FEATURES:

• New Resource: aws_cloudwatch_log_account_policy (#38328)
• New Resource: aws_verifiedpermissions_identity_source (#38181)

ENHANCEMENTS:

• data-source/aws_launch_template: Add network_interfaces.primary_ipv6 attribute (#37142)
• data-source/aws_mskconnect_connector: Add tags attribute (#38270)
• data-source/aws_mskconnect_custom_plugin: Add tags attribute (#38270)
• data-source/aws_mskconnect_worker_configuration: Add tags attribute (#38270)
• data-source/aws_oam_link: Add link_configuration attribute (#38277)
• resource/aws_cloudformation_stack_set_instance: Extend deployment_targets argument. (#37898)
• resource/aws_cloudtrail_event_data_store: Add billing_mode argument (#38273)
• resource/aws_db_instance: Fix InvalidParameterCombination: A parameter group can't be specified during Read Replica creation for the following DB engine: postgres errors (#38227)
• resource/aws_ec2_capacity_reservation: Add configurable timeouts (#36754)
• resource/aws_ec2_capacity_reservation: Retry InsufficientInstanceCapacity errors (#36754)
• resource/aws_eks_cluster: Add bootstrap_self_managed_addons argument (#38162)
• resource/aws_fms_policy: Add resource_set_ids attribute (#38161)
• resource/aws_fsx_ontap_file_system: Add 384, 768, 1536, 3072, and 6144 as valid values for throughput_capacity (#38308)
• resource/aws_fsx_ontap_file_system: Add 384, 768, and 1536 as valid values for throughput_capacity_per_ha_pair (#38308)
• resource/aws_fsx_ontap_file_system: Add MULTI_AZ_2 as a valid value for deployment_type (#38308)
• resource/aws_globalaccelerator_cross_account_attachment: Add cidr_block argument to resource configuration block (#38196)
• resource/aws_iam_server_certificate: Add configurable delete timeout (#38212)
• resource/aws_launch_template: Add network_interfaces.primary_ipv6 argument (#37142)
• resource/aws_mskconnect_connector: Add tags argument and tags_all attribute (#38270)
• resource/aws_mskconnect_custom_plugin: Add tags argument and tags_all attribute (#38270)
• resource/aws_mskconnect_worker_configuration: Add tags argument and tags_all attribute (#38270)
• resource/aws_mskconnect_worker_configuration: Add resource deletion logic (#38270)
• resource/aws_oam_link: Add link_configuration argument (#38277)
• resource/aws_rds_cluster: Add ca_certificate_identifier argument and ca_certificate_valid_till attribute (#37108)
• resource/aws_ssm_association: Add tags argument and tags_all attribute (#38271)

BUG FIXES:

• aws_dx_lag: Checks for errors other than NotFound when reading. (#38292)
• aws_dynamodb_kinesis_streaming_destination: Checks for errors other than NotFound when reading. (#38292)
• aws_ec2_capacity_block_reservation: Checks for errors other than NotFound when reading. (#38292)
• aws_opensearchserverless_access_policy: Checks for errors other than NotFound when reading. (#38292)
• aws_opensearchserverless_collection: Checks for errors other than NotFound when reading. (#38292)
• aws_opensearchserverless_security_config: Checks for errors other than NotFound when reading. (#38292)
• aws_opensearchserverless_security_policy: Checks for errors other than NotFound when reading. (#38292)
• aws_opensearchserverless_vpc_endpoint: Checks for errors other than NotFound when reading. (#38292)
• aws_ram_principal_association: Checks for errors other than NotFound when reading. (#38292)
• aws_route_table: Checks for errors other than NotFound when reading. (#38292)
• data-source/aws_ecr_repository: Fix issue where the tags attribute is not set (#38272)
• data-source/aws_eks_cluster: Add access_config.bootstrap_cluster_creator_admin_permissions attribute (#38295)
• resource/aws_appstream_fleet: Support 0 as a valid value for idle_disconnect_timeout_in_seconds (#38274)
• resource/aws_cloudformation_stack_set_instance: Add ForceNew to deployment_targets attributes to ensure a new resource is recreated when the deployment_targets argument is changed, which was not the case previously. (#37898)
• resource/aws_db_instance: Correctly mark incomplete instances as tainted during creation (#38252)
• resource/aws_eks_cluster: Set access_config.bootstrap_cluster_creator_admin_permissions to true on Read for clusters with no access_config configured. This allows in-place updates of existing clusters when access_config is configured (#38295)
• resource/aws_elasticache_serverless_cache: Allow cache_usage_limits.data_storage.maximum, cache_usage_limits.data_storage.minimum, cache_usage_limits.ecpu_per_second.maximum and cache_usage_limits.ecpu_per_second.minimum to be updated in-place (#38269)
• resource/aws_mskconnect_connector: Fix interface conversion: interface {} is nil, not map[string]interface {} panic when log_delivery.worker_log_delivery is empty ({}) (#38270)