Merge remote-tracking branch 'upstream/main' into sync-with-hashicorp-14

Author: ab-cs13

.changelog/45073.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_msk_cluster: Add `rebalancing` configuration block to support intelligent rebalancing for Express broker clusters
+```

.changelog/45097.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_billing_view
+```

.changelog/45104.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_bedrock_guardrail: Add `input_action`, `input_enabled`, `input_modalities`, `output_action`, `output_enabled`, and `output_modalities` arguments to the `content_policy_config.filters_config` block
+```

.changelog/45143.txt

@@ -0,0 +1,6 @@
+```release-note:new-guide
+Tag Policy Compliance
+```
+```release-note:enhancement
+provider: Add support for enforcing tag policy compliance. This opt-in feature can be enabled via the new `tag_policy_compliance` provider argument, or the `TF_AWS_TAG_POLICY_COMPLIANCE` environment variable. When enabled, the principal executing Terraform must have the `tags:ListRequiredTags` IAM permission.
+```

.changelog/45159.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fsx_openzfs_file_system: Support `INTELLIGENT_TIERING` storage type and add `read_cache_configuration` argument
+```

.changelog/45170.txt

@@ -0,0 +1,19 @@
+```release-note:enhancement
+resource/aws_lambda_function: Add `tenancy_config` argument
+```
+
+```release-note:enhancement
+data-source/aws_lambda_function: Add `tenancy_config` attribute
+```
+
+```release-note:enhancement
+resource/aws_lambda_invocation: Add `tenant_id` argument
+```
+
+```release-note:enhancement
+data-source/aws_lambda_invocation: Add `tenant_id` argument
+```
+
+```release-note:enhancement
+action/aws_lambda_invoke: Add `tenant_id` argument
+```

.changelog/45201.txt

@@ -0,0 +1,6 @@
+```release-note:bug
+provider: Fix early return logic in the required tag validation interceptor. This addresses a performance regression introduced in [v6.22.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6220-november-20-2025).
+```
+```release-note:bug
+provider: Fix crash in required tag validation interceptor when tag values are unknown. This addresses a regression introduced in [v6.22.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6220-november-20-2025).
+```

.changelog/45202.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_accessanalyzer_analyzer: Fix `interface conversion: interface {} is nil, not map[string]interface {}` panics when `configuration.unused_access.analysis_rule.exclusion.resource_tags` contains `null` values
+```

.changelog/45205.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_odb_cloud_vm_cluster: Fix incorrect validation error when arguments are configured using variables. This addresses a regression introduced in [v6.22.0](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6220-november-20-2025)
+```

.ci/providerlint/go.mod

@@ -53,7 +53,7 @@ require (
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
 	github.com/zclconf/go-cty v1.17.0 // indirect
 	go.opentelemetry.io/otel/sdk/metric v1.38.0 // indirect
-	golang.org/x/crypto v0.44.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/mod v0.30.0 // indirect
 	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/sync v0.18.0 // indirect