chore(deps): update terraform aws to ~> 6.67.0 #3

Merged

alex merged 1 commit from renovate/all-non-major-dependencies into master

2026-10-02 00:39:56 +00:00

alex commented

2026-10-01 22:02:07 +00:00

Owner

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	`~> 6.66.0` → `~> 6.67.0`

Release Notes

hashicorp/terraform-provider-aws (aws)

`v6.67.0`

Compare Source

NOTES:

resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
New List Resource: aws_default_security_group (#50120)
New List Resource: aws_directory_service_ip_route (#50138)
New List Resource: aws_directoryservicedata_user (#50001)
New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
New Resource: aws_directory_service_ip_route (#50138)
New Resource: aws_directory_service_ip_routes_exclusive (#50204)
New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
resource/aws_default_security_group: Add Resource Identity support (#50120)
resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- "before 5am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://search.opentofu.org/provider/hashicorp/aws) ([source](https://github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `~> 6.66.0` → `~> 6.67.0` | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.67.0`](https://github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6670-September-30-2026) [Compare Source](https://github.com/hashicorp/terraform-provider-aws/compare/v6.66.0...v6.67.0) NOTES: - resource/aws\_route53\_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. ([#48525](https://github.com/hashicorp/terraform-provider-aws/issues/48525)) FEATURES: - **New Ephemeral Resource:** `aws_bedrockruntime_apply_guardrail` ([#50155](https://github.com/hashicorp/terraform-provider-aws/issues/50155)) - **New List Resource:** `aws_default_security_group` ([#50120](https://github.com/hashicorp/terraform-provider-aws/issues/50120)) - **New List Resource:** `aws_directory_service_ip_route` ([#50138](https://github.com/hashicorp/terraform-provider-aws/issues/50138)) - **New List Resource:** `aws_directoryservicedata_user` ([#50001](https://github.com/hashicorp/terraform-provider-aws/issues/50001)) - **New List Resource:** `aws_ec2_transit_gateway_route_table_propagation` ([#50193](https://github.com/hashicorp/terraform-provider-aws/issues/50193)) - **New Resource:** `aws_directory_service_ip_route` ([#50138](https://github.com/hashicorp/terraform-provider-aws/issues/50138)) - **New Resource:** `aws_directory_service_ip_routes_exclusive` ([#50204](https://github.com/hashicorp/terraform-provider-aws/issues/50204)) - **New Resource:** `aws_directoryservicedata_user` ([#50001](https://github.com/hashicorp/terraform-provider-aws/issues/50001)) ENHANCEMENTS: - resource/aws\_apprunner\_custom\_domain\_association: Add validation to prevent trailing dot on `domain_name` ([#50189](https://github.com/hashicorp/terraform-provider-aws/issues/50189)) - resource/aws\_apprunner\_custom\_domain\_association: Add validation to require `enable_www_subdomain` to be `false` for wildcard domain ([#50189](https://github.com/hashicorp/terraform-provider-aws/issues/50189)) - resource/aws\_bedrockagentcore\_workload\_identity: Add `tags` and `tags_all` attributes ([#49746](https://github.com/hashicorp/terraform-provider-aws/issues/49746)) - resource/aws\_bedrockagentcore\_workload\_identity: Add resource identity support ([#49746](https://github.com/hashicorp/terraform-provider-aws/issues/49746)) - resource/aws\_default\_security\_group: Add Resource Identity support ([#50120](https://github.com/hashicorp/terraform-provider-aws/issues/50120)) - resource/aws\_ec2\_transit\_gateway\_route\_table\_propagation: Add Resource Identity support ([#50193](https://github.com/hashicorp/terraform-provider-aws/issues/50193)) - resource/aws\_route53\_record: Add the `TF_AWS_ROUTE53_RECORD_BATCH_READS` environment variable to reduce AWS API calls when managing many records in a zone ([#48525](https://github.com/hashicorp/terraform-provider-aws/issues/48525)) - resource/aws\_sns\_topic: Add `maximum_message_size` argument ([#50111](https://github.com/hashicorp/terraform-provider-aws/issues/50111)) BUG FIXES: - list-resource/aws\_dynamodb\_table\_replica: Fix eventual consistency error when replacing resource. ([#50133](https://github.com/hashicorp/terraform-provider-aws/issues/50133)) - resource/aws\_apprunner\_custom\_domain\_association: Populate `dns_target` when importing ([#50206](https://github.com/hashicorp/terraform-provider-aws/issues/50206)) - resource/aws\_autoscaling\_group: Fix `interface conversion: interface {} is nil, not map[string]interface {}` panics when `capacity_reservation_target` is empty ([#50084](https://github.com/hashicorp/terraform-provider-aws/issues/50084)) - resource/aws\_bedrockagentcore\_harness: Fix "inconsistent result after apply" when `environment_variables` is unset ([#50088](https://github.com/hashicorp/terraform-provider-aws/issues/50088)) - resource/aws\_config\_aggregate\_authorization: Fix `region` to `authorized_aws_region` migration incorrectly forcing resource replacement ([#49851](https://github.com/hashicorp/terraform-provider-aws/issues/49851)) - resource/aws\_rds\_global\_cluster: Wait for source cluster promotion to complete when `source_db_cluster_identifier` is specified, fixing race condition with downstream resources ([#48076](https://github.com/hashicorp/terraform-provider-aws/issues/48076)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 5am" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

alex added 1 commit

2026-10-01 22:02:07 +00:00