Actually, it is only broke for deploying lambdas.  You can also work around it by using the previous providor:


```
terraform {
  required_providers {
    aws = "<= 3.16.0"
  }
}
```

The reason it broke is it using the new aws feature for code signing lambdas.  Those new APIs are not implemented or mocked in a reasonable way in localstack.

Is there a plan to mock or implement those APIs?



┆Issue is synchronized with this [Jira Bug](https://localstack.atlassian.net/browse/LOC-347) by [Unito](https://www.unito.io/learn-more)

region_name = extract_region_from_arn(queue_arn)
    client = connect_to_service('sqs', region_name=region_name)
    queue_url = get_sqs_queue_url(queue_arn)
    response = client.receive_message(QueueUrl=queue_url)
    return response
def firehose_name(firehose_arn):
    return firehose_arn.split('/')[-1]
def kinesis_stream_name(kinesis_arn):
    return kinesis_arn.split(':stream/')[-1]
def mock_aws_request_headers(service='dynamodb', region_name=None):
    ctype = APPLICATION_AMZ_JSON_1_0
    if service == 'kinesis':
        ctype = APPLICATION_AMZ_JSON_1_1
    elif service in ['sns', 'sqs']:
        ctype = APPLICATION_X_WWW_FORM_URLENCODED
    access_key = get_boto3_credentials().access_key
    region_name = region_name or get_region()
    headers = {
        'Content-Type': ctype,
        'Accept-Encoding': 'identity',
        'X-Amz-Date': '20160623T103251Z',
        'Authorization': ('AWS4-HMAC-SHA256 ' +
            'Credential=%s/20160623/%s/%s/aws4_request, ' +
            'SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=1234') % (
                access_key, region_name, service)
    }
    return headers
def dynamodb_get_item_raw(request):