Releases: cloudposse-terraform-components/aws-security-hub
v1.535.4
Allow users to set component name in remote state @petabook (#39)
Allow users to set component name in remote state.- Defined the input variable
account_map_component_name
. - Variable defaults to preserving the behavior of the current version.
- Remote state uses this variable to pull in the state of the component.
- This update allows the codebase to adopt more standardized structure and naming practices.
Summary by CodeRabbit
- New Features
- The account-map component name is now configurable via a new input variable (default: "account-map"), allowing environment-specific naming without code changes.
- Remote-state configuration now consumes this variable while preserving existing behavior by default for seamless upgrades.
- No other parameters were changed; no downtime or plan changes expected unless you override the default.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#40)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Update README.yaml wiht AI @goruha (#38)
## what - Update README.yamlwhy
- Use atmos to generate readme
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#37)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.42.0 @[renovate[bot]](https://github.com/apps/renovate) (#36)
This PR contains the following updates:Package | Type | Update | Change |
---|---|---|---|
terraform-linters/tflint-ruleset-aws | plugin | minor | 0.41.0 -> 0.42.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.42.0
What's Changed
Breaking Changes
- Remove aws_guardduty_member_invalid_email rule by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/925
- This auto-generated rule had invalid regexp.
Chores
- Bump the aws-sdk group with 7 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9244
Full Changelog: terraform-linters/tflint-ruleset-aws@v0.41.0...v0.42.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
v1.535.3
🚀 Enhancements
Typo Fixes @Musthaq101 (#34)
## what * Typo fixes in the variables.tf & main.tfwhy
- Typo fixes in the variables.tf & main.tf
references
- Link to any supporting github issues or helpful documentation to add some context (e.g. stackoverflow).
- Use
closes #123
, if this PR closes a GitHub issue#123
Summary by CodeRabbit
- Bug Fixes
- Corrected a typo in the default value for the event rule pattern detail type to display "Security Hub Findings - Imported" as intended.
- Fixed a minor comment typo for improved clarity in documentation.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#35)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.41.0 @[renovate[bot]](https://github.com/apps/renovate) (#33)
This PR contains the following updates:Package | Type | Update | Change |
---|---|---|---|
terraform-linters/tflint-ruleset-aws | plugin | minor | 0.40.0 -> 0.41.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.41.0
What's Changed
Breaking Changes
- fix: update mappings for AWS Provider v6 compatibility by @bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/902
Enhancements
- Update AWS provider/module and generated content by @github-actions[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8888
- Update AWS provider/module and generated content by @github-actions[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9199
Chores
- Bump the aws-sdk group with 2 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8877
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.222.0 to 1.224.0 in the aws-sdk group by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8899
- Bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8911
- Bump the aws-sdk group with 6 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8922
- Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.64 to 2.0.0-beta.65 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8900
- Bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8944
- Bump the aws-sdk group with 7 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8955
- Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8966
- Bump the aws-sdk group with 7 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/8977
- Bump the aws-sdk group with 4 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9055
- Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9066
- Clarify README by @excavator-matt in https://github.com/terraform-linters/tflint-ruleset-aws/pull/907
- Bump the aws-sdk group with 3 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9088
- Bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9099
- Bump github.com/hashicorp/hcl/v2 from 2.23.0 to 2.24.0 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9100
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.230.0 to 1.231.0 in the aws-sdk group by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9111
- Bump the aws-sdk group with 7 updates by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9144
- Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9155
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.233.1 to 1.236.0 in the aws-sdk group by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9166
- Bump github.com/aws/smithy-go from 1.22.4 to 1.22.5 by @dependabot[bot] inhttps://github.com/terraform-linters/tflint-ruleset-aws/pull/9177
- Draw attention to rules disabled by default by @excavator-matt in https://github.com/terraform-linters/tflint-ruleset-aws/pull/918
- Remove unneeded repository info from goreleaser.yml by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/920
New Contributors
- @excavator-matt made their first contribution in https://github.com/terraform-linters/tflint-ruleset-aws/pull/907
Full Changelog: terraform-linters/tflint-ruleset-aws@v0.40.0...v0.41.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
v1.535.2
chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#30)
This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.src/versions.tf
: Updated the version constraint for theaws
provider to>= 4.9.0, < 6.0.0
to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#31)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Enable merge queue @goruha (#29)
## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners fileswhy
- Support auto merge PRs
- Create merge queue
- Implement new CodeOwners policy
Enable merge queue @goruha (#28)
## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners fileswhy
- Support auto merge PRs
- Create merge queue
- Implement new CodeOwners policy
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#6)
This PR contains the following updates:Package | Type | Update | Change |
---|---|---|---|
terraform-linters/tflint-ruleset-aws | plugin | minor | 0.23.1 -> 0.40.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.40.0
What's Changed
Enhancements
- feat: warn against data sources with ephemeral alternatives by @aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
- rules: Update Lambda deprecated runtimes by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
- Update AWS provider/module and generated content by @github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870
Chores
- Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
- Bump the aws-sdk group with 3 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
- Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
- docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
- Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
- Bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
- Bump the aws-sdk group with 2 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
- Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
- Bump the aws-sdk group with 3 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/882
- Bump github.com/hashicorp/terraform-json from 0.24.0 to 0.25.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/884
Full Changelog: terraform-linters/tflint-ruleset-aws@v0.39.0...v0.40.0
v0.39.0
What's Changed
Enhancements
- Update AWS provider/module and generated content by @github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/840
- Add
aws_iam_role_deprecated_policy_attributes
rule by @alexjfisher in https://github.com/terraform-linters/tflint-ruleset-aws/pull/833 aws_write_only_arguments
: recommend write-only arguments where available by @aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/860- Update AWS provider/module and generated content by @github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/855
Bug Fixes
- provider_missing_default_tags: correctly handle unknown values by @bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/851
Chores
- Bump the aws-sdk group with 7 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/839
- Bump golang.org/x/net from 0.35.0 to 0.37.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/842
- Bump the aws-sdk group with 7 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/841
- Bump the aws-sdk group with 2 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/845
- Pin GitHub Action versions by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/846
- Bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/847
- Bump the aws-sdk group with 2 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/848
- Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.62 to 2.0.0-beta.63 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/849
- Bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/853
- Bump the aws-sdk group with 3 updates...
v1.535.1
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#26)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#25)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#24)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/stack-config/yaml to v1.8.0 @[renovate[bot]](https://github.com/apps/renovate) (#4)
This PR contains the following updates:Package | Type | Update | Change |
---|---|---|---|
cloudposse/stack-config/yaml (source) | module | minor | 1.5.0 -> 1.8.0 |
Release Notes
cloudposse/terraform-yaml-stack-config (cloudposse/stack-config/yaml)
v1.8.0
: [remote-state] Improve backend compatibility
Among other things detailed below, this release enables users to fix deprecation warnings like:
│ Warning: Deprecated Parameters
│
│ with module.account_map.data.terraform_remote_state.data_source[0],
│ on .terraform/modules/account_map/modules/remote-state/data-source.tf line 88, in data "terraform_remote_state" "data_source":
│ 88: data "terraform_remote_state" "data_source" {
│
│ The following parameters have been deprecated. Replace them as follows:
│ * role_arn -> assume_role.role_arn
If you are receiving deprecation warnings from remote-state, they can now be resolved by updating your backend
/remote_state_backend
configuration to match the version of Terraform or Tofu you are using. For example, change
terraform:
backend:
s3:
bucket: my-tfstate-bucket
dynamodb_table: my-tfstate-lock-table
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
remote_state_backend:
s3:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role
to
terraform:
backend:
s3:
bucket: my-tfstate-bucket
dynamodb_table: my-tfstate-lock-table
assume_role:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
remote_state_backend:
s3:
assume_role:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role
🚀 Enhancements
[remote-state] Improve backend compatibility @Nuru (#105)
what
- Improve remote-state backend compatibility
Rather than trying to parse the backend configuration, as a general rule we now just pass it through to the data source. This provides future-proof compatibility with all backends supported by Terraform and OpenTofu.
why
- This prevents the need for updates like #99 to provide configuration for future S3 backends, while eliminating compatibility issues like #102.
- This also eliminates deprecation warnings caused by forcing configuration to look a certain way.
- Now, users can manage their own remote state configuration to match their toolset.
references
- Closes #102
v1.7.0
: (not recommended)
feat: support for gcs backends @burnzy (#95)
what
Simple change to add support for GCS backends
why
Allows GCP users (users with gcs backends) to make use of this remote-state module for sharing data between components.
references
🚀 Enhancements
Support local backend @Nuru (#104)
what
- Support retrieving remote state from local backends
- NOTE: Using relative paths in local backends is tricky, because the path needs to resolve to the same directory from the source root module directory as from the client root module directory.
- Fix Terratests
- The
spacelift
test suite is broken, and we never previously required it to work, so it is now skipped
- The
- Update test suite to use
go
v1.21 and update dependencies
why
🤖 Automatic Updates
Bump the go_modules group in /test/src with 5 updates @dependabot (#94)
Bumps the go_modules group in /test/src with 5 updates:Package | From | To |
---|---|---|
github.com/hashicorp/go-getter | 1.7.1 |
1.7.5 |
golang.org/x/crypto | 0.1.0 |
0.17.0 |
golang.org/x/net | 0.8.0 |
0.10.0 |
google.golang.org/grpc | 1.51.0 |
1.56.3 |
google.golang.org/protobuf | 1.28.1 |
1.30.0 |
Updates github.com/hashicorp/go-getter
from 1.7.1 to 1.7.5
Release notes
Sourced from github.com/hashicorp/go-getter's releases.
v1.7.5
What's Changed
- Prevent Git Config Alteration on Git Update by
@dduzgun-security
in hashicorp/go-getter#497New Contributors
@dduzgun-security
made their first contribution in hashicorp/go-getter#497Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.4...v1.7.5
v1.7.4
What's Changed
- Escape user-provided strings in
git
commands hashicorp/go-getter#483- Fixed a bug in
.netrc
handling if the file does not exist hashicorp/go-getter#433Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.3...v1.7.4
v1.7.3
What's Changed
- SEC-090: Automated trusted workflow pinning (2023-04-21) by
@hashicorp-tsccr
in hashicorp/go-getter#432- SEC-090: Automated trusted workflow pinning (2023-09-11) by
@hashicorp-tsccr
in hashicorp/go-getter#454- SEC-090: Automated trusted workflow pinning (2023-09-18) by