The HashiCorp Terraform AWS Provider enables Terraform to manage AWS resources. It includes documentation, contribution guidance, an FAQ, tutorials, and a development roadmap, with discussion available via HashiCorp’s forums and the provider’s homepage on the Terraform Registry.
Project status
- Active maintenance: The repo shows very recent upstream activity (last push 2026-10-14) and regular tagged updates (for example, v6.68.0 on 2026-10-07, v6.67.0 on 2026-09-30), indicating the AWS provider is actively maintained.
- Update cadence: Tags in the last ~2 months land roughly every 1 to 2 weeks, with additional upstream pushes between tags, suggesting an ongoing development and release pipeline rather than a quiet period.
AI summary generated
Recent updates
v6.69.1
Release v6.69.1 documents a single bug fix: the provider no longer fails with `bufio.Scanner: token too long` when logging requests or responses containing very long lines. The code diff provided shows additional internal refactors and dependency/tooling updates beyond what is mentioned in the release notes.
v6.69.0
v6.69.0 adds several new Terraform AWS resources and list resources, plus a set of feature enhancements (new arguments/attributes across multiple services). The documented bug fixes include fixes to validation, read/update behavior, and a specific OpenSearch enum validation removal.
Featuresv6.68.0
Release v6.68.0 mainly adds new AWS provider capabilities, including new resources and data sources for ODB Autonomous Database, plus new list resources for RAM resource association and EC2 transit gateway route. The only documented breaking changes are plan-time validations added to `availability_zones` for both `aws_docdb_cluster` and `aws_rds_cluster` to cap input length at 3. The code diff shown in this review also contains several non-runtime changes related to CI tooling, documentation checks, and internal build/test automation.
BreakingFeaturesv6.67.0
Release v6.67.0 adds multiple new AWS resources (including a new ephemeral resource) and several enhancements and bug fixes across existing resources. It also introduces an experimental batching behavior for aws_route53_record behind an environment variable. The code diff provided does not show any undocumented provider runtime changes, but it does include several CI and tooling workflow/config updates and dependency bumps.
BreakingFeaturesv6.66.0
v6.66.0 introduces several new AWS resources and list resources, plus enhancements to existing ECS lifecycle hook support and Bedrock AgentCore credential provider capabilities. The release notes also include a few bug fixes related to specific AWS API request payloads and state handling. However, the provided code diff excerpt mostly shows release-note changelog metadata and development tooling/CI changes, not the actual resource implementation diffs.
Featuresv6.65.0
Release v6.65.0 primarily adds multiple new Terraform AWS provider resources and list resources, along with schema enhancements (for example, resource identity support and newly added/adjusted arguments). It also includes several bug fixes related to validation and diff detection for specific resources. The code diff provided for this task appears to focus largely on CI/tooling changes and changelog entry files rather than provider runtime code changes.
Featuresv6.64.0
v6.64.0 introduces multiple new AWS Terraform resources and data sources, plus enhancements across several existing resources (notably bedrockagentcore harness configuration, workspaces directory attributes, and RDS warning event diagnostics). It also includes a small set of bug fixes focused on eventual consistency and restore edge cases.
Featuresv6.63.0
v6.63.0 primarily adds multiple new AWS resources and list resources, plus several schema enhancements (notably DX connection/VIF fields, EKS pod GC controller config, and Bedrock agent core gateway target additions). It also includes a set of bug fixes around import/update behavior and S3 object lock configuration replacement behavior. Based on the provided diff snippets, most code changes shown are new CI/testing tooling and dependency bumps, not the underlying provider runtime logic for the documented resources.
Featuresv6.62.0
Release v6.62.0 documents a set of Terraform AWS provider changes focused on new list resources, adding resource identity support to several resources, and enhancing RDS/RDS-like master user password secret rotation controls. It also includes multiple documentation and validation improvements and a few targeted bug fixes (notably around savings plans behavior and some plan-time validation).
BreakingFeaturesv6.61.0
v6.61.0 introduces multiple new AWS resources and list resources, along with enhancements that add new arguments and attributes to existing data sources and resources. The release notes also include targeted bug fixes focused on create/update stability, and delete and list-time state handling. Overall, the documented changes appear to cover the provider-facing additions and fixes present in the diff excerpt.
Featuresv6.60.0
Release v6.60.0 adds new Terraform resources related to AWS resiliency hub input sources and a new list resource for aws_db_parameter_group, including Resource Identity support for the db parameter group. It also includes two bug fixes focused on state consistency issues for aws_bedrockagentcore_gateway_target and a regression fix for aws_network_acl_rule’s “Missing Resource Identity After Read” errors.
Featuresv6.59.0
Release v6.59.0 adds multiple new AWS resources, list resources, and data sources, plus several schema enhancements to existing EKS, WAFv2, and Backup-related resources. It also includes targeted bug fixes for various AWS API edge cases (for example, Lake Formation cross-account principal reads and RDS engine_version update behavior). The provided code diff excerpt primarily shows internal repository tooling changes for AI-based review skills and changelog note fragments, not the provider runtime code for the new resources described in the release notes.
Featuresv6.58.0
v6.58.0 introduces multiple new AWS list and standard resources (notably several Prometheus-related resources, resiliencehubv2_policy, and mailmanager_rule_set) plus targeted enhancements to existing resources. It also includes a batch of bug fixes focused on update/create/delete stability, validation/regressions, and state/perpetual-diff corrections.
Featuresv6.57.1
Release v6.57.1 is a small patch release that documents a bug fix for an AWS API error, UnknownError, which was introduced in v6.57.0. The provided diff, however, shows no direct Terraform provider .go implementation changes, and instead includes dependency adjustments plus documentation and acceptance test updates related to CloudFront logging fields.
v6.57.0
v6.57.0 adds multiple new AWS data sources and resources (notably for EKS access, OSIS pipeline/policies, Bedrock evaluation jobs, and various new list resources). The release notes also document a deprecation for `aws_bedrockagentcore_memory_strategy` attributes, plus a small bug fix for `aws_dynamodb_table` behavior when decreasing `warm_throughput`. Provider-side enhancements include additional arguments/attributes across several existing resources and improved memory usage in AWS API logging.
Featuresv6.56.0
v6.56.0 adds several new AWS resources/data sources and extends existing schemas with additional configuration blocks and attributes (notably EKS node group warm pool config, OpenSearch Serverless IAM option blocks, and IPv6 broker URL attributes). It also includes targeted bug fixes across multiple resources, including improved web identity token handling and several delete/create stability fixes.
Featuresv6.55.0
v6.55.0 mainly adds new AWS provider surface area (one new data source and multiple new list resources) plus a set of Bedrock-related schema enhancements and two bug fixes. The release notes do not mention any Go toolchain, CI tooling, or dependency changes.
Featuresv6.54.0
Terraform AWS provider v6.54.0 adds several new resources and list resources (including aws_workspaces_pool, aws_scheduler_schedule, aws_lambda_function_scaling_config, aws_bedrockagentcore_browser_profile) plus the new data source aws_route53profiles_profile. The release also expands Resource Identity support across multiple event-related resources and introduces configurable propagation timeouts for several Lambda-related resources, alongside targeted bug fixes for Bedrock Guardrails, CloudFront multitenant distribution, and Directory Service directory reads.
Featuresv6.53.0
v6.53.0 introduces several new AWS data sources and resources, including Bedrock model agreement related entities and a new Pinpoint SMS Voice V2 pool. It also contains one documented breaking change around provider-side defaults for `aws_pinpointsmsvoicev2_phone_number` attributes to reduce drift. Additional enhancements include new/expanded arguments and improved validation or resource identity support for multiple services.
BreakingFeaturesv6.52.0
Release v6.52.0 adds several new AWS resources and a new data source, plus multiple enhancements around deterministic ordering, Resource Identity support, and EKS control plane egress mode. It also includes a notable state-behavior change for `aws_serverlessapplicationrepository_cloudformation_stack` where `NoEcho` values are persisted in plaintext, alongside a required one-time state reconciliation for already-existing stacks. Release notes also mention provider-wide changes to generated names and idempotency token generation using cryptographically strong randomness.
BreakingSecurityFeatures