chore(deps): update terraform terraform-aws-modules/iam/aws to v5.60.0#97

Open

isovalent-renovate[bot] wants to merge 2 commits into

mainfrom

renovate/terraform-aws-modules-iam-aws-5.x

isovalent-renovate Bot commented Feb 16, 2026

Contributor

This PR contains the following updates:

Package	Type	Update	Change
terraform-aws-modules/iam/aws (source)	module	minor	`5.9.2` -> `5.60.0`
terraform-aws-modules/iam/aws (source)	module	minor	`5.4.0` -> `5.60.0`

Release Notes

terraform-aws-modules/terraform-aws-iam (terraform-aws-modules/iam/aws)

`v5.60.0`

Features

Add ssm:GetParametersByPath for external secrets (#583) (8e4541d)

`v5.59.0`

Features

Update EBS CSI IAM policy to match current upstream project (#575) (49efa8c)

`v5.58.0`

Features

Add FSx OpenZFS IRSA (#565) (51c9e96)

`v5.57.0`

Features

Update IAM policy for AWS Gateway Controller (#563) (343e5fe)

`v5.56.0`

Features

Update AWS Load Balancer controller policy to match v2.13 of the upstream project (#573) (4ce604e)

`v5.55.0`

Features

Allow removing KMS and SSM permissions from EKS IRSA external secrets policy (#550) (bfaa70d)

`v5.54.1`

Bug Fixes

IAM policy for External-DNS policy (#561) (35cdb5a)

`v5.54.0`

Features

Update IAM permissions for load balancer controller v2.12.0 (#555) (d2d8ad4)

`v5.53.0`

Features

Add support for custom trust policy conditions on iam-github-oidc-role (#547) (3eca351)

`v5.52.2`

Bug Fixes

Fix IAM policy for External Secrets (#545) (883499c)

`v5.52.1`

Bug Fixes

Fix creation of inline polices (#544) (9ec4679)

`v5.52.0`

Features

Allow generic assume role conditions (#543) (c3e54f2)

`v5.51.0`

Features

Add BatchGet* to IAM read only policy (#540) (d886f11)

`v5.50.0`

Features

Add policies for AWS LBC v2.11.0 (#539) (ca9f355)

`v5.49.0`

Features

Update policie for External Secrets 0.12.1 (#542) (b609236)

`v5.48.0`

Features

Add ec2:GetSecurityGroupsForVpc for AWS LB Controller v2.10.0 (#536) (9cfab4a)

`v5.47.1`

Bug Fixes

Use dynamic partition value (#532) (9986b50)

`v5.47.0`

Features

Update AWS EBS CSI Driver IAM Policy (#530) (1bc058c)

Bug Fixes

Update CI workflow versions to latest (#527) (15fd175)

`v5.46.0`

Features

Update IAM policy for AWS Load Balancer Controller to support Listener Attributes (#525) (966c4f8)

`v5.45.0`

Features

Allow modifying the iam-github-oidc-role subject condition (#523) (f2ade86)

`v5.44.2`

Bug Fixes

Add required S3 PutObjectTagging permission to Velero IRSA policy (#517) (f0e65a7)

`v5.44.1`

Bug Fixes

Ensure IRSA for EKS FSX can Update File Systems (#520) (b84b3c2)

`v5.44.0`

Features

Add support for OIDC policy conditions (#480) (02a5b7f)

`v5.43.0`

Features

Allow changing iss for the github oidc role (#507) (56e4364)

`v5.42.0`

Features

Add cloudwatch logs policy to vpc-cni for networkpolicy logging (#504) (88ee443)

`v5.41.0`

Features

Adding sse-kms support for Mountpoint S3 CSI driver EKS IRSA (#493) (5039e10)

`v5.40.0`

Features

Add support for inline policy creation (#479) (e13cb1e)

`v5.39.1`

Bug Fixes

Fixed trust condition in modules/iam-github-oidc-role to be https (#490) (ecaed18)

`v5.39.0`

Features

Enable override policy name iam-group-with-assumable-roles-policy (#468) (bf013d2)
Update VPC CNI policy to 3/4/24 (#476) (f9d5e28)

`v5.38.0`

Features

EBS fast snapshot restores persmission for EKS IRSA (#469) (9ea77ca)

`v5.37.2`

Bug Fixes

Allow user to change own password when no MFA is present (#470) (ef0056b)

`v5.37.1`

Bug Fixes

Update CI workflow versions to remove deprecated runtime warnings (#465) (82348df)

`v5.37.0`

Features

Extend self-management policy to read account summary (iam-group-with-policies) (#462) (0bedaf4)

`v5.36.0`

Features

Add support for Mountpoint S3 CSI driver to EKS IRSA (#459) (21fb8d9)

`v5.35.0`

Features

Allow users to set and read own access keys description (iam-group-with-policies) (#461) (c80cd10)

`v5.34.0`

Features

Support new mTLS feature in awslb IAM policy (#458) (452c37f)

5.33.1 (2024-01-18)

Bug Fixes

Skip retrieving EKS cluster data when not creating the role (#436) (bcdf554)

`v5.33.1`

`v5.33.0`

Features

Add support for Amazon CloudWatch Observability IRSA role (#446) (25e2bf9)

5.32.1 (2023-12-11)

Bug Fixes

Remove unused TLS provider in iam-github-oidc-role (#439) (2ce3885)

`v5.32.1`

`v5.32.0`

Features

Add instance profile permissions to Karpenter IRSA policy (#434) (50348dd), closes #433

`v5.31.0`

Features

Allow users to change own password in iam-group-with-policies module (#435) (eb5b218)

5.30.2 (2023-11-10)

Bug Fixes

Update AllowManageOwnAccessKeys statement (#432) (741afc9)

5.30.1 (2023-11-04)

Bug Fixes

Direct policy attachment of iam-policy-created resources (#428) (543f101)

`v5.30.2`

`v5.30.1`

`v5.30.0`

Features

Add create_custom_role_trust_policy to control when a custom_role_trust_policy should be used (#321) (481095e)

5.29.2 (2023-08-30)

Bug Fixes

Expand Permissions for external-secrets IRSA Policy towards AWS Secrets Manager (#416) (fa74a18)

5.29.1 (2023-08-30)

Bug Fixes

Add missing condition role_session_name when assuming a role (#418) (89d011e)

`v5.29.2`

`v5.29.1`

`v5.29.0`

Features

Add variable for adding statement for secretsmanager:CreateSecret (#414) (24996cd)

`v5.28.0`

Features

Added direct policy attachment in iam-user module (#387) (9fa481f)

`v5.27.0`

Features

Correct enable_mfa_enforcement spelling (#404) (54b7165)

`v5.26.0`

Features

Github OIDC add extra thumbprints as needed (#403) (56511f3)

`v5.25.0`

Features

Added variable load_balancer_controller_targetgroup_arns in iam-role-for-service-accounts-eks module (#402) (61a5dbe)

`v5.24.0`

Features

Add path variable to IAM group module (#390) (e5c42c3)

5.23.1 (2023-06-29)

Bug Fixes

Ensure role_name_condition is set correctly (#389) (0024928)

`v5.23.1`

`v5.23.0`

Features

Added variable trusted_role_actions to sub modules as a "Action of STS" (#393) (5702679)

`v5.22.0`

Features

Add wrapper modules (#396) (9284b3e)

`v5.21.0`

Features

Added permissions to list zone tags in iam-role-for-service-accounts-eks module (#394) (740945f)

`v5.20.0`

Features

Add support for AWS Gateway controller (VPC Lattice) to IRSA module (#378) (fdee003)

`v5.19.0`

Features

Add support for condition role_session_name when assuming a role (#379) (5aabe67)

`v5.18.0`

Features

iam-eks-role: Add variable to allow change of IAM assume role condition test operator (#367) (542fc5a)

5.17.1 (2023-05-05)

Bug Fixes

Remove "autoscaling:UpdateAutoScalingGroup" permission from cluster-autoscaler IRSA (#357) (aeb5d7f)

`v5.17.1`

`v5.17.0`

Features

Add name_prefix to iam-policy and iam-read-only-policy modules (#369) (5bf5f6f)

`v5.16.0`

Features

Add elasticloadbalancing:AddTags permissions to AWS Load Balancer Controller policy required for version 2.4.7+ (#358) (e1403c1)

`v5.15.0`

Features

Add permissions for instance requirements support for cluster autoscaler IRSA policy (#356) (fac0cdc)

5.14.4 (2023-03-24)

Bug Fixes

Add kms:decrypt policy for External Secret (#349) (2359a03)

5.14.3 (2023-03-23)

Bug Fixes

Do not attach force MFA statement for iam-groups-with-policies by default (#333) (b9f3409)

5.14.2 (2023-03-21)

Bug Fixes

Add ssm:DescribeParameters permission to external-secrets IAM role for service account (IRSA) (#348) (fe8d73b)

5.14.1 (2023-03-21)

Bug Fixes

Update self manage policy to support users with path (#335) (9a8d5cb)

`v5.14.4`

`v5.14.3`

`v5.14.2`

`v5.14.1`

`v5.14.0`

Features

Update efs_csi policy to support resource tagging (#352) (47cb7a2)

`v5.13.0`

Features

Add support for path in iam-group-with-assumable-roles-policy (#345) (761368e)

`v5.12.0`

Features

Add eks:DescribeCluster for Karpenter cluster endpoint auto discovery (#343) (3f2cdc8)

5.11.2 (2023-02-15)

Bug Fixes

Allow Change Password when no MFA present (#340) (0c1cfaa)

5.11.1 (2023-01-19)

Bug Fixes

Reflect the changes in the ebs_csi driver (#326) (cadfe47)

`v5.11.2`

`v5.11.1`

`v5.11.0`

Features

Allow multiple MFA devices and users to manage MFA devices (#313) (57a5d70)

`v5.10.0`

Features

Added Extra STS actions param in assumable role with SAML (#317) (a2ad4cd)

Bug Fixes

Use a version for to avoid GitHub API rate limiting on CI workflows (#323) (90349fa)

5.9.2 (2022-12-10)

Bug Fixes

Update role_name default to null (#319) (0baa2c1)

5.9.1 (2022-12-07)

Bug Fixes

Add ssm:GetParameters permission to external-secrets policy (#316) (0e77849)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

isovalent-renovate Bot and others added 2 commits

February 16, 2026 01:41


          chore(deps): update terraform terraform-aws-modules/iam/aws to v5.60.0

d34a0ef


          terraform-docs: automated action

65c0fb8

isovalent-renovate Bot commented Feb 17, 2026

Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet