chore(deps): update terraform aws to ~> 6.25.0 (main)

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	~> 6.23.0 -> ~> 6.25.0

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.25.0

Compare Source

FEATURES:

• New Resource: aws_cloudwatch_log_transformer (#​44300)
• New Resource: aws_eks_capability (#​45326)

ENHANCEMENTS:

• data-source/aws_backup_plan: Add rule.scan_action and scan_setting attributes (#​45392)
• data-source/aws_cloudwatch_log_group: Add deletion_protection_enabled attribute (#​45298)
• data-source/aws_ec2_transit_gateway: Add encryption_support attribute (#​45317)
• data-source/aws_lambda_function: Add durable_config attribute (#​45359)
• data-source/aws_lb: Add health_check_logs attribute (#​45269)
• data-source/aws_lb_target_group: Add target_control_port attribute (#​45270)
• data-source/aws_route53_zone: Add enable_accelerated_recovery attribute (#​45302)
• data-source/aws_transfer_connector: Add egress_config attribute to expose VPC Lattice connectivity configuration (#​45314)
• data-source/aws_workspaces_directory: Add tenancy attribute (#​43134)
• resource/aws_api_gateway_integration: Add integration_target argument (#​45311)
• resource/aws_api_gateway_integration: Add response_transfer_mode argument (#​45329)
• resource/aws_athena_workgroup: Add configuration.managed_query_results_configuration block (#​44273)
• resource/aws_backup_plan: Support malware scanning by adding rule.scan_action and scan_setting configuration blocks (#​45392)
• resource/aws_bedrockagentcore_gateway: Add interceptor_configuration argument (#​45344)
• resource/aws_cloudwatch_log_group: Add deletion_protection_enabled argument (#​45298)
• resource/aws_ec2_transit_gateway: Add encryption_support argument (#​45317)
• resource/aws_flow_log: Add regional_nat_gateway_id argument (#​45380)
• resource/aws_kms_ciphertext: Add plaintext_wo and plaintext_wo_version arguments to support write-only input (#​43592)
• resource/aws_lambda_function: Add durable_config argument (#​45359)
• resource/aws_lb: Add health_check_logs configuration block (#​45269)
• resource/aws_lb_target_group: Add target_control_port argument to support the ALB Target Optimizer (#​45270)
• resource/aws_rolesanywhere_profile: Add accept_role_session_name argument (#​45391)
• resource/aws_rolesanywhere_profile: Add plan-time validation of managed_policy_arns and role_arns (#​45391)
• resource/aws_route53_zone: Add enable_accelerated_recovery argument (#​45302)
• resource/aws_ssm_association: Add calendar_names argument (#​45363)
• resource/aws_transfer_connector: Add egress_config argument to support VPC Lattice connectivity for SFTP connectors (#​45314)
• resource/aws_transfer_connector: Make url argument optional to support VPC Lattice connectors (#​45314)
• resource/aws_workspaces_directory: Add tenancy argument (#​43134)

v6.24.0

Compare Source

FEATURES:

• New Resource: aws_lambda_capacity_provider (#​45342)
• New Resource: aws_s3tables_table_bucket_replication (#​45360)
• New Resource: aws_s3tables_table_replication (#​45360)
• New Resource: aws_s3vectors_index (#​43393)
• New Resource: aws_s3vectors_vector_bucket (#​43393)
• New Resource: aws_s3vectors_vector_bucket_policy (#​43393)

ENHANCEMENTS:

• data-source/aws_lambda_function: Add capacity_provider_config attribute (#​45342)
• data-source/aws_vpc_nat_gateway: Support regional NAT Gateways by adding auto_provision_zones, auto_scaling_ips, availability_mode, availability_zone_address, regional_nat_gateway_address, and route_table_id attributes (#​45240)
• resource/aws_backup_plan: Add target_logically_air_gapped_backup_vault_arn argument to rule block (#​45321)
• resource/aws_lambda_function: Add capacity_provider_config and publish_to arguments (#​45342)
• resource/aws_resourceexplorer2_index: Deprecates id. Use arn instead. (#​45345)
• resource/aws_resourceexplorer2_view: Deprecates id. Use arn instead. (#​45345)
• resource/aws_vpc_nat_gateway: Make subnet_id argument optional to support regional NAT Gateways (#​45420)
• resource/aws_vpc_nat_gateway: Support regional NAT Gateways by adding availability_mode, availability_zone_address, and vpc_id arguments, and auto_provision_zones, auto_scaling_ips, regional_nat_gateway_address, and route_table_id attributes. This functionality requires the ec2:DescribeAvailabilityZones IAM permission (#​45240)
• resource/aws_vpn_connection: Add bgp_log_enabled, bgp_log_group_arn, and bgp_log_stream_arn arguments to tunnel1_log_options.cloudwatch_log_options and tunnel2_log_options.cloudwatch_log_options blocks (#​45271)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.