chore(deps): update terraform aws to v6.43.0 #90

Merged
renovate-bot merged 1 commit from renovate/aws-6.x into main 2026-04-30 22:03:58 +00:00
Member

This PR contains the following updates:

Package Type Update Change
aws (source) required_provider minor 6.42.06.43.0

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.43.0

Compare Source

FEATURES:

  • New Data Source: aws_securityhub_enabled_standards (#​43947)
  • New Data Source: aws_securityhub_security_controls (#​43947)
  • New List Resource: aws_db_subnet_group (#​47637)
  • New List Resource: aws_ec2_network_insights_access_scope (#​47582)
  • New List Resource: aws_iam_group_policy_attachment (#​47667)
  • New List Resource: aws_lambda_event_source_mapping (#​47686)
  • New List Resource: aws_securityhub_insight (#​47622)
  • New Resource: aws_arczonalshift_autoshift_observer_notification_status (#​46343)
  • New Resource: aws_ec2_network_insights_access_scope (#​47582)
  • New Resource: aws_securityhub_account_v2 (#​47356)

ENHANCEMENTS:

  • resource/aws_arczonalshift_autoshift_observer_notification_status: Add resource identity support (#​46343)
  • resource/aws_auditmanager_assessment: Add resource identity support (#​47674)
  • resource/aws_auditmanager_control: Add resource identity support (#​47674)
  • resource/aws_auditmanager_framework: Add resource identity support (#​47674)
  • resource/aws_auditmanager_framework_share: Add resource identity support (#​47674)
  • resource/aws_bedrockagentcore_memory_strategy: Support EPISODIC as a valid value for type (#​47589)
  • resource/aws_ecs_express_gateway_service: Deprecates current_deployment. (#​47694)
  • resource/aws_iam_group_policy_attachment: Add resource identity support (#​47667)
  • resource/aws_lambda_event_source_mapping: Add resource identity support (#​47686)
  • resource/aws_securityhub_action_target: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_configuration_policy: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_configuration_policy_association: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_configuration_policy_association: Add support for SELF_MANAGED_SECURITY_HUB as a policy_id value (#​47078)
  • resource/aws_securityhub_finding_aggregator: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_finding_aggregator: Add arn attribute (#​47543)
  • resource/aws_securityhub_insight: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_member: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_organization_admin_account: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_product_subscription: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_standards_control: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_standards_control_association: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_standards_subscription: Add Resource Identity support (#​47543)
  • resource/aws_securityhub_standards_subscription: Add arn attribute (#​47543)
  • resource/aws_subnet: Automatically detect and dissociate GuardDuty-managed VPC endpoints during terraform destroy when they block subnet deletion (#​46953)
  • resource/aws_vpc: Automatically detect and remove GuardDuty-managed VPC endpoints and security groups during terraform destroy when they block VPC deletion (#​46953)

BUG FIXES:

  • resource/aws_cloudwatch_metric_alarm: Fix invalid One of 'metric_name', 'metric_query', or 'evaluation_criteria' must be set for a cloudwatch metric alarm plan-time errors. This fixes a regression introduced in v6.42.0 (#​47666)
  • resource/aws_ecs_express_gateway_service: Handles more transient API errors during creation and deletion. (#​47568)
  • resource/aws_ecs_express_gateway_service: Marks resource for re-creation if it fails while waiting for creation. (#​47568)
  • resource/aws_ecs_express_gateway_service: Prevents errors when value of current_deployment changes. (#​47694)
  • resource/aws_ecs_express_gateway_service: Waits until the service is INACTIVE instead of DRAINING. (#​47568)
  • resource/aws_flow_log: Prevents error when updating from earlier versions of the provider or importing VPC Flow Logs (#​47699)
  • resource/aws_globalaccelerator_cross_account_attachment: Fix runtime error: invalid memory address or nil pointer dereference panics when removing resource blocks (#​47625)
  • resource/aws_pinpoint_app: Lower minimum of limits.messages_per_second from 50 to 1 to match the AWS API. (#​47636)
  • resource/aws_s3_bucket: Fix bucket creation on third-party S3-compatible APIs (e.g. OVH, Ceph RGW) by handling MalformedXML errors during tag-on-create and CreateBucketConfiguration operations (#​47530)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://search.opentofu.org/provider/hashicorp/aws) ([source](https://github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.42.0` → `6.43.0` | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.43.0`](https://github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6430-29-April-2026) [Compare Source](https://github.com/hashicorp/terraform-provider-aws/compare/v6.42.0...v6.43.0) FEATURES: - **New Data Source:** `aws_securityhub_enabled_standards` ([#&#8203;43947](https://github.com/hashicorp/terraform-provider-aws/issues/43947)) - **New Data Source:** `aws_securityhub_security_controls` ([#&#8203;43947](https://github.com/hashicorp/terraform-provider-aws/issues/43947)) - **New List Resource:** `aws_db_subnet_group` ([#&#8203;47637](https://github.com/hashicorp/terraform-provider-aws/issues/47637)) - **New List Resource:** `aws_ec2_network_insights_access_scope` ([#&#8203;47582](https://github.com/hashicorp/terraform-provider-aws/issues/47582)) - **New List Resource:** `aws_iam_group_policy_attachment` ([#&#8203;47667](https://github.com/hashicorp/terraform-provider-aws/issues/47667)) - **New List Resource:** `aws_lambda_event_source_mapping` ([#&#8203;47686](https://github.com/hashicorp/terraform-provider-aws/issues/47686)) - **New List Resource:** `aws_securityhub_insight` ([#&#8203;47622](https://github.com/hashicorp/terraform-provider-aws/issues/47622)) - **New Resource:** `aws_arczonalshift_autoshift_observer_notification_status` ([#&#8203;46343](https://github.com/hashicorp/terraform-provider-aws/issues/46343)) - **New Resource:** `aws_ec2_network_insights_access_scope` ([#&#8203;47582](https://github.com/hashicorp/terraform-provider-aws/issues/47582)) - **New Resource:** `aws_securityhub_account_v2` ([#&#8203;47356](https://github.com/hashicorp/terraform-provider-aws/issues/47356)) ENHANCEMENTS: - resource/aws\_arczonalshift\_autoshift\_observer\_notification\_status: Add resource identity support ([#&#8203;46343](https://github.com/hashicorp/terraform-provider-aws/issues/46343)) - resource/aws\_auditmanager\_assessment: Add resource identity support ([#&#8203;47674](https://github.com/hashicorp/terraform-provider-aws/issues/47674)) - resource/aws\_auditmanager\_control: Add resource identity support ([#&#8203;47674](https://github.com/hashicorp/terraform-provider-aws/issues/47674)) - resource/aws\_auditmanager\_framework: Add resource identity support ([#&#8203;47674](https://github.com/hashicorp/terraform-provider-aws/issues/47674)) - resource/aws\_auditmanager\_framework\_share: Add resource identity support ([#&#8203;47674](https://github.com/hashicorp/terraform-provider-aws/issues/47674)) - resource/aws\_bedrockagentcore\_memory\_strategy: Support `EPISODIC` as a valid value for `type` ([#&#8203;47589](https://github.com/hashicorp/terraform-provider-aws/issues/47589)) - resource/aws\_ecs\_express\_gateway\_service: Deprecates `current_deployment`. ([#&#8203;47694](https://github.com/hashicorp/terraform-provider-aws/issues/47694)) - resource/aws\_iam\_group\_policy\_attachment: Add resource identity support ([#&#8203;47667](https://github.com/hashicorp/terraform-provider-aws/issues/47667)) - resource/aws\_lambda\_event\_source\_mapping: Add resource identity support ([#&#8203;47686](https://github.com/hashicorp/terraform-provider-aws/issues/47686)) - resource/aws\_securityhub\_action\_target: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_configuration\_policy: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_configuration\_policy\_association: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_configuration\_policy\_association: Add support for `SELF_MANAGED_SECURITY_HUB` as a `policy_id` value ([#&#8203;47078](https://github.com/hashicorp/terraform-provider-aws/issues/47078)) - resource/aws\_securityhub\_finding\_aggregator: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_finding\_aggregator: Add `arn` attribute ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_insight: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_member: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_organization\_admin\_account: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_product\_subscription: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_standards\_control: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_standards\_control\_association: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_standards\_subscription: Add Resource Identity support ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_securityhub\_standards\_subscription: Add `arn` attribute ([#&#8203;47543](https://github.com/hashicorp/terraform-provider-aws/issues/47543)) - resource/aws\_subnet: Automatically detect and dissociate GuardDuty-managed VPC endpoints during `terraform destroy` when they block subnet deletion ([#&#8203;46953](https://github.com/hashicorp/terraform-provider-aws/issues/46953)) - resource/aws\_vpc: Automatically detect and remove GuardDuty-managed VPC endpoints and security groups during `terraform destroy` when they block VPC deletion ([#&#8203;46953](https://github.com/hashicorp/terraform-provider-aws/issues/46953)) BUG FIXES: - resource/aws\_cloudwatch\_metric\_alarm: Fix invalid `One of 'metric_name', 'metric_query', or 'evaluation_criteria' must be set for a cloudwatch metric alarm` plan-time errors. This fixes a regression introduced in [v6.42.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6420-april-22-2026) ([#&#8203;47666](https://github.com/hashicorp/terraform-provider-aws/issues/47666)) - resource/aws\_ecs\_express\_gateway\_service: Handles more transient API errors during creation and deletion. ([#&#8203;47568](https://github.com/hashicorp/terraform-provider-aws/issues/47568)) - resource/aws\_ecs\_express\_gateway\_service: Marks resource for re-creation if it fails while waiting for creation. ([#&#8203;47568](https://github.com/hashicorp/terraform-provider-aws/issues/47568)) - resource/aws\_ecs\_express\_gateway\_service: Prevents errors when value of `current_deployment` changes. ([#&#8203;47694](https://github.com/hashicorp/terraform-provider-aws/issues/47694)) - resource/aws\_ecs\_express\_gateway\_service: Waits until the service is `INACTIVE` instead of `DRAINING`. ([#&#8203;47568](https://github.com/hashicorp/terraform-provider-aws/issues/47568)) - resource/aws\_flow\_log: Prevents error when updating from earlier versions of the provider or importing VPC Flow Logs ([#&#8203;47699](https://github.com/hashicorp/terraform-provider-aws/issues/47699)) - resource/aws\_globalaccelerator\_cross\_account\_attachment: Fix `runtime error: invalid memory address or nil pointer dereference` panics when removing `resource` blocks ([#&#8203;47625](https://github.com/hashicorp/terraform-provider-aws/issues/47625)) - resource/aws\_pinpoint\_app: Lower minimum of `limits.messages_per_second` from 50 to 1 to match the AWS API. ([#&#8203;47636](https://github.com/hashicorp/terraform-provider-aws/issues/47636)) - resource/aws\_s3\_bucket: Fix bucket creation on third-party S3-compatible APIs (e.g. OVH, Ceph RGW) by handling `MalformedXML` errors during tag-on-create and `CreateBucketConfiguration` operations ([#&#8203;47530](https://github.com/hashicorp/terraform-provider-aws/issues/47530)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
chore(deps): update terraform aws to v6.43.0
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
c5a0e0c9d2
renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-04-30 22:03:57 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infrastructure/tofu-template!90
No description provided.