terraform — The Cyber Toolchain

terraform v1.17.0

Wed, 21 Oct 2026 17:32:54 GMT

Terraform v1.17 ships GA Policy enforcement, a new `-minimal-refresh` flag, and variables/locals in provider requirements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `-minimal-refresh` planning flag to `plan` and `apply`, refreshing only resources that have proposed changes rather than the full state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Promotes `-policies` flag on `plan`, `apply`, and `query` to GA — no longer requires an experimental build or `-allow-experimental-features`; query policies evaluate resources found by `list` blocks and return human-readable or JSON results. • Supports variables and locals in provider `required_providers` blocks, enabling dynamic provider version and source constraints. • Adds `mock_provider` support for ephemeral resources in `terraform test`. • Adds a `format_version` field to the JSON output of `terraform version`, enabling safer future evolution of that output format. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.16.0

Wed, 26 Aug 2026 13:05:28 GMT

Terraform v1.16 adds `store` blocks in terraform_data, `-json` for state/workspace, `-format=mermaid` for graphs, and module-level `import` blocks. • Adds `-json` flag to `terraform state show` for machine-readable output. • Adds `-json` flag to `terraform workspace list` for machine-readable output. • Adds `-format=mermaid` flag to `terraform graph` to output dependency graphs in Mermaid format. • Adds `-scope=` flag to `terraform console` to evaluate expressions within a specific module or module instance scope. • Adds `store` block to the `terraform_data` resource to hold ephemeral and sensitive values across plan and apply. • Adds `destroy = false` to resource `lifecycle` blocks to prevent a resource from ever being destroyed. • Adds `on_failure` modes `halt`, `taint`, and `continue` to resource action triggers. • Adds `before_destroy` and `after_destroy` event support to Actions. • Adds `caller` symbol in Action configurations, exposing the object value of the calling resource. • Allows `-invoke` to be combined with `-target` to specify the calling resource instance when multiple resources trigger the same action. • Supports `import` blocks inside modules. • Terraform now stores planned private data for providers, preserving provider-specific state across plan and apply. • Providers can now use nested blocks as computed values. • The `terraform stacks` command now automatically infers the target hostname from `credentials.tfrc.json` when neither `TF_STACKS_HOSTNAME` nor `TF_CLOUD_HOSTNAME` is set. • Terraform now displays a summary of policy evaluation outcomes for `plan` and `apply` runs against HCP Terraform. • The contains() function can now test for `null` values. • Terraform is now available as a pre-built binary for Linux s390x (zLinux). • Terraform now reports which resources were left behind when `skip_cleanup` is set in tests. Breaking changes: • `bastion_host_key` is now correctly applied by provisioners — review your provisioner configurations to verify the configured key is correct before upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.15.5

Wed, 27 May 2026 14:52:52 GMT

Terraform v1.15.5 adds support for null module version in dynamic module sources. • Supports module `version` evaluating to `null` in dynamic module source configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.15.4

Wed, 20 May 2026 16:52:18 GMT

Terraform v1.15.4 adds official Linux s390x (zLinux) builds. • Adds official Terraform builds for Linux s390x (zLinux), enabling mainframe deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.15.2

Wed, 06 May 2026 13:56:22 GMT

Terraform v1.15.2 adds output values to plan component instance change descriptions in stacks. • Adds output values to plan component instance change descriptions in stacks, giving more context during stack plan review. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.15.0

Wed, 29 Apr 2026 14:05:34 GMT

Terraform v1.15 adds a `convert` function, deprecated variable/output warnings, backend block validation, and variables in module sources. • Adds native Windows ARM64 builds for Terraform. • New `deprecated` attribute on `variable` and `output` blocks emits warnings when deprecated variables are passed or deprecated outputs are referenced. • S3 backend now supports authentication via `aws login` (SSO/IAM Identity Center flows). • The `validate` command now checks the `backend` block — verifying the backend type exists, required attributes are present, and backend-level validation passes. • New `convert` function enables precise inline type conversions in configuration expressions. • Supports variables and locals in module `source` and `version` attributes, and most commands now accept variable values to satisfy them. • Output blocks now support explicit type constraints. • SSH-based provisioners (`file` and `remote-exec`) re-enable PowerShell support. • `terraform init` now skips installing dependencies declared in development overrides, allowing mixed-override workflows. • Terraform Test mock blocks now allow function calls. • Provider-set deprecation messages on resources, blocks, and attributes are now included in deprecation warnings. • Sensitive attribute paths are now included in `list_start` JSON log entries. • Input variable validation is now supported for Stacks. • `terraform fmt` now formats `.tfquery.hcl` files. Breaking changes: • backend/s3: `AWS_USE_FIPS_ENDPOINT` and `AWS_USE_DUALSTACK_ENDPOINT` environment variables now only accept `true` or `false`; any other non-empty value (previously treated as `true`) is no longer honoured. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.14.2

Thu, 11 Dec 2025 12:47:33 GMT

Terraform Stacks gains component registry source resolution support in v1.14.2. • Adds component registry source resolution support to Terraform Stacks, enabling stack components to be sourced from a registry. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.14.0

Wed, 19 Nov 2025 14:17:22 GMT

Terraform 1.14 adds `terraform query` for live infrastructure querying, top-level Actions blocks, and a new GenerateResourceConfiguration RPC for providers. • New `list` resource type defined in `*.tfquery.hcl` files enables querying and filtering existing infrastructure. • New `terraform query` command executes list operations against live infrastructure and can optionally generate import configuration. • New top-level `action` block lets providers define imperative, non-CRUD operations (e.g. `aws_lambda_invoke`) triggered via resource lifecycle or the `-invoke` CLI flag. • New `GenerateResourceConfiguration` RPC allows providers to produce more precise configuration values during import. • Offline validation of query files now supported via `-query` flag in `terraform validate`. • `terraform test` verbose mode now includes expected diagnostics in test output. • `terraform test` cleanup now ignores the `prevent_destroy` attribute, unblocking teardown. • `terraform stacks` command now supports the `-help` flag. • Adds support for the AWS European Sovereign Cloud. Breaking changes: • Building Terraform 1.14 requires macOS Monterey or later (Go 1.25 requirement); earlier macOS versions are no longer supported for building. • Parallelism of Terraform operations within container runtimes may be reduced depending on the CPU bandwidth limit setting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.13.0

Wed, 20 Aug 2025 16:22:54 GMT

Terraform v1.13.0 adds `terraform stacks` CLI, richer `terraform test` variable authoring, and parallel teardown for tests. • New `terraform stacks` command exposes stack operations through the CLI; run `terraform stacks -usage` to see available sub-commands. • Filesystem functions are now validated for consistent results during apply, catching invalid data earlier. • `terraform test`: Test authors can define external variable blocks directly inside test files, removing the need for external variable sources. • `terraform test`: File-level variable blocks can now reference run outputs and other variables, enabling richer test composition. • `terraform test`: Teardown operations can now run in parallel, reducing test suite cleanup time. • Improved type-mismatch error messages make diagnosing configuration type errors faster. • The `terraform rpcapi` command is now generally available, exposing Terraform operations over a go-plugin-compatible RPC interface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.12.0

Wed, 14 May 2025 15:15:45 GMT

Terraform v1.12 adds OCI Object Storage backend, parallel test runs, and identity-based resource imports. • Adds new backend for OCI Object Storage, enabling remote state storage on Oracle Cloud Infrastructure. • New `-parallelism=n` flag for `terraform test` sets the number of parallel operations during plan/apply in a test run. • Test runs can now be annotated for possible parallel execution, speeding up large test suites. • Logical binary operators (`&&`, `||`) now short-circuit, avoiding unnecessary evaluation of the right-hand side. • `import` blocks now support a new `identity` attribute as an alternative to `id` for identifying resources to import. • OSS backend supports additional standard environment variables, aligning with provider settings. • `terraform init` now works when test files are present but no `.tf` configuration files exist in the current directory. • Terraform Test continues subsequent test execution when an expected failure is not encountered. • Detailed diagnostic objects are now produced when test run assertions fail. • Elapsed time in the UI Hook now displays in `mm:ss` format for clearer progress reporting. Breaking changes: • On Linux, Terraform now requires Linux kernel version 3.2 or later; systems running older kernels will not be supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.11.2

Wed, 12 Mar 2025 13:16:03 GMT

Azure backend gains ADO Pipelines OIDC token refresh support via new `ado_pipeline_service_connection_id` setting. • Adds ADO Pipelines OIDC token refresh to the Azure backend via `oidc_request_url`, `oidc_request_token`, and the new `ado_pipeline_service_connection_id` config keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.11.0

Thu, 27 Feb 2025 13:26:05 GMT

Terraform v1.11 adds write-only resource attributes, GA S3 native state locking, and JUnit XML test reports. • Adds write-only resource attributes: providers can mark attributes as write-only so they are never persisted in state, enabling safe use of ephemeral values in those fields. • Promotes `terraform test -junit-xml` to general availability, producing structured JUnit XML test reports. • Promotes S3 native state locking to GA via the `use_lockfile` argument in the S3 backend, eliminating the need for a DynamoDB table. • Adds `override_during = plan` option in `terraform test` run blocks so mocked/overridden values are applied during the plan phase instead of only at apply. • Adds `state_key` attribute to `run` blocks in `terraform test`, giving test authors control over which internal state file a test run uses. • Expands Azure backend authentication with new properties: `use_cli`, `use_aks_workload_identity`, `client_id_file_path`, `client_certificate`, and `client_secret_file_path`, aligning with azurerm provider auth. • Supports `.netrc` credentials during `terraform init` provider installation for registry download and shasum URLs. • Includes the `ca-certificates` package in the official Terraform Docker image for improved certificate handling. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.10.0

Wed, 27 Nov 2024 09:49:03 GMT

Terraform v1.10 adds ephemeral resources and values, S3 native state locking, and new Tencent Cloud backend auth. • Adds ephemeral resources: a new resource kind re-read on every evaluation phase whose values are never written to state or plan files. • Adds ephemeral input variables and outputs: mark variables or outputs as `ephemeral = true` to prevent them from being persisted to plan or state. • Adds `ephemeralasnull` function: converts any ephemeral values in a structure to non-ephemeral nulls, enabling safe use of ephemeral data where persistence is required. • S3 backend now supports S3 native state locking alongside existing DynamoDB-based locking. • Adds new authentication method for the Tencent Cloud (`cos`) backend. • The `element` function now accepts negative indices for reverse list access. • Improves `import` block validation to catch more invalid cases during `terraform validate`. Breaking changes: • backend/s3: Deprecated top-level IAM role assumption attributes are removed; you must now use the `assume_role` block instead. • `moved` blocks now reserve keywords when parsing resource addresses; configurations referencing resources whose type names match top-level block keywords must prepend `resource.` to those references. • HCL conditional expressions now combine marks from all values in the expression, which may cause previously-lost sensitive marks to surface, making some values sensitive where they were not before. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.9.5

Tue, 20 Aug 2024 18:07:19 GMT

Terraform v1.9.5 adds HCP resource ID support for cloud workspaces. • Supports interacting with HCP-resource-ID-backed workspaces via the `cloud` block. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.9.0

Wed, 26 Jun 2024 16:55:38 GMT

Terraform v1.9.0 adds `-json` to `init`, general expression validation rules for input variables, and the `templatestring` function • `terraform init` now accepts the `-json` flag for machine-readable output. • Input variable validation rules are now general expressions that can refer to other input variables and data resources. • New built-in `templatestring` function allows rendering templates provided as strings rather than file paths. • `terraform test` can now pass sensitive values to input variables while preserving their dynamic sensitivity during test runs. • `removed` blocks can now declare destroy-time provisioners that execute when associated resource instances are destroyed. • Performance improvements for graph building in configurations with an extremely large number of `resource` blocks. Breaking changes: • `import` blocks pointing to nonexistent modules are no longer silently ignored and will raise an error. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.8.0

Wed, 10 Apr 2024 19:02:51 GMT

Terraform v1.8 introduces provider functions, cross-type resource moves, the issensitive() function, and new plan JSON flags. • `terraform providers lock` now accepts `-enable-plugin-cache` to leverage a configured global plugin cache during locking • Added issensitive() function to check if a value is marked as sensitive in configuration language • Built-in "terraform" provider gains `decode_tfvars`, `encode_tfvars`, and `encode_expr` functions • `terraform show` JSON rendering now includes explicit `applyable` and `complete` flags for plan characteristics • `moved` blocks now support transferring ownership of remote objects between resources of different types if the target provider declares conversion capability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.7.2

Wed, 31 Jan 2024 14:49:39 GMT

`terraform fmt` now includes `.tfmock.hcl` files in formatting. • `terraform fmt` now formats Terraform mock data files (`.tfmock.hcl`). • Add diagnostics when a generated provider block fails schema validation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.7.0

Wed, 17 Jan 2024 19:59:32 GMT

Terraform v1.7.0 adds terraform test mocking, removed block for refactoring, and console plan evaluation • `terraform test`: Add `mock_provider`, `override_resource`, `override_data`, and `override_module` blocks to `.tftest.hcl` files for provider and resource mocking • Add `removed` block to configuration for refactoring module references without manually running `terraform state rm` • `terraform console`: Add `-plan` option to evaluate expressions against the planned new state • `import` block: Support `for_each` to expand imports for multiple resource instances • `backend/s3`: `use_legacy_workflow` argument defaults to `false` and uses AWS SDK default provider chain • `terraform graph`: Default output is now a simplified resources-only graph Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.6.4

Wed, 15 Nov 2023 16:01:27 GMT

Adds `endpoints.sso` and proxy parameters to the S3 backend configuration • Adds `endpoints.sso` config key in the S3 backend to override the AWS SSO API endpoint. • Adds `https_proxy` and `no_proxy` config keys to the S3 backend for explicit proxy configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.6.3

Wed, 01 Nov 2023 15:32:57 GMT

Terraform v1.6.3 adds `skip_s3_checksum` to S3 backend for compatibility with non-standard S3 APIs • `backend/s3` accepts the `skip_s3_checksum` parameter to disable checksumming on uploads, enabling compatibility with 'S3-compatible' APIs that do not support it Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.6.1

Tue, 10 Oct 2023 17:27:44 GMT

Adds `skip_requesting_account_id` argument for non-standard AWS S3 backends • Adds `skip_requesting_account_id` to the `backend "s3"` block to support AWS API implementations without IAM, STS, or metadata API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.6.0

Wed, 04 Oct 2023 17:11:35 GMT

Terraform v1.6 adds generally available terraform test command and allows saving Terraform Cloud remote plans locally. • `terraform test` subcommand is now generally available for executing `.tftest.hcl` files with `run` blocks to validate configurations via plan/apply assertions • New `-out` flag on `terraform plan` enables saving Remote Plans from Terraform Cloud/Enterprise as local `.plan` files for later viewing and application • `config`: The `import` block now accepts dynamic expressions for its `id` field, such as resource attributes, provided the value is known at plan time • `core`: Provider schemas are now cached globally for compatible providers, reducing memory usage across multiple instances of the same provider • `core`: The type system now tracks unknown value details (e.g., collection length ranges, nullability) enabling more precise results for `try` and `can` functions with unknown arguments • `backend/kubernetes`: Kubernetes backend can now store states larger than 1MiB by splitting state across multiple secrets • `terraform show -json`: The JSON output now includes an `errored` property to indicate if a planning process halted with an error, making the plan non-applicable • `backend/s3`: New nested `assume_role` and `endpoints` blocks for AWS IAM role and endpoint configuration, deprecating top-level flat arguments • `backend/s3`: The S3 backend now supports custom HTTP proxy configurations via new `http_proxy`, `insecure`, `use_fips_endpoint`, and `use_dualstack_endpoint` arguments alongside their environment variable counterparts • `backend/s3`: New `assume_role_with_web_identity` nested block allows assuming roles using dynamic credentials like Web Identity Tokens • `backend/s3`: Added support for standard AWS environment variables `AWS_CONFIG_FILE` and `AWS_SHARED_CREDENTIALS_FILE` for credential resolution • `backend/s3`: New arguments `shared_config_files` and `shared_credentials_files` allow specifying custom credential/configuration file paths directly in the backend config • `backend/s3`: The S3 backend now supports `custom_ca_bundle` argument and `AWS_CA_BUNDLE` environment variable for providing custom CA certificates • `backend/s3`: New arguments `ec2_metadata_service_endpoint` and `ec2_metadata_service_endpoint_mode` along with corresponding environment variables allow configuring the EC2 metadata service (IMDS) endpoint • `backend/s3`: Added `sts_region` argument to specify an alternative AWS region for STS operations • `backend/s3`: New `retry_mode` argument and `AWS_RETRY_MODE` environment variable allow configuring the retry strategy for S3 backend requests • `backend/s3`: Added `allowed_account_ids` and `forbidden_account_ids` arguments to prevent unintended modifications to specific AWS accounts via the backend • `backend/cos`: Cloud Object Storage backend now supports custom HTTP(S) endpoints and root domains for its API client Breaking changes: • macOS support dropped for versions earlier than macOS 10.15 Catalina • Windows support dropped for versions earlier than Windows 10 or Windows Server 2016 • Top-level S3 backend arguments `role_arn`, `session_name`, `external_id`, `assume_role_duration_seconds`, `assume_role_policy_arns`, `assume_role_tags`, and `assume_role_transitive_tag_keys` are deprecated in favor of the nested `assume_role` block • Top-level S3 backend arguments `dynamodb_endpoint`, `iam_endpoint`, `endpoint`, and `sts_endpoint` are deprecated in favor of the nested `endpoints` block • Old S3 environment variable names `AWS_DYNAMODB_ENDPOINT`, `AWS_IAM_ENDPOINT`, `AWS_S3_ENDPOINT`, and `AWS_STS_ENDPOINT` are deprecated in favor of `AWS_ENDPOINT_URL_DYNAMODB`, `AWS_ENDPOINT_URL_IAM`, `AWS_ENDPOINT_URL_S3`, and `AWS_ENDPOINT_URL_STS` • S3 backend argument `shared_credentials_file` is deprecated in favor of `shared_credentials_files` • S3 backend argument `force_path_style` is deprecated in favor of `use_path_style` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.5.0

Mon, 12 Jun 2023 10:13:09 GMT

Terraform v1.5 introduces configuration-driven check/import blocks and a `-generate-config-out` flag. • Adds `check` blocks for validating infrastructure with scoped data sources • Adds `import` blocks to declare intent for adopting existing resources in the root module • Adds `-generate-config-out=PATH` flag to `terraform plan` to generate HCL for imported resources • Adds a new plantimestamp() function that returns the timestamp at plan time • Adds a new strcontains() function that checks whether a given string contains a given substring • Adds support for `PG_CONN_STR`, `PG_SCHEMA_NAME`, `PG_SKIP_SCHEMA_CREATION`, `PG_SKIP_TABLE_CREATION` and `PG_SKIP_INDEX_CREATION` environment variables in the `pg` backend Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.4.0

Wed, 08 Mar 2023 18:13:32 GMT

Terraform v1.4 adds terraform_data resource, plan error preservation, metadata API, and GCS/OSS/HTTP backends enhancements. • `terraform_data` is a new builtin managed resource type that can store data of any type • `terraform workspace select` now accepts the `-or-create` flag to create workspaces in automated situations • `terraform metadata functions -json` exports Terraform function signatures in machine-readable format • `-or-create` CLI argument for `terraform workspace select` • `-json` flag for `terraform metadata functions` subcommand • KMS key configuration in GCS backend allows encryption of state files using Cloud KMS keys via `kms_encryption_key` • GCS backend supports Private Service Connect endpoints via the `storage_custom_endpoint` argument • `GOOGLE_BACKEND_IMPERSONATE_SERVICE_ACCOUNT` environment variable allows impersonating a different service account when `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` is configured for the GCP provider • `terraform plan` can now store a plan file even when encountering errors Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.3.0

Wed, 21 Sep 2022 13:59:25 GMT

Terraform v1.3.0 adds optional attributes to object types, new string functions (startswith/endswith), timecmp, fmt multi-path support, and provider protocol updates. • Supports optional() modifier in `variable` type constraints to declare optional object attributes with defaults • Adds `timecmp` built-in function for timestamp comparison with UTC offset handling • Allows `terraform fmt` to accept multiple target paths simultaneously • Includes full structure of unknownness in `terraform show -json` output via changed `after_unknown` representation • Supports global acceleration in COS backend • Calls `PlanResourceChange` for compatible providers when destroying resource instances • Uploads JSON integration format for state to Terraform Cloud alongside state snapshots Breaking changes: • The `-allow-missing-config` flag in `terraform import` has been removed; an empty configuration block is now required. • The `after_unknown` field in `terraform show -json` output changes from a simple boolean to a full structure reflecting the unknownness of complex values. • The `azurerm` backend no longer supports ADAL (Azure AD Graph) authentication and requires MSAL (Microsoft Graph). • Deprecated backends `artifactory`, `etcd`, `etcdv3`, `manta`, and `swift` have been removed; legacy backend name `azure` has been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.2.0

Wed, 18 May 2022 21:47:47 GMT

Terraform v1.2 adds precondition/postcondition checks, replace_triggered_by lifecycle argument, and TF_TOKEN_ env vars for credentials • `precondition` and `postcondition` check blocks for resources, data sources, and module output values • `replace_triggered_by` new `lifecycle` argument for managed resources • Credential support via `TF_TOKEN_` environment variable for Terraform-native services • `TF_CLOUD_ORGANIZATION` and `TF_CLOUD_HOSTNAME` as fallbacks for `cloud` block arguments • `TF_WORKSPACE` as implicit single-workspace configuration when `cloud` block lacks explicit workspaces config • AzureRM Backend defaults to MSAL (Microsoft Graph) for authentication • AzureRM Backend supports authenticating as a service principal using OpenID Connect • `ssh` provisioner connection now supports SSH over HTTP proxy • SSH client for provisioners now supports newer key algorithms • `terraform show -json` now includes exact type information for output values Breaking changes: • Terraform CLI no longer supports TLS v1.0 and v1.1 for outgoing connections; server must support TLS v1.2 • Terraform CLI will no longer accept CA certificates signed using the SHA-1 hash function • Official Linux packages for the v1.2 series now require Linux kernel version 2.6.32 or later Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.1.9

Wed, 20 Apr 2022 13:46:32 GMT

Terraform v1.1.9 adds support for Run Tasks to execute post-plan hooks. • Adds `run tasks` support as a Terraform Cloud integration for executing remote operations during the post plan stage of a run Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.1.5

Wed, 02 Feb 2022 20:46:31 GMT

Terraform v1.1.5 adds ap-southeast-3 support for S3 backends • Adds `ap-southeast-3` as a supported AWS region for the S3 backend (`backend/s3`) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.1.0

Wed, 08 Dec 2021 21:25:33 GMT

Terraform v1.1.0 adds `moved` blocks for refactoring resources, a `cloud` block for native Cloud integration, and nullable variables. • Adds `moved` blocks to HCL configuration, allowing module authors to record resource address changes so Terraform automatically migrates state objects during planning. • Adds the `cloud` block inside the `terraform` settings block to enable native Terraform Cloud integration for CLI-driven runs, including support for per-run variables via the `-var` flag. • Allows declaring variables as `nullable = false` in HCL to ensure they never hold a null value, falling back to the default if explicitly set to null. • Introduces the type() function in `terraform console` for inspecting the exact type of a value during debugging. • Enables `terraform workspace delete` to remove workspaces containing only data resources and outputs without requiring `terraform destroy` first. • Supports Windows 10 built-in OpenSSH Client's SSH Agent for `provisioner/remote-exec` and `provisioner/file` in addition to Pageant. Breaking changes: • Terraform on macOS now requires macOS 10.13 High Sierra or later; older versions are no longer supported. • The `terraform graph` command no longer supports `-type=validate` and `-type=eval` options. • `terraform apply` with a previously-saved plan file now verifies provider plugin package checksums more strictly, potentially failing if in-house plugins modify files between plan and apply. • `terraform state mv` will error when legacy `-backup` or `-backup-out` options are used without the `-state` option on non-local backends. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform

terraform v1.0.11

Wed, 10 Nov 2021 21:51:47 GMT

Adds `sts_endpoint` setting for the OSS backend. Improves numeric equality comparison precision. • Adds `sts_endpoint` field to the `oss` backend config to override the default STS service endpoint • Numbers in configuration are now compared by protocol representation instead of native float types, reducing spurious drift Full history on Cyber Toolchain: https://cybertoolchain.io/tools/terraform