules to allow referencing RATE_BASED type (#1606)
  • resource/aws_ssm_association: Migrate the schema to use association_id (#1579)
  • resource/aws_ssm_document: Added name validation (#1638)
  • resource/aws_nat_gateway: Add tags support (#1625)
  • resource/aws_route53_record: Add support for Route53 multi-value answer routing policy (#1686)
  • resource/aws_instance: Read iops only when volume type is io1 (#1573)
  • resource/aws_rds_cluster(+_instance) Allow specifying the engine (#1591)
  • resource/aws_cloudwatch_event_target: Add Input transformer for Cloudwatch Events (#1343)
  • resource/aws_directory_service_directory: Support Import functionality (#1732)

BUG FIXES:

  • resource/aws_instance: Fix associate_public_ip_address (#1340)
  • resource/aws_instance: Fix import in EC2 Classic (#1453)
  • resource/aws_emr_cluster: Avoid spurious diff of log_uri (#1374)
  • resource/aws_cloudwatch_log_subscription_filter: Add support for ResourceNotFound (#1414)
  • resource/aws_sns_topic_subscription: Prevent duplicate (un)subscribe during initial creation (#1480)
  • resource/aws_alb: Cleanup ENIs after deleting ALB (#1427)
  • resource/aws_s3_bucket: Wrap s3 calls in retry to avoid race during creation (#891)
  • resource/aws_eip: Remove from state on deletion (#1551)
  • resource/aws_security_group: Adding second scenario where IPv6 is not supported (#880)

0.1.4 (August 08, 2017)

FEATURES:

  • New Resource: aws_cloudwatch_dashboard (#1172)
  • New Data Source: aws_internet_gateway (#1196)
  • New Data Source: aws_efs_mount_target (#1255)

IMPROVEMENTS:

  • AWS SDK to log extra debug details on request errors (#1210)
  • resource/aws_spot_fleet_request: Add support for wait_for_fulfillment (#1241)
  • resource/aws_autoscaling_schedule: Allow empty value (#1268)
  • resource/aws_ssm_association: Add support for OutputLocation and Schedule Expression (#1253)
  • resource/aws_ssm_patch_baseline: Update support for Operating System (#1260)
  • resource/aws_db_instance: Expose db_instance ca_cert_identifier (#1256)
  • resource/aws_rds_cluster: Add support for iam_roles to rds_cluster (#1258)
  • resource/aws_rds_cluster_parameter_group: Support > 20 parameters (#1298)
  • data-source/aws_iam_role: Normalize the IAM role data source (#1330)
  • resource/aws_kinesis_stream: Increase Timeouts, add Timeout Support (#1345)

BUG FIXES:

  • resource/aws_instance: Guard check for aws_instance UserData to prevent panic (#1288)
  • resource/aws_config: Set AWS Config Configuration recorder & Delivery channel names as ForceNew (#1247)
  • resource/aws_cloudtrail: Retry if IAM role isn't propagated yet (#1312)
  • resource/aws_cloudtrail: Fix CloudWatch role ARN/group updates (#1357)
  • resource/aws_eip_association: Avoid crash in EC2 Classic (#1344)
  • resource/aws_elasticache_parameter_group: Allow removing parameters (#1309)
  • resource/aws_kinesis: add retries for Kinesis throttling exceptions (#1085)
  • resource/aws_kinesis_firehose: adding support for ExtendedS3DestinationConfiguration (#1015)
  • resource/aws_spot_fleet_request: Ignore empty key_name (#1203)
  • resource/aws_emr_instance_group: fix crash when changing instance_group.count (#1287)
  • resource/aws_elasticsearch_domain: Fix updating config when update doesn't involve EBS (#1131)
  • resource/aws_s3_bucket: Avoid crashing when no lifecycle rule is defined (#1316)
  • resource/elastic_transcoder_preset: Fix provider validation (#1338)
  • resource/aws_s3_bucket: Avoid crashing when filter is not set (#1350)

0.1.3 (July 25, 2017)

FEATURES:

  • New Data Source: aws_iam_instance_profile (#1024)
  • New Data Source: aws_alb_target_group (#1037)
  • New Data Source: aws_iam_group (#1140)
  • New Resource: aws_api_gateway_request_validator (#1064)
  • New Resource: aws_api_gateway_gateway_response (#1168)
  • New Resource: aws_iot_policy (#986)
  • New Resource: aws_iot_certificate (#1225)

IMPROVEMENTS:

  • resource/aws_sqs_queue: Add support for Server-Side Encryption (#962)
  • resource/aws_vpc: Add support for classiclink_dns_support (#1079)
  • resource/aws_lambda_function: Add support for lambda_function vpc_config update (#1080)
  • resource/aws_lambda_function: Add support for lambda_function dead_letter_config update (#1080)
  • resource/aws_route53_health_check: add support for health_check regions (#1116)
  • resource/aws_spot_instance_request: add support for request launch group (#1097)
  • resource/aws_rds_cluster_instance: Export the RDI Resource ID for the instance (#1142)
  • resource/aws_sns_topic_subscription: Support password-protected HTTPS endpoints (#861)

BUG FIXES:

  • provider: Remove assumeRoleHash (#1227)
  • resource/aws_ami: Retry on InvalidAMIID.NotFound (#1035)
  • resource/aws_iam_server_certificate: Fix restriction on length of name_prefix (#1217)
  • resource/aws_autoscaling_group: Fix handling of empty vpc_zone_identifier (EC2 classic & default VPC) (#1191)
  • resource/aws_ecr_repository_policy: Add retry logic to work around IAM eventual consistency (#1165)
  • resource/aws_ecs_service: Fixes normalization issues in placement_strategy (#1025)
  • resource/aws_eip: Retry reading EIPs on creation (#1053)
  • resource/aws_elastic_beanstalk_environment: Avoid spurious diffs of JSON-based settings (#901)
  • resource/aws_opsworks_permission: Fix 'set permissions' failing to set ssh access (#1038)
  • resource/aws_s3_bucket_notification: Fix missing bucket field after import (#978)
  • resource/aws_sfn_state_machine: Handle another NotFound exception type (#1062)
  • resource/aws_ssm_parameter: ForceNew on ssm_parameter rename (#1022)
  • resource/aws_instance: Update SourceDestCheck modification on new resources (#1065)
  • resource/aws_spot_instance_request: fixed and issue with network interfaces configuration (#1070)
  • resource/aws_rds_cluster: Modify RDS Cluster after restoring from snapshot, if required (#926)
  • resource/aws_kms_alias: Retry lookups after creation (#1040)
  • resource/aws_internet_gateway: Retry deletion properly on DependencyViolation (#1021)
  • resource/aws_elb: Cleanup ENIs after deleting ELB (#1036)
  • resource/aws_kms_key: Retry lookups after creation (#1039)
  • resource/aws_dms_replication_instance: Add modifying as a pending creation state (#1114)
  • resource/aws_redshift_cluster: Trigger ForceNew aws_redshift_cluster on encrypted change (#1120)
  • resource/aws_default_network_acl: Add support for ipv6_cidr_block (#1113)
  • resource/aws_autoscaling_group: Suppress diffs when an empty set is specified for availability_zones (#1190)
  • resource/aws_vpc: Ignore ClassicLink DNS support in unsupported regions (#1176)
  • resource/elastic_beanstalk_configuration_template: Handle missing platform (#1222)
  • r/elasticache_parameter_group: support more than 20 parameters (#1221)
  • data-source/aws_db_instance: Fix the output of subnet_group_name (#1141)
  • data-source/aws_iam_server_certificate: Fix restriction on length of name_prefix (#1217)

0.1.2 (June 30, 2017)

FEATURES:

  • New Resource: aws_network_interface_sg_attachment (#860)
  • New Data Source: aws_ecr_repository (#944)

IMPROVEMENTS:

  • Added ability to change the deadline for the EC2 metadata API endpoint (#950)
  • resource/aws_api_gateway_integration: Add support for specifying cache key parameters (#893)
  • resource/aws_cloudwatch_event_target: Add ecs_target (#977)
  • resource/aws_vpn_connection: Add BGP related information on aws_vpn_connection (#973)
  • resource/aws_cloudformation_stack: Add timeout support (#994)
  • resource/aws_ssm_parameter: Add support for ssm parameter overwrite (#1006)
  • resource/aws_codebuild_project: Add support for environment privileged_mode [GH1009]
  • resource/aws_dms_endpoint: Add support for dynamodb as an endpoint target (#1002)
  • resource/aws_s3_bucket: Support lifecycle tags filter (#899)
  • resource/aws_s3_bucket_object: Allow to set WebsiteRedirect on S3 object (#1020)

BUG FIXES:

  • resource/aws_waf: Only set FieldToMatch.Data if not empty (#953)
  • resource/aws_elastic_beanstalk_application_version: Scope labels to application (#956)
  • resource/aws_s3_bucket: Allow use of days = 0 with lifecycle transition (#957)
  • resource/aws_ssm_maintenance_window_task: Make task_parameters updateable on aws_ssm_maintenance_window_task resource (#965)
  • resource/aws_kinesis_stream: don't force stream destroy on shard_count update (#894)
  • resource/aws_cloudfront_distribution: Remove validation from custom_origin params (#987)
  • resource_aws_route53_record: Allow import of Route 53 records with underscores in the name (#14717)
  • d/aws_db_snapshot: Id was being set incorrectly (#992)
  • resource/aws_spot_fleet_request: Raise the create timeout to be 10m (#993)
  • d/aws_ecs_cluster: Add ARN as an exported param for aws_ecs_cluster (#991)
  • resource/aws_ebs_volume: Not setting the state for ebs_volume correctly (#999)
  • resource/aws_network_acl: Make action in ingress / egress case insensitive (#1000)

0.1.1 (June 21, 2017)

BUG FIXES:

  • Fixing malformed ARN attribute for aws_security_group data source (#910)

0.1.0 (June 20, 2017)

BACKWARDS INCOMPATIBILITIES / NOTES:

FEATURES:

IMPROVEMENTS:

  • resource/ebs_snapshot: Add support for tags (#3)
  • resource/aws_elasticsearch_domain: now retries on IAM role association failure (#12)
  • resource/codebuild_project: Increase timeout for creation retry (IAM) (#904)
  • resource/dynamodb_table: Expose stream_label attribute (#20)
  • resource/opsworks: Add support for configurable timeouts in AWS OpsWorks Instances. (#857)
  • Fix handling of AdRoll's hologram clients (#17)
  • resource/sqs_queue: Add support for name_prefix to aws_sqs_queue (#855)
  • resource/iam_role: Add support for iam_role tp force_detach_policies (#890)

BUG FIXES:

  • fix aws cidr validation error [#15158](hashicorp/terraform#15158)
  • resource/elasticache_parameter_group: Retry deletion on InvalidCacheParameterGroupState (#8)
  • resource/security_group: Raise creation timeout (#9)
  • resource/rds_cluster: Retry modification on InvalidDBClusterStateFault (#18)
  • resource/lambda: Fix incorrect GovCloud regexes (#16)
  • Allow ipv6_cidr_block to be assigned to peering_connection (#879)
  • resource/rds_db_instance: Correctly create cross-region encrypted replica (#865)
  • resource/eip: dissociate EIP on update (#878)
  • resource/iam_server_certificate: Increase deletion timeout (#907)