terraform-provider-aws: updated to 2.67.0

v2.67.0

NOTES:
data-source/aws_secretsmanager_secret: The rotation_* attributes have been deprecated in favor of the new aws_secretsmanager_secret_rotation data source.
resource/aws_secretsmanager_secret: The rotation_* arguments have been deprecated in favor of the new aws_secretsmanager_secret_rotation resource. The new resource, which fixes workflow issues, prevents the existing resource from showing changes when attempting to remove rotation. Removal must be done with the new resource or manually.

FEATURES:
New Data Source: aws_ebs_volumes
New Data Source: aws_ec2_local_gateway_virtual_interface
New Data Source: aws_ec2_local_gateway_virtual_interface_group
New Data Source: aws_ec2_local_gateway_virtual_interface_groups
New Data Source: aws_ecr_authorization_token
New Data Source: aws_outposts_outpost
New Data Source: aws_outposts_outpost_instance_type
New Data Source: aws_outposts_outpost_instance_types
New Data Source: aws_outposts_outposts
New Data Source: aws_outposts_site
New Data Source: aws_outposts_sites
New Data Source: aws_secretsmanager_secret_rotation
New Data Source: aws_wafv2_web_acl
New Guide: Resource Tagging
New Resource: aws_ec2_local_gateway_route
New Resource: aws_ec2_local_gateway_route_table_vpc_association
New Resource: aws_ec2_tag
New Resource: aws_secretsmanager_secret_rotation
New Resource: aws_wafv2_web_acl
New Resource: aws_wafv2_web_acl_association

ENHANCEMENTS:
data-source/aws_vpc_dhcp_options: Add arn attribute
data-source/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
data-source/aws_internet_gateway: Add arn attribute
data-source/aws_lambda_function: Add file_system_config attribute
data-source/aws_workspaces_bundle: Add name and owner as search crieria
resource/aws_ec2_capacity_reservation: Add arn attribute and support for Linux SQL Server values in instance_platform argument
resource/aws_cloudwatch_log_stream: Support resource import
resource/aws_default_vpc_dhcp_options: Add arn attribute
resource/aws_devicefarm_project: Support resource import
resource/aws_ec2_traffic_mirror_target: Add arn attribute
resource/aws_ecs_capacity_provider: Implement API deletion support
resource/aws_efs_mount_target: Add availability_zone_name, availability_zone_id, mount_target_dns_name, and owner_id attributes
resource/aws_efs_mount_target: Add plan time validation for ip_address argument
resource_aws_elasticsearch_domain: Add support for elasticsearch warm storage
resource_aws_elasticsearch_domain: Add plan time validation for cloudwatch_log_group_arn, role_arn, and ebs_options.volume_type
resource/aws_flow_log: Add arn attribute
resource/aws_glue_catalog_table: Add arn attribute
resource/aws_guardduty_detector: Add tags argument and arn attribute
resource/aws_guardduty_ipset: Add tags argument and arn attribute
resource/aws_guardduty_threatintelset: Add tags argument and arn attribute
resource/aws_internet_gateway: Add arn attribute
resource/aws_key_pair: Add arn attribute
resource/aws_lambda_function: Add file_system_config attribute
resource/aws_service_discovery_http_namespace: Add tags argument
resource/aws_service_discovery_private_dns_namespace: Add tags argument
resource/aws_service_discovery_public_dns_namespace: Add tags argument
resource/aws_service_discovery_service: Add tags argument
resource/aws_vpc_dhcp_options: Add arn attribute
resource/aws_wafv2_ip_set: Increase addresses maximum amount of items limit from 50 to 10,000 to match AWS limits

BUG FIXES:
resource/aws_cloudfront_origin_access_identity: Properly trigger resource recreation when deleted outside Terraform
resource/aws_cognito_user_pool_client: Mark client_secret as sensitive
resource/aws_route: Ensure retries occur on read after creation if route not found for EC2 eventual consistency

(adam)