terraform-provider-aws: updated to 2.68.0

v2.68.0:

FEATURES:
New Data Source: aws_efs_access_points
New Resource: aws_wafv2_web_acl_logging_configuration

ENHANCEMENTS:
data-soruce/aws_ami: Add arn attribute
data-source/aws_customer_gateway: Add arn attribute
data-source/aws_ebs_snapshot: Add arn attribute
data-source/aws_vpc_endpoint: Add arn attribute
data-source/aws_vpc_endpoint_service: Add arn attribute
data-source/aws_vpn_gateway: Add arn attribute
resource/aws_ami: Add arn attribute and plan-time validations to architecture, volume_type and virtualization_type arguments
resource/aws_ami_copy: Add arn attribute
resource/aws_ami_from_instance: Add arn attribute
resource/aws_customer_gateway: Add arn attribute and plan-time validations for bgp_asn, ip_address, and type arguments
resource/aws_default_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_ebs_snapshot: Add arn attribute
resource/aws_ebs_snapshot: Support resource import
resource/aws_ebs_snapshot_copy: Add arn attribute
resource/aws_ec2_traffic_mirror_session: Add arn attribute
resource/aws_ecs_service: Support deployment_controller configuration block type argument value of EXTERNAL (support external deployments)
resource/aws_ecs_task_definition: Add efs_volume_configuration configuration block authorization_config, transit_encryption, and transit_encryption_port arguments (support EFS Access Points and transit encryption)
resource/aws_elasticsearch_domain: Ultrawarm can now be enabled without re-creating the resource
resource/aws_glue_catalog_database: Add arn attribute
resource/aws_iot_policy: Support resource import
resource/aws_iot_topic_rule: Add error_action configuration block
resource/aws_network_acl: Add arn attribute and plan-time validations for ingress and egress configuration block arguments
resource/aws_placement_group: Add arn attribute
resource/aws_ses_receipt_filter: Add arn attribute and plan-time validations for all arguments
resource/aws_vpn_connection: Add arn attribute
resource/aws_vpc_endpoint: Add arn attribute
resource/aws_vpc_endpoint_service: Add arn attribute
resource/aws_vpn_gateway: Add arn attribute

BUG FIXES:
resource/aws_batch_compute_environment: Ensure desired_vcpus is fully optional and wait for updates
resource/aws_batch_compute_environment: Remove resource from Terraform state when not found instead of returning error
resource/aws_cloudtrail: Properly configure single event_selector with no data_resource and read_write_type of ReadOnly or WriteOnly
resource/aws_cloudtrail: Prevent InvalidEventSelectorsException error when removing all event_selector configuration
resource/aws_default_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_default_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_ecs_service: Add plan-time validation and prevent panics with empty type argument in ordered_placement_strategy configuration block
resource/aws_ecs_task_definition: Prevent showing API ordering differences in container_definitions environment variables during update plans
resource/aws_elasticsearch_domain: Ensure empty string ("") validation in ebs_options volume_type argument continues to work for Terraform 0.11 support
resource/aws_iot_policy: Ensure name argument updates recreate the resource
resource/aws_route: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route: Ensure empty string ("") validation in destination_cidr_block and destination_ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_route_table: Validate CIDR blocks for misalignment before attempting to create the route to ensure Terraform can read the information after EC2 API canonicalization
resource/aws_route_table: Ensure empty string ("") validation in cidr_block and ipv6_cidr_block arguments continues to work for Terraform 0.11 support
resource/aws_spot_fleet_request: Prevent crash with missing placement information
resource/aws_vpc_endpoint: Skip ModifyVpcEndpoint API call on tags only updates
resource/aws_vpc_endpoint: Wait for acceptance when auto_accept is enabled
resource/aws_wafv2_web_acl: Prevent unexpected UpdateWebACL API errors on tags only updates


(adam)