Update Terraform aws to v5.49.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	5.47.0 -> 5.49.0

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.49.0

Compare Source

FEATURES:

• New Data Source: aws_datazone_environment_blueprint (#​36600)
• New Resource: aws_bedrockagent_data_source (#​37158)
• New Resource: aws_datazone_domain (#​36600)
• New Resource: aws_datazone_environment_blueprint_configuration (#​36600)

ENHANCEMENTS:

• data-source/aws_iam_policy_document: Add minified_json attribute (#​35677)
• resource/aws_dynamodb_table_export: Add plan-time validation of table_arn (#​37288)
• resource/aws_kms_key: Add rotation_period_in_days argument (#​37140)
• resource/aws_securitylake_subscriber_notification: Better handles importing resource (#​37332)
• resource/aws_securitylake_subscriber_notification: Deprecates endpoint_id in favor of subscriber_endpoint (#​37332)
• resource/aws_securitylake_subscriber_notification: Handles configuration.https_notification_configuration.authorization_api_key_value as sensitive value (#​37332)

BUG FIXES:

• data-source/aws_fsx_ontap_storage_virtual_machine: Correctly set tags on Read (#​37353)
• data-source/aws_rds_orderable_db_instance: Fix InvalidParameterValue: Invalid value 3412 for MaxRecords. Must be between 20 and 1000 errors (#​37251)
• data-source/aws_resourceexplorer2_search: Fix 401 unauthorized error due to missing view_arn in the AWS API request (#​36778)
• data-source/aws_resourceexplorer2_search: Fix panic caused by bad mappping between Terraform and AWS schemas (#​36778)
• data-source/aws_resourceexplorer2_search: Fix state persistence and data types (#​36778)
• resource/aws_bedrockagent_agent: Fix to use the configured prepare_agent value (or default value of true when omitted) for all create and update operations (#​37405)
• resource/aws_elasticsearch_domain: Fix handling of unset auto_tune_options.rollback_on_disable argument (#​37394)
• resource/aws_fsx_ontap_storage_virtual_machine: Correctly set tags and tags_all on resource Read (#​37353)
• resource/aws_fsx_openzfs_file_system: Correctly set tags and tags_all on resource Read (#​37353)
• resource/aws_kms_custom_key_store: Change trust_anchor_certificate to ForceNew (#​37092)
• resource/aws_opensearch_domain: Fix handling of unset auto_tune_options.rollback_on_disable argument (#​37394)
• resource/aws_opensearch_domain: Wait for auto_tune_options to be applied during creation (#​37394)
• resource/aws_securitylake_aws_log_source: Correctly handles unspecified source_version (#​36268)
• resource/aws_securitylake_aws_log_source: Prevents errors when creating multiple log sources concurrently (#​36268)
• resource/aws_securitylake_custom_log_source: Prevents errors when creating multiple log sources concurrently (#​36268)
• resource/aws_securitylake_custom_log_source: Validates length of source_name parameter (#​36268)
• resource/aws_securitylake_subscriber: Allow more than one log source (#​36268)
• resource/aws_securitylake_subscriber: Correctly handles unspecified access_type (#​36268)
• resource/aws_securitylake_subscriber: Correctly handles unspecified source_version parameter for aws_log_source_resource and custom_log_source_resource (#​36268)
• resource/aws_securitylake_subscriber: Correctly requires source_name parameter for aws_log_source_resource and custom_log_source_resource (#​36268)
• resource/aws_securitylake_subscriber_notification: No longer recreates resource when not needed (#​37332)
• resource/aws_securitylake_subscriber_notification: Requires value for configuration.https_notification_configuration.endpoint (#​37332)
• resource/provider: Change the AWS SDK for Go v2 API client BackoffDelayer to maintain behavioral compatibility with AWS SDK for Go v1 (#​37404)

v5.48.0

Compare Source

FEATURES:

• New Resource: aws_bedrockagent_agent_knowledge_base_association (#​37185)

ENHANCEMENTS:

• resource/aws_cloudwatch_event_target: Add force_destroy argument (#​37130)
• resource/aws_elasticache_replication_group: Increase default Delete timeout to 45 minutes (#​37182)
• resource/aws_elasticache_replication_group: Use the configured Delete timeout when detaching from any global replication group (#​37182)
• resource/aws_fsx_ontap_file_system: Add support for specifying 1 ha_pair with SINGLE_AZ_1 and MULTI_AZ_1 deployment types (#​36511)
• resource/aws_fsx_ontap_file_system: Increase storage_capacity maximum to 1PiB (#​36511)
• resource/aws_fsx_ontap_file_system: Support up to 12 ha_pairs (#​36511)
• resource/aws_fsx_ontap_file_system: Update throughput_capacity_per_ha_pair to support all values from throughput_capacity (#​36511)
• resource/aws_fsx_ontap_volume: Add aggregate_configuration configuration block (#​36511)
• resource/aws_fsx_ontap_volume: Add size_in_bytes and volume_style arguments (#​36511)

BUG FIXES:

• resource/aws_bcmdataexports_export: Fix table_configurations expand/flatten (#​37205)
• resource/aws_cloudwatch_event_connection: Add plan-time validation preventing empty auth_parameters.oauth.oauth_http_parameters or auth_parameters.invocation_http_parameters
body, header and query_string configuration blocks (#​26755)
• resource/aws_elasticache_replication_group: Decrease replica count after other updates (#​34819)
• resource/aws_elasticache_replication_group: Fix unexpected state 'snapshotting' errors when increasing or decreasing replica count (#​30493)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.