Bump the terraform-minor-patch group across 3 directories with 1 update #1071

dependabot · 2025-12-18T02:19:55Z

Bumps the terraform-minor-patch group with 1 update in the /infrastructure/account directory: hashicorp/aws.
Bumps the terraform-minor-patch group with 1 update in the /infrastructure/grafana/non-prod/terraform directory: hashicorp/aws.
Bumps the terraform-minor-patch group with 1 update in the /infrastructure/instance directory: hashicorp/aws.

Updates hashicorp/aws from 6.25.0 to 6.27.0

Release notes

Sourced from hashicorp/aws's releases.

v6.27.0

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

resource/aws_verifiedpermissions_identity_source: Fixes error when updating resource (#45540)

... (truncated)

Commits

6ddf44c Update CHANGELOG.md for #45638
35db71c chore: prepare v6.27.0 release (#45638)
98073e1 Merge pull request #41113 from Shion1305/f-aws_dynamodb_table-specify-name-fo...
854bd97 Update CHANGELOG.md for #45639
fe57056 Merge pull request #45639 from hashicorp/f-aws_networkmanager_connect_peer-4-...
5cde1f4 Merge branch 'main' into f-aws_dynamodb_table-specify-name-for-gsi-flattenTab...
547ae28 Adds tests
88967ec Correct CHANGELOG entry file name.
85366f9 Remove 'TestAccNetworkManagerConnectPeer_UpgradeFromV6_26_0_noPeerASN' -- it'...
d356e91 Merge pull request #45536 from hashicorp/f-autoflex-xmlwrapper-enhancements
Additional commits viewable in compare view

Updates hashicorp/aws from 6.25.0 to 6.27.0

Release notes

Sourced from hashicorp/aws's releases.

v6.27.0

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

resource/aws_verifiedpermissions_identity_source: Fixes error when updating resource (#45540)

... (truncated)

Commits

6ddf44c Update CHANGELOG.md for #45638
35db71c chore: prepare v6.27.0 release (#45638)
98073e1 Merge pull request #41113 from Shion1305/f-aws_dynamodb_table-specify-name-fo...
854bd97 Update CHANGELOG.md for #45639
fe57056 Merge pull request #45639 from hashicorp/f-aws_networkmanager_connect_peer-4-...
5cde1f4 Merge branch 'main' into f-aws_dynamodb_table-specify-name-for-gsi-flattenTab...
547ae28 Adds tests
88967ec Correct CHANGELOG entry file name.
85366f9 Remove 'TestAccNetworkManagerConnectPeer_UpgradeFromV6_26_0_noPeerASN' -- it'...
d356e91 Merge pull request #45536 from hashicorp/f-autoflex-xmlwrapper-enhancements
Additional commits viewable in compare view

Updates hashicorp/aws from 6.25.0 to 6.27.0

Release notes

Sourced from hashicorp/aws's releases.

v6.27.0

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.27.0 (December 17, 2025)

FEATURES:

New Data Source: aws_organizations_account (#45543)

New Function: user_agent (#45464)

New List Resource: aws_kms_key (#45514)

New Resource: aws_cloudfront_trust_store (#45534)

ENHANCEMENTS:

data-source/aws_datazone_domain: Add root_domain_unit_id attribute (#44964)

data-source/aws_networkmanager_core_network_policy_document: Add routing_policies and attachment_routing_policy_rules arguments (#45246)

data-source/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled attribute (#45630)

data-source/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled attribute (#45630)

provider: Add user_agent argument (#45464)

provider: The provider_meta block is now supported. The user_agent argument enables module authors to include additional product information in the User-Agent header sent during all AWS API requests made during Create, Read, Update, and Delete operations. (#45464)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.kendra_knowledge_base_configuration argument (#44388)

resource/aws_bedrockagent_knowledge_base: Add knowledge_base_configuration.sql_knowledge_base_configuration and storage_configuration.neptune_analytics_configuration arguments (#45465)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.mongo_db_atlas_configuration argument (#37220)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.opensearch_managed_cluster_configuration argument (#44060)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.s3_vectors_configuration block (#45468)

resource/aws_bedrockagent_knowledge_base: Make knowledge_base_configuration.vector_knowledge_base_configuration and ``storage_configuration` optional (#44388)

resource/aws_codebuild_project: Add cache.cache_namespace argument (#45584)

resource/aws_datazone_domain: Add root_domain_unit_id argument (#44964)

resource/aws_lambda_function: code_sha256 is now optional and computed (#45618)

resource/aws_networkmanager_connect_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in bgp_options.peer_asn (#45246)

resource/aws_networkmanager_connect_peer: Support 4 byte ASNs in configuration.bgp_configurations.peer_asn (#45639)

resource/aws_networkmanager_dx_gateway_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_site_to_site_vpn_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_transit_gateway_route_table_attachment: Add routing_policy_label argument (#45246)

resource/aws_networkmanager_vpc_attachment: Add routing_policy_label argument (#45246)

resource/aws_route53_resolver_endpoint: Add rni_enhanced_metrics_enabled argument (#45630)

resource/aws_route53_resolver_endpoint: Add target_name_server_metrics_enabled argument (#45630)

resource/aws_vpclattice_service_network_vpc_association: Add private_dns_enabled and dns_options arguments (#45619)

BUG FIXES:

data-source/aws_networkmanager_core_network_policy_document: Correct plan-time validation of attachment_policies.conditions.type to allow account instead of account-id (#45246)

resource/aws_bedrockagent_knowledge_base: Mark knowledge_base_configuration.vector_knowledge_base_configuration.embedding_model_configuration and knowledge_base_configuration.vector_knowledge_base_configuration.supplemental_data_storage_configuration as ForceNew (#45465)

resource/aws_dynamodb_table: Fix perpetual diff on global_secondary_index when using ignore_changes lifecycle meta-argument (#41113)

resource/aws_iam_user: Fix NoSuchEntity errors when name and tags arguments are both updated (#45608)

resource/aws_lakeformation_data_cells_filter: Fix excluded_column_names ordering causing "Provider produced inconsistent result after apply" errors (#45453)

resource/aws_neptune_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_networkmanager_connect_peer: Change bgp_options and bgp_options.peer_asn to Optional, Computed and ForceNew (#45639)

resource/aws_odb_cloud_vm_cluster: Enable deletion of vm cluster in resource shared account. (#45552)

resource/aws_rds_global_cluster: Fix a regression in the minor version upgrade workflow triggered by upstream changes to the API error response text (#45605)

resource/aws_s3_bucket: Fix endpoint rule error, AccountId must only contain a-z, A-Z, 0-9 and `-` errors when the provider is configured with skip_requesting_account_id = true. This fixes a regression introduced in v6.23.0 (#45576)

resource/aws_verifiedpermissions_identity_source: Fixes error when updating resource (#45540)

... (truncated)

Commits

Bumps the terraform-minor-patch group with 1 update in the /infrastructure/account directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws). Bumps the terraform-minor-patch group with 1 update in the /infrastructure/grafana/non-prod/terraform directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws). Bumps the terraform-minor-patch group with 1 update in the /infrastructure/instance directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws). Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) Updates `hashicorp/aws` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v6.25.0...v6.27.0) --- updated-dependencies: - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch - dependency-name: hashicorp/aws dependency-version: 6.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2025-12-24T16:59:50Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Dec 18, 2025

dependabot bot temporarily deployed to dev December 18, 2025 02:19 Inactive

dependabot bot temporarily deployed to dev December 18, 2025 02:20 Inactive

dependabot bot had a problem deploying to internal-dev December 18, 2025 02:26 Error

dependabot bot had a problem deploying to internal-dev-sandbox December 18, 2025 02:26 Failure

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from b1cc7c1 to 9e4a1c8 Compare December 19, 2025 02:18

dependabot bot temporarily deployed to dev December 19, 2025 02:18 Inactive

dependabot bot temporarily deployed to dev December 19, 2025 02:19 Inactive

dependabot bot had a problem deploying to internal-dev December 19, 2025 02:22 Error

dependabot bot had a problem deploying to internal-dev-sandbox December 19, 2025 02:22 Failure

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from 9e4a1c8 to 2c2cdf6 Compare December 20, 2025 01:00

dependabot bot temporarily deployed to dev December 20, 2025 01:00 Inactive

dependabot bot temporarily deployed to dev December 20, 2025 01:01 Inactive

dependabot bot had a problem deploying to internal-dev-sandbox December 20, 2025 01:03 Failure

dependabot bot had a problem deploying to internal-dev December 20, 2025 01:03 Error

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from 2c2cdf6 to d6e930e Compare December 23, 2025 02:18

dependabot bot temporarily deployed to dev December 23, 2025 02:18 Inactive

dependabot bot temporarily deployed to dev December 23, 2025 02:19 Inactive

dependabot bot had a problem deploying to internal-dev December 23, 2025 02:21 Error

dependabot bot had a problem deploying to internal-dev-sandbox December 23, 2025 02:21 Failure

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from d6e930e to c3e7340 Compare December 23, 2025 10:32

dependabot bot temporarily deployed to dev December 23, 2025 10:32 Inactive

dependabot bot temporarily deployed to dev December 23, 2025 10:33 Inactive

dependabot bot had a problem deploying to internal-dev-sandbox December 23, 2025 10:37 Error

dependabot bot had a problem deploying to internal-dev December 23, 2025 10:37 Failure

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from c3e7340 to e67cbe4 Compare December 24, 2025 02:20

dependabot bot temporarily deployed to dev December 24, 2025 02:20 Inactive

dependabot bot had a problem deploying to internal-dev-sandbox December 24, 2025 02:23 Failure

dependabot bot had a problem deploying to internal-dev December 24, 2025 02:23 Error

dependabot bot force-pushed the dependabot/terraform/infrastructure/account/terraform-minor-patch-86270feba6 branch from e67cbe4 to 453b4aa Compare December 24, 2025 16:56

dependabot bot temporarily deployed to dev December 24, 2025 16:56 Inactive

dependabot bot temporarily deployed to dev December 24, 2025 16:57 Inactive

dependabot bot had a problem deploying to internal-dev December 24, 2025 16:59 Failure

dependabot bot had a problem deploying to internal-dev-sandbox December 24, 2025 16:59 Error

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the terraform-minor-patch group across 3 directories with 1 update #1071

Bump the terraform-minor-patch group across 3 directories with 1 update #1071

Uh oh!

dependabot bot commented on behalf of github Dec 18, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Dec 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the terraform-minor-patch group across 3 directories with 1 update #1071

Are you sure you want to change the base?

Bump the terraform-minor-patch group across 3 directories with 1 update #1071

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.27.0

6.27.0 (December 17, 2025)

6.27.0 (December 17, 2025)

v6.27.0

6.27.0 (December 17, 2025)

6.27.0 (December 17, 2025)

v6.27.0

6.27.0 (December 17, 2025)

6.27.0 (December 17, 2025)

Uh oh!

sonarqubecloud bot commented Dec 24, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Dec 18, 2025 •

edited

Loading