Actually, it is only broke for deploying lambdas.  You can also work around it by using the previous providor:


```
terraform {
  required_providers {
    aws = "<= 3.16.0"
  }
}
```

The reason it broke is it using the new aws feature for code signing lambdas.  Those new APIs are not implemented or mocked in a reasonable way in localstack.

Is there a plan to mock or implement those APIs?



┆Issue is synchronized with this [Jira Bug](https://localstack.atlassian.net/browse/LOC-347) by [Unito](https://www.unito.io/learn-more)

return 'arn:aws:iam::{}:policy/{}'.format(account_id, policy_name)
def iam_resource_arn(resource, role=None, env=None):
    env = get_environment(env)
    if not role:
        role = get_iam_role(resource, env=env)
    return role_arn(role_name=role, account_id=get_account_id())
def get_iam_role(resource, env=None):
    env = get_environment(env)
    return 'role-%s' % resource
def secretsmanager_secret_arn(secret_name, account_id=None, region_name=None):
    pattern = 'arn:aws:secretsmanager:%s:%s:secret:%s'
    return _resource_arn(secret_name, pattern, account_id=account_id, region_name=region_name)
def cloudformation_stack_arn(stack_name, account_id=None, region_name=None):
    pattern = 'arn:aws:cloudformation:%s:%s:stack/%s/id-1234'
    return _resource_arn(stack_name, pattern, account_id=account_id, region_name=region_name)
def dynamodb_table_arn(table_name, account_id=None, region_name=None):
    pattern = 'arn:aws:dynamodb:%s:%s:table/%s'
    return _resource_arn(table_name, pattern, account_id=account_id, region_name=region_name)
def dynamodb_stream_arn(table_name, latest_stream_label, account_id=None):
    account_id = get_account_id(account_id)
    return ('arn:aws:dynamodb:%s:%s:table/%s/stream/%s' %
        (get_region(), account_id, table_name, latest_stream_label))
def log_group_arn(group_name, account_id=None, region_name=None):