resource/aws_db_instance: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
resource/aws_rds_cluster: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
resource/aws_savingsplans_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49264)

FEATURES:

New List Resource: aws_db_instance (#49602)
New List Resource: aws_dsql_cluster (#49657)
New List Resource: aws_dsql_cluster_policy (#49676)
New List Resource: aws_ecr_lifecycle_policy (#49696)
New List Resource: aws_ecs_cluster (#49682)
New List Resource: aws_pinpointsmsvoicev2_keyword (#48967)
New Resource: aws_pinpointsmsvoicev2_keyword (#48967)
New Resource: aws_sesv2_multi_region_endpoint (#49660)

ENHANCEMENTS:

data-source/aws_resiliencehubv2_service: Add associated_system.user_journey_ids attribute (#49603)
resource/aws_bedrockagentcore_browser: Add plan-time validation of name (#48766)
resource/aws_bedrockagentcore_memory: Add Resource Identity support (#48766)
resource/aws_bedrockagentcore_memory: Allow adding indexed_key entries in place instead of forcing a new resource (#48877)
resource/aws_bedrockagentcore_memory: Change indexed_key from List to Set to ignore ordering (#48877)
resource/aws_bedrockagentcore_memory_strategy: Add Resource Identity support (#48766)
resource/aws_bedrockagentcore_memory_strategy: Add configuration.self_managed_configuration argument in support of self-managed strategies (#48766)
resource/aws_bedrockagentcore_memory_strategy: Add memory_record_schema argument (#48765)
resource/aws_bedrockagentcore_memory_strategy: Add plan-time validation of description (#48766)
resource/aws_bedrockagentcore_memory_strategy: Change description to Optional and Computed (#48766)
resource/aws_cloudfront_function: Validate name, code, and comment against CloudFront's documented constraints during plan instead of failing at apply time (#49395)
resource/aws_db_instance: Add resource identity support (#49602)
resource/aws_dsql_cluster: Add resource identity support (#49657)
resource/aws_dx_private_virtual_interface: Add bgp_asn_long argument (#49587)
resource/aws_dx_transit_virtual_interface: Add bgp_asn_long argument (#49588)
resource/aws_ecs_cluster: Add resource identity support (#49682)
resource/aws_elasticache_replication_group: Add auth_token_wo and auth_token_wo_version write-only arguments (#49268)
resource/aws_observabilityadmin_centralization_rule_for_organization: Add tag_propagation_configuration configuration block to rule.destination.destination_logs_configuration, and tag_propagation_status and tag_propagation_failure_reason attributes (#49656)
resource/aws_resiliencehubv2_service: Add user_journey_ids argument to the associated_system configuration block (#49603)
resource/aws_secretsmanager_secret_rotation: rotation_enabled is now configurable (previously read-only) and can be set to false to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with manage_master_user_password (#49659)
resource/aws_secretsmanager_secret_rotation: rotation_rules is now optional, and must be omitted when rotation_enabled is false (#49659)
resource/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config argument (#49668)

BUG FIXES:

resource/aws_bedrockagentcore_harness: Correct plan-time validation of name (#48766)
resource/aws_bedrockagentcore_memory_strategy: Force resource replacement when name is modified (#48766)
resource/aws_bedrockagentcore_registry: Correct plan-time validation of name (#48766)
resource/aws_cloudwatch_log_resource_policy: Fixes error when importing by identity when using resource-scope (#49614)
resource/aws_elasticache_cluster: Add plan-time validation to reject transit_encryption_enabled for Redis and Valkey engines, which are only supported on aws_elasticache_replication_group (#49114)
resource/aws_resiliencehubv2_input_source: Change resource_configuration.resource_tag from List to Set to ignore ordering (#49585)
resource/aws_s3_account_public_access_block: Fixes eventual consistency issue on creation (#49687)
resource/aws_savingsplan_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49678)
resource/aws_savingsplan_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49679)
resource/aws_savingsplan_savings_plan: Mark purchase_time as Optional and Computed (#49679)
resource/aws_savingsplan_savings_plan: Treat queued as a target state during creation (#49678)
resource/aws_savingsplans_savings_plan: Mark upfront_payment_amount as Computed to fix a Provider produced inconsistent result after apply error for No Upfront savings plans (#49264)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://search.opentofu.org/provider/hashicorp/aws) ([source](https://github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.61.0` → `6.62.0` | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.62.0`](https://github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6620-August-26-2026) [Compare Source](https://github.com/hashicorp/terraform-provider-aws/compare/v6.61.0...v6.62.0) NOTES: - resource/aws\_db\_instance: When `manage_master_user_password` is enabled, the managed secret's automatic rotation can now be disabled using `aws_secretsmanager_secret_rotation` with `rotation_enabled = false` ([#49659](https://github.com/hashicorp/terraform-provider-aws/issues/49659)) - resource/aws\_rds\_cluster: When `manage_master_user_password` is enabled, the managed secret's automatic rotation can now be disabled using `aws_secretsmanager_secret_rotation` with `rotation_enabled = false` ([#49659](https://github.com/hashicorp/terraform-provider-aws/issues/49659)) - resource/aws\_savingsplans\_savings\_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing ([#49264](https://github.com/hashicorp/terraform-provider-aws/issues/49264)) FEATURES: - **New List Resource:** `aws_db_instance` ([#49602](https://github.com/hashicorp/terraform-provider-aws/issues/49602)) - **New List Resource:** `aws_dsql_cluster` ([#49657](https://github.com/hashicorp/terraform-provider-aws/issues/49657)) - **New List Resource:** `aws_dsql_cluster_policy` ([#49676](https://github.com/hashicorp/terraform-provider-aws/issues/49676)) - **New List Resource:** `aws_ecr_lifecycle_policy` ([#49696](https://github.com/hashicorp/terraform-provider-aws/issues/49696)) - **New List Resource:** `aws_ecs_cluster` ([#49682](https://github.com/hashicorp/terraform-provider-aws/issues/49682)) - **New List Resource:** `aws_pinpointsmsvoicev2_keyword` ([#48967](https://github.com/hashicorp/terraform-provider-aws/issues/48967)) - **New Resource:** `aws_pinpointsmsvoicev2_keyword` ([#48967](https://github.com/hashicorp/terraform-provider-aws/issues/48967)) - **New Resource:** `aws_sesv2_multi_region_endpoint` ([#49660](https://github.com/hashicorp/terraform-provider-aws/issues/49660)) ENHANCEMENTS: - data-source/aws\_resiliencehubv2\_service: Add `associated_system.user_journey_ids` attribute ([#49603](https://github.com/hashicorp/terraform-provider-aws/issues/49603)) - resource/aws\_bedrockagentcore\_browser: Add plan-time validation of `name` ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory: Add Resource Identity support ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory: Allow adding `indexed_key` entries in place instead of forcing a new resource ([#48877](https://github.com/hashicorp/terraform-provider-aws/issues/48877)) - resource/aws\_bedrockagentcore\_memory: Change `indexed_key` from `List` to `Set` to ignore ordering ([#48877](https://github.com/hashicorp/terraform-provider-aws/issues/48877)) - resource/aws\_bedrockagentcore\_memory\_strategy: Add Resource Identity support ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory\_strategy: Add `configuration.self_managed_configuration` argument in support of self-managed strategies ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory\_strategy: Add `memory_record_schema` argument ([#48765](https://github.com/hashicorp/terraform-provider-aws/issues/48765)) - resource/aws\_bedrockagentcore\_memory\_strategy: Add plan-time validation of `description` ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory\_strategy: Change `description` to Optional and Computed ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_cloudfront\_function: Validate `name`, `code`, and `comment` against CloudFront's documented constraints during plan instead of failing at apply time ([#49395](https://github.com/hashicorp/terraform-provider-aws/issues/49395)) - resource/aws\_db\_instance: Add resource identity support ([#49602](https://github.com/hashicorp/terraform-provider-aws/issues/49602)) - resource/aws\_dsql\_cluster: Add resource identity support ([#49657](https://github.com/hashicorp/terraform-provider-aws/issues/49657)) - resource/aws\_dx\_private\_virtual\_interface: Add `bgp_asn_long` argument ([#49587](https://github.com/hashicorp/terraform-provider-aws/issues/49587)) - resource/aws\_dx\_transit\_virtual\_interface: Add `bgp_asn_long` argument ([#49588](https://github.com/hashicorp/terraform-provider-aws/issues/49588)) - resource/aws\_ecs\_cluster: Add resource identity support ([#49682](https://github.com/hashicorp/terraform-provider-aws/issues/49682)) - resource/aws\_elasticache\_replication\_group: Add `auth_token_wo` and `auth_token_wo_version` write-only arguments ([#49268](https://github.com/hashicorp/terraform-provider-aws/issues/49268)) - resource/aws\_observabilityadmin\_centralization\_rule\_for\_organization: Add `tag_propagation_configuration` configuration block to `rule.destination.destination_logs_configuration`, and `tag_propagation_status` and `tag_propagation_failure_reason` attributes ([#49656](https://github.com/hashicorp/terraform-provider-aws/issues/49656)) - resource/aws\_resiliencehubv2\_service: Add `user_journey_ids` argument to the `associated_system` configuration block ([#49603](https://github.com/hashicorp/terraform-provider-aws/issues/49603)) - resource/aws\_secretsmanager\_secret\_rotation: `rotation_enabled` is now configurable (previously read-only) and can be set to `false` to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with `manage_master_user_password` ([#49659](https://github.com/hashicorp/terraform-provider-aws/issues/49659)) - resource/aws\_secretsmanager\_secret\_rotation: `rotation_rules` is now optional, and must be omitted when `rotation_enabled` is `false` ([#49659](https://github.com/hashicorp/terraform-provider-aws/issues/49659)) - resource/aws\_workspaces\_directory: Add `workspace_access_properties.access_endpoint_config` argument ([#49668](https://github.com/hashicorp/terraform-provider-aws/issues/49668)) BUG FIXES: - resource/aws\_bedrockagentcore\_harness: Correct plan-time validation of `name` ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_memory\_strategy: Force resource replacement when `name` is modified ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_bedrockagentcore\_registry: Correct plan-time validation of `name` ([#48766](https://github.com/hashicorp/terraform-provider-aws/issues/48766)) - resource/aws\_cloudwatch\_log\_resource\_policy: Fixes error when importing by identity when using resource-scope ([#49614](https://github.com/hashicorp/terraform-provider-aws/issues/49614)) - resource/aws\_elasticache\_cluster: Add plan-time validation to reject transit\_encryption\_enabled for Redis and Valkey engines, which are only supported on aws\_elasticache\_replication\_group ([#49114](https://github.com/hashicorp/terraform-provider-aws/issues/49114)) - resource/aws\_resiliencehubv2\_input\_source: Change `resource_configuration.resource_tag` from `List` to `Set` to ignore ordering ([#49585](https://github.com/hashicorp/terraform-provider-aws/issues/49585)) - resource/aws\_s3\_account\_public\_access\_block: Fixes eventual consistency issue on creation ([#49687](https://github.com/hashicorp/terraform-provider-aws/issues/49687)) - resource/aws\_savingsplan\_savings\_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing ([#49678](https://github.com/hashicorp/terraform-provider-aws/issues/49678)) - resource/aws\_savingsplan\_savings\_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing ([#49679](https://github.com/hashicorp/terraform-provider-aws/issues/49679)) - resource/aws\_savingsplan\_savings\_plan: Mark `purchase_time` as `Optional` and `Computed` ([#49679](https://github.com/hashicorp/terraform-provider-aws/issues/49679)) - resource/aws\_savingsplan\_savings\_plan: Treat `queued` as a target state during creation ([#49678](https://github.com/hashicorp/terraform-provider-aws/issues/49678)) - resource/aws\_savingsplans\_savings\_plan: Mark `upfront_payment_amount` as `Computed` to fix a `Provider produced inconsistent result after apply` error for `No Upfront` savings plans ([#49264](https://github.com/hashicorp/terraform-provider-aws/issues/49264)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-08-27 00:07:22 +00:00

chore(deps): update terraform aws to v6.62.0 a0e1dd42d6

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-08-27 00:07:22 +00:00

renovate-bot merged commit 0f2735a19e into main

2026-08-27 00:07:23 +00:00

renovate-bot referenced this pull request from a commit

2026-08-27 00:07:23 +00:00

Merge pull request 'chore(deps): update terraform aws to v6.62.0' (#109) from renovate/aws-6.x into main