v2.28.0

NOTES:

• resource/aws_cloudfront_distribution: This attribute implemented a legacy Terraform library (flatmap), which does not work with Terraform 0.12's data types and whose only usage was on this single attribute across all Terraform Providers. The attribute now implements (in the closest approximation to the previous implementation) the nested object data into the Terraform state in all Terraform versions. Any references to nested attributes such as active_trusted_signers.enabled will need to be updated to active_trusted_signers.0.enabled. (#10013)

FEATURES:

• New Data Source: aws_route53_resolver_rule (#9805)
• New Data Source: aws_route53_resolver_rules (#9805)

ENHANCEMENTS:

• data-source/aws_eks_cluster: Add identity attribute (support getting OIDC issuer URL) (#10006)
• resource/aws_eks_cluster: Add identity attribute (support getting OIDC issuer URL) (#10006)
• resource/aws_elasticache_cluster: Support cluster_id validation up to 50 characters (#9941)
• resource/aws_elasticache_replication_group: Support replication_group_id validation up to 40 characters (#9941)

BUG FIXES:

• resource/aws_instance: Final retries after timeouts creating and updating instance and getting instance password data
• resource/aws_cloudfront_distribution: Support accessing active_trusted_signers attribute items in Terraform 0.12 (#10013)
• resource/aws_cognito_user_pool: Fix perpetual diffs on sms_verification_message (#9758)
• resource/aws_elasticsearch_domain: Final retries after timeouts creating, updating, and deleting domains (#9892)
• resource/aws_elasticsearch_domain_policy: Final retries after timeouts upserting and deleting domain policies (#9892)
• resource/aws_iam_policy_attachment: Revert a change causing errors with policies not being found during attachment (#10063)
• resource/aws_lightsail_instance: Fixes an issue where 2-character lightsail instance names didn't get validated properly (#10046)