FEATURES:

• New Data Source: aws_appmesh_gateway_route (#29064)
• New Data Source: aws_appmesh_virtual_node (#27545)
• New Data Source: aws_appmesh_virtual_router (#26908)
• New Data Source: aws_globalaccelerator_custom_routing_accelerator (#28922)
• New Data Source: aws_oam_sink (#30258)
• New Data Source: aws_oam_sinks (#30258)
• New Data Source: aws_ssmincidents_replication_set (#29769)
• New Resource: aws_globalaccelerator_custom_routing_accelerator (#28922)
• New Resource: aws_globalaccelerator_custom_routing_endpoint_group (#28922)
• New Resource: aws_globalaccelerator_custom_routing_listener (#28922)
• New Resource: aws_rbin_rule (#25926)
• New Resource: aws_sns_topic_data_protection_policy (#30008)
• New Resource: aws_ssmincidents_replication_set (#29769)

ENHANCEMENTS:

• data-source/aws_db_instance: Add master_user_secret attribute (#28848)
• data-source/aws_globalaccelerator_accelerator: Add dual_stack_dns_name attribute (#28922)
• data-source/aws_rds_cluster: Add master_user_secret attribute (#28848)
• resource/aws_appmesh_gateway_route: Add header, path and query_parameter to the spec.http_route.match and spec.http2_route.match configuration blocks (#29064)
• resource/aws_appmesh_gateway_route: Add port to the spec.grpc_route.action.target, spec.http_route.action.target and spec.http2_route.action.target configuration blocks to support Virtual Services with multiple listeners (#29064)
• resource/aws_appmesh_gateway_route: Add priority to the spec configuration block (#29064)
• resource/aws_appmesh_route: Add path and query_parameter to the spec.http_route.match and spec.http2_route.match configuration blocks (#29064)
• resource/aws_appmesh_route: spec.http_route.match.prefix and spec.http2_route.match.prefix are Optional (#29064)
• resource/aws_appmesh_virtual_node: Add ip_preference and response_type to the spec.service_discovery.dns configuration block (#29064)
• resource/aws_db_instance: Add manage_master_user_password, master_user_secret and master_user_secret_kms_key_id arguments to support RDS managed master password in Secrets Manager (#28848)
• resource/aws_globalaccelerator_accelerator: Add dual_stack_dns_name attribute (#28922)
• resource/aws_lakeformation_lf_tag: Increase values MaxItem up to 1000 to match with AWS real limit (#26546)
• resource/aws_rds_cluster: Add manage_master_user_password, master_user_secret and master_user_secret_kms_key_id arguments to support RDS managed master password in Secrets Manager (#28848)
• resource/aws_sagemaker_endpoint_configuration: Add production_variants.enable_ssm_access and shadow_production_variants.enable_ssm_access arguments (#30267)

BUG FIXES:

• datasource/aws_ecs_task_execution: Fix type assertion panic on overrides.0.container_overrides.*.environment attribute (#30214)
• datasource/aws_ecs_task_execution: Fix type assertion panic on overrides.0.container_overrides.*.resource_requirements attribute (#30214)
• datasource/aws_ecs_task_execution: Fix type assertion panic on overrides.0.inference_accelerator_overrides attribute (#30214)
• resource/aws_appmesh_virtual_router: spec.listener is Optional (#29064)
• resource/aws_fsx_openzfs_file_system: Fix iops validation in disk_iops_configuration to allow values for SINGLE_AZ_1 and SINGLE_AZ_2 (#30299)
• resource/aws_lakeformation_lf_tag: Fix support for lf-tag keys with colons in the name (#28258)
• resource/aws_launch_template: Allow metadata_options to be applied when http_endpoint is not configured (#30107)
• resource/aws_ssm_activation: Fix IAM eventual consistency errors on resource Create (#30280)
• resource/aws_ssm_document: Correctly set default_version, document_version, hash, latest_version and parameter as Computed when content changes (#28489)
• resource/aws_wafv2_ip_set: Fix DiffSuppress on addresses to detect changes for unknown values (#30352)