Skip to content

build(deps): bump the terraform-minor-patch group across 3 directories with 4 updates#98

Merged
nhs-oliverslater merged 4 commits into
mainfrom
dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e
Jul 21, 2026
Merged

build(deps): bump the terraform-minor-patch group across 3 directories with 4 updates#98
nhs-oliverslater merged 4 commits into
mainfrom
dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/iam directory: hashicorp/aws and terraform-aws-modules/iam/aws.
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/lambda directory: hashicorp/aws and terraform-aws-modules/lambda/aws.
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/s3-bucket directory: hashicorp/aws and terraform-aws-modules/s3-bucket/aws.

Updates hashicorp/aws from 6.50.0 to 6.53.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates terraform-aws-modules/iam/aws from 6.6.0 to 6.6.1

Release notes

Sourced from terraform-aws-modules/iam/aws's releases.

v6.6.1

6.6.1 (2026-05-28)

Bug Fixes

  • Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (#646) (10161bc)
Changelog

Sourced from terraform-aws-modules/iam/aws's changelog.

6.6.1 (2026-05-28)

Bug Fixes

  • Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (#646) (10161bc)
Commits
  • 5b962b1 chore(release): version 6.6.1 [skip ci]
  • 10161bc fix: Add missing ec2:DescribeSecurityGroups IPv4 VPC CNI IRSA permissions (...
  • See full diff in compare view

Updates hashicorp/aws from 6.50.0 to 6.54.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates hashicorp/aws from 6.50.0 to 6.54.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone number is managed by an aws_pinpointsmsvoicev2_pool. (#48414)

NOTES:

  • list-resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_bedrockagentcore_registry: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026 this functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. The aws_bedrockagentcore_browser resource will continue to work until September 17, 2026 (#48693)
  • resource/aws_ecs_capacity_provider: When a change forces replacement of a capacity provider that is associated with a cluster via aws_ecs_cluster_capacity_providers, add a replace_triggered_by lifecycle rule to the association so the old capacity provider is detached before it is deleted (#48156)

FEATURES:

  • New Data Source: aws_bedrock_foundation_model_agreement_offers (#47665)
  • New Data Source: aws_bedrock_use_case_for_model_access (#47665)
  • New Data Source: aws_ec2_capacity_block_reservation (#48185)
  • New List Resource: aws_pinpointsmsvoicev2_pool (#48414)
  • New Resource: aws_bedrock_foundation_model_agreement (#47665)
  • New Resource: aws_bedrock_use_case_for_model_access (#47665)
  • New Resource: aws_pinpointsmsvoicev2_pool (#48414)

ENHANCEMENTS:

  • data-source/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode attributes (#47973)
  • data-source/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_api_gateway_rest_api: Add security_policy and endpoint_access_mode arguments (#47973)
  • resource/aws_bedrockagentcore_browser: Add browser_signing, certificate, and enterprise_policy configuration blocks (#47816)
  • resource/aws_bedrockagentcore_code_interpreter: Add certificate argument (#47817)
  • resource/aws_cloudwatch_composite_alarm: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Add plan-time validation of rule_definition (#48679)
  • resource/aws_cloudwatch_contributor_insight_rule: Change rule_state to Optional and Computed (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Add plan-time validation of resource_arn and template_name (#48679)
  • resource/aws_cloudwatch_dashboard: Add Resource Identity support (#48679)
  • resource/aws_cloudwatch_metric_stream: Add Resource Identity support (#48679)
  • resource/aws_default_vpc: Add resource identity support (#47590)
  • resource/aws_msk_cluster: Add customer_action_status attribute (#48536)
  • resource/aws_pinpointsmsvoicev2_phone_number: Add force_disassociate argument (#48414)
  • resource/aws_securityhub_automation_rule: Deprecates id in favor of arn (#48636)
  • resource/aws_ssmcontacts_rotation: Deprecates id in favor of arn (#48636)
  • resource/aws_ssoadmin_trusted_token_issuer: Deprecates id in favor of arn (#48636)

BUG FIXES:

  • data-source/aws_codeartifact_authorization_token: Mark authorization_token as sensitive (#48577)
  • resource/aws_cloudwatch_contributor_managed_insight_rule: Mark resource_arn, tags and template_name as ForceNew (#48679)
  • resource/aws_default_vpc: Fix provider panic (nil pointer dereference) when importing via an import block or terraform import (#47590)
  • resource/aws_ecs_capacity_provider: Return the underlying error immediately instead of timing out after 20 minutes when deleting a capacity provider that is still associated with a cluster (#48156)

... (truncated)

Commits
  • a0c8167 Merge pull request #48724 from hashicorp/prepare6.53.0
  • 4293ebb Prepare for v6.53.0 release.
  • e7416b9 Update CHANGELOG.md for #48722
  • df82875 Merge pull request #48722 from hashicorp/b-retry.StateChangeConf.SetIncrement...
  • a41af67 Potential fix for pull request finding
  • ca63f16 Correct CHANGELOG entry file name.
  • 9f8d5a1 Add CHANGELOG entry.
  • 2980752 internal/retry: Fix increment delay regression when waiting for resource dele...
  • c1ee402 docs: update resource counts (#48718)
  • ca6b70c Update CHANGELOG.md for #48707
  • Additional commits viewable in compare view

Updates hashicorp/aws from 6.50.0 to 6.53.0

Release notes

Sourced from hashicorp/aws's releases.

v6.53.0

6.53.0 (July 1, 2026)

BREAKING CHANGES:

  • resource/aws_pinpointsmsvoicev2_phone_number: Remove provider-side defaults for opt_out_list_name and two_way_channel_enabled in favor of AWS server-side defaults (Default and false respectively). Configurations that omit these attributes will now show (known after apply) on first plan instead of the previous static value; the post-apply state is unchanged. This change mitigates persistent drift when the phone n...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 25, 2026
@dependabot
dependabot Bot requested review from a team as code owners June 25, 2026 14:05
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch 7 times, most recently from 79d3dad to 2047310 Compare July 7, 2026 12:19
@dependabot
dependabot Bot force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch 2 times, most recently from 6bfb74f to d97607d Compare July 10, 2026 11:20
@nhs-oliverslater
nhs-oliverslater force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch from d97607d to 383feb5 Compare July 21, 2026 12:56
@nhs-oliverslater
nhs-oliverslater enabled auto-merge (squash) July 21, 2026 13:09
@nhs-oliverslater
build(deps): bump the terraform-minor-patch group across 3 directorie…
ea6496e 
…s with 4 updates

Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/iam directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam).
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/lambda directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/lambda/aws](https://github.com/terraform-aws-modules/terraform-aws-lambda).
Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/s3-bucket directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/s3-bucket/aws](https://github.com/terraform-aws-modules/terraform-aws-s3-bucket).
@nhs-oliverslater
nhs-oliverslater force-pushed the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch from 383feb5 to ea6496e Compare July 21, 2026 13:15
@nhs-oliverslater
nhs-oliverslater enabled auto-merge (squash) July 21, 2026 13:16
@nhs-oliverslater
nhs-oliverslater self-requested a review July 21, 2026 13:34
@nhs-oliverslater
build(deps): bump actions/setup-node from 6.4.0 to 7.0.0
2e6b66d 
build(deps): bump actions/cache from 5.0.5 to 6.1.0
@Pira-nhs
Pira-nhs self-requested a review July 21, 2026 13:42
@nhs-oliverslater
nhs-oliverslater enabled auto-merge (squash) July 21, 2026 13:43
Pira-nhs
Pira-nhs approved these changes Jul 21, 2026
View reviewed changes

@Pira-nhs Pira-nhs left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@nhs-oliverslater
nhs-oliverslater merged commit f524d8f into main Jul 21, 2026
17 checks passed
@nhs-oliverslater
nhs-oliverslater deleted the dependabot-terraform-infrastructure-modules-iam-terraform-minor-patch-1b4185fa0e branch July 21, 2026 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Pira-nhs Pira-nhs Pira-nhs approved these changes
@nhs-oliverslater nhs-oliverslater nhs-oliverslater left review comments
@saliceti saliceti Awaiting requested review from saliceti saliceti is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Pira-nhs @nhs-oliverslater