Merge branch 'main' into add_validation_to_log_group

.changelog/11600.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add `delivery_options` argument
+```

.changelog/11687.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudwatch_log_destination: Add plan time validation to `role_arn`, `name` and `target_arn`.
+```

.changelog/11770.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_sns_topic_subscription: Add `redrive_policy` argument
+```

.changelog/12055.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_iam_policy_document: Support merging policy documents by adding `source_policy_documents` and `override_policy_documents` arguments
+```

.changelog/12645.txt

@@ -0,0 +1,11 @@
+```release-note:bug
+resource/aws_glacier_vault: Prevent crash with `GetVaultAccessPolicy` API errors
+```
+
+```release-note:bug
+resource/aws_glacier_vault: Properly remove from state when resource does not exist
+```
+
+```release-note:enhancement
+resource/aws_glacier_vault: Add plan-time validation for `notification` configuration block `events` and `sns_topic_arn` arguments
+```

.changelog/13420.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_vpc_peering_connection: Add `cidr_block_set` and `peer_cidr_block_set` attributes
+```

.changelog/13948.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter: Add `arn` attribute.
+```

.changelog/13949.txt

@@ -0,0 +1,8 @@
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter_rule: Add arn attribute.
+```
+
+```release-note:enhancement
+resource/aws_ec2_traffic_mirror_filter_rule: Add plan time validation to `destination_port_range.from_port`, 
+`destination_port_range.to_port`, `source_port_range.from_port`, and `source_port_range.to_port`.
+```

.changelog/13960.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_receipt_rule: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_receipt_rule: Add plan time validations for `name`, `tls_policy`, `add_header_action.header_name`, `add_header_action.header_value`, `bounce_action.topic_arn`, `lambda_action.function_arn`, `lambda_action.topic_arn`, `lambda_action.invocation_type`, `s3_action,topic_arn`, `sns_action.topic_arn`, `stop_action.scope`, `stop_action.topic_arn`, `workmail_action.topic_arn`, and `workmail_action.organization_arn` attributes
+```

.changelog/13962.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_active_receipt_rule_set: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_active_receipt_rule_set: Add plan time validation for `rule_set_name` argument
+```

.changelog/13963.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_ses_template: Add `arn` attribute
+```

.changelog/13964.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_ses_event_destination: Add `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_ses_event_destination: Add plan time validation for `name`, `cloudwatch_destination.default_value`, `cloudwatch_destination.default_name`, `kinesis_destination.role_arn`, `kinesis_destination.stream_arn`, and `sns_destination.topic_arn` attributes
+```

.changelog/13972.txt

@@ -0,0 +1,8 @@
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add `arn` attribute.
+```
+
+```release-note:enhancement
+resource/aws_ses_configuration_set: Add plan time validation to `name`.
+```
+

.changelog/14746.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lambda_event_source_mapping: Add `topics` attribute to support Amazon MSK as an event source
+```

.changelog/14765.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_lambda_event_source_mapping: Wait for create and update operations to complete
+```

.changelog/15348.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_elasticache_replication_group: Adds `arn` attribute
+```
+
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Adds `arn` attribute
+```

.changelog/16474.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_lb_listener_certificate: Add import support
+```

.changelog/16656.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_vpc_endpoint: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion
+```
+
+```release-note:bug
+resource/aws_vpc_endpoint_service: Return unsuccessful deletion information immediately as an error instead of timing out while waiting for deletion
+```

.changelog/16676.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_subnet: Add `customer_owned_ipv4_pool` and `map_customer_owned_ip_on_launch` attributes
+```
+
+```release-note:enhancement
+resource/aws_subnet: Add `customer_owned_ipv4_pool` and `map_customer_owned_ip_on_launch` attributes
+```

.changelog/16710.txt

@@ -0,0 +1,7 @@
+```release-note:new-data-source
+aws_imagebuilder_image
+```
+
+```release-note:new-resource
+aws_imagebuilder_image
+```

.changelog/16823.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_ec2_transit_gateway_prefix_list_reference
+```

.changelog/16840.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_route53_key_signing_key
+```

.changelog/16882.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_prometheus_workspace
+```

.changelog/17002.txt

@@ -0,0 +1,7 @@
+```release-note:note
+data-source/aws_route53_zone: The Route 53 `ListResourceRecordSets` API call has been implemented to support the `name_servers` attribute for private Hosted Zones similar to the resource implementation. Environments using restrictive IAM permissions may require updates.
+```
+
+```release-note:bug
+data-source/aws_route53_zone: Ensure `name_servers` is populated for private Hosted Zones
+```

.changelog/17030.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_cloudwatch_event_rule: Prevent perpetual differences with `name_prefix` argument values beginning with `terraform-`
+```
+
+```release-note:bug
+resource/aws_security_group: Prevent perpetual differences with `name_prefix` argument values beginning with `terraform-`
+```

.changelog/17142.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_partition: Correct `reverse_dns_prefix` value in AWS China, C2S, and SC2S
+```

.changelog/17189.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/lakeformation_permissions: Handle resources with multiple permissions
+```
+
+```release-note:bug
+resource/lakeformation_data_lake_settings: Avoid unnecessary resource cycling
+```

.changelog/17201.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_elasticache_replication_group: Correctly update computed `member_clusters` values
+```

.changelog/17221.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_sagemaker_app_image_config
+```
+
+```release-note:bug
+resource/aws_sagemaker_code_repository: fix doc name
+```

.changelog/17226.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_elb_hosted_zone_id: Correct values for `cn-north-1` and `cn-northwest-1` regions
+```

.changelog/17234.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/aws_api_gateway_method_settings: Prevent confusing Terraform error on resource disappearance during creation
+```
+
+```release-note:bug
+resource/aws_api_gateway_method_settings: Ignore non-existent resource errors during deletion
+```

.changelog/17238.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data-source/aws_lb_listener: Prevent error when retrieving a listener whose default action contains weighted target groups
+```

.changelog/17243.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ebs_volume: Allow both `size` and `snapshot_id` attributes to be specified
+```

.changelog/17254.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_kinesis_firehose_delivery_stream: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation access errors
+```

.changelog/17256.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_crawler: Use standard retry timeout for IAM eventual consistency and retry on LakeFormation permissions errors
+```

.changelog/17262.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codeartifact_domain: Make `encryption_key` optional
+```

.changelog/17301.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Allow changing `cluster_mode.replica_count` without re-creation
+```

.changelog/17313.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_config_conformance_pack
+```

.changelog/17318.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_access_key: Add `create_date` attribute
+```

.changelog/17320.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+data-source/aws_elasticache_replication_group: Add `multi_az_enabled` argument
+```
+
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add `multi_az_enabled` argument
+```

.changelog/17321.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_access_key: Support resource import
+```

.changelog/17322.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_iam_access_key: Ensure `Inactive` `status` is properly configured during resource creation
+```

.changelog/17335.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_catalog_table: Adds support for specifying schema from schema registry.
+```

.changelog/17338.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_codebuild_report_group: Add `delete_reports` argument
+```

.changelog/17340.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Support AWS Single-Sign On (SSO) cached credentials
+```

.changelog/17344.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_partition: Fix `partition_values` to preserve order.
+```

.changelog/17366.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_sagemaker_model_package_group
+```

.changelog/17380.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_instance: Fix use of `throughput` and `iops` for `gp3` volumes at the same time
+```

.changelog/17423.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_ssoadmin_permission_set: Properly update resource with `relay_state` argument
+```

.changelog/17469.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+provider: Only validate AWS shared configuration profile SSO configuration when attempting to use SSO cached credentials
+```

.changelog/17486.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Add terraform-provider-aws version to HTTP User-Agent header
+```

.changelog/17489.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_glue_catalog_database: Use Catalog Id when deleting Databases.
+```

.changelog/17501.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_securityhub_organization_admin_account
+```

.changelog/17545.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_wafv2_web_acl_association: Increase creation timeout value from 2 to 5 minutes to prevent WAFUnavailableEntityException
+```

.github/CODEOWNERS

@@ -1,2 +1,42 @@
 # Default owner for all pull requests
-*    @terraform-providers/aws-provider
+*    @hashicorp/terraform-aws
+
+# Service specific owners
+/aws/*apigatewayv2*    @ewbankkit @hashicorp/terraform-aws
+/website/**/apigatewayv2*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*appmesh*    @ewbankkit @hashicorp/terraform-aws
+/website/**/appmesh*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*backup*    @ewbankkit @hashicorp/terraform-aws
+/website/**/backup*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*_aws_codeartifact_*.go     @DrFaust92 @hashicorp/terraform-aws
+/website/**/codeartifact*        @DrFaust92 @hashicorp/terraform-aws
+
+/aws/*_aws_fsx_*.go     @DrFaust92 @hashicorp/terraform-aws
+/website/**/fsx*        @DrFaust92 @hashicorp/terraform-aws
+
+/aws/*globalaccelerator*    @ewbankkit @hashicorp/terraform-aws
+/website/**/globalaccelerator*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*_aws_glue_*.go     @DrFaust92 @hashicorp/terraform-aws
+/website/**/glue*        @DrFaust92 @hashicorp/terraform-aws
+
+/aws/*kinesis_analytics*    @ewbankkit @hashicorp/terraform-aws
+/website/**/kinesis_analytics*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*kinesisanalyticsv2*    @ewbankkit @hashicorp/terraform-aws
+/website/**/kinesisanalyticsv2*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*route53_resolver*    @ewbankkit @hashicorp/terraform-aws
+/website/**/route53_resolver*    @ewbankkit @hashicorp/terraform-aws
+
+/aws/*_aws_storagegateway_*.go     @DrFaust92 @hashicorp/terraform-aws
+/website/**/storagegateway*        @DrFaust92 @hashicorp/terraform-aws
+
+/aws/*_aws_sagemaker_*.go     @DrFaust92 @hashicorp/terraform-aws
+/website/**/sagemaker*        @DrFaust92 @hashicorp/terraform-aws
+
+/aws/*_aws_workspaces_*.go     @Tensho @hashicorp/terraform-aws
+/website/**/workspaces*        @Tensho @hashicorp/terraform-aws

.github/ISSUE_TEMPLATE/Bug_Report.md

@@ -40,6 +40,8 @@ If you are running into one of these scenarios, we recommend opening an issue in
 
 <!--- Information about code formatting: https://help.github.com/articles/basic-writing-and-formatting-syntax/#quoting-code --->
 
+Please include all Terraform configurations required to reproduce the bug. Bug reports without a functional reproduction may be closed without investigation.
+
 ```hcl
 # Copy-paste your Terraform configurations here - for large Terraform configs,
 # please use a service like Dropbox and share a link to the ZIP file. For

.github/ISSUE_TEMPLATE/config.yml

@@ -1,7 +1,7 @@
 blank_issues_enabled: false
 contact_links:
   - name: Terraform AWS Provider Roadmap
-    url: https://github.com/terraform-providers/terraform-provider-aws/blob/master/ROADMAP.md
+    url: https://github.com/hashicorp/terraform-provider-aws/blob/main/ROADMAP.md
     about: View the Roadmap for the upcoming work planned on the AWS provider.
   - name: Terraform AWS Provider Questions
     url: https://discuss.hashicorp.com/c/terraform-providers/tf-aws
@@ -12,6 +12,3 @@ contact_links:
   - name: Terraform Language or Workflow Questions
     url: https://discuss.hashicorp.com/c/terraform-core
     about: Please ask and answer language or workflow related questions through the Terraform Core Community Forum.
-  - name: Security Vulnerability
-    url: https://www.hashicorp.com/security.html
-    about: Please report security vulnerabilities responsibly.

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,4 +1,4 @@
-<!--- See what makes a good Pull Request at : https://github.com/terraform-providers/terraform-provider-aws/blob/master/docs/CONTRIBUTING.md --->
+<!--- See what makes a good Pull Request at : https://github.com/hashicorp/terraform-provider-aws/blob/main/docs/CONTRIBUTING.md --->
 
 <!--- Please keep this note for the community --->
 
@@ -12,15 +12,6 @@
 <!--- If your PR fully resolves and should automatically close the linked issue, use Closes. Otherwise, use Relates --->
 Relates OR Closes #0000
 
-Release note for [CHANGELOG](https://github.com/terraform-providers/terraform-provider-aws/blob/master/CHANGELOG.md):
-<!--
-If change is not user facing, just write "NONE" in the release-note block below.
--->
-
-```release-note
-
-```
-
 Output from acceptance testing:
 
 <!--