### Terraform Version ```shell 1.11.x ``` ### Terraform Configuration Files We use [boring-registry](https://boring-registry.github.io/boring-registry/latest/) to implement our own S3 backed terraform registry. This tool produces S3 presigned URL as download URL returned in the specific release metadata. Up to terraform 1.10.x - terraform could download from presigned S3 URL in `terraform init`. Starting from terraform 1.11.0 we started getting 403 for HEAD requests. The reason is that the presigned URL is only good for GET requests. Do you think it makes sense to disable HEAD request. I see that the HttpGetter [supports that option](https://github.com/hashicorp/go-getter/blob/f6bd417710ec3151453902bb3606413d19678cb3/get_http.go#L420) but [we don't use it](https://github.com/hashicorp/terraform/pull/35843/files#diff-2ed1e39b4f29d40dc1b7935afeb13742b30eebdb124edd840f3bd263ec3b898cR33). For the very least - we should make this configurable to allow mitigating the behavior break. ### Debug Output ``` # terraform init Initializing the backend... Initializing provider plugins... - Finding latest version of tf.app.wiz.io/wizsec/wiz... - Installing tf.app.wiz.io/wizsec/wiz v1.24.8407... ╷ │ Error: Failed to install provider │ │ Error while installing tf.app.wiz.io/wizsec/wiz v1.24.8407: terraform-server-prod.s3.us-east-2.amazonaws.com: bad response code: 403 ╵ ``` ### Expected Behavior This should work :) in version < 1.11.0 it just works. ### Actual Behavior It fails with 403 on the HEAD request. ### Steps to Reproduce 1. Copy the following code: ```terraform terraform { required_providers { wiz = { source = "tf.app.wiz.io/wizsec/wiz" } } } provider "wiz" { client_id = "foo" client_secret = "bar" tenant_id = "baz" } ``` 2. Run `terraform init` with terraform version 1.11.x ### Additional Context _No response_ ### References _No response_ ### Generative AI / LLM assisted development? _No response_