FEATURES:

• New Data Source: aws_bedrockagent_agent_versions (#38792)
• New Resource: aws_bedrock_guardrail (#38757)
• New Resource: aws_cloudtrail_organization_delegated_admin_account (#38817)
• New Resource: aws_datazone_environment_profile (#35603)
• New Resource: aws_datazone_form_type (#38746)
• New Resource: aws_datazone_glossary_term (#38706)
• New Resource: aws_pinpoint_email_template (#33266)

ENHANCEMENTS:

• resource/aws_networkfirewall_logging_configuration: Change logging_configuration.log_destination_config MaxItems from 2 to 3 (#38824)

BUG FIXES:

• data-source/aws_acm_certificate: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_appstream_stack: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_bedrockagent_agent_knowledge_base_association: Prepare agent when associating a knowledge base so it can be used (#38799)
• resource/aws_cloudwatch_event_connection: Fix various expander type assertions to prevent crashes (#38800)
• resource/aws_controltower_landing_zone: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_db_event_subscription: Fix plan-time validation of name and name_prefix (#38194)
• resource/aws_ecs_cluster_capacity_providers: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_ecs_service: Fix crash from nil service_registries item (#38883)
• resource/aws_ecs_task_definition: Fix perpetual container_definitions diffs on healthCheck's default values (#38872)
• resource/aws_ecs_task_definition: Prevent lowercasing of the first character of JSON keys in container_definitions.dockerLabels (#38804)
• resource/aws_ecs_task_definition: Remove nulls from container_definition array fields (#38870)
• resource/aws_elasticache_replication_group: Fix crash when setting replicas_per_node_group if node groups are empty (#38797)
• resource/aws_fms_policy: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_grafana_workspace: Fix crash when empty network_access_control block is configured (#38775)
• resource/aws_grafana_workspace: Fix crash when empty vpc_configuration block is configured (#38775)
• resource/aws_iot_thing_group: Fix crash when empty attribute_payload block is configured (#38776)
• resource/aws_lexv2models_slot_type: Fix slot_type_values to have sample_value attribute (#38856)
• resource/aws_networkmanager_connect_peer: Set all configuration.bgp_configurations on Read (#38798)
• resource/aws_redshift_cluster: Set encrypted on snapshot restore, when enabled (#38828)
• resource/aws_rolesanywhere_profile: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_rolesanywhere_trust_anchor: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)
• resource/aws_s3_bucket_lifecycle_configuration: Fix unreturned sdkdiags.AppendErrorf function calls (#38854)