6.9.0 (August 14, 2025)

FEATURES:

• New Resource: aws_appsync_api (#43787)
• New Resource: aws_appsync_channel_namespace (#43787)

ENHANCEMENTS:

• data-source/aws_eks_cluster: Add deletion_protection attribute (#43779)
• resource/aws_cloudwatch_event_rule: Add resource identity support (#43758)
• resource/aws_cloudwatch_metric_alarm: Add resource identity support (#43759)
• resource/aws_dynamodb_table: Add replica.deletion_protection_enabled argument (#43240)
• resource/aws_eks_cluster: Add deletion_protection argument (#43779)
• resource/aws_lambda_function: Add resource identity support (#43821)
• resource/aws_sns_topic_data_protection_policy: Add resource identity support (#43830)
• resource/aws_sns_topic_policy: Add resource identity support (#43830)
• resource/aws_sns_topic_subscription: Add resource identity support (#43830)
• resource/aws_subnet: Add resource identity support (#43833)

BUG FIXES:

• data-source/aws_lambda_function: Fix missing value for reserved_concurrent_executions attribute when a published version exists. This functionality requires the lambda:GetFunctionConcurrency IAM permission (#43753)
• data-source/aws_networkfirewall_firewall_policy: Add missing schema definition for firewall_policy.stateful_engine_options.flow_timeouts (#43852)
• resource/aws_cognito_risk_configuration: Make account_takeover_risk_configuration.notify_configuration optional (#33624)
• resource/aws_ecs_service: Fix tagging failure after upgrading to v6 provider (#43816)
• resource/aws_ecs_service: Fix refreshing service_connect_configuration when deleted outside of Terraform (#43871)
• resource/aws_lambda_function: Fix missing value for reserved_concurrent_executions attribute when a published version exists. This functionality requires the lambda:GetFunctionConcurrency IAM permission (#43753)
• resource/aws_s3tables_table: Fix runtime error: invalid memory address or nil pointer dereference panics when GetTableMaintenanceConfiguration returns an error (#43764)
• resource/aws_sagemaker_user_profile: Fix incomplete regex for user_profile_name (#43807)
• resource/aws_servicequotas_service_quota: Add validation, during create, to check if new value is less than current value of quota (#43545)
• resource/aws_storagegateway_gateway: Handle InvalidGatewayRequestException: The specified gateway is not connected errors during Read by using the ListGateways API to return minimal information about a disconnected gateway. This functionality requires the storagegateway:ListGateways IAM permission (#43819)
• resource/aws_vpc_ipam_pool_cidr: Fix netmask_length not being saved and diffed correctly (#43262)