v5.39.0

FEATURES:

• New Data Source: aws_redshift_data_shares (#35937)
• New Resource: aws_apprunner_deployment (#35758)
• New Resource: aws_config_retention_configuration (#15136)
• New Resource: aws_securityhub_automation_rule (#34781)
• New Resource: aws_shield_proactive_engagement (#34667)

ENHANCEMENTS:

• aws_kinesis_firehose_delivery_stream: Add custom_time_zone and file_extension arguments to the extended_S3_configuration configuration block (#35969)
• resource/aws_appflow_flow: Allow task.source_fields to be a null value (#35993)
• resource/aws_codepipeline: Add trigger configuration block (#35475)
• resource/aws_config_configuration_recorder: Add plan-time validation of aws_config_organization_custom_rule.lambda_function_arn (#15136)
• resource/aws_instance: Add configurable read timeout (#35955)
• resource/aws_instance: Apply default tags to volumes/block devices managed through an aws_instance, add ebs_block_device.*.tags_all and root_block_device.*.tags_all attributes which include default tags (#33769)
• resource/aws_mq_broker: Add data_replication_mode and data_replication_primary_broker_arn arguments, enabling support for cross-region data replication (#35990)
• resource/aws_mwaa_environment: Add endpoint_management attribute (#35961)
• resource/aws_redshiftserverless_namespace:
  Add attributes admin_password_secret_kms_key_id and manage_admin_password (#35965)
• resource/aws_shield_drt_access_log_bucket_association: Support resource import (#34667)
• resource/aws_shield_drt_access_role_arn_association: Support resource import (#34667)
• resource/aws_spot_instance_request: Add configurable read timeout (#35955)
• resource/aws_wafv2_web_acl: Add application_integration_url attribute (#35974)

BUG FIXES:

• data/aws_redshiftserverless_namespace: Properly set iam_roles attribute on read (#35965)
• resource/aws_appflow_flow: Fix perpetual diff when task.task_type is set to Map_all (#35993)
• resource/aws_config_configuration_recorder: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when recording_group.exclusion_by_resource_types is empty (#15136)
• resource/aws_config_rule: Change name to ForceNew (#15136)
• resource/aws_config_rule: Fix InvalidParameterValueException: PolicyText is required when Owner is CUSTOM_POLICY errors on resource Update (#15136)
• resource/aws_ecs_task_definition: Fix perpetual container_definitions diffs when Names are ordered differently (#36029)
• resource/aws_msk_replicator: Fix incorrect detect_and_copy_new_topics attribute value from state read/refresh (#35966)
• resource/aws_redshiftserverless_workgroup: Fix max_capacity removal (#36032)
• resource/aws_redshiftserverless_workgroup: Fix updating both base_capacity and max_capacity (#36032)
• resource/aws_shield_drt_access_log_bucket_association: Change log_bucket and role_arn_association_id to ForceNew (#34667)