NOTES:

• data-source/aws_identitystore_user: The filter argument has been deprecated. Use the alternate_identifier argument instead (#27053)

FEATURES:

• New Data Source: aws_appconfig_configuration_profile (#27054)
• New Data Source: aws_appconfig_configuration_profiles (#27054)
• New Data Source: aws_appconfig_environment (#27054)
• New Data Source: aws_appconfig_environments (#27054)
• New Data Source: aws_vpc_ipam_pool_cidrs (#27051)
• New Resource: aws_evidently_project (#24263)

ENHANCEMENTS:

• data-source/aws_ami: Add imds_support attribute (#27084)
• data-source/aws_identitystore_user: Add alternate_identifier argument and addresses, display_name, emails, external_ids, locale, name, nickname, phone_numbers, preferred_language, profile_url, timezone, title and user_type attributes (#27053)
• datasource/aws_eks_cluster: Add service_ipv6_cidr attribute to kubernetes_network_config block (#26980)
• resource/aws_ami: Add imds_support argument (#27084)
• resource/aws_ami_copy: Add imds_support argument (#27084)
• resource/aws_ami_from_instance: Add imds_support argument (#27084)
• resource/aws_cloudwatch_event_target: Add capacity_provider_strategy configuration block to the ecs_target configuration block (#27068)
• resource/aws_eks_addon: Add PRESERVE option to resolve_conflicts argument. (#27038)
• resource/aws_eks_cluster: Add service_ipv6_cidr attribute to kubernetes_network_config block (#26980)
• resource/aws_mwaa_environment: Add custom timeouts (#27031)
• resource/aws_networkfirewall_firewall_policy: Add firewall_policy.stateful_rule_group_reference.override argument (#25135)
• resource/aws_wafv2_rule_group: Add headers attribute to the field_to_match block (#26506)
• resource/aws_wafv2_rule_group: Add rate_based_statement (#27113)
• resource/aws_wafv2_rule_group: Add support for regex_match_statement (#22452)
• resource/aws_wafv2_web_acl: Add headers attribute to the field_to_match block (#26506)
• resource/aws_wafv2_web_acl: Add support for regex_match_statement (#22452)

BUG FIXES:

• data-source/aws_iam_policy_document: Better handling when invalid JSON passed to override_policy_documents (#27055)
• data-source/aws_ses_active_receipt_rule_set: Prevent crash when no receipt rule set is active (#27073)
• resource/aws_keyspaces_table: Change schema_definition.clustering_key and schema_definition.partition_key to lists in order to respect configured orderings (#26812)
• resource/aws_rolesanywhere_profile: Correctly handle updates to enabled and session_policy (#26858)
• resource/aws_rolesanywhere_trust_anchor: Correctly handle updates to enabled (#26858)