Update Terraform aws to v4.38.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	4.36.1 -> 4.38.0

---

Release Notes

hashicorp/terraform-provider-aws

v4.38.0

Compare Source

FEATURES:

• New Data Source: aws_connect_instance_storage_config (#​27308)
• New Resource: aws_apprunner_vpc_ingress_connection (#​27600)
• New Resource: aws_connect_phone_number (#​26364)
• New Resource: aws_evidently_segment (#​27159)
• New Resource: aws_fsx_file_cache (#​27384)
• New Resource: aws_lightsail_disk (#​27537)
• New Resource: aws_lightsail_disk_attachment (#​27537)
• New Resource: aws_lightsail_lb_stickiness_policy (#​27514)
• New Resource: aws_sagemaker_servicecatalog_portfolio_status (#​27548)
• New Resource: aws_sesv2_email_identity_feedback_attributes (#​27433)
• New Resource: aws_ssm_default_patch_baseline (#​27610)

ENHANCEMENTS:

• data-source/aws_networkmanager_core_network_policy_document: Add plan-time validation for core_network_configuration.edge_locations.asn (#​27305)
• resource/aws_ami_copy: Add imds_support attribute (#​27561)
• resource/aws_ami_from_instance: Add imds_support attribute (#​27561)
• resource/aws_apprunner_service: Add ingress_configuration argument block. (#​27600)
• resource/aws_batch_compute_environment: Add eks_configuration configuration block (#​27499)
• resource/aws_batch_compute_environment: Allow deletion of AWS Batch compute environments in INVALID state (#​26931)
• resource/aws_budgets_budget: Add auto_adjust_data configuration block (#​27474)
• resource/aws_budgets_budget: Add planned_limit configuration block (#​25766)
• resource/aws_cognito_user_pool: Add deletion_protection argument (#​27612)
• resource/aws_cognito_user_pool_client: Add auth_session_validity argument (#​27620)
• resource/aws_lb_target_group: Add support for target_failover and stickiness attributes for GENEVE protocol target groups (#​27334)
• resource/aws_sagemaker_domain: Add domain_settings, app_security_group_management, default_user_settings.r_session_app_settings, and default_user_settings.canvas_app_settings arguments. (#​27542)
• resource/aws_sagemaker_user_profile: Add user_settings.r_session_app_settings and user_settings.canvas_app_settings arguments. (#​27542)
• resource/aws_sagemaker_workforce: Add workforce_vpc_config argument (#​27538)
• resource/aws_sfn_state_machine: Add name_prefix argument (#​27574)

BUG FIXES:

• data-source/aws_ip_ranges: Fix regression causing filtering on regions and services to become case-sensitive (#​27558)
• resource/aws_batch_compute_environment: Update compute_resources.security_group_ids to be optional (#​26172)
• resource/aws_dynamodb_table: Fix bug causing spurious diffs with and preventing proper updating of stream_enabled and stream_view_type (#​27566)
• resource/aws_instance: Use EC2 API idempotency to ensure that only a single Instance is created (#​27561)

v4.37.0

Compare Source

NOTES:

• resource/aws_medialive_multiplex_program: The statemux_settings argument has been deprecated. Use the statmux_settings argument instead (#​27223)

FEATURES:

• New Data Source: aws_dx_router_configuration (#​27341)
• New Resource: aws_inspector2_enabler (#​27505)
• New Resource: aws_lightsail_lb_certificate (#​27462)
• New Resource: aws_lightsail_lb_certificate_attachment (#​27462)
• New Resource: aws_route53_resolver_config (#​27487)
• New Resource: aws_sesv2_dedicated_ip_assignment (#​27361)
• New Resource: aws_sesv2_email_identity (#​27260)

ENHANCEMENTS:

• data-source/aws_acmpca_certificate_authority: Add usage_mode attribute (#​27496)
• data-source/aws_outposts_assets: Add host_id_filter and status_id_filter arguments (#​27303)
• resource/aws_acmpca_certificate_authority: Add usage_mode argument to support short-lived certificates (#​27496)
• resource/aws_apprunner_vpc_connector: Add ability to update tags (#​27345)
• resource/aws_datasync_task: Add security_descriptor_copy_flags to options configuration block (#​26992)
• resource/aws_ec2_capacity_reservation: Add placement_group_arn argument (#​27458)
• resource/aws_ec2_transit_gateway: Add support to modify amazon_side_asn argument (#​27306)
• resource/aws_elasticache_global_replication_group: Add global_node_groups and num_node_groups arguments (#​27500)
• resource/aws_elasticache_global_replication_group: Add timeouts. (#​27500)
• resource/aws_evidently_project: Support configurable timeouts for create, update, and delete (#​27336)
• resource/aws_flow_log: Amazon VPC Flow Logs supports Kinesis Data Firehose as destination (#​27340)
• resource/aws_medialive_multiplex_program: Add ability to update multiplex_program_settings in place (#​27223)
• resource/aws_network_interface_attachment: Added import capabilities for the resource (#​27364)
• resource/aws_sesv2_dedicated_ip_pool: Add scaling_mode attribute (#​27388)
• resource/aws_ssm_parameter: Support aws:ssm:integration as a valid value for data_type (#​27329)

BUG FIXES:

• data-source/aws_route53_traffic_policy_document: Fixed incorrect capitalization for GeoproximityLocations (#​27473)
• resource/aws_connect_contact_flow: Change type to ForceNew (#​27347)
• resource/aws_ecs_service: Correctly handle unconfigured task_definition, making EXTERNAL deployments possible (#​27390)
• resource/aws_lb_target_group: Fix import issues on aws_lb_target_group when specifying ip_address_type of ipv4 (#​27464)
• resource/aws_rds_proxy_endpoint: Respect configured provider default_tags value on resource Update (#​27367)
• resource/aws_vpc_ipam_pool_cidr: Fix crash when IPAM Pool CIDR not found (#​27512)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.