Skip to content

build(deps): bump the terraform-minor-patch group across 3 directories with 4 updates#98

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e
Open

build(deps): bump the terraform-minor-patch group across 3 directories with 4 updates#98
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/iam directory: hashicorp/aws and terraform-aws-modules/iam/aws.
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/lambda directory: hashicorp/aws and terraform-aws-modules/lambda/aws.
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/s3-bucket directory: hashicorp/aws and terraform-aws-modules/s3-bucket/aws.

Updates hashicorp/aws from 6.50.0 to 6.53.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates terraform-aws-modules/iam/aws from 6.6.0 to 6.6.1

Release notes

Sourced from terraform-aws-modules/iam/aws's releases.

v6.6.1

6.6.1 (2026-05-28)

Bug Fixes

  • Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (#646) (10161bc)
Changelog

Sourced from terraform-aws-modules/iam/aws's changelog.

6.6.1 (2026-05-28)

Bug Fixes

  • Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (#646) (10161bc)
Commits
  • 5b962b1 chore(release): version 6.6.1 [skip ci]
  • 10161bc fix: Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (...
  • See full diff in compare view

Updates hashicorp/aws from 6.50.0 to 6.54.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates hashicorp/aws from 6.50.0 to 6.54.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates hashicorp/aws from 6.50.0 to 6.53.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone n...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 25, 2026
@dependabot dependabot Bot requested review from a team as code owners June 25, 2026 14:05
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 25, 2026
@dependabot dependabot Bot force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch 7 times, most recently from 79d3dad to 2047310 Compare July 7, 2026 12:19
@dependabot dependabot Bot force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch from 2047310 to 6bfb74f Compare July 9, 2026 09:09
@dependabot
build(deps): bump the terraform-minor-patch group across 3 directorie…
d97607d 
…s with 4 updates

Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/iam directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam).
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/lambda directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/lambda/aws](https://github.com/terraform-aws-modules/terraform-aws-lambda).
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/s3-bucket directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/s3-bucket/aws](https://github.com/terraform-aws-modules/terraform-aws-s3-bucket).


Updates `hashicorp/aws` from 6.50.0 to 6.53.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `terraform-aws-modules/iam/aws` from 6.6.0 to 6.6.1
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-iam/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-iam@v6.6.0...v6.6.1)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.53.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `terraform-aws-modules/lambda/aws` from 8.7.0 to 8.8.0
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-lambda/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-lambda/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-lambda@v8.7.0...v8.8.0)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.53.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `hashicorp/aws` from 6.50.0 to 6.54.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.50.0...v6.53.0)

Updates `terraform-aws-modules/s3-bucket/aws` from 5.13.0 to 5.14.1
- [Release notes](https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/releases)
- [Changelog](https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/blob/master/CHANGELOG.md)
- [Commits](terraform-aws-modules/terraform-aws-s3-bucket@v5.13.0...v5.14.1)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-version: 6.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: hashicorp/aws
  dependency-version: 6.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: terraform-aws-modules/iam/aws
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: terraform-minor-patch
- dependency-name: terraform-aws-modules/lambda/aws
  dependency-version: 8.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
- dependency-name: terraform-aws-modules/s3-bucket/aws
  dependency-version: 5.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: terraform-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch from 6bfb74f to d97607d Compare July 10, 2026 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants