Merge branch 'main' into HEAD

# Conflicts:
#	go.mod
#	go.sum
#	internal/conns/awsclient_gen.go
#	internal/service/directconnect/gateway.go
#	internal/service/directconnect/gateway_data_source.go
#	internal/service/directconnect/hosted_connection.go
#	internal/service/directconnect/hosted_private_virtual_interface.go
#	internal/service/directconnect/hosted_private_virtual_interface_test.go
#	internal/service/directconnect/hosted_public_virtual_interface.go
#	internal/service/directconnect/hosted_public_virtual_interface_test.go
#	internal/service/directconnect/hosted_transit_virtual_interface.go
#	internal/service/directconnect/hosted_transit_virtual_interface_test.go
#	internal/service/directconnect/private_virtual_interface.go
#	internal/service/directconnect/private_virtual_interface_test.go
#	internal/service/directconnect/public_virtual_interface.go
#	internal/service/directconnect/public_virtual_interface_test.go
#	internal/service/directconnect/service_endpoints_gen_test.go
#	internal/service/directconnect/service_package_gen.go
#	internal/service/directconnect/sweep.go
#	internal/service/directconnect/transit_virtual_interface.go
#	internal/service/directconnect/transit_virtual_interface_test.go
#	names/data/names_data.csv
#	names/names.go

.actrc

@@ -2,3 +2,4 @@
 # The `full` variants are needed for Maven for TeamCity configuration validation
 -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04
 -P linux=ghcr.io/catthehacker/ubuntu:act-22.04
+-P custom-linux-medium=ghcr.io/catthehacker/ubuntu:act-22.04

.changelog/25743.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_peering_attachments
+```

.changelog/26399.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_drs_replication_configuration_template
+```

.changelog/26755.txt

@@ -0,0 +1,4 @@
+```release-note:bug
+resource/aws_cloudwatch_event_connection: Add plan-time validation preventing empty `auth_parameters.oauth.oauth_http_parameters` or `auth_parameters.invocation_http_parameters`
+`body`, `header` and `query_string` configuration blocks
+```

.changelog/27274.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Add `assign_generated_ipv6_cidr_block` and `ipv6_pool` arguments
+```

.changelog/29415.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `performance_insights_enabled`, `performance_insights_kms_key_id`, and `performance_insights_retention_period` arguments
+```

.changelog/30493.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Fix `unexpected state 'snapshotting'` errors when increasing or decreasing replica count
+```

.changelog/34044.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Use the configured `copy_tags_to_snapshot` value when `restore_to_point_in_time` is set
+```

.changelog/34233.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: The `use_fips_endpoint` flag is now ignored for any service with a custom endpoint configured in `endpoints`.
+```

.changelog/34293.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_pipes_pipe: Mark `source_parameters.self_managed_kafka_parameters.credentials.basic_auth` as Optional
+```

.changelog/34474.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```
+
+```release-note:enhancement
+data-source/aws_lakeformation_data_lake_settings: Add `allow_full_table_external_data_access` attribute
+```

.changelog/34819.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Decrease replica count after other updates
+```

.changelog/34843.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_snapshot_copy: Add `shared_accounts` argument
+```

.changelog/34885.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_db_cluster_snapshot: Add `shared_accounts` argument
+```

.changelog/35003.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_rds_certificate
+```

.changelog/35168.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkfirewall_tls_inspection_configuration
+```
+
+```release-note:enhancement
+resource/aws_networkfirewall_logging_configuration: Add plan-time validation of `firewall_arn`
+```

.changelog/35614.txt

@@ -0,0 +1,31 @@
+```release-note:enhancement
+resource/aws_vpc: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_vpc: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_default_vpc: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_default_vpc: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Support `ipv6_cidr_block` sizes between `/44` and `/60` in increments of /4
+```
+
+```release-note:enhancement
+resource/aws_vpc_ipv6_cidr_block_association: Support `ipv6_netmask_length` values between `44` and `60` in increments of 4
+```
+
+```release-note:enhancement
+resource/aws_vpc_security_group_ingress_rule: Add `tags` to the `AuthorizeSecurityGroupIngress` EC2 API call instead of making a separate `CreateTags` call
+```
+
+```release-note:enhancement
+resource/aws_vpc_security_group_egress_rule: Add `tags` to the `AuthorizeSecurityGroupEgress` EC2 API call instead of making a separate `CreateTags` call
+```

.changelog/35662.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_organizations_account: Allow import of accounts with IAM access to the AWS Billing and Cost Management console
+```

.changelog/35677.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_iam_policy_document: Add `minified_json` attribute
+```

.changelog/35722.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_networkmonitor_monitor
+```
+
+```release-note:new-resource
+aws_networkmonitor_probe
+```

.changelog/35950.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ssm_patch_baseline: Remove empty fields from `json` attribute value
+```

.changelog/36268.txt

@@ -0,0 +1,31 @@
+```release-note:bug
+resource/aws_securitylake_subscriber: Allow more than one log source
+```
+
+```release-note:bug
+resource/aws_securitylake_aws_log_source: Correctly handles unspecified `source_version`
+```
+
+```release-note:bug
+resource/aws_securitylake_aws_log_source: Prevents errors when creating multiple log sources concurrently
+```
+
+```release-note:bug
+resource/aws_securitylake_custom_log_source: Validates length of `source_name` parameter
+```
+
+```release-note:bug
+resource/aws_securitylake_custom_log_source: Prevents errors when creating multiple log sources concurrently
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly handles unspecified `access_type`
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly requires `source_name` parameter for `aws_log_source_resource` and `custom_log_source_resource`
+```
+
+```release-note:bug
+resource/aws_securitylake_subscriber: Correctly handles unspecified `source_version` parameter for `aws_log_source_resource` and `custom_log_source_resource`
+```

.changelog/36286.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iot_topic_rule: Retry IAM eventual consistency errors on Update
+```

.changelog/36301.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_cloudfront_origin_access_control
+```

.changelog/36316.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_codepipeline: Add `timeout_in_minutes` argument to the `action` configuration block
+```
+
+```release-note:bug
+resource/aws_codepipeline: Mark `trigger` as Computed
+```

.changelog/36368.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_database
+```

.changelog/36423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lb_target_group: Use the configured `ip_address_type` value when `target_type` is `instance`
+```

.changelog/36500.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_instance: Allow `domain_dns_ips` to use single DNS server IP
+```

.changelog/36506.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_mq_broker: Do not reboot on changes to `maintenance_window_start_time` or `auto_minor_version_upgrade`
+```

.changelog/36511.txt

@@ -0,0 +1,23 @@
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Support up to 12 `ha_pairs`
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Increase `storage_capacity` maximum to 1PiB
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Update `throughput_capacity_per_ha_pair` to support all values from `throughput_capacity`
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_file_system: Add support for specifying 1 ha_pair with `SINGLE_AZ_1` and `MULTI_AZ_1` deployment types
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_volume: Add `aggregate_configuration` configuration block
+```
+
+```release-note:enhancement
+resource/aws_fsx_ontap_volume: Add `size_in_bytes` and `volume_style` arguments
+```

.changelog/36568.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_appsync_api_key: Add `api_key_id` attribute
+```

.changelog/36599.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_timestreamwrite_table
+```

.changelog/36600.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_datazone_domain
+```
+
+```release-note:new-resource
+aws_datazone_environment_blueprint_configuration
+```
+
+```release-note:new-data-source
+aws_datazone_environment_blueprint
+```

.changelog/36754.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Add configurable timeouts
+```
+
+```release-note:enhancement
+resource/aws_ec2_capacity_reservation: Retry `InsufficientInstanceCapacity` errors
+```

.changelog/36772.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iot_topic_rule: Add `cloudwatch_logs.batch_mode` and `error_action.cloudwatch_logs.batch_mode` arguments
+```

.changelog/36774.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_chime_voice_connector_group: Properly handle voice connector groups deleted out of band
+```

.changelog/36778.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+data-source/aws_resourceexplorer2_search: Fix panic caused by bad mappping between Terraform and AWS schemas
+```
+
+```release-note:bug
+data-source/aws_resourceexplorer2_search: Fix 401 unauthorized error due to missing `view_arn` in the AWS API request
+```
+
+```release-note:bug
+data-source/aws_resourceexplorer2_search: Fix state persistence and data types
+```

.changelog/36830.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_quicksight_account_subscription: Add `iam_identity_center_instance_arn` attribute
+```

.changelog/36900.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fis_experiment_template: Add `experiment_options` configuration block
+```

.changelog/36902.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_transit_gateway_peering_attachment: Add `options` argument
+```

.changelog/36962.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_applicationinsights_application: Change `resource_group_name` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```
+
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_session: Mark `packet_length` as Computed
+```

.changelog/36966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_network_insights_path: Mark `destination` as Optional
+```

.changelog/36968.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_replicator: Add `starting_position` argument
+```

.changelog/37002.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_instance: Add `launch_time` attribute
+```

.changelog/37006.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_wafv2_web_acl: Add `enable_machine_learning` to `aws_managed_rules_bot_control_rule_set` configuration block
+```

.changelog/37017.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_paymentcryptography_key
+```

.changelog/37018.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ecs_account_setting_default: Add support for `fargateTaskRetirementWaitPeriod` value in `Name` argument
+```

.changelog/37019.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ecs_service: Add `volume_configuration` argument
+```
+
+```release-note:enhancement
+resource/aws_ecs_task_definition: Add `configure_at_launch` parameter in `volume` argument
+```

.changelog/37020.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_paymentcryptography_key_alias
+```

.changelog/37082.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_target_group: Add `target_group_health` configuration block
+```

.changelog/37092.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kms_custom_key_store: Change `trust_anchor_certificate` to [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
+```

.changelog/37105.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_amplify_domain_association: Add `certificate_settings` argument
+```

.changelog/37108.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_rds_cluster: Add `ca_certificate_identifier` argument and `ca_certificate_valid_till` attribute
+```

.changelog/37127.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ec2_capacity_reservation: Fix `InvalidCapacityReservationId.NotFound` errors during Read and Delete when resource is manually deleted
+```

.changelog/37135.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_pipes_pipe: Add `log_configuration` argument
+```

.changelog/37139.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_sagemaker_domain: Add `default_user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```
+
+```release-note:enhancement
+resource/aws_sagemaker_user_profile: Add `user_settings.canvas_app_settings.generative_ai_settings` configuration block
+```

.changelog/37140.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_kms_key: Add `rotation_period_in_days` argument
+```

.changelog/37142.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_launch_template: Add `network_interfaces.primary_ipv6` argument
+```
+
+```release-note:enhancement
+data-source/aws_launch_template: Add `network_interfaces.primary_ipv6` attribute
+```