Components Changelog

What​

• Fix bug in aws-config
• Enhance documentation to explain relationship of dns-primary and dns-delegated components and dns account
• [eks/actions-runner-controller] Add support for annotations and improve support for ephemeral storage

Why​

• Bugfix
• Customer query, supersedes and closes
• Better support for longer lived jobs

References​

• https://github.com/actions/actions-runner-controller/issues/2562

What​

• Update RDS Modules
• Allow disabling Monitoring Role

Why​

• Monitoring not always needed
• Context.tf Updates in modules

What​

• Add amplify component

Why​

• Terraform component to provision AWS Amplify apps, backend environments, branches, domain associations, and webhooks

References​

• https://aws.amazon.com/amplify

What​

• Added component for eks/ebs-controller

Why​

• Upstreaming this component for general use

References​

• n/a

What​

Added common question for GHA

Why​

This is asked frequently

References​

https://cloudposse.slack.com/archives/C04N39YPVAS/p1682355553255269

What​

Update aws-config command:

• Add teams command and suggest "aws-config-teams" file name instead of "aws-config-saml" because we want to use "aws-config-teams" for both SAML and SSO logins with Leapp handling the difference.
• Add help command
• Add more extensive help
• Do not rely on script generated by account-map for command main() function

Why​

• Reflect latest design pattern
• Improved user experience

What​

• added cloudtrail integration to athena
• conditionally allow audit account to decrypt kms key used for cloudtrail

Why​

• allow queries against cloudtrail logs from a centralized account (audit)

References​

n/a

What​

• format permission set roles with hyphens

Why​

• pretty Permission Set naming. We want devops-super to format to IdentityDevopsSuperTeamAccess

References​

https://github.com/cloudposse/refarch-scaffold/pull/127

What​

changed default value for bucket name to empty string not null

Why​

default bucket name should be empty string not null. Module checks against name length

References​

n/a

What​

• remove locals from modules/aws-team-roles

Why​

• breaks component when it tries to configure locals (the remote state for account_map isn't around)

What​

• Convert eks/cluster to aws-teams
• Add aws-sso support to eks/cluster
• Undo automatic allowance of identity aws-sso permission sets into account roles added in

Why​

• Keep in sync with other modules
• is a silent privilege escalation and not needed to accomplish desired goals

Why​

│ Error: Error in function call
│
│   on remote-state.tf line 10, in module "vpc_flow_logs_bucket":
│   10:   tenant      = coalesce(var.vpc_flow_logs_bucket_tenant_name, module.this.tenant)
│     ├────────────────
│     │ while calling coalesce(vals...)
│     │ module.this.tenant is ""
│     │ var.vpc_flow_logs_bucket_tenant_name is null
│
│ Call to function "coalesce" failed: no non-null, non-empty-string
│ arguments.

What​

• add acl var to cloudtrail-bucket component

Why​

• Creating new cloudtrail buckets will fail if the acl isn't set to private

References​

• This is part of a security update from AWS

What​

• [argocd-repo] Added ArgoCD git commit notifications

Why​

• ArgoCD sync deployment

What​

• [argocd] Added github commit status notifications

Why​

• ArgoCD sync deployment fix concurrent issue

What​

added missing provider version pins

Why​

missing provider versions, required for bats

References​

,

What​

• update datadog-lambda-forwarder module for darwin_arm64

Why​

• run on Darwin_arm64 hardware

What​

• missing bats requirements resolved

Why​

• PR missed a few bats requirements in submodules

References​

What​

• upgraded pattern for version pinning

Why​

• bats would fail for all of these components unless these versions are pinned as such

References​

• https://github.com/cloudposse/terraform-aws-components/pull/626