feat!: Upgrade MSV of AWS provider to 6.20, remove support for origin access identities

[bryantbiggs]

List of backwards incompatible changes

• AWS provider v6.20 is now minimum supported version
• Support for aws_cloudfront_origin_access_identity has been removed in favor of aws_cloudfront_origin_access_control

Additional changes

Added

• None

Modified

• Variable definitions now contain detailed object types in place of the previously used any type
• is_ipv6_enabled now defaults to true if not specified
• default_cache_behavior.compress and ordered_cache_behavior.compress now default to true
• origin.origin_ssl_protocols now defaults to ["TLSv1.2"]
• vpc_origin.origin_ssl_protocols.items now defaults to ["TLSv1.2"]
• vpc_origin_timeouts is now embedded under vpc_origin
• viewer_certificate.minimum_protocol_version now defaults to "TLSv1.2_2025"
• See the the Before vs After examples below for more details on variable type definition changes

Variable and output changes

1. Removed variables:

   • create_origin_access_identity
   • origin_access_identities
   • create_origin_access_control
   • create_vpc_origin
   • vpc_origin_timeouts - use timeouts block within vpc_origin variable instead
   • create_response_headers_policy
   • create_cloudfront_function

2. Renamed variables:

   • create_distribution -> create

3. Added variables:

   • anycast_ip_list_id

4. Removed outputs:

   • cloudfront_vpc_origin_ids
   • cloudfront_origin_access_controls_ids
   • cloudfront_origin_access_identities
   • cloudfront_origin_access_identity_ids
   • cloudfront_origin_access_identity_iam_arns
   • cloudfront_distribution_tags

5. Renamed outputs:

   • None

6. Added outputs:

   • cloudfront_vpc_origins

Motivation and Context

• Resolves can(v.property_name) may produce null and cause "Invalid for_each set argument" error #164
• Resolves feat(variables): Add variable types to default_origin, cache_behavior, ordered_cache_behavior. #167
• Resolves fix: Only create origin_shield block when explicitly enabled #168
• Resolves feat: Add anycast_ip_list_id argument to aws_cloudfront_distribution … #169
• Resolves Request to add "anycast_ip_list_id" attribute to aws_cloudfront_distribution #171

Breaking Changes

• Yes

How Has This Been Tested?

• I have updated at least one of the examples/* to demonstrate and validate my change(s)
• I have tested and validated these changes using one or more of the provided examples/* projects
• I have executed pre-commit run -a on my pull request

[bryantbiggs]

This is now solved by these added guards (both default and ordered cache behaviors) so users don't need to worry about this https://github.com/terraform-aws-modules/terraform-aws-cloudfront/pull/177/files#diff-dc46acf24afd63ef8c556b77c126ccc6e578bc87e3aa09a931f33d9bf2532fbbR36-R37

[antonbabenko]

Well done! +1 for simplifying OAC vs OAI. I am always confused which one I should use. :)

[antonbabenko]

This PR is included in version 6.0.0 🎉

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.