Update Terraform aws to v6.68.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	6.66.0 → 6.68.0

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.68.0

Compare Source

BREAKING CHANGES:

• resource/aws_docdb_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#​50015)
• resource/aws_rds_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#​50014)

FEATURES:

• New Data Source: aws_lambdamicrovms_image_version (#​50299)
• New Data Source: aws_odb_autonomous_database (#​48991)
• New List Resource: aws_ec2_transit_gateway_route (#​50202)
• New List Resource: aws_ram_resource_association (#​49901)
• New Resource: aws_odb_autonomous_database (#​48991)
• New Resource: aws_odb_autonomous_database_secrets_manager_integration (#​48991)

ENHANCEMENTS:

• resource/aws_bedrockagentcore_agent_runtime: Add platform_version argument (#​50081)
• resource/aws_docdb_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#​50015)
• resource/aws_ec2_transit_gateway_route: Add resource identity support (#​50202)
• resource/aws_grafana_workspace: Update grafana_version argument to support v13.2 (#​50234)
• resource/aws_network_interface: Add connection_tracking_specification argument (#​50119)
• resource/aws_ram_resource_association: Add resource identity support (#​49901)
• resource/aws_rds_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#​50014)

BUG FIXES:

• provider: Fixes error when parsing YAML documents with literal tab characters in double-quoted string (#​50340)
• resource/aws_odb_autonomous_database_secrets_manager_integration: Avoid redundant disable requests when the integration is already absent or terminating (#​48991)
• resource/aws_redshiftserverless_workgroup: Restores fully reading config_parameter when not specified (#​50255)

v6.67.0

Compare Source

NOTES:

• resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#​48525)

FEATURES:

• New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#​50155)
• New List Resource: aws_default_security_group (#​50120)
• New List Resource: aws_directory_service_ip_route (#​50138)
• New List Resource: aws_directoryservicedata_user (#​50001)
• New List Resource: aws_ec2_transit_gateway_route_table_propagation (#​50193)
• New Resource: aws_directory_service_ip_route (#​50138)
• New Resource: aws_directory_service_ip_routes_exclusive (#​50204)
• New Resource: aws_directoryservicedata_user (#​50001)

ENHANCEMENTS:

• resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#​50189)
• resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#​50189)
• resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#​49746)
• resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#​49746)
• resource/aws_default_security_group: Add Resource Identity support (#​50120)
• resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#​50193)
• resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#​48525)
• resource/aws_sns_topic: Add maximum_message_size argument (#​50111)

BUG FIXES:

• list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#​50133)
• resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#​50206)
• resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#​50084)
• resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#​50088)
• resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#​49851)
• resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#​48076)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.