feat: Add enhanced region support #1225

nightspotlight · 2025-07-16T18:30:36Z

Description

added region input variable (see Enhanced Region Support)
updated docs

Motivation and Context

This change will allow to simplify multi-region deployments of VPC resources. No longer need to maintain different provider aliases, one can simply pass region = "value" when calling the module. Example:

locals {
  regions = toset(["us-east-1", "us-west-2", "eu-west-1"])
}

module "vpc" {
  for_each = local.regions

  source = "terraform-aws-modules/vpc/aws"

  region = each.value

  name = "vpc-${each.value}"
}

Closes #1209.
Closes #1236.

Breaking Changes

None

How Has This Been Tested?

I have updated at least one of the examples/* to demonstrate and validate my change(s)
I have tested and validated these changes using one or more of the provided examples/* projects
I have executed pre-commit run -a on my pull request

- added `region` input variable - updated docs

nightspotlight · 2025-07-17T09:45:33Z

@antonbabenko , @bryantbiggs , ☝️😊

nightspotlight · 2025-07-21T18:11:43Z

modules/vpc-endpoints/main.tf

  service         = try(each.value.service, null)
  service_name    = try(each.value.service_name, null)
-  service_regions = try(coalescelist(compact([each.value.service_region])), null)
+  service_regions = try(coalescelist(compact([each.value.service_region])), [var.region], null)


This doesn't work…

│ Error: reading EC2 VPC Endpoint Services: couldn't find resource │ │ with module.endpoints["emea"].data.aws_vpc_endpoint_service.this["secretsmanager"], │ on .terraform/modules/endpoints/modules/vpc-endpoints/main.tf line 11, in data "aws_vpc_endpoint_service" "this": │ 11: data "aws_vpc_endpoint_service" "this" {

The vpc_endpoint_service data source doesn't support the region parameter in v6.4.0. So it seems like it's going to the provider-set region, and so it's unable to find the service endpoint from a different region.

I just found the list of non-region-aware resources, and the aws_vpc_endpoint_service data source is one of them… 😟 https://registry.terraform.io/providers/hashicorp/aws/latest/docs/guides/enhanced-region-support#non%E2%80%93region-aware-resources

So I was able to get it to work but had to alter the endpoints map a little and had to add a new input variable in the module.

Before:

endpoints = { s3 = { service = "s3" # … } }

After:

enable_service_endpoint_lookup = false endpoints = { s3 = { service_endpoint = "com.amazonaws.${each.value.aws_region}.s3" service_region = each.value.aws_region # … } }

The enable_service_endpoint_lookup switch effectively disables the aws_vpc_endpoint_service data source (default is enabled).

I need to work out and add some example scripts.

I updated examples and readmes

matheuscscp · 2025-07-27T12:41:57Z

Looking forward to seeing this through 🙏

antonszbx · 2025-08-20T09:05:29Z

@nightspotlight looking forward to it ❤️, afaik only example scripts are missing for usage? (for new endpoints)

nightspotlight · 2025-08-20T13:14:12Z

@nightspotlight looking forward to it ❤️, afaik only example scripts are missing for usage? (for new endpoints)

hey, I've been using my fork in my project but without the endpoints part.

I updated examples and readme, I hope it gets reviewed soon.

antonszbx · 2025-08-20T15:13:43Z

@bryantbiggs @antonbabenko ✌️

bryantbiggs · 2025-09-12T13:49:07Z

examples/simple-regions/main.tf

@@ -0,0 +1,54 @@
+provider "aws" {}


we don't need an example for this

bryantbiggs · 2025-09-12T13:51:12Z

modules/vpc-endpoints/main.tf


 data "aws_vpc_endpoint_service" "this" {
-  for_each = local.endpoints
+  for_each = { for k, v in local.endpoints : k => v if var.enable_service_endpoint_lookup }


remove this change, use service_regions = var.region != null ? [var.region] : null instead

bryantbiggs · 2025-09-12T13:51:54Z

modules/vpc-endpoints/main.tf

+
  vpc_id            = var.vpc_id
-  service_name      = try(each.value.service_endpoint, data.aws_vpc_endpoint_service.this[each.key].service_name)
+  service_name      = try(data.aws_vpc_endpoint_service.this[each.key].service_name, each.value.service_endpoint)


remove these changes

bryantbiggs · 2025-09-12T13:52:02Z

modules/vpc-endpoints/variables.tf

  default     = {}
 }

+variable "enable_service_endpoint_lookup" {


bryantbiggs · 2025-09-12T13:52:09Z

modules/vpc-endpoints/README.md

 }
 ```

+### Region Support Limitation


## [6.1.0](v6.0.1...v6.1.0) (2025-09-22) ### Features * Add enhanced region support ([#1225](#1225)) ([fd357b9](fd357b9))

antonbabenko · 2025-09-22T15:31:43Z

This PR is included in version 6.1.0 🎉

github-actions · 2025-10-23T02:18:43Z

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

nightspotlight added 3 commits July 16, 2025 19:15

chore: pre-commit autoupdate

c78c640

feat: add support for region (Enhanced Region Support)

ef24f75

- added `region` input variable - updated docs

feat: add support for region in vpc-endpoints module

9fb0730

nightspotlight mentioned this pull request Jul 21, 2025

Add support for region override in the module #1209

Closed

Use region variable in aws_vpc_endpoint_service data source

dc91032

nightspotlight commented Jul 21, 2025

View reviewed changes

bryantbiggs marked this pull request as draft July 21, 2025 19:35

Workaround for service endpoint lookup in the wrong region

a77de68

nightspotlight added 2 commits August 20, 2025 14:12

Add simple-regions example

28d67e2

Explain region limitations in vpc-endpoints sub-module

103fa59

nightspotlight marked this pull request as ready for review August 20, 2025 12:22

bryantbiggs reviewed Sep 12, 2025

View reviewed changes

examples/simple-regions/main.tf Outdated

@@ -0,0 +1,54 @@

provider "aws" {}

Copy link

Member

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need an example for this

bryantbiggs reviewed Sep 12, 2025

View reviewed changes

modules/vpc-endpoints/variables.tf Outdated

default = {}

}

variable "enable_service_endpoint_lookup" {

Copy link

Member

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove

bryantbiggs reviewed Sep 12, 2025

View reviewed changes

modules/vpc-endpoints/README.md Outdated

}

```

### Region Support Limitation

Copy link

Member

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove

bryantbiggs force-pushed the enhanced-region-support branch from 72d072c to 0fbc753 Compare September 22, 2025 15:26

fix: Remove example, fix logic for VPC endpoints regional usage

b088ef2

bryantbiggs force-pushed the enhanced-region-support branch from 0fbc753 to b088ef2 Compare September 22, 2025 15:27

bryantbiggs changed the title ~~feat: Enhanced region support~~ feat: Add enhanced region support Sep 22, 2025

bryantbiggs approved these changes Sep 22, 2025

View reviewed changes

bryantbiggs merged commit fd357b9 into terraform-aws-modules:master Sep 22, 2025
20 checks passed

antonbabenko pushed a commit that referenced this pull request Sep 22, 2025

chore(release): version 6.1.0 [skip ci]

41e2c23

## [6.1.0](v6.0.1...v6.1.0) (2025-09-22) ### Features * Add enhanced region support ([#1225](#1225)) ([fd357b9](fd357b9))

github-actions bot locked as resolved and limited conversation to collaborators Oct 23, 2025

Uh oh!

feat: Add enhanced region support #1225

feat: Add enhanced region support #1225

Uh oh!

Conversation

nightspotlight commented Jul 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Motivation and Context

Breaking Changes

How Has This Been Tested?

Uh oh!

nightspotlight commented Jul 17, 2025

Uh oh!

nightspotlight Jul 21, 2025

Choose a reason for hiding this comment

Uh oh!

nightspotlight Jul 21, 2025

Choose a reason for hiding this comment

Uh oh!

nightspotlight Jul 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

nightspotlight Aug 20, 2025

Choose a reason for hiding this comment

Uh oh!

matheuscscp commented Jul 27, 2025

Uh oh!

antonszbx commented Aug 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nightspotlight commented Aug 20, 2025

Uh oh!

antonszbx commented Aug 20, 2025

Uh oh!

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

bryantbiggs Sep 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

bryantbiggs Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

antonbabenko commented Sep 22, 2025

Uh oh!

github-actions bot commented Oct 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

nightspotlight commented Jul 16, 2025 •

edited

Loading

nightspotlight Jul 24, 2025 •

edited

Loading

antonszbx commented Aug 20, 2025 •

edited

Loading

bryantbiggs Sep 12, 2025 •

edited

Loading