Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.22.1 #195

dependabot · 2025-11-21T03:07:40Z

Updates the requirements on hashicorp/aws to permit the latest version.

Release notes

Sourced from hashicorp/aws's releases.

v6.22.0

6.22.0 (November 20, 2025)

NOTES:

resource/aws_s3_bucket_server_side_encryption_configuration: Starting in March 2026, Amazon S3 will introduce a new default bucket security setting by automatically disabling server-side encryption with customer-provided keys (SSE-C) for all new buckets. Use the blocked_encryption_types argument to manage this behavior for specific buckets. (#45105)

FEATURES:

New Ephemeral Resource: aws_ecr_authorization_token (#44949)

New Guide: Tag Policy Compliance (#45143)

New Resource: aws_billing_view (#45097)

New Resource: aws_vpclattice_domain_verification (#45085)

ENHANCEMENTS:

data-source/aws_lb_listener: Add default_action.jwt_validation attribute (#45089)

data-source/aws_lb_listener_rule: Add action.jwt_validation attribute (#45089)

data-source/aws_route53_zone: Support filtering by tags only or by vpc_id only (#39671)

provider: Add support for enforcing tag policy compliance. This opt-in feature can be enabled via the new tag_policy_compliance provider argument, or the TF_AWS_TAG_POLICY_COMPLIANCE environment variable. When enabled, the principal executing Terraform must have the tags:ListRequiredTags IAM permission. (#45143)

resource/aws_backup_logically_air_gapped_vault: Add encryption_key_arn argument (#45020)

resource/aws_bedrock_guardrail: Add input_action, input_enabled, input_modalities, output_action, output_enabled, and output_modalities arguments to the content_policy_config.filters_config block (#45104)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.rds_configuration.field_mapping.custom_metadata_field argument (#45075)

resource/aws_bedrockagentcore_agent_runtime: Add agent_runtime_artifact.code_configuration block (#45091)

resource/aws_bedrockagentcore_agent_runtime: Make agent_runtime_artifact.container_configuration block optional (#45091)

resource/aws_dynamodb_table: Add global_table_witness argument (#43908)

resource/aws_emr_managed_scaling_policy: Add scaling_strategy and utilization_performance_index arguments (#45132)

resource/aws_fis_experiment_template: Add plan-time validation of log_configuration.cloudwatch_logs_configuration.log_group_arn (#35941)

resource/aws_fis_experiment_template: Add support for Functions to action.*.target (#41209)

resource/aws_lambda_invocation: Add import support (#41240)

resource/aws_lb_listener: Support jwt-validation as a valid default_action.type and add default_action.jwt_validation configuration block (#45089)

resource/aws_lb_listener_rule: Support jwt-validation as a valid action.type and add action.jwt_validation configuration block (#45089)

resource/aws_odb_cloud_vm_cluster: vm cluster creation using odb network ARN and exadata infrastructure ARN for resource sharing model. (#45003)

resource/aws_organizations_organization: Add SECURITYHUB_POLICY as a valid value for enabled_policy_types argument (#45135)

resource/aws_prometheus_query_logging_configuration: Add plan-time validation of destination.cloudwatch_logs.log_group_arn (#35941)

resource/aws_prometheus_workspace: Add plan-time validation of logging_configuration.log_group_arn (#35941)

resource/aws_s3_bucket_server_side_encryption_configuration: Add rule.blocked_encryption_types argument (#45105)

resource/aws_sagemaker_model: Add container.additional_model_data_source and primary_container.additional_model_data_source arguments (#44407)

resource/aws_sfn_state_machine: Add plan-time validation of logging_configuration.log_destination (#35941)

resource/aws_timestreaminfluxdb_db_cluster: Add engine_type attribute (#44899)

resource/aws_timestreaminfluxdb_db_cluster: Add validation to ensure InfluxDB V2 clusters have required fields and InfluxDB V3 clusters (when using V3 parameter groups) do not have forbidden V2 fields. This functionality requires the timestream-influxdb:GetDbParameterGroup IAM permission (#44899)

resource/aws_vpclattice_resource_configuration: Add custom_domain_name and domain_verification_id arguments and domain_verification_arn and domain_verification_status attributes to support custom domain names for resource configurations (#45085)

resource/aws_vpn_connection: Add tunnel_bandwidth argument to support higher bandwidth tunnels (#45070)

BUG FIXES:

resource/aws_db_instance: Fix blue/green deployments failing with "not in available state" by improving stability and handling storage-config-upgrade and storage-initialization statuses (#41275)

resource/aws_elastic_beanstalk_configuration_template: Fix updates not applying by including ResourceName for option settings and preventing duplicate add/remove operations (#45077)

resource/aws_odb_cloud_vm_cluster: support for hyphen in odb cloud vm cluster hostname prefix. (#45003)

resource/aws_quicksight_account_settings: Add region argument (#45083)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.22.0 (November 20, 2025)

NOTES:

resource/aws_s3_bucket_server_side_encryption_configuration: Starting in March 2026, Amazon S3 will introduce a new default bucket security setting by automatically disabling server-side encryption with customer-provided keys (SSE-C) for all new buckets. Use the blocked_encryption_types argument to manage this behavior for specific buckets. (#45105)

FEATURES:

New Ephemeral Resource: aws_ecr_authorization_token (#44949)

New Guide: Tag Policy Compliance (#45143)

New Resource: aws_billing_view (#45097)

New Resource: aws_vpclattice_domain_verification (#45085)

ENHANCEMENTS:

data-source/aws_lb_listener: Add default_action.jwt_validation attribute (#45089)

data-source/aws_lb_listener_rule: Add action.jwt_validation attribute (#45089)

data-source/aws_route53_zone: Support filtering by tags only or by vpc_id only (#39671)

provider: Add support for enforcing tag policy compliance. This opt-in feature can be enabled via the new tag_policy_compliance provider argument, or the TF_AWS_TAG_POLICY_COMPLIANCE environment variable. When enabled, the principal executing Terraform must have the tags:ListRequiredTags IAM permission. (#45143)

resource/aws_backup_logically_air_gapped_vault: Add encryption_key_arn argument (#45020)

resource/aws_bedrock_guardrail: Add input_action, input_enabled, input_modalities, output_action, output_enabled, and output_modalities arguments to the content_policy_config.filters_config block (#45104)

resource/aws_bedrockagent_knowledge_base: Add storage_configuration.rds_configuration.field_mapping.custom_metadata_field argument (#45075)

resource/aws_bedrockagentcore_agent_runtime: Add agent_runtime_artifact.code_configuration block (#45091)

resource/aws_bedrockagentcore_agent_runtime: Make agent_runtime_artifact.container_configuration block optional (#45091)

resource/aws_dynamodb_table: Add global_table_witness argument (#43908)

resource/aws_emr_managed_scaling_policy: Add scaling_strategy and utilization_performance_index arguments (#45132)

resource/aws_fis_experiment_template: Add plan-time validation of log_configuration.cloudwatch_logs_configuration.log_group_arn (#35941)

resource/aws_fis_experiment_template: Add support for Functions to action.*.target (#41209)

resource/aws_lambda_invocation: Add import support (#41240)

resource/aws_lb_listener: Support jwt-validation as a valid default_action.type and add default_action.jwt_validation configuration block (#45089)

resource/aws_lb_listener_rule: Support jwt-validation as a valid action.type and add action.jwt_validation configuration block (#45089)

resource/aws_odb_cloud_vm_cluster: vm cluster creation using odb network ARN and exadata infrastructure ARN for resource sharing model. (#45003)

resource/aws_organizations_organization: Add SECURITYHUB_POLICY as a valid value for enabled_policy_types argument (#45135)

resource/aws_prometheus_query_logging_configuration: Add plan-time validation of destination.cloudwatch_logs.log_group_arn (#35941)

resource/aws_prometheus_workspace: Add plan-time validation of logging_configuration.log_group_arn (#35941)

resource/aws_s3_bucket_server_side_encryption_configuration: Add rule.blocked_encryption_types argument (#45105)

resource/aws_sagemaker_model: Add container.additional_model_data_source and primary_container.additional_model_data_source arguments (#44407)

resource/aws_sfn_state_machine: Add plan-time validation of logging_configuration.log_destination (#35941)

resource/aws_timestreaminfluxdb_db_cluster: Add engine_type attribute (#44899)

resource/aws_timestreaminfluxdb_db_cluster: Add validation to ensure InfluxDB V2 clusters have required fields and InfluxDB V3 clusters (when using V3 parameter groups) do not have forbidden V2 fields. This functionality requires the timestream-influxdb:GetDbParameterGroup IAM permission (#44899)

resource/aws_vpclattice_resource_configuration: Add custom_domain_name and domain_verification_id arguments and domain_verification_arn and domain_verification_status attributes to support custom domain names for resource configurations (#45085)

resource/aws_vpn_connection: Add tunnel_bandwidth argument to support higher bandwidth tunnels (#45070)

BUG FIXES:

resource/aws_db_instance: Fix blue/green deployments failing with "not in available state" by improving stability and handling storage-config-upgrade and storage-initialization statuses (#41275)

resource/aws_elastic_beanstalk_configuration_template: Fix updates not applying by including ResourceName for option settings and preventing duplicate add/remove operations (#45077)

resource/aws_odb_cloud_vm_cluster: support for hyphen in odb cloud vm cluster hostname prefix. (#45003)

resource/aws_quicksight_account_settings: Add region argument (#45083)

resource/aws_s3_directory_bucket: Fix plan-time AWS resource not found during refresh warnings causing resource replacement when ReadOnly s3express:SessionMode is enforced (#45086)

... (truncated)

Commits

4ffb84d chore: v6.22.0 release prep (#45172)
bb280a2 Update CHANGELOG.md for #45143
b55929c Merge pull request #45143 from hashicorp/f-tag-policy
e6f66de Bump actions/setup-go from 6.0.0 to 6.1.0 (#45150)
4e4cd16 internal/generate/tagpolicy: inline tag policy definition
3bc7463 Merge pull request #45147 from hashicorp/dependabot/go_modules/dot-ci/provide...
eadfd3a Merge pull request #45161 from hashicorp/d-s3-docs-encryption
50d38e3 Update CHANGELOG.md for #45148
f37d624 internal/provider/sdkv2: return early for readability
17f0d88 Bump golang.org/x/crypto from 0.44.0 to 0.45.0 in /.ci/providerlint
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…< 6.22.1 Updates the requirements on [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) to permit the latest version. - [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-aws@v4.0.0...v6.22.0) --- updated-dependencies: - dependency-name: hashicorp/aws dependency-version: 6.22.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-11-24T03:14:42Z

Superseded by #196.

dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Nov 21, 2025

dependabot bot mentioned this pull request Nov 21, 2025

Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.21.1 #194

Closed

dependabot bot closed this Nov 24, 2025

dependabot bot deleted the dependabot/terraform/hashicorp/aws-gte-4.0.0-and-lt-6.22.1 branch November 24, 2025 03:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.22.1 #195

Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.22.1 #195

Uh oh!

dependabot bot commented on behalf of github Nov 21, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.22.1 #195

Update hashicorp/aws requirement from >= 4.0.0, < 6.0.0 to >= 4.0.0, < 6.22.1 #195

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 21, 2025

v6.22.0

6.22.0 (November 20, 2025)

6.22.0 (November 20, 2025)

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant