6.15.0 (October 2, 2025)

BREAKING CHANGES:

• resource/aws_ecs_service: Fix behavior when updating capacity_provider_strategy to avoid ECS service recreation after recent AWS changes (#43533)

FEATURES:

• New Action: aws_codebuild_start_build (#44444)
• New Action: aws_events_put_events (#44487)
• New Action: aws_sfn_start_execution (#44464)
• New Data Source: aws_appconfig_application (#44168)
• New Data Source: aws_odb_db_node (#43792)
• New Data Source: aws_odb_db_nodes (#43792)
• New Data Source: aws_odb_db_server (#43792)
• New Data Source: aws_odb_db_servers (#43792)
• New Data Source: aws_odb_db_system_shapes (#43825)
• New Data Source: aws_odb_gi_versions (#43825)
• New Resource: aws_lakeformation_lf_tag_expression (#43883)

ENHANCEMENTS:

• data-source/aws_dms_endpoint: Add mysql_settings attribute (#44516)
• data-source/aws_ec2_instance_type_offering: Add location attribute (#44328)
• data-source/aws_rds_proxy: Add default_auth_scheme attribute (#44309)
• resource/aws_cleanrooms_configured_table: Add resource identity support (#44435)
• resource/aws_cloudfront_distribution: Add ip_address_type argument to origin.custom_origin_config block (#44463)
• resource/aws_connect_instance: Add resource identity support (#44346)
• resource/aws_connect_phone_number: Add resource identity support (#44365)
• resource/aws_dms_endpoint: Add mysql_settings configuration block (#44516)
• resource/aws_dsql_cluster: Adds attribute force_destroy. (#44406)
• resource/aws_ebs_volume: Update throughput maximum validation from 1000 to 2000 MiB/s for gp3 volumes (#44514)
• resource/aws_ecs_capacity_provider: Add cluster and managed_instances_provider arguments (#44509)
• resource/aws_ecs_capacity_provider: Make auto_scaling_group_provider optional (#44509)
• resource/aws_iam_service_specific_credential: Add support for Bedrock API keys with credential_age_days, service_credential_alias, service_credential_secret, create_date, and expiration_date attributes (#44299)
• resource/aws_networkfirewall_logging_configuration: Add enable_monitoring_dashboard argument (#44515)
• resource/aws_opensearch_domain: Add aiml_options argument (#44417)
• resource/aws_pinpointsmsvoicev2_phone_number: Update two_way_channel_arn argument to accept connect.[region].amazonaws.com in addition to ARNs (#44372)
• resource/aws_rds_proxy: Add default_auth_scheme argument (#44309)
• resource/aws_rds_proxy: Make auth configuration block optional (#44309)
• resource/aws_route53recoverycontrolconfig_cluster: Add network_type argument (#44377)
• resource/aws_route53recoverycontrolconfig_cluster: Add tagging support (#44473)
• resource/aws_route53recoverycontrolconfig_control_panel: Add tagging support (#44473)
• resource/aws_route53recoverycontrolconfig_safety_rule: Add tagging support (#44473)
• resource/aws_s3control_bucket: Add resource identity support (#44379)
• resource/aws_sfn_activity: Add arn argument (#44408)
• resource/aws_sfn_activity: Add resource identity support (#44408)
• resource/aws_sfn_alias: Add resource identity support (#44408)
• resource/aws_ssmcontacts_contact_channel: Add resource identity support (#44369)

BUG FIXES:

• data-source/aws_lb: Fix Invalid address to set: []string{"secondary_ips_auto_assigned_per_subnet"} errors (#44485)
• data-source/aws_networkfirewall_firewall_policy: Fix failure to retrieve multiple firewall_policy.stateful_rule_group_reference attributes (#44482)
• data-source/aws_servicequotas_service_quota: Fixed a panic that occurred when a non-existing quota_name was provided (#44449)
• resource/aws_bedrock_provisioned_model_throughput: Fix AttributeName("arn") still remains in the path: could not find attribute or block "arn" in schema errors when upgrading from a pre-v6.0.0 provider version (#44434)
• resource/aws_chatbot_slack_channel_configuration: Force resource replacement when configuration_name is modified (#43996)
• resource/aws_cloudwatch_event_rule: Do not retry on LimitExceededException (#44489)
• resource/aws_cloudwatch_log_resource_policy: Do not retry on LimitExceededException (#44522)
• resource/aws_default_vpc: Correctly set ipv6_cidr_block when the VPC has multiple associated IPv6 CIDRs (#44362)
• resource/aws_dms_endpoint: Ensure that postgres_settings are updated (#44389)
• resource/aws_dsql_cluster: Prevents error when optional attribute deletion_protection_enabled not set. (#44406)
• resource/aws_eks_cluster: Change compute_config, kubernetes_network_config.elastic_load_balancing, and storage_config. to Optional and Computed, allowing EKS Auto Mode settings to be enabled, disabled, and removed from configuration (#44334)
• resource/aws_elastic_beanstalk_configuration_template: Fix inconsistent final plan error in some cases with setting elements. (#44461)
• resource/aws_elastic_beanstalk_environment: Fix inconsistent final plan error in some cases with setting elements. (#44461)
• resource/aws_elasticache_cluster: Fix provider produced unexpected value for cache_usage_limits argument. (#43841)
• resource/aws_fsx_lustre_file_system: Fixed to update metadata_configuration first to allow simultaneous increase of metadata_configuration.iops and storage_capacity (#44456)
• resource/aws_instance: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#44459)
• resource/aws_kinesisanalyticsv2_application: Ensure that configured application_configuration.run_configuration values are respected during update (#43490)
• resource/aws_odb_cloud_autonomous_vm_cluster : Fixed planmodifier for computed attribute. (#44401)
• resource/aws_odb_cloud_vm_cluster : Fixed planmodifier for computed attribute. Fixed planmodifier from display_name attribute. (#44401)
• resource/aws_odb_cloud_vm_cluster : Fixed planmodifier for data_storage_size_in_tbs. Marked it mandatory. Fixed gi-version issue during creation (#44498)
• resource/aws_odb_network_peering_connection : Fixed planmodifier for computed attribute. (#44401)
• resource/aws_rds_cluster: Fixes error when setting database_insights_mode with global_cluster_identifier. (#44404)
• resource/aws_route53_health_check: Fix child_health_threshold to properly accept explicitly specified zero value (#44006)
• resource/aws_s3_bucket_lifecycle_configuration: Allows unsetting noncurrent_version_expiration.newer_noncurrent_versions and noncurrent_version_transition.newer_noncurrent_versions. (#44442)
• resource/aws_s3_bucket_lifecycle_configuration: Do not warn if no filter element is set (#43590)
• resource/aws_vpc: Correctly set ipv6_cidr_block when the VPC has multiple associated IPv6 CIDRs (#44362)