FEATURES:

• resource/aws_kinesis_firehose_delivery_stream: Add secrets_manager_configuration to redshift_configuration, snowflake_configuration, and splunk_configuration (#38151)
• New Data Source: aws_cloudfront_origin_access_control (#36301)
• New Data Source: aws_timestreamwrite_database (#36368)
• New Data Source: aws_timestreamwrite_table (#36599)
• New Resource: aws_datazone_project (#38345)
• New Resource: aws_grafana_workspace_service_account (#38101)
• New Resource: aws_grafana_workspace_service_account_token (#38101)
• New Resource: aws_rds_certificate (#35003)
• New Resource: aws_rekognition_stream_processor (#37536)

ENHANCEMENTS:

• data-source/aws_elasticache_replication_group: Add cluster_mode attribute (#38002)
• data-source/aws_lakeformation_data_lake_settings: Add allow_full_table_external_data_access attribute (#34474)
• data-source/aws_msk_cluster: Add broker_node_group_info attribute (#37705)
• resource/aws_bedrockagent_agent : Add skip_resource_in_use_check argument (#37586)
• resource/aws_bedrockagent_agent_action_group: Add action_group_executor.custom_control argument (#37484)
• resource/aws_bedrockagent_agent_action_group: Add function_schema configuration block (#37484)
• resource/aws_bedrockagent_agent_alias : Add routing_configuration.provisioned_throughput argument (#37520)
• resource/aws_codebuild_webhook: Add scope_configuration argument (#38199)
• resource/aws_codepipeline: Add timeout_in_minutes argument to the action configuration block (#36316)
• resource/aws_db_instance: Add engine_lifecycle_support argument (#37708)
• resource/aws_ecs_cluster: Add configuration.managed_storage_configuration argument (#37932)
• resource/aws_elasticache_replication_group: Add cluster_mode argument (#38002)
• resource/aws_emrserverless_application: Add interactive_configuration argument (#37889)
• resource/aws_fis_experiment_template: Add experiment_options configuration block (#36900)
• resource/aws_fsx_lustre_file_system: Add final_backup_tags and skip_final_backup arguments (#37717)
• resource/aws_fsx_ontap_volume: Add final_backup_tags argument (#37717)
• resource/aws_fsx_openzfs_file_system: Add delete_options and final_backup_tags arguments (#37717)
• resource/aws_fsx_windows_file_system: Add final_backup_tags argument (#37717)
• resource/aws_imagebuilder_image_pipeline: Add execution_role and workflow arguments (#37317)
• resource/aws_kinesis_firehose_delivery_stream: Add secrets_manager_configuration to http_endpoint_configuration (#38245)
• resource/aws_kinesisanalyticsv2_application: Support FLINK-1_19 as a valid value for runtime_environment (#38350)
• resource/aws_lakeformation_data_lake_settings: Add allow_full_table_external_data_access attribute (#34474)
• resource/aws_lb_target_group: Add target_group_health configuration block (#37082)
• resource/aws_msk_replicator: Add starting_position argument (#36968)
• resource/aws_rds_cluster: Add engine_lifecycle_support argument (#37708)
• resource/aws_rds_global_cluster: Add engine_lifecycle_support argument (#37708)
• resource/aws_redshift_cluster_snapshot: Set arn from DescribeClusterSnapshots API response (#37996)
• resource/aws_vpclattice_listener: Support TLS_PASSTHROUGH as a valid value for protocol (#37964)
• resource/aws_wafv2_web_acl: Add enable_machine_learning to aws_managed_rules_bot_control_rule_set configuration block (#37006)

BUG FIXES:

• data-source/aws_efs_access_point: Set id the the access point ID, not the file system ID. This fixes a regression introduced in v5.58.0 (#38372)
• data-source/aws_lb_listener: Correctly set default_action.target_group_arn (#37348)
• resource/aws_chime_voice_connector_group: Properly handle voice connector groups deleted out of band (#36774)
• resource/aws_codebuild_project: Fix unsetting concurrent_build_limit (#37748)
• resource/aws_codepipeline: Mark trigger as Computed (#36316)
• resource/aws_ecs_service: Change volume_configuration.managed_ebs_volume.throughput from TypeString to TypeInt (#38109)
• resource/aws_elasticache_replication_group: Allows setting replicas_per_node_group to 0 and sets the maximum to 5. (#38396)
• resource/aws_elasticache_replication_group: Requires description. (#38396)
• resource/aws_elasticache_replication_group: When num_cache_clusters is set, prevents setting replicas_per_node_group. (#38396)
• resource/aws_elasticache_replication_group: num_cache_clusters must be at least 2 when automatic_failover_enabled is true. (#38396)
• resource/aws_elastictranscoder_pipeline: Properly handle NotFound exceptions during deletion (#38018)
• resource/aws_elastictranscoder_preset: Properly handle NotFound exceptions during deletion (#38018)
• resource/aws_lb_target_group: Use the configured ip_address_type value when target_type is instance (#36423)
• resource/aws_lb_trust_store: Wait until trust store is ACTIVE on resource Create (#38332)
• resource/aws_pinpoint_app: Fix interface conversion: interface {} is nil, not map[string]interface {} panic when campaign_hook is empty ({}) (#38323)
• resource/aws_transfer_server: Add supported values TransferSecurityPolicy-FIPS-2024-05, TransferSecurityPolicy-Restricted-2018-11, and TransferSecurityPolicy-Restricted-2020-06 for the security_policy_name argument (#38425)