Skip to content

Commit 0a9abf3

Browse files
committed
Merge branch 'main' into HEAD
2 parents 44b2da8 + 24a6443 commit 0a9abf3

File tree

357 files changed

+18926
-3273
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

357 files changed

+18926
-3273
lines changed

.changelog/45235.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:new-resource
2+
aws_ecs_express_gateway_service
3+
```

.changelog/45251.txt

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
```release-note:new-resource
2+
aws_s3_bucket_abac
3+
```
4+
```release-note:enhancement
5+
resource/aws_s3_bucket: Use the S3 Control tagging APIs when the `s3:TagResource`, `s3:UntagResource`, and `s3:ListTagsForResource` permissions are present
6+
```
7+
```release-note:enhancement
8+
resource/aws_s3_bucket: Tag on creation when the `s3:TagResource` permission is present
9+
```
10+
```release-note:note
11+
resource/aws_s3_bucket: To support ABAC (Attribute Based Access Control) in general purpose buckets, this resource will now attempt to send tags in the create request and use the S3 Control tagging APIs [`TagResource`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html), [`UntagResource`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html), and [`ListTagsForResource`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html) for read and update operations. The calling principal must have the corresponding `s3:TagResource`, `s3:UntagResource`, and `s3:ListTagsForResource` [IAM permissions](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3.html#amazons3-actions-as-permissions). If the principal lacks the appropriate permissions, the provider will fall back to tagging after creation and using the S3 tagging APIs [`PutBucketTagging`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketTagging.html), [`DeleteBucketTagging`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketTagging.html), and [`GetBucketTagging`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketTagging.html) instead. With ABAC enabled, tag modifications may fail with the fall back behavior. See the [AWS documentation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging-enable-abac.html) for additional details on enabling ABAC in general purpose buckets.
12+
```

.changelog/45258.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
```release-note:enhancement
2+
resource/aws_eks_cluster: Add `control_plane_scaling_config` configuration block to support EKS Provisioned Control Plane
3+
```
4+
5+
```release-note:enhancement
6+
data-source/aws_eks_cluster: Add `control_plane_scaling_config` attribute
7+
```

.changelog/45263.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:new-resource
2+
aws_vpc_encryption_control
3+
```

.changelog/45271.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:enhancement
2+
resource/aws_vpn_connection: Add `bgp_log_enabled`, `bgp_log_group_arn`, and `bgp_log_stream_arn` arguments to `tunnel1_log_options.cloudwatch_log_options` and `tunnel2_log_options.cloudwatch_log_options` blocks
3+
```

.changelog/45321.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:enhancement
2+
resource/aws_backup_plan: Add `target_logically_air_gapped_backup_vault_arn` argument to `rule` block
3+
```

.changelog/45342.txt

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
```release-note:new-resource
2+
aws_lambda_capacity_provider
3+
```
4+
5+
```release-note:enhancement
6+
resource/aws_lambda_function: Add `capacity_provider_config` and `publish_to` arguments
7+
```
8+
9+
```release-note:enhancement
10+
data-source/aws_lambda_function: Add `capacity_provider_config` attribute
11+
```

.changelog/45345.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
```release-note:enhancement
2+
resource/aws_resourceexplorer2_index: Deprecates `id`. Use `arn` instead.
3+
```
4+
5+
```release-note:enhancement
6+
resource/aws_resourceexplorer2_view: Deprecates `id`. Use `arn` instead.
7+
```

.ci/.semgrep-service-name0.yml

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4465,3 +4465,51 @@ rules:
44654465
patterns:
44664466
- pattern-regex: "(?i)ConfigService"
44674467
severity: WARNING
4468+
- id: configservice-in-var-name
4469+
languages:
4470+
- go
4471+
message: Do not use "ConfigService" in var name inside configservice package
4472+
paths:
4473+
include:
4474+
- "/internal/service/configservice"
4475+
patterns:
4476+
- pattern: var $NAME = ...
4477+
- metavariable-pattern:
4478+
metavariable: $NAME
4479+
patterns:
4480+
- pattern-regex: "(?i)ConfigService"
4481+
severity: WARNING
4482+
- id: connect-in-func-name
4483+
languages:
4484+
- go
4485+
message: Do not use "Connect" in func name inside connect package
4486+
paths:
4487+
include:
4488+
- "/internal/service/connect"
4489+
exclude:
4490+
- "/internal/service/connect/list_pages_gen.go"
4491+
patterns:
4492+
- pattern: func $NAME( ... )
4493+
- metavariable-pattern:
4494+
metavariable: $NAME
4495+
patterns:
4496+
- pattern-regex: "(?i)Connect"
4497+
- pattern-not-regex: .*uickConnect.*
4498+
- focus-metavariable: $NAME
4499+
- pattern-not: func $NAME($T *testing.T)
4500+
severity: WARNING
4501+
- id: connect-in-test-name
4502+
languages:
4503+
- go
4504+
message: Include "Connect" in test name
4505+
paths:
4506+
include:
4507+
- "/internal/service/connect/*_test.go"
4508+
patterns:
4509+
- pattern: func $NAME( ... )
4510+
- metavariable-pattern:
4511+
metavariable: $NAME
4512+
patterns:
4513+
- pattern-not-regex: "^TestAccConnect"
4514+
- pattern-regex: ^TestAcc.*
4515+
severity: WARNING

.ci/.semgrep-service-name1.yml

Lines changed: 90 additions & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -1,53 +1,5 @@
11
# Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
22
rules:
3-
- id: configservice-in-var-name
4-
languages:
5-
- go
6-
message: Do not use "ConfigService" in var name inside configservice package
7-
paths:
8-
include:
9-
- "/internal/service/configservice"
10-
patterns:
11-
- pattern: var $NAME = ...
12-
- metavariable-pattern:
13-
metavariable: $NAME
14-
patterns:
15-
- pattern-regex: "(?i)ConfigService"
16-
severity: WARNING
17-
- id: connect-in-func-name
18-
languages:
19-
- go
20-
message: Do not use "Connect" in func name inside connect package
21-
paths:
22-
include:
23-
- "/internal/service/connect"
24-
exclude:
25-
- "/internal/service/connect/list_pages_gen.go"
26-
patterns:
27-
- pattern: func $NAME( ... )
28-
- metavariable-pattern:
29-
metavariable: $NAME
30-
patterns:
31-
- pattern-regex: "(?i)Connect"
32-
- pattern-not-regex: .*uickConnect.*
33-
- focus-metavariable: $NAME
34-
- pattern-not: func $NAME($T *testing.T)
35-
severity: WARNING
36-
- id: connect-in-test-name
37-
languages:
38-
- go
39-
message: Include "Connect" in test name
40-
paths:
41-
include:
42-
- "/internal/service/connect/*_test.go"
43-
patterns:
44-
- pattern: func $NAME( ... )
45-
- metavariable-pattern:
46-
metavariable: $NAME
47-
patterns:
48-
- pattern-not-regex: "^TestAccConnect"
49-
- pattern-regex: ^TestAcc.*
50-
severity: WARNING
513
- id: connect-in-const-name
524
languages:
535
- go
@@ -4460,3 +4412,93 @@ rules:
44604412
patterns:
44614413
- pattern-regex: "(?i)IoT"
44624414
severity: WARNING
4415+
- id: iot-in-var-name
4416+
languages:
4417+
- go
4418+
message: Do not use "IoT" in var name inside iot package
4419+
paths:
4420+
include:
4421+
- "/internal/service/iot"
4422+
patterns:
4423+
- pattern: var $NAME = ...
4424+
- metavariable-pattern:
4425+
metavariable: $NAME
4426+
patterns:
4427+
- pattern-regex: "(?i)IoT"
4428+
severity: WARNING
4429+
- id: ipam-in-test-name
4430+
languages:
4431+
- go
4432+
message: Include "IPAM" in test name
4433+
paths:
4434+
include:
4435+
- "/internal/service/ec2/ipam_*_test.go"
4436+
patterns:
4437+
- pattern: func $NAME( ... )
4438+
- metavariable-pattern:
4439+
metavariable: $NAME
4440+
patterns:
4441+
- pattern-not-regex: "^TestAccIPAM"
4442+
- pattern-regex: ^TestAcc.*
4443+
severity: WARNING
4444+
- id: ivs-in-func-name
4445+
languages:
4446+
- go
4447+
message: Do not use "IVS" in func name inside ivs package
4448+
paths:
4449+
include:
4450+
- "/internal/service/ivs"
4451+
exclude:
4452+
- "/internal/service/ivs/list_pages_gen.go"
4453+
patterns:
4454+
- pattern: func $NAME( ... )
4455+
- metavariable-pattern:
4456+
metavariable: $NAME
4457+
patterns:
4458+
- pattern-regex: "(?i)IVS"
4459+
- focus-metavariable: $NAME
4460+
- pattern-not: func $NAME($T *testing.T)
4461+
severity: WARNING
4462+
- id: ivs-in-test-name
4463+
languages:
4464+
- go
4465+
message: Include "IVS" in test name
4466+
paths:
4467+
include:
4468+
- "/internal/service/ivs/*_test.go"
4469+
patterns:
4470+
- pattern: func $NAME( ... )
4471+
- metavariable-pattern:
4472+
metavariable: $NAME
4473+
patterns:
4474+
- pattern-not-regex: "^TestAccIVS"
4475+
- pattern-regex: ^TestAcc.*
4476+
severity: WARNING
4477+
- id: ivs-in-const-name
4478+
languages:
4479+
- go
4480+
message: Do not use "IVS" in const name inside ivs package
4481+
paths:
4482+
include:
4483+
- "/internal/service/ivs"
4484+
patterns:
4485+
- pattern: const $NAME = ...
4486+
- metavariable-pattern:
4487+
metavariable: $NAME
4488+
patterns:
4489+
- pattern-regex: "(?i)IVS"
4490+
severity: WARNING
4491+
- id: ivs-in-var-name
4492+
languages:
4493+
- go
4494+
message: Do not use "IVS" in var name inside ivs package
4495+
paths:
4496+
include:
4497+
- "/internal/service/ivs"
4498+
patterns:
4499+
- pattern: var $NAME = ...
4500+
- metavariable-pattern:
4501+
metavariable: $NAME
4502+
patterns:
4503+
- pattern-regex: "(?i)IVS"
4504+
severity: WARNING

0 commit comments

Comments
 (0)