@MatthewSchuchard - thanks for the info, I tested with TF_LOG=DEBUG on the 'apply' and it does in fact log all service endpoints being used:
2025-01-09T05:46:15.8225045Z http.url=https://ec2.***.amazonaws.com/
2025-01-09T05:47:45.0451008Z http.url=https://elasticloadbalancing.***.amazonaws.com/
2025-01-09T05:48:47.0780261Z http.url=https://rds-fips.***.amazonaws.com/
...in this example I had only changed certain providers over.