<commit_before>## 1.12.0 (Unreleased)

NOTES:

* provider: For resources implementing the IAM policy equivalence library (https://github.com/jen20/awspolicyequivalence/) on an attribute via `suppressEquivalentAwsPolicyDiffs`, the dependency has been updated, which should mark additional IAM policies as equivalent. [GH-3832]

FEATURES:

* **New Resource:** `aws_waf_geo_match_set` [GH-3275]
* **New Resource:** `aws_wafregional_rule` [GH-3756]
* **New Resource:** `aws_wafregional_sql_injection_match_set` [GH-1013]
* **New Resource:** `aws_wafregional_xss_match_set` [GH-1014]
* **New Resource:** `aws_kms_grant` [GH-3038]

ENHANCEMENTS:

* provider: Treat IAM policies with account ID principals as equivalent to IAM account root ARN [GH-3832]
* provider: Treat additional IAM policy scenarios with empty principal trees as equivalent [GH-3832]
* resource/aws_eip: Support configurable timeouts [GH-3769]
* resource/aws_emr_cluster: Add step support [GH-3673]
* resource/aws_instance: Support optionally fetching encrypted Windows password data [GH-2219]
* resource/aws_launch_configuration: Validate `user_data` length during plan [GH-2973]<commit_msg>Update CHANGELOG for #3767<commit_after>## 1.12.0 (Unreleased)

NOTES:

* provider: For resources implementing the IAM policy equivalence library (https://github.com/jen20/awspolicyequivalence/) on an attribute via `suppressEquivalentAwsPolicyDiffs`, the dependency has been updated, which should mark additional IAM policies as equivalent. [GH-3832]

FEATURES:

* **New Resource:** `aws_waf_geo_match_set` [GH-3275]
* **New Resource:** `aws_wafregional_rule` [GH-3756]
* **New Resource:** `aws_wafregional_sql_injection_match_set` [GH-1013]
* **New Resource:** `aws_wafregional_xss_match_set` [GH-1014]
* **New Resource:** `aws_kms_grant` [GH-3038]

ENHANCEMENTS:

* provider: Treat IAM policies with account ID principals as equivalent to IAM account root ARN [GH-3832]
* provider: Treat additional IAM policy scenarios with empty principal trees as equivalent [GH-3832]
* resource/aws_cloudfront_distribution: Validate origin `domain_name` and `origin_id` at plan time [GH-3767]
* resource/aws_eip: Support configurable timeouts [GH-3769]
* resource/aws_emr_cluster: Add step support [GH-3673]
* resource/aws_instance: Support optionally fetching encrypted Windows password data [GH-2219]
* resource/aws_launch_configuration: Validate `user_data` length during plan [GH-2973]
{'fraction_non_alphanumeric': 0.1047658175842235, 'fraction_numerical': 0.047658175842235, 'mean_word_length': 6.585669781931464, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5950316', 'n_tokens_mistral': 869, 'n_tokens_neox': 771, 'n_words': 232}