data-source/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config attribute (#49849)
resource/aws_appconfig_hosted_configuration_version: Add version_label argument (#49881)
resource/aws_bedrockagentcore_harness: Add model.bedrock_model_config.additional_params argument (#48498)
resource/aws_bedrockagentcore_harness: Add model.bedrock_model_config.api_format and model.openai_model_config.api_format arguments (#48521)
resource/aws_bedrockagentcore_harness: Add model.gemini_model_config.additional_params and model.openai_model_config.additional_params arguments (#48656)
resource/aws_bedrockagentcore_harness: Add model.litellm_model_config configuration block (#48656)
resource/aws_bedrockagentcore_harness: Add skill.aws_skills, skill.git, and skill.s3 configuration blocks (#48656)
resource/aws_bedrockagentcore_harness: Change max_tokens to Optional and Computed (#48656)
resource/aws_bedrockagentcore_harness: Change skill.path to Optional (#48656)
resource/aws_bedrockagentcore_harness: Change system_prompt to Required (#48656)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add Resource Identity support (#49900)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add configurable resource timeouts (#49900)
resource/aws_cloudwatch_metric_alarm: Add warm_up_configuration configuration block (#49873)
resource/aws_db_instance: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)
resource/aws_ecs_capacity_provider: Add managed_instances_provider.auto_repair_configuration configuration block (#49763)
resource/aws_msk_replicator: Add kafka_cluster.client_authentication to configure mtls or sasl_scram authentication to an Apache Kafka cluster (#49265)
resource/aws_msk_replicator: Add kafka_cluster.encryption_in_transit to supply a custom root CA certificate for an Apache Kafka cluster (#49265)
resource/aws_msk_replicator: Support self-managed and on-premises Apache Kafka clusters as a replication source or target, via the kafka_cluster.apache_kafka_cluster block and the replication_info_list.source_kafka_cluster_id and target_kafka_cluster_id arguments (#49265)
resource/aws_rds_cluster: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)
resource/aws_rds_cluster_instance: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)

BUG FIXES:

data-source/aws_workspaces_directory: Fix setting workspace_access_properties: Invalid address to set errors (#49849)
resource/aws_bedrockagentcore_harness: Retry Role validation failed for '...'. Please verify that the role exists and its trust policy allows assumption by this service IAM eventual consistency errors on Create. Because this error is returned while waiting for a newly-created harness to stabilize, the failed harness is deleted and creation is restarted. You may see CloudTrail events that reflect this sequence of operations (#48656)
resource/aws_db_instance: Fix error when restoring multi-az SQL Server from snapshot. (#49846)
resource/aws_rds_global_cluster: Fix potential eventual consistency error when re-creating resource. (#49804)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://search.opentofu.org/provider/hashicorp/aws) ([source](https://github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.63.0` → `6.64.0` | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.64.0`](https://github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6640-September-9-2026) [Compare Source](https://github.com/hashicorp/terraform-provider-aws/compare/v6.63.0...v6.64.0) FEATURES: - **New Data Source:** `aws_accountaccess_application` ([#49553](https://github.com/hashicorp/terraform-provider-aws/issues/49553)) - **New Data Source:** `aws_accountaccess_entitlements` ([#49554](https://github.com/hashicorp/terraform-provider-aws/issues/49554)) - **New Data Source:** `aws_agentregistry_registry` ([#49806](https://github.com/hashicorp/terraform-provider-aws/issues/49806)) - **New Data Source:** `aws_rds_events` ([#49783](https://github.com/hashicorp/terraform-provider-aws/issues/49783)) - **New List Resource:** `aws_accountaccess_entitlement` ([#49552](https://github.com/hashicorp/terraform-provider-aws/issues/49552)) - **New List Resource:** `aws_agentregistry_registry` ([#49549](https://github.com/hashicorp/terraform-provider-aws/issues/49549)) - **New List Resource:** `aws_bedrock_model_invocation_job` ([#49877](https://github.com/hashicorp/terraform-provider-aws/issues/49877)) - **New List Resource:** `aws_dms_data_provider` ([#49897](https://github.com/hashicorp/terraform-provider-aws/issues/49897)) - **New List Resource:** `aws_dms_instance_profile` ([#49747](https://github.com/hashicorp/terraform-provider-aws/issues/49747)) - **New List Resource:** `aws_fis_safety_lever_state` ([#49841](https://github.com/hashicorp/terraform-provider-aws/issues/49841)) - **New List Resource:** `aws_lambda_alias` ([#49706](https://github.com/hashicorp/terraform-provider-aws/issues/49706)) - **New Resource:** `aws_accountaccess_entitlement` ([#49552](https://github.com/hashicorp/terraform-provider-aws/issues/49552)) - **New Resource:** `aws_agentregistry_registry` ([#49549](https://github.com/hashicorp/terraform-provider-aws/issues/49549)) - **New Resource:** `aws_bedrock_model_invocation_job` ([#49877](https://github.com/hashicorp/terraform-provider-aws/issues/49877)) - **New Resource:** `aws_dms_data_provider` ([#49897](https://github.com/hashicorp/terraform-provider-aws/issues/49897)) - **New Resource:** `aws_dms_instance_profile` ([#49747](https://github.com/hashicorp/terraform-provider-aws/issues/49747)) - **New Resource:** `aws_fis_safety_lever_state` ([#49841](https://github.com/hashicorp/terraform-provider-aws/issues/49841)) ENHANCEMENTS: - data-source/aws\_workspaces\_directory: Add `workspace_access_properties.access_endpoint_config` attribute ([#49849](https://github.com/hashicorp/terraform-provider-aws/issues/49849)) - resource/aws\_appconfig\_hosted\_configuration\_version: Add `version_label` argument ([#49881](https://github.com/hashicorp/terraform-provider-aws/issues/49881)) - resource/aws\_bedrockagentcore\_harness: Add `model.bedrock_model_config.additional_params` argument ([#48498](https://github.com/hashicorp/terraform-provider-aws/issues/48498)) - resource/aws\_bedrockagentcore\_harness: Add `model.bedrock_model_config.api_format` and `model.openai_model_config.api_format` arguments ([#48521](https://github.com/hashicorp/terraform-provider-aws/issues/48521)) - resource/aws\_bedrockagentcore\_harness: Add `model.gemini_model_config.additional_params` and `model.openai_model_config.additional_params` arguments ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_harness: Add `model.litellm_model_config` configuration block ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_harness: Add `skill.aws_skills`, `skill.git`, and `skill.s3` configuration blocks ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_harness: Change `max_tokens` to Optional and Computed ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_harness: Change `skill.path` to Optional ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_harness: Change `system_prompt` to Required ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_bedrockagentcore\_oauth2\_credential\_provider: Add Resource Identity support ([#49900](https://github.com/hashicorp/terraform-provider-aws/issues/49900)) - resource/aws\_bedrockagentcore\_oauth2\_credential\_provider: Add configurable resource timeouts ([#49900](https://github.com/hashicorp/terraform-provider-aws/issues/49900)) - resource/aws\_cloudwatch\_metric\_alarm: Add `warm_up_configuration` configuration block ([#49873](https://github.com/hashicorp/terraform-provider-aws/issues/49873)) - resource/aws\_db\_instance: Add `warning_event_categories` argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the `rds:DescribeEvents` IAM permission ([#49783](https://github.com/hashicorp/terraform-provider-aws/issues/49783)) - resource/aws\_ecs\_capacity\_provider: Add `managed_instances_provider.auto_repair_configuration` configuration block ([#49763](https://github.com/hashicorp/terraform-provider-aws/issues/49763)) - resource/aws\_msk\_replicator: Add `kafka_cluster.client_authentication` to configure `mtls` or `sasl_scram` authentication to an Apache Kafka cluster ([#49265](https://github.com/hashicorp/terraform-provider-aws/issues/49265)) - resource/aws\_msk\_replicator: Add `kafka_cluster.encryption_in_transit` to supply a custom root CA certificate for an Apache Kafka cluster ([#49265](https://github.com/hashicorp/terraform-provider-aws/issues/49265)) - resource/aws\_msk\_replicator: Support self-managed and on-premises Apache Kafka clusters as a replication source or target, via the `kafka_cluster.apache_kafka_cluster` block and the `replication_info_list.source_kafka_cluster_id` and `target_kafka_cluster_id` arguments ([#49265](https://github.com/hashicorp/terraform-provider-aws/issues/49265)) - resource/aws\_rds\_cluster: Add `warning_event_categories` argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the `rds:DescribeEvents` IAM permission ([#49783](https://github.com/hashicorp/terraform-provider-aws/issues/49783)) - resource/aws\_rds\_cluster\_instance: Add `warning_event_categories` argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the `rds:DescribeEvents` IAM permission ([#49783](https://github.com/hashicorp/terraform-provider-aws/issues/49783)) BUG FIXES: - data-source/aws\_workspaces\_directory: Fix `setting workspace_access_properties: Invalid address to set` errors ([#49849](https://github.com/hashicorp/terraform-provider-aws/issues/49849)) - resource/aws\_bedrockagentcore\_harness: Retry `Role validation failed for '...'. Please verify that the role exists and its trust policy allows assumption by this service` IAM eventual consistency errors on Create. Because this error is returned while waiting for a newly-created harness to stabilize, the failed harness is deleted and creation is restarted. You may see CloudTrail events that reflect this sequence of operations ([#48656](https://github.com/hashicorp/terraform-provider-aws/issues/48656)) - resource/aws\_db\_instance: Fix error when restoring multi-az SQL Server from snapshot. ([#49846](https://github.com/hashicorp/terraform-provider-aws/issues/49846)) - resource/aws\_rds\_global\_cluster: Fix potential eventual consistency error when re-creating resource. ([#49804](https://github.com/hashicorp/terraform-provider-aws/issues/49804)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-09-10 03:08:28 +00:00

chore(deps): update terraform aws to v6.64.0 1d79e5018b

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-09-10 03:08:28 +00:00

renovate-bot merged commit ef63c0035f into main

2026-09-10 03:08:29 +00:00

renovate-bot referenced this pull request from a commit

2026-09-10 03:08:29 +00:00

Merge pull request 'chore(deps): update terraform aws to v6.64.0' (#112) from renovate/aws-6.x into main