Sourced from hashicorp/aws's releases.

v6.7.0

6.7.0 (July 31, 2025)

FEATURES:

• New Resource: aws_quicksight_ip_restriction (#43596)
• New Resource: aws_quicksight_key_registration (#43587)

ENHANCEMENTS:

• data-source/aws_codebuild_fleet: Add instance_type attribute in compute_configuration block (#43449)
• data-source/aws_ebs_volume: Add volume_initialization_rate attribute (#43565)
• data-source/aws_ecs_service: Support load_balancer attribute (#43582)
• data-source/aws_s3_access_point: Add tags attribute. This functionality requires the s3:ListTagsForResource IAM permission (#43630)
• data-source/aws_verifiedpermissions_policy_store: Add deletion_protection attribute (#43452)
• resource/aws_athena_workgroup: Add configuration.identity_center_configuration argument (#38717)
• resource/aws_cleanrooms_collaboration: Add analytics_engine argument (#43614)
• resource/aws_codebuild_fleet: Add instance_type argument in compute_configuration block to support custom instance types (#43449)
• resource/aws_ebs_volume: Add volume_initialization_rate argument (#43565)
• resource/aws_s3_access_point: Add tags argument and tags_all attribute. This functionality requires the s3:ListTagsForResource, s3:TagResource, and s3:UntagResource IAM permissions (#43630)
• resource/aws_verifiedpermissions_policy_store: Add deletion_protection argument (#43452)

BUG FIXES:

• resource/aws_bedrockagent_flow: Fix missing required field, CreateFlowInput.Definition.Nodes[0].Configuration[prompt].SourceConfiguration[resource].PromptArn errors on Create (#43595)
• resource/aws_s3_bucket: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
• resource/aws_s3_object: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
• resource/aws_servicequotas_service_quota: Fix error when updating a pending service quota request (#43606)
• resource/aws_ssm_parameter: Fix Provider produced inconsistent final plan errors when changing from using value to using value_wo (#42877)
• resource/aws_ssm_parameter: Fix version not being updated when description changes (#42595)

v6.6.0

6.6.0 (July 28, 2025)

FEATURES:

• New Resource: aws_connect_phone_number_contact_flow_association (#43557)
• New Resource: aws_nat_gateway_eip_association (#42591)

ENHANCEMENTS:

• data-source/aws_cloudwatch_event_bus: Add log_config attribute (#43453)
• data-source/aws_ssm_patch_baseline: Add available_security_updates_compliance_status argument (#43560)
• feature/aws_bedrock_guardrail: Add cross_region_config, content_policy_config.tier_config, and topic_policy_config.tier_config arguments (#43517)
• resource/aws_athena_database: Add workgroup argument (#36628)
• resource/aws_batch_compute_environment: Add compute_resources.ec2_configuration.image_kubernetes_version argument (#43454)
• resource/aws_cloudwatch_event_bus: Add log_config argument (#43453)
• resource/aws_cognito_resource_server: Allow name to be updated in-place (#41702)
• resource/aws_cognito_user_pool: Allow name to be updated in-place (#42639)
• resource/aws_globalaccelerator_custom_routing_endpoint_group: Add resource identity support (#43539)

... (truncated)

Sourced from hashicorp/aws's changelog.

6.7.0 (July 31, 2025)

FEATURES:

• New Resource: aws_quicksight_ip_restriction (#43596)
• New Resource: aws_quicksight_key_registration (#43587)

ENHANCEMENTS:

• data-source/aws_codebuild_fleet: Add instance_type attribute in compute_configuration block (#43449)
• data-source/aws_ebs_volume: Add volume_initialization_rate attribute (#43565)
• data-source/aws_ecs_service: Support load_balancer attribute (#43582)
• data-source/aws_s3_access_point: Add tags attribute. This functionality requires the s3:ListTagsForResource IAM permission (#43630)
• data-source/aws_verifiedpermissions_policy_store: Add deletion_protection attribute (#43452)
• resource/aws_athena_workgroup: Add configuration.identity_center_configuration argument (#38717)
• resource/aws_cleanrooms_collaboration: Add analytics_engine argument (#43614)
• resource/aws_codebuild_fleet: Add instance_type argument in compute_configuration block to support custom instance types (#43449)
• resource/aws_ebs_volume: Add volume_initialization_rate argument (#43565)
• resource/aws_s3_access_point: Add tags argument and tags_all attribute. This functionality requires the s3:ListTagsForResource, s3:TagResource, and s3:UntagResource IAM permissions (#43630)
• resource/aws_verifiedpermissions_policy_store: Add deletion_protection argument (#43452)

BUG FIXES:

• resource/aws_bedrockagent_flow: Fix missing required field, CreateFlowInput.Definition.Nodes[0].Configuration[prompt].SourceConfiguration[resource].PromptArn errors on Create (#43595)
• resource/aws_s3_bucket: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
• resource/aws_s3_object: Accept NoSuchTagSetError responses from S3-compatible services (#43589)
• resource/aws_servicequotas_service_quota: Fix error when updating a pending service quota request (#43606)
• resource/aws_ssm_parameter: Fix Provider produced inconsistent final plan errors when changing from using value to using value_wo (#42877)
• resource/aws_ssm_parameter: Fix version not being updated when description changes (#42595)

6.6.0 (July 28, 2025)

FEATURES:

• New Resource: aws_connect_phone_number_contact_flow_association (#43557)
• New Resource: aws_nat_gateway_eip_association (#42591)

ENHANCEMENTS:

• data-source/aws_cloudwatch_event_bus: Add log_config attribute (#43453)
• data-source/aws_ssm_patch_baseline: Add available_security_updates_compliance_status argument (#43560)
• feature/aws_bedrock_guardrail: Add cross_region_config, content_policy_config.tier_config, and topic_policy_config.tier_config arguments (#43517)
• resource/aws_athena_database: Add workgroup argument (#36628)
• resource/aws_batch_compute_environment: Add compute_resources.ec2_configuration.image_kubernetes_version argument (#43454)
• resource/aws_cloudwatch_event_bus: Add log_config argument (#43453)
• resource/aws_cognito_resource_server: Allow name to be updated in-place (#41702)
• resource/aws_cognito_user_pool: Allow name to be updated in-place (#42639)
• resource/aws_globalaccelerator_custom_routing_endpoint_group: Add resource identity support (#43539)
• resource/aws_globalaccelerator_custom_routing_listener: Add resource identity support (#43539)
• resource/aws_globalaccelerator_endpoint_group: Add resource identity support (#43539)

... (truncated)

• 3f5f9cd chore: prepare v6.7.0 release (#43631)
• 3468ee8 chore: prepare v6.7.0 release
• c61d11d Update CHANGELOG.md for #43630
• 68c79cf Merge pull request #43630 from hashicorp/f-aws_s3_access_point.tags
• a089506 Merge pull request #43629 from hashicorp/td-github.com/aws/aws-sdk-go-v2/serv...
• 63745eb Correct CHANGELOG entry file name.
• 891887f d/aws_s3_access_point: Add tags to schema.
• 9943df6 Correct IAM permissions for access point tagging.
• 2c69fff r/aws_s3_access_point: Tag on create.
• 629122d go get github.com/aws/aws-sdk-go-v2/service/s3control.
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)