Update all dependencies

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
amazon.aws	galaxy-collection	minor	7.3.0 -> 7.4.0
aws (source)	required_provider	minor	5.38.0 -> 5.40.0

---

Release Notes

ansible-collections/amazon.aws (amazon.aws)

v7.4.0: amazon.aws 7.4.0

Compare Source

Release Summary

This release brings several bugfixes and minor changes. It also introduces a deprecation for the iam_role_info plugin.

Minor Changes

• AnsibeAWSModule - added fail_json_aws_error() as a wrapper for fail_json() and fail_json_aws() when passed an AnsibleAWSError exception (#​1997).
• iam_access_key - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_access_key_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_group - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_instance_profile - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_instance_profile_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_managed_policy - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_mfa_device_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_role - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_role_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_user - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).
• iam_user_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#​1998).

Deprecated Features

• iam_role_info - in a release after 2026-05-01 paths must begin and end with / (#​1998).

Bugfixes

• cloudwatchevent_rule - Fix to avoid adding quotes to JSON input for provided input_template (#​1883).
• lookup/secretsmanager_secret - fix the issue when the nested secret is missing and on_missing is set to warn, the lookup was raising an error instead of a warning message (#​1781).
• module_utils/elbv2 - Fix issue when creating or modifying Load balancer rule type authenticate-oidc using ClientSecret parameter and UseExistingClientSecret=true (#​1877).

hashicorp/terraform-provider-aws (aws)

v5.40.0

Compare Source

FEATURES:

• New Function: arn_build (#​34952)
• New Function: arn_parse (#​34952)
• New Resource: aws_account_region (#​35739)
• New Resource: aws_securitylake_subscriber (#​35981)

ENHANCEMENTS:

• data-source/aws_rds_engine_version: Add has_major_target and has_minor_target optional arguments and valid_major_targets and valid_minor_targets attributes (#​36246)
• resource/aws_batch_job_queue: added parameter compute_environment_order which conflicts with compute_environments but aligns with AWS API. compute_environments has been deprecated. (#​34750)
• resource/aws_cloudfront_distribution: Remove the upper limit on origin.custom_origin_config.origin_read_timeout (#​36088)
• resource/aws_db_instance: Add io2 as a valid value for storage_type (#​36252)
• resource/aws_elasticache_serverless_cache: Add plan-time validation of cache_usage_limits.ecpu_per_second.maximum (#​35927)
• resource/aws_iot_policy: Add tagging support (#​36102)
• resource/aws_iot_role_alias: Add tagging support (#​36255)
• resource/aws_opensearch_domain: Add use_off_peak_window argument to the auto_tune_options configuration block (#​36067)
• resource/aws_rds_cluster: Add io2 as a valid value for storage_type (#​36252)
• resource/aws_s3_bucket_object: Adds attribute arn. (#​35710)
• resource/aws_s3_object: Adds attribute arn. (#​35710)
• resource/aws_s3_object_copy: Adds attribute arn. (#​35710)
• resource/aws_wafv2_rule_group: Add evaluation_window_sec argument to the rate_based_statement configuration block (#​36045)
• resource/aws_wafv2_web_acl: Add evaluation_window_sec argument to the rate_based_statement configuration block (#​36045)

BUG FIXES:

• data-source/aws_rds_engine_version: Fix bugs that could limit engine version to a default version even when not appropriate (#​36246)
• resource/aws_db_instance: Correctly sets parameter_group_name when replicate_source_db is in different region. (#​36080)
• resource/aws_elastic_beanstalk_environment: Fix InvalidParameterValue: Environment named ... is in an invalid state for this operation. Must be Ready errors when tags are updated along with other attributes (#​36074)
• resource/aws_elasticache_serverless_cache: Change cache_usage_limits.data_storage.maximum and cache_usage_limits.ecpu_per_second.maximum to ForceNew (#​35927)
• resource/aws_medialive_channel: Fix handling of optional encoder_settings.audio_descriptions arguments (#​36097)
• resource/aws_rds_global_cluster: Fix bugs and delays that could occur when performing major or minor version upgrades (#​36246)
• resource/aws_s3_bucket: Tags with empty values no longer remove all tags. (#​35710)
• resource/aws_s3_bucket_object: Tags with empty values no longer remove all tags. (#​35710)
• resource/aws_s3_object: Tags with empty values no longer remove all tags. (#​35710)
• resource/aws_s3_object_copy: Tags with empty values no longer remove all tags. (#​35710)
• resource/aws_vpclattice_listener_rule: Remove action.forward.target_groups maximum item limit (#​36095)

v5.39.1

Compare Source

BUG FIXES:

• data-source/aws_instance: Fix panic: Invalid address to set related to root_block_device.0.tags_all (#​36054)

v5.39.0

Compare Source

FEATURES:

• New Data Source: aws_redshift_data_shares (#​35937)
• New Resource: aws_apprunner_deployment (#​35758)
• New Resource: aws_config_retention_configuration (#​15136)
• New Resource: aws_securityhub_automation_rule (#​34781)
• New Resource: aws_shield_proactive_engagement (#​34667)

ENHANCEMENTS:

• aws_kinesis_firehose_delivery_stream: Add custom_time_zone and file_extension arguments to the extended_S3_configuration configuration block (#​35969)
• resource/aws_appflow_flow: Allow task.source_fields to be a null value (#​35993)
• resource/aws_codepipeline: Add trigger configuration block (#​35475)
• resource/aws_config_configuration_recorder: Add plan-time validation of aws_config_organization_custom_rule.lambda_function_arn (#​15136)
• resource/aws_instance: Add configurable read timeout (#​35955)
• resource/aws_instance: Apply default tags to volumes/block devices managed through an aws_instance, add ebs_block_device.*.tags_all and root_block_device.*.tags_all attributes which include default tags (#​33769)
• resource/aws_mq_broker: Add data_replication_mode and data_replication_primary_broker_arn arguments, enabling support for cross-region data replication (#​35990)
• resource/aws_mwaa_environment: Add endpoint_management attribute (#​35961)
• resource/aws_redshiftserverless_namespace:
  Add attributes admin_password_secret_kms_key_id and manage_admin_password (#​35965)
• resource/aws_shield_drt_access_log_bucket_association: Support resource import (#​34667)
• resource/aws_shield_drt_access_role_arn_association: Support resource import (#​34667)
• resource/aws_spot_instance_request: Add configurable read timeout (#​35955)
• resource/aws_wafv2_web_acl: Add application_integration_url attribute (#​35974)

BUG FIXES:

• data/aws_redshiftserverless_namespace: Properly set iam_roles attribute on read (#​35965)
• resource/aws_appflow_flow: Fix perpetual diff when task.task_type is set to Map_all (#​35993)
• resource/aws_config_configuration_recorder: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when recording_group.exclusion_by_resource_types is empty (#​15136)
• resource/aws_config_rule: Change name to ForceNew (#​15136)
• resource/aws_config_rule: Fix InvalidParameterValueException: PolicyText is required when Owner is CUSTOM_POLICY errors on resource Update (#​15136)
• resource/aws_ecs_task_definition: Fix perpetual container_definitions diffs when Names are ordered differently (#​36029)
• resource/aws_msk_replicator: Fix incorrect detect_and_copy_new_topics attribute value from state read/refresh (#​35966)
• resource/aws_redshiftserverless_workgroup: Fix max_capacity removal (#​36032)
• resource/aws_redshiftserverless_workgroup: Fix updating both base_capacity and max_capacity (#​36032)
• resource/aws_shield_drt_access_log_bucket_association: Change log_bucket and role_arn_association_id to ForceNew (#​34667)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.