s3: rename blocked_encryption_types_list to blocked_encryption_types

Removes the '_list' suffix from the attribute name to follow Terraform's
convention of using plural names for list attributes without the suffix.

Author: YakDriver

internal/service/s3/bucket_server_side_encryption_configuration.go

@@ -74,7 +74,7 @@ func resourceBucketServerSideEncryptionConfiguration() *schema.Resource {
 								},
 							},
 						},
-						"blocked_encryption_types_list": {
+						"blocked_encryption_types": {
 							Type:     schema.TypeList,
 							Optional: true,
 							Elem: &schema.Schema{
@@ -302,7 +302,7 @@ func expandServerSideEncryptionRules(l []any) []types.ServerSideEncryptionRule {
 			rule.ApplyServerSideEncryptionByDefault = expandServerSideEncryptionByDefault(v)
 		}
 
-		if v, ok := tfMap["blocked_encryption_types_list"].([]any); ok && len(v) > 0 {
+		if v, ok := tfMap["blocked_encryption_types"].([]any); ok && len(v) > 0 {
 			rule.BlockedEncryptionTypes = expandBlockedEncryptionTypes(v)
 		}
 
@@ -327,7 +327,7 @@ func flattenServerSideEncryptionRules(rules []types.ServerSideEncryptionRule) []
 		}
 
 		if rule.BlockedEncryptionTypes != nil {
-			m["blocked_encryption_types_list"] = flattenBlockedEncryptionTypes(rule.BlockedEncryptionTypes)
+			m["blocked_encryption_types"] = flattenBlockedEncryptionTypes(rule.BlockedEncryptionTypes)
 		}
 
 		if rule.BucketKeyEnabled != nil {

internal/service/s3/bucket_server_side_encryption_configuration_test.go

@@ -69,8 +69,8 @@ func TestAccS3BucketServerSideEncryptionConfiguration_blockedEncryptionTypesList
 				Check: resource.ComposeAggregateTestCheckFunc(
 					testAccCheckBucketServerSideEncryptionConfigurationExists(ctx, resourceName),
 					resource.TestCheckResourceAttr(resourceName, acctest.CtRulePound, "1"),
-					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types_list.#", "1"),
-					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types_list.0", "SSE-C"),
+					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types.#", "1"),
+					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types.0", "SSE-C"),
 				),
 			},
 			{
@@ -86,8 +86,8 @@ func TestAccS3BucketServerSideEncryptionConfiguration_blockedEncryptionTypesList
 				Check: resource.ComposeAggregateTestCheckFunc(
 					testAccCheckBucketServerSideEncryptionConfigurationExists(ctx, resourceName),
 					resource.TestCheckResourceAttr(resourceName, acctest.CtRulePound, "1"),
-					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types_list.#", "1"),
-					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types_list.0", "NONE"),
+					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types.#", "1"),
+					resource.TestCheckResourceAttr(resourceName, "rule.0.blocked_encryption_types.0", "NONE"),
 				),
 			},
 		},
@@ -694,8 +694,8 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "test" {
       kms_master_key_id = aws_kms_key.test.id
       sse_algorithm     = "aws:kms"
     }
-    bucket_key_enabled            = true
-    blocked_encryption_types_list = %[2]s
+    bucket_key_enabled       = true
+    blocked_encryption_types = %[2]s
   }
 }
 `, rName, blockedTypes)

website/docs/r/s3_bucket_server_side_encryption_configuration.html.markdown

@@ -56,8 +56,8 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "example" {
       kms_master_key_id = aws_kms_key.mykey.arn
       sse_algorithm     = "aws:kms"
     }
-    bucket_key_enabled            = true
-    blocked_encryption_types_list = ["SSE-C"]
+    bucket_key_enabled       = true
+    blocked_encryption_types = ["SSE-C"]
   }
 }
 ```
@@ -76,7 +76,7 @@ This resource supports the following arguments:
 The `rule` configuration block supports the following arguments:
 
 * `apply_server_side_encryption_by_default` - (Optional) Single object for setting server-side encryption by default. [See below](#apply_server_side_encryption_by_default).
-* `blocked_encryption_types_list` - (Optional) List of server-side encryption types to block for object uploads. Valid values are `SSE-C` (blocks uploads using server-side encryption with customer-provided keys) and `NONE` (unblocks all encryption types). Starting in March 2026, Amazon S3 will automatically block SSE-C uploads for all new buckets.
+* `blocked_encryption_types` - (Optional) List of server-side encryption types to block for object uploads. Valid values are `SSE-C` (blocks uploads using server-side encryption with customer-provided keys) and `NONE` (unblocks all encryption types). Starting in March 2026, Amazon S3 will automatically block SSE-C uploads for all new buckets.
 * `bucket_key_enabled` - (Optional) Whether or not to use [Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html) for SSE-KMS.
 
 ### apply_server_side_encryption_by_default