6.54.0 - Terraform Provider Aws

6.54.0 (July 8, 2026)

NOTES:

resource/aws_sagemaker_endpoint_configuration: Because we cannot easily test the behavior of capacity_reservation_config, it is best effort and we ask for community help in testing (#45926)
resource/aws_ssoadmin_region: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#48126)

FEATURES:

New Data Source: aws_route53profiles_profile (#48780)
New List Resource: aws_bedrockagentcore_browser_profile (#46862)
New List Resource: aws_codepipeline (#48808)
New List Resource: aws_lambda_function_scaling_config (#48229)
New List Resource: aws_scheduler_schedule (#48828)
New List Resource: aws_ssoadmin_region (#48126)
New List Resource: aws_workspaces_pool (#42678)
New Resource: aws_bedrockagentcore_browser_profile (#46862)
New Resource: aws_lambda_function_scaling_config (#48229)
New Resource: aws_ssoadmin_region (#48126)
New Resource: aws_workspaces_pool (#42678)

ENHANCEMENTS:

action/aws_codebuild_start_build: Add host_kernel_override argument (#48777)
data-source/aws_mq_broker: Add resource_share_arns and shared_resources attributes (#48729)
resource/aws_cloudfront_key_value_store: Add tags and tags_all attributes (#48458)
resource/aws_cloudwatch_event_api_destination: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_archive: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_bus: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_bus_policy: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_connection: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_endpoint: Add Resource Identity support (#48819)
resource/aws_cloudwatch_event_permission: Add Resource Identity support (#48819)
resource/aws_codebuild_project: Add host_kernel argument to the environment configuration block (#48777)
resource/aws_codepipeline: Add resource identity support (#48808)
resource/aws_iam_policy_attachment: Add resource identity support (#48639)
resource/aws_lambda_event_source_mapping: Add use_resource_timeout_for_propagation argument (#46405)
resource/aws_lambda_event_source_mapping: Add configurable resource timeouts. Defaults to 10m for create and update, 5m for delete. (#46405)
resource/aws_lambda_function: Add use_resource_timeout_for_propagation argument (#46405)
resource/aws_lambda_permission: Add configurable resource timeouts. Defaults to 5m for create, read, and delete. (#46405)
resource/aws_lambda_permission: Hard-coded timeouts to account for eventual consistency have been replaced with configurable resource timeouts (#46405)
resource/aws_mq_broker: Add resource_share_arns argument and shared_resources attribute (#48729)
resource/aws_prometheus_workspace_configuration: Add out_of_order_time_window_in_seconds and rule_query_offset_in_seconds arguments (#48659)
resource/aws_rds_cluster: Add support for auto_minor_version_upgrade argument (#42472)
resource/aws_sagemaker_endpoint_configuration: Add Resource Identity support (#45926)
resource/aws_sagemaker_endpoint_configuration: Add production_variants.capacity_reservation_config and shadow_production_variants.capacity_reservation_config configuration blocks (#45926)
resource/aws_scheduler_schedule: Add resource identity support (#48828)

BUG FIXES:

resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding content_policy_config block. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error when adding topic_policy_config block. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.input_modalities values. (#48772)
resource/aws_bedrock_guardrail: Prevents "inconsistent result" error with multiple content_policy_config.filters_config.output_modalities values. (#48772)
resource/aws_cloudfront_multitenant_distribution: Correctly handles default tags. (#48783)
resource/aws_cloudfront_multitenant_distribution: Correctly taints resource if Create fails. (#48782)
resource/aws_cloudfront_multitenant_distribution: Sets etag on Import. (#48782)
resource/aws_cloudfront_multitenant_distribution: Updates etag when only tags updated. (#48782)
resource/aws_cloudfront_multitenant_distribution: Waits for deployment on Update. (#48782)
resource/aws_directory_service_directory: Fix UnsupportedOperationException error when reading enable_directory_data_access in regions where Directory Service Data is not available (e.g. GovCloud) (#47660)