NOTES:

• New ephemeral resources aws_kms_secrets, aws_lambda_invocation, and aws_secretsmanager_secret_version now support ephemeral values. (#40009)

FEATURES:

• New Ephemeral Resource: aws_kms_secrets (#40009)
• New Ephemeral Resource: aws_lambda_invocation (#39988)
• New Ephemeral Resource: aws_secretsmanager_secret_version (#40009)
• New Resource: aws_rds_instance_state (#40180)

ENHANCEMENTS:

• data-source/aws_ami: Add warning diagnostic when most_recent is true and certain filter criteria are missing (#40211)
• data-source/aws_ecs_service: Add availability_zone_rebalancing attribute (#40225)
• resource/aws_ecs_service: Add availability_zone_rebalancing attribute (#40225)
• resource/aws_ecs_service: Add vpc_lattice_configurations argument (#40177)
• resource/aws_ecs_task_definition: Add versionConsistency argument to container_definitions (#40216)
• resource/aws_rds_global_cluster: Add endpoint argument to point to the writer DB instance in the current primary cluster (#39960)

BUG FIXES:

• data-source/aws_subnet: Set tags from the DescribeSubnets response, removing the need for the ec2:DescribeTags IAM permission (#40144)
• resource/aws_cognito_user_pool: Fix crash when hashing nil schema element (#40195)
• resource/aws_eks_addon: Fix crash when pod_identity_association is modified (#40168)
• resource/aws_eks_addon: Fix to prevent persistent differences when pod_identity_association is changed (#40168)