Update Terraform aws to ~> 5.87.0

[govuk-ci]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	~> 5.85.0 -> ~> 5.87.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.87.0

Compare Source

FEATURES:

• New Resource: aws_cloudwatch_contributor_insight_rule (#​41373)

ENHANCEMENTS:

• resource/aws_dynamodb_table_export: Add export_type and incremental_export_specification arguments (#​41303)
• resource/aws_quicksight_data_source: Add parameters.s3.role_arn argument to allow override an account-wide role for a specific S3 data source (#​41284)
• resource/aws_rds_cluster: Add master_password_wo write-only attribute (#​41314)
• resource/aws_rekognition_stream_processor: Deprecates stream_processor_arn in favor of arn. (#​41271)
• resource/aws_ssm_parameter: Add value_wo write-only attribute (#​40952)
• resource/aws_vpclattice_access_log_subscription: Add service_network_log_type argument (#​41304)

BUG FIXES:

• data-source/aws_dynamodb_table: Add missing on_demand_throughput and global_secondary_index.*.on_demand_throughput attributes to resolve read error (#​41350)
• resource/aws_cloudformation_stack_set_instance: Prevents overly-long creation times and possible OperationInProgress errors (#​41388)
• resource/aws_detective_member: No longer fails with unexpected status when adding Organization member accounts. (#​41344)
• resource/aws_ec2_transit_gateway_route_table_association: Fix deleting and recreating resource when dependencies changes don't require the resource be recreated. (#​41292)
• resource/aws_internet_gateway: Fix to continue deletion when attachment is not found (#​41346)

v5.86.1

Compare Source

BUG FIXES:

• data-source/aws_vpclattice_service: Fix regression resulting in AccessDeniedError attempting to list tags (#​41295)
• data-source/aws_vpclattice_service_network: Fix regression resulting in AccessDeniedError attempting to list tags (#​41295)
• resource/aws_cloudtrail: Fix regression issue where sns_topic_name shows perpectual diff when an ARN of a SNS topic from a different region is specified (#​41279)
• resource/aws_s3_bucket_lifecycle_configuration: Fixes "inconsistent result" error when rule[*].prefix is an empty string. (#​41296)

v5.86.0

Compare Source

NOTES:

• resource/aws_s3_bucket_lifecycle_configuration: When upgrading existing resources with no defined prefix, the Terraform plan will show the removal of prefix from state. This is expected, and should not occur on subsequent plans. (#​41159)

ENHANCEMENTS:

• data-source/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn attributes (#​41002)
• provider: Support us-isof-east-1 and us-isof-south-1 as valid AWS Regions (#​41243)
• resource/aws_fms_policy: Add security_service_policy_data.policy_option.network_acl_common_policy argument to allow creation of FMS-managed NACL rules (#​41219)
• resource/aws_rds_cluster: Add monitoring_interval and monitoring_role_arn arguments (#​41002)
• resource/aws_sqs_queue: Accommodate accounts that take longer to process with customizable timeouts. (#​41232)

BUG FIXES:

• resource/aws_gamelift_game_server_group: Correctly plan tags_all value (#​41256)
• resource/aws_instance: Properly cancel spot instance requests on destroy when instance_lifecycle is spot (#​41206)
• resource/aws_route53_zone: Fix panic: runtime error: invalid memory address or nil pointer dereference when deleting the resource would otherwise return an error (#​41260)
• resource/aws_s3_bucket_lifecycle_configuration: Properly handle default value of transition_default_minimum_object_size (#​41159)
• resource/aws_wafv2_web_acl: Properly set rule during import (#​41205)

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.