From 8e9c1c257d9882b15187bafe7eaf79efa2f67287 Mon Sep 17 00:00:00 2001 From: Daniel Roth Date: Wed, 29 Jul 2026 10:46:45 +0000 Subject: [PATCH] Pin the AWS provider to 6.56.0 across every Terraform stack MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v6.57.0 (released 29 July 2026) breaks ordinary reads across unrelated AWS services — SSM GetParameter returns SerializationException, IAM GetPolicy returns a 302, ECR returns InvalidSignatureException — with no config change. Reported upstream as hashicorp/terraform-provider-aws#49170, open with no root cause identified; 6.56.0 is confirmed good. Every stack declared `>= 5.0` with no upper bound and no lock files are committed, so each CI run silently resolved whatever HashiCorp had shipped most recently. That is how a provider released today broke a pipeline nobody had touched. Pinning exactly makes the deployed version a reviewed decision rather than a discovery. Co-Authored-By: Claude Opus 5 (1M context) --- deployment/terraform/cdn/provider.tf | 2 +- deployment/terraform/cdn_certificate/provider.tf | 2 +- deployment/terraform/lambda/_template/provider.tf | 2 +- deployment/terraform/lambda/abri_api/provider.tf | 2 +- deployment/terraform/lambda/address2UPRN/provider.tf | 2 +- deployment/terraform/lambda/ara_export/provider.tf | 2 +- deployment/terraform/lambda/audit_generator/provider.tf | 2 +- deployment/terraform/lambda/bulkUploadFinaliser/provider.tf | 2 +- .../terraform/lambda/bulk_address2uprn_combiner/provider.tf | 2 +- deployment/terraform/lambda/bulk_document_download/provider.tf | 2 +- deployment/terraform/lambda/categorisation/provider.tf | 2 +- deployment/terraform/lambda/condition-etl/provider.tf | 2 +- deployment/terraform/lambda/ecmk_to_ara/provider.tf | 2 +- deployment/terraform/lambda/engine/provider.tf | 2 +- deployment/terraform/lambda/fast-api/provider.tf | 2 +- deployment/terraform/lambda/hubspot_deal_etl/provider.tf | 2 +- .../terraform/lambda/landlordDescriptionOverrides/provider.tf | 2 +- deployment/terraform/lambda/magic_plan/provider.tf | 2 +- deployment/terraform/lambda/modelling_e2e/provider.tf | 2 +- deployment/terraform/lambda/ordnanceSurvey/provider.tf | 2 +- deployment/terraform/lambda/pashub_to_ara/provider.tf | 2 +- deployment/terraform/lambda/postcodeSplitter/provider.tf | 2 +- deployment/terraform/lambda/sharepoint_renamer/provider.tf | 2 +- deployment/terraform/shared/main.tf | 2 +- 24 files changed, 24 insertions(+), 24 deletions(-) diff --git a/deployment/terraform/cdn/provider.tf b/deployment/terraform/cdn/provider.tf index 186adc103..1c3737ead 100644 --- a/deployment/terraform/cdn/provider.tf +++ b/deployment/terraform/cdn/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/cdn_certificate/provider.tf b/deployment/terraform/cdn_certificate/provider.tf index 38b01d825..fc390e252 100644 --- a/deployment/terraform/cdn_certificate/provider.tf +++ b/deployment/terraform/cdn_certificate/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/_template/provider.tf b/deployment/terraform/lambda/_template/provider.tf index 3d66f3921..22b841f58 100644 --- a/deployment/terraform/lambda/_template/provider.tf +++ b/deployment/terraform/lambda/_template/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/abri_api/provider.tf b/deployment/terraform/lambda/abri_api/provider.tf index 3ae50128a..f2e40303c 100644 --- a/deployment/terraform/lambda/abri_api/provider.tf +++ b/deployment/terraform/lambda/abri_api/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/address2UPRN/provider.tf b/deployment/terraform/lambda/address2UPRN/provider.tf index 3cfa24004..c69339270 100644 --- a/deployment/terraform/lambda/address2UPRN/provider.tf +++ b/deployment/terraform/lambda/address2UPRN/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/ara_export/provider.tf b/deployment/terraform/lambda/ara_export/provider.tf index ec65a064b..1bf611187 100644 --- a/deployment/terraform/lambda/ara_export/provider.tf +++ b/deployment/terraform/lambda/ara_export/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/audit_generator/provider.tf b/deployment/terraform/lambda/audit_generator/provider.tf index 3793fefdd..d7d5a6ee5 100644 --- a/deployment/terraform/lambda/audit_generator/provider.tf +++ b/deployment/terraform/lambda/audit_generator/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/bulkUploadFinaliser/provider.tf b/deployment/terraform/lambda/bulkUploadFinaliser/provider.tf index 98a588f1b..469b86f84 100644 --- a/deployment/terraform/lambda/bulkUploadFinaliser/provider.tf +++ b/deployment/terraform/lambda/bulkUploadFinaliser/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/bulk_address2uprn_combiner/provider.tf b/deployment/terraform/lambda/bulk_address2uprn_combiner/provider.tf index 45422d9fa..853a81ed0 100644 --- a/deployment/terraform/lambda/bulk_address2uprn_combiner/provider.tf +++ b/deployment/terraform/lambda/bulk_address2uprn_combiner/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/bulk_document_download/provider.tf b/deployment/terraform/lambda/bulk_document_download/provider.tf index 2ea6c350c..248c55e5f 100644 --- a/deployment/terraform/lambda/bulk_document_download/provider.tf +++ b/deployment/terraform/lambda/bulk_document_download/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/categorisation/provider.tf b/deployment/terraform/lambda/categorisation/provider.tf index 30e73ed29..435499562 100644 --- a/deployment/terraform/lambda/categorisation/provider.tf +++ b/deployment/terraform/lambda/categorisation/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/condition-etl/provider.tf b/deployment/terraform/lambda/condition-etl/provider.tf index f7adf65a4..495a0d0d7 100644 --- a/deployment/terraform/lambda/condition-etl/provider.tf +++ b/deployment/terraform/lambda/condition-etl/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/ecmk_to_ara/provider.tf b/deployment/terraform/lambda/ecmk_to_ara/provider.tf index 87a941504..c612b68b8 100644 --- a/deployment/terraform/lambda/ecmk_to_ara/provider.tf +++ b/deployment/terraform/lambda/ecmk_to_ara/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/engine/provider.tf b/deployment/terraform/lambda/engine/provider.tf index 74021fd06..bd74f3a17 100644 --- a/deployment/terraform/lambda/engine/provider.tf +++ b/deployment/terraform/lambda/engine/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/fast-api/provider.tf b/deployment/terraform/lambda/fast-api/provider.tf index afe6f3f69..cefb479c7 100644 --- a/deployment/terraform/lambda/fast-api/provider.tf +++ b/deployment/terraform/lambda/fast-api/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/hubspot_deal_etl/provider.tf b/deployment/terraform/lambda/hubspot_deal_etl/provider.tf index c8a3972ca..814ffaf4b 100644 --- a/deployment/terraform/lambda/hubspot_deal_etl/provider.tf +++ b/deployment/terraform/lambda/hubspot_deal_etl/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/landlordDescriptionOverrides/provider.tf b/deployment/terraform/lambda/landlordDescriptionOverrides/provider.tf index ed2fa60e7..43164ed6b 100644 --- a/deployment/terraform/lambda/landlordDescriptionOverrides/provider.tf +++ b/deployment/terraform/lambda/landlordDescriptionOverrides/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/magic_plan/provider.tf b/deployment/terraform/lambda/magic_plan/provider.tf index a3dd6a7dd..25039a901 100644 --- a/deployment/terraform/lambda/magic_plan/provider.tf +++ b/deployment/terraform/lambda/magic_plan/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/modelling_e2e/provider.tf b/deployment/terraform/lambda/modelling_e2e/provider.tf index 7100be243..66fcd7523 100644 --- a/deployment/terraform/lambda/modelling_e2e/provider.tf +++ b/deployment/terraform/lambda/modelling_e2e/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/ordnanceSurvey/provider.tf b/deployment/terraform/lambda/ordnanceSurvey/provider.tf index 12bd0f854..6d27714c4 100644 --- a/deployment/terraform/lambda/ordnanceSurvey/provider.tf +++ b/deployment/terraform/lambda/ordnanceSurvey/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/pashub_to_ara/provider.tf b/deployment/terraform/lambda/pashub_to_ara/provider.tf index ba7cfa89c..448f5a146 100644 --- a/deployment/terraform/lambda/pashub_to_ara/provider.tf +++ b/deployment/terraform/lambda/pashub_to_ara/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/postcodeSplitter/provider.tf b/deployment/terraform/lambda/postcodeSplitter/provider.tf index 5749143df..b84976a4a 100644 --- a/deployment/terraform/lambda/postcodeSplitter/provider.tf +++ b/deployment/terraform/lambda/postcodeSplitter/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/lambda/sharepoint_renamer/provider.tf b/deployment/terraform/lambda/sharepoint_renamer/provider.tf index e6f8e32cf..dfe0fb285 100644 --- a/deployment/terraform/lambda/sharepoint_renamer/provider.tf +++ b/deployment/terraform/lambda/sharepoint_renamer/provider.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } diff --git a/deployment/terraform/shared/main.tf b/deployment/terraform/shared/main.tf index a492401de..40e7ad3c1 100644 --- a/deployment/terraform/shared/main.tf +++ b/deployment/terraform/shared/main.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = ">= 5.0" + version = "6.56.0" } } backend "s3" {