Skip to content

chore(deps): update terraform aws to v6.52.0#312

Merged
dreadnode-renovate-bot[bot] merged 2 commits into
mainfrom
renovate/aws-6.x
Jun 28, 2026
Merged

chore(deps): update terraform aws to v6.52.0#312
dreadnode-renovate-bot[bot] merged 2 commits into
mainfrom
renovate/aws-6.x

Conversation

@dreadnode-renovate-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider minor 6.51.06.52.0
aws (source) required_provider minor ~> 6.51.0~> 6.52.0

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.52.0

Compare Source

NOTES:

  • resource/aws_lakeformation_permissions: Grants on aws_glue_catalog_table views (table_type = "VIRTUAL_VIEW") are now preserved when the view's view_definition is updated, as the underlying table is updated in place rather than recreated (#​48532)
  • resource/aws_serverlessapplicationrepository_cloudformation_stack: Existing affected resources whose state still contains **** for NoEcho parameters or is missing default-matching parameters keys require a one-time manual reconciliation after upgrading. To recover: (1) add lifecycle { ignore_changes = [parameters] } temporarily, (2) pull state with terraform state pull, (3) correct the affected parameters values and increment serial, (4) push state back with terraform state push, (5) remove the ignore_changes block, and (6) confirm with terraform plan. For non-sensitive parameters you can instead temporarily set the parameter to a non-default value, apply, revert, and apply again (#​46748)
  • resource/aws_serverlessapplicationrepository_cloudformation_stack: NoEcho parameter values are now persisted in Terraform state in plaintext rather than as ****. This is consistent with how Terraform stores other sensitive inputs (for example, aws_db_instance.password). Ensure your state backend is appropriately secured (#​46748)

FEATURES:

  • New Data Source: aws_s3_bucket_notification (#​31512)
  • New List Resource: aws_appautoscaling_target (#​48449)
  • New List Resource: aws_bedrockagentcore_registry (#​48314)
  • New List Resource: aws_dynamodb_table_item (#​48520)
  • New Resource: aws_bedrockagentcore_registry (#​48314)

ENHANCEMENTS:

  • data-source/aws_eks_cluster: Add control_plane_egress_mode attribute to vpc_config block (#​48497)
  • provider: Generated names are now created using a cryptographically strong random generator instead of a timestamp and counter, so values are more uniformly distributed over the lowercase hexadecimal digit characters (#​47995)
  • resource/aws_appautoscaling_target: Add resource identity support (#​48449)
  • resource/aws_cloudwatch_log_account_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_anomaly_detector: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_data_protection_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_delivery: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_delivery_destination: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_delivery_destination_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_delivery_source: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_destination: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_destination_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_index_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_resource_policy: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_log_stream: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_query_definition: Add Resource Identity support (#​48502)
  • resource/aws_cloudwatch_query_definition: Add arn attribute (#​48502)
  • resource/aws_default_network_acl: Prevents error on creation when tag-based authorization in use. (#​44798)
  • resource/aws_dynamodb_table_item: Add Resource Identity support (#​48520)
  • resource/aws_dynamodb_table_item: Add import support (#​48520)
  • resource/aws_eks_cluster: Add control_plane_egress_mode argument to vpc_config block (#​48497)
  • resource/aws_mq_broker: Known endpoints in instances.0.endpoints are now returned in a deterministic order based on protocol prefix and port, including the new https://...:16001 Prometheus metrics endpoint introduced in RabbitMQ 4.2 and later; any unrecognized endpoint types are appended afterward in API order (#​47777)
  • resource/aws_serverlessapplicationrepository_cloudformation_stack: Change capabilities from Required to Optional/Computed. Applications without required capabilities can now omit the argument and the value applied by AWS will be tracked in state (#​46748)

BUG FIXES:

  • provider: Fix AWS API errors such as EC2's IdempotentParameterMismatch by generating client-supplied idempotency tokens using a cryptographically strong random generator and extended alphabet (#​47995)
  • provider: Restore HTTP request and response body content in TF_LOG=DEBUG output for resources, data sources, and list resources. Redaction continues to apply to ephemeral resources and actions (#​48463)
  • resource/aws_cloudwatch_log_delivery: Add mutex lock around create, update, and delete operations to prevent ConflictException errors (#​48158)
  • resource/aws_cloudwatch_log_delivery: Fix Provided delivery configuration is invalid for the destination type errors when s3_delivery_configuration is unchanged (#​46123)
  • resource/aws_elasticache_global_replication_group: Fix persistent automatic_failover_enabled diff by reading the value from the primary member (#​47647)
  • resource/aws_elasticache_replication_group: Fix persistent automatic_failover_enabled diff on member replication groups of an aws_elasticache_global_replication_group (#​47647)
  • resource/aws_elasticache_reserved_cache_node: Fix Provider returned invalid result object after apply and subsequent too many results warning that silently removed the resource from state when id was not set in configuration (#​48462)
  • resource/aws_elasticache_serverless_cache: Fix InvalidParameterCombination: Serverless Cache modifications only support modifying one field per request error when changing multiple attributes in a single apply (#​47918)
  • resource/aws_elasticache_user: Fix user_id producing inconsistent final plan when using mixed-case values (#​47705)
  • resource/aws_elasticache_user_group: Fix user_group_id producing inconsistent final plan when using mixed-case values (#​47705)
  • resource/aws_glue_catalog_table: Allow in-place update of a VIRTUAL_VIEW table's view_definition by passing ViewUpdateAction to the Glue UpdateTable API (#​48532)
  • resource/aws_serverlessapplicationrepository_cloudformation_stack: Fix change set: unexpected state 'FAILED', wanted target 'CREATE_COMPLETE'. last error: No updates are to be performed errors on subsequent applies. Previously, parameters whose value matched the application's default were pruned from state, and NoEcho parameter values were stored as ****, both of which produced false drift (#​46748)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

| datasource         | package       | from   | to     |
| ------------------ | ------------- | ------ | ------ |
| terraform-provider | hashicorp/aws | 6.51.0 | 6.52.0 |
@dreadnode-renovate-bot dreadnode-renovate-bot Bot added the area/docs Changes made to documentation label Jun 28, 2026
@dreadnode-renovate-bot dreadnode-renovate-bot Bot added this pull request to the merge queue Jun 28, 2026
Merged via the queue into main with commit 5a1682d Jun 28, 2026
11 of 13 checks passed
@dreadnode-renovate-bot dreadnode-renovate-bot Bot deleted the renovate/aws-6.x branch June 28, 2026 01:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/docs Changes made to documentation renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants