Bump hashicorp/aws from 6.61.0 to 6.62.0 in /infra/shared in the terraform-all-dependencies group

[dependabot]

Bumps the terraform-all-dependencies group in /infra/shared with 1 update: hashicorp/aws.

Updates hashicorp/aws from 6.61.0 to 6.62.0

Release notes

Sourced from hashicorp/aws's releases.

v6.62.0

6.62.0 (August 26, 2026)

NOTES:

• resource/aws_db_instance: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
• resource/aws_rds_cluster: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
• resource/aws_savingsplans_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49264)

FEATURES:

• New List Resource: aws_db_instance (#49602)
• New List Resource: aws_dsql_cluster (#49657)
• New List Resource: aws_dsql_cluster_policy (#49676)
• New List Resource: aws_ecr_lifecycle_policy (#49696)
• New List Resource: aws_ecs_cluster (#49682)
• New List Resource: aws_pinpointsmsvoicev2_keyword (#48967)
• New Resource: aws_pinpointsmsvoicev2_keyword (#48967)
• New Resource: aws_sesv2_multi_region_endpoint (#49660)

ENHANCEMENTS:

• data-source/aws_resiliencehubv2_service: Add associated_system.user_journey_ids attribute (#49603)
• resource/aws_bedrockagentcore_browser: Add plan-time validation of name (#48766)
• resource/aws_bedrockagentcore_memory: Add Resource Identity support (#48766)
• resource/aws_bedrockagentcore_memory: Allow adding indexed_key entries in place instead of forcing a new resource (#48877)
• resource/aws_bedrockagentcore_memory: Change indexed_key from List to Set to ignore ordering (#48877)
• resource/aws_bedrockagentcore_memory_strategy: Add Resource Identity support (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Add configuration.self_managed_configuration argument in support of self-managed strategies (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Add memory_record_schema argument (#48765)
• resource/aws_bedrockagentcore_memory_strategy: Add plan-time validation of description (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Change description to Optional and Computed (#48766)
• resource/aws_cloudfront_function: Validate name, code, and comment against CloudFront's documented constraints during plan instead of failing at apply time (#49395)
• resource/aws_db_instance: Add resource identity support (#49602)
• resource/aws_dsql_cluster: Add resource identity support (#49657)
• resource/aws_dx_private_virtual_interface: Add bgp_asn_long argument (#49587)
• resource/aws_dx_transit_virtual_interface: Add bgp_asn_long argument (#49588)
• resource/aws_ecs_cluster: Add resource identity support (#49682)
• resource/aws_elasticache_replication_group: Add auth_token_wo and auth_token_wo_version write-only arguments (#49268)
• resource/aws_observabilityadmin_centralization_rule_for_organization: Add tag_propagation_configuration configuration block to rule.destination.destination_logs_configuration, and tag_propagation_status and tag_propagation_failure_reason attributes (#49656)
• resource/aws_resiliencehubv2_service: Add user_journey_ids argument to the associated_system configuration block (#49603)
• resource/aws_secretsmanager_secret_rotation: rotation_enabled is now configurable (previously read-only) and can be set to false to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with manage_master_user_password (#49659)
• resource/aws_secretsmanager_secret_rotation: rotation_rules is now optional, and must be omitted when rotation_enabled is false (#49659)
• resource/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config argument (#49668)

BUG FIXES:

• resource/aws_bedrockagentcore_harness: Correct plan-time validation of name (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Force resource replacement when name is modified (#48766)
• resource/aws_bedrockagentcore_registry: Correct plan-time validation of name (#48766)

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.62.0 (August 26, 2026)

NOTES:

• resource/aws_db_instance: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
• resource/aws_rds_cluster: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
• resource/aws_savingsplans_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49264)

FEATURES:

• New List Resource: aws_db_instance (#49602)
• New List Resource: aws_dsql_cluster (#49657)
• New List Resource: aws_dsql_cluster_policy (#49676)
• New List Resource: aws_ecr_lifecycle_policy (#49696)
• New List Resource: aws_ecs_cluster (#49682)
• New List Resource: aws_pinpointsmsvoicev2_keyword (#48967)
• New Resource: aws_pinpointsmsvoicev2_keyword (#48967)
• New Resource: aws_sesv2_multi_region_endpoint (#49660)

ENHANCEMENTS:

• data-source/aws_resiliencehubv2_service: Add associated_system.user_journey_ids attribute (#49603)
• resource/aws_bedrockagentcore_browser: Add plan-time validation of name (#48766)
• resource/aws_bedrockagentcore_memory: Add Resource Identity support (#48766)
• resource/aws_bedrockagentcore_memory: Allow adding indexed_key entries in place instead of forcing a new resource (#48877)
• resource/aws_bedrockagentcore_memory: Change indexed_key from List to Set to ignore ordering (#48877)
• resource/aws_bedrockagentcore_memory_strategy: Add Resource Identity support (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Add configuration.self_managed_configuration argument in support of self-managed strategies (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Add memory_record_schema argument (#48765)
• resource/aws_bedrockagentcore_memory_strategy: Add plan-time validation of description (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Change description to Optional and Computed (#48766)
• resource/aws_cloudfront_function: Validate name, code, and comment against CloudFront's documented constraints during plan instead of failing at apply time (#49395)
• resource/aws_db_instance: Add resource identity support (#49602)
• resource/aws_dsql_cluster: Add resource identity support (#49657)
• resource/aws_dx_private_virtual_interface: Add bgp_asn_long argument (#49587)
• resource/aws_dx_transit_virtual_interface: Add bgp_asn_long argument (#49588)
• resource/aws_ecs_cluster: Add resource identity support (#49682)
• resource/aws_elasticache_replication_group: Add auth_token_wo and auth_token_wo_version write-only arguments (#49268)
• resource/aws_observabilityadmin_centralization_rule_for_organization: Add tag_propagation_configuration configuration block to rule.destination.destination_logs_configuration, and tag_propagation_status and tag_propagation_failure_reason attributes (#49656)
• resource/aws_resiliencehubv2_service: Add user_journey_ids argument to the associated_system configuration block (#49603)
• resource/aws_secretsmanager_secret_rotation: rotation_enabled is now configurable (previously read-only) and can be set to false to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with manage_master_user_password (#49659)
• resource/aws_secretsmanager_secret_rotation: rotation_rules is now optional, and must be omitted when rotation_enabled is false (#49659)
• resource/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config argument (#49668)

BUG FIXES:

• resource/aws_bedrockagentcore_harness: Correct plan-time validation of name (#48766)
• resource/aws_bedrockagentcore_memory_strategy: Force resource replacement when name is modified (#48766)
• resource/aws_bedrockagentcore_registry: Correct plan-time validation of name (#48766)
• resource/aws_cloudwatch_log_resource_policy: Fixes error when importing by identity when using resource-scope (#49614)

... (truncated)

Commits

• 839fe4a Update CHANGELOG.md for #49698
• 692317b Merge pull request #49698 from hashicorp/t-update-changelog-version
• 539b5a1 Merge pull request #49688 from hashicorp/td-ri-smoke-tests
• dddbda6 Enables aws_s3_account_public_access_block RI smoke test
• 7bcd00b Removes verbose flag from test invocations
• 2fe3e40 Adds smoke-identity to makefile
• dc33d00 Merge pull request #49687 from hashicorp/b-s3control-public-access-eventual-c...
• 6c6a107 Adds CHANGELOG entry
• f44c7d8 Waits for resource to be found twice consecutively
• cdfe55f Merge pull request #49663 from hashicorp/t-iam-role-attachment-ri-test
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Note

Provider lock files have been automatically updated

This Dependabot PR modified infra/shared/versions.tf, so the corresponding
.terraform.lock.hcl files have been automatically updated and committed.

The changes are ready for review and merge.

Important

The actions have not been run on this PR since the lock files were updated, because GHA won't run push actions when the commit has been made by a bot.
To get the CI checks to run, you will need to amend the PR:

1. Check out the PR branch locally: git checkout dependabot/terraform/infra/shared/main/terraform-all-dependencies-6a9c07603a
2. Pull the latest changes: git pull
3. Make a no-op amendment: git commit --amend --no-edit
4. Push the amended commit: git push --force-with-lease

This will trigger the CI checks to run with the updated lock files.

Warning

If dependabot has attempted to modify the PR (i.e. if there are new dependency updates available), comment @dependabot recreate and it'll recreate the PR from scratch (allowing the lock files to be updated correctly).