Bump hashicorp/aws from 5.84.0 to 5.87.0 in /terraform

[dependabot]

Bumps hashicorp/aws from 5.84.0 to 5.87.0.

Release notes

Sourced from hashicorp/aws's releases.

v5.87.0

FEATURES:

• New Resource: aws_cloudwatch_contributor_insight_rule (#41373)

ENHANCEMENTS:

• resource/aws_dynamodb_table_export: Add export_type and incremental_export_specification arguments (#41303)
• resource/aws_quicksight_data_source: Add parameters.s3.role_arn argument to allow override an account-wide role for a specific S3 data source (#41284)
• resource/aws_rds_cluster: Add master_password_wo write-only attribute (#41314)
• resource/aws_rekognition_stream_processor: Deprecates stream_processor_arn in favor of arn. (#41271)
• resource/aws_ssm_parameter: Add value_wo write-only attribute (#40952)
• resource/aws_vpclattice_access_log_subscription: Add service_network_log_type argument (#41304)

BUG FIXES:

• data-source/aws_dynamodb_table: Add missing on_demand_throughput and global_secondary_index.*.on_demand_throughput attributes to resolve read error (#41350)
• resource/aws_cloudformation_stack_set_instance: Prevents overly-long creation times and possible OperationInProgress errors (#41388)
• resource/aws_detective_member: No longer fails with unexpected status when adding Organization member accounts. (#41344)
• resource/aws_ec2_transit_gateway_route_table_association: Fix deleting and recreating resource when dependencies changes don't require the resource be recreated. (#41292)
• resource/aws_internet_gateway: Fix to continue deletion when attachment is not found (#41346)

v5.86.1

BUG FIXES:

• data-source/aws_vpclattice_service: Fix regression resulting in AccessDeniedError attempting to list tags (#41295)
• data-source/aws_vpclattice_service_network: Fix regression resulting in AccessDeniedError attempting to list tags (#41295)
• resource/aws_cloudtrail: Fix regression issue where sns_topic_name shows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)
• resource/aws_s3_bucket_lifecycle_configuration: Fixes "inconsistent result" error when rule[*].prefix is an empty string. (#41296)

v5.86.0

NOTES:

• resource/aws_s3_bucket_lifecycle_configuration: When upgrading existing resources with no defined prefix, the Terraform plan will show the removal of prefix from state. This is expected, and should not occur on subsequent plans. (#41159)

ENHANCEMENTS:

• data-source/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn attributes (#41002)
• provider: Support us-isof-east-1 and us-isof-south-1 as valid AWS Regions (#41243)
• resource/aws_fms_policy: Add security_service_policy_data.policy_option.network_acl_common_policy argument to allow creation of FMS-managed NACL rules (#41219)
• resource/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn arguments (#41002)
• resource/aws_sqs_queue: Accommodate accounts that take longer to process with customizable timeouts. (#41232)

BUG FIXES:

• resource/aws_gamelift_game_server_group: Correctly plan tags_all value (#41256)
• resource/aws_instance: Properly cancel spot instance requests on destroy when instance_lifecycle is spot (#41206)
• resource/aws_route53_zone: Fix panic: runtime error: invalid memory address or nil pointer dereference when deleting the resource would otherwise return an error (#41260)
• resource/aws_s3_bucket_lifecycle_configuration: Properly handle default value of transition_default_minimum_object_size (#41159)
• resource/aws_wafv2_web_acl: Properly set rule during import (#41205)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

5.87.0 (February 13, 2025)

FEATURES:

• New Resource: aws_cloudwatch_contributor_insight_rule (#41373)

ENHANCEMENTS:

• resource/aws_dynamodb_table_export: Add export_type and incremental_export_specification arguments (#41303)
• resource/aws_quicksight_data_source: Add parameters.s3.role_arn argument to allow override an account-wide role for a specific S3 data source (#41284)
• resource/aws_rds_cluster: Add master_password_wo write-only attribute (#41314)
• resource/aws_rekognition_stream_processor: Deprecates stream_processor_arn in favor of arn. (#41271)
• resource/aws_ssm_parameter: Add value_wo write-only attribute (#40952)
• resource/aws_vpclattice_access_log_subscription: Add service_network_log_type argument (#41304)

BUG FIXES:

• data-source/aws_dynamodb_table: Add missing on_demand_throughput and global_secondary_index.*.on_demand_throughput attributes to resolve read error (#41350)
• resource/aws_cloudformation_stack_set_instance: Prevents overly-long creation times and possible OperationInProgress errors (#41388)
• resource/aws_detective_member: No longer fails with unexpected status when adding Organization member accounts. (#41344)
• resource/aws_ec2_transit_gateway_route_table_association: Fix deleting and recreating resource when dependencies changes don't require the resource be recreated. (#41292)
• resource/aws_internet_gateway: Fix to continue deletion when attachment is not found (#41346)

5.86.1 (February 11, 2025)

BUG FIXES:

• data-source/aws_vpclattice_service: Fix regression resulting in AccessDeniedError attempting to list tags (#41295)
• data-source/aws_vpclattice_service_network: Fix regression resulting in AccessDeniedError attempting to list tags (#41295)
• resource/aws_cloudtrail: Fix regression issue where sns_topic_name shows perpectual diff when an ARN of a SNS topic from a different region is specified (#41279)
• resource/aws_s3_bucket_lifecycle_configuration: Fixes "inconsistent result" error when rule[*].prefix is an empty string. (#41296)

5.86.0 (February 6, 2025)

NOTES:

• resource/aws_s3_bucket_lifecycle_configuration: When upgrading existing resources with no defined prefix, the Terraform plan will show the removal of prefix from state. This is expected, and should not occur on subsequent plans. (#41159)

ENHANCEMENTS:

• data-source/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn attributes (#41002)
• provider: Support us-isof-east-1 and us-isof-south-1 as valid AWS Regions (#41243)
• resource/aws_fms_policy: Add security_service_policy_data.policy_option.network_acl_common_policy argument to allow creation of FMS-managed NACL rules (#41219)
• resource/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn arguments (#41002)
• resource/aws_sqs_queue: Accommodate accounts that take longer to process with customizable timeouts. (#41232)

BUG FIXES:

• resource/aws_gamelift_game_server_group: Correctly plan tags_all value (#41256)
• resource/aws_instance: Properly cancel spot instance requests on destroy when instance_lifecycle is spot (#41206)

... (truncated)

Commits

• 34a79db Update CHANGELOG.md for #41388
• 7c61b60 Merge pull request #41388 from hashicorp/b-cloudformation-retries-exceeded
• f8efaa5 Merge pull request #41348 from hashicorp/td-inputs-in-heap-b
• b0408f2 Spelling fix
• 8b4d3cb Adds CHANGELOG entry
• 630a2be Tests full cloudformation in Org Account
• b2dfd7d Moves waiter out of Retry to prevent multiple competing attempts to create ...
• 0bd731b Update CHANGELOG.md for #41373
• 371138b Merge pull request #41373 from hashicorp/f-cloudwatch_contributor_insights
• 68e7b14 Fix typo in config_configuration_recorder (#41386)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #4.