terraform(deps): Bump terraform-aws-modules/iam/aws from 5.60.0 to 6.1.0 in /terraform/aws/analytical-platform-data-engineering-sandbox-a/github-actions-roles

[dependabot]

Bumps terraform-aws-modules/iam/aws from 5.60.0 to 6.1.0.

Release notes

Sourced from terraform-aws-modules/iam/aws's releases.

v6.1.0

6.1.0 (2025-08-14)

Features

• Add default IRSA policy name, fix incorrect policy attachment for iam-user (#594) (f111832)

v6.0.1

6.0.1 (2025-08-14)

Bug Fixes

• Remove broken IRSA migrations.tf; add default IRSA policy descriptions for backwards compat (#592) (e56f84d)

v6.0.0

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

• Upgrade AWS provider and min required Terraform version to 6.0 and 1.5.7 respectively (#585)

See docs/UPGRADE-6.0.md for further details

List of backwards incompatible changes

• Terraform v1.5.7 is now minimum supported version

• AWS provider v6.0.0 is now minimum supported version

• The ability to allow roles to assume their own roles has been removed. This was previously added as part of helping users mitigate https://aws.amazon.com/blogs/security/announcing-an-update-to-iam-role-trust-policy-behavior/. Going forward, users will need to mitigate this on the application side (i.e. - do not have a role assume itself), or update the trust policy in their implementation to continue using this behavior. It is strongly recommended to mitigate this by not having the role assume itself.

• iam-account:

  • The aws_caller_identity data source and associated outputs have been removed. Users should instead use the data source directly in their configuration

• iam-assumable-role has been renamed to iam-role

• iam-assumable-role-with-oidc has been merged into iam-role

• iam-assumable-role-with-saml has been merged into iam-role

• iam-assumable-roles has been removed; iam-role should be used instead

• iam-assumable-roles-with-saml has been removed; iam-role should be used instead

• iam-github-oidc-provider has been renamed to iam-oidc-provider

• iam-github-oidc-role has been merged into iam-role

• iam-group-with-policies has been renamed to iam-group

• iam-group-with-assumable-roles-policy has been merged into iam-group

• iam-eks-role has been removed; iam-role-for-service-accounts or eks-pod-identity should be used instead

• iam-role-for-service-accounts-eks has been renamed to iam-role-for-service-accounts

  • Individual policy creation and attachment has been consolidated under one policy creation and attachment
  • Default values that enable permissive permissions have been removed; users will need to be explicit about the scope of access (i.e. ARNs) they provide when enabling permissions
  • AppMesh policy support has been removed due to service reaching end of support

Additional changes

... (truncated)

Changelog

Sourced from terraform-aws-modules/iam/aws's changelog.

6.1.0 (2025-08-14)

Features

• Add default IRSA policy name, fix incorrect policy attachment for iam-user (#594) (f111832)

6.0.1 (2025-08-14)

Bug Fixes

• Remove broken IRSA migrations.tf; add default IRSA policy descriptions for backwards compat (#592) (e56f84d)

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

• Upgrade AWS provider and min required Terraform version to 6.0 and 1.5.7 respectively (#585)

Features

• Upgrade AWS provider and min required Terraform version to 6.0 and 1.5.7 respectively (#585) (31b31d7)

Commits

• 1ed6f73 chore(release): version 6.1.0 [skip ci]
• f111832 feat: Add default IRSA policy name, fix incorrect policy attachment for `iam-...
• 8b2ab9d chore(release): version 6.0.1 [skip ci]
• e56f84d fix: Remove broken IRSA migrations.tf; add default IRSA policy descriptions...
• 4d779a5 chore(release): version 6.0.0 [skip ci]
• 31b31d7 feat!: Upgrade AWS provider and min required Terraform version to 6.0 and `...
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.