Skip to content

community.aws 1.5.0

Compare
Choose a tag to compare
@github-actions github-actions released this 10 Aug 18:33
· 969 commits to main since this release
0d9c263

Minor Changes

  • aws_config_aggregator - Fix typos in attribute names (#553).
  • aws_glue_connection - Added multple connection types (#503).
  • aws_glue_connection - Added support for check mode (#503).
  • aws_glue_job - added number_of_workers, worker_type and glue_version attributes to the module (#370).
  • aws_region_info - Add retries on common AWS failures (#422).
  • aws_s3_bucket_info - new module options name, name_filter, bucket_facts and transform_location (#260).
  • aws_ssm connection plugin - add support for specifying a profile to be used when connecting (#278).
  • aws_ssm_parameter_store - added tier parameter option (ansible/ansible#59738).
  • ec2_asg module - add support for all mixed_instances_policy parameters (#231).
  • ec2_asg_info - gather information about asg lifecycle hooks (#233).
  • ec2_instance - wait for new instances to return a status before attempting to set additional parameters (#533).
  • ec2_instance_info - add retries on common AWS failures (#521).
  • ec2_launch_template - added metadata_options parameter to support changing the IMDS configuration for instances (#322).
  • ec2_metric_alarm - Added support for check mode (#470).
  • ec2_metric_alarm - Made unit parameter optional (#470).
  • ec2_vpc_egress_igw - Add retries on common AWS failures (#421).
  • ec2_vpc_endpoint - Add retries on common AWS failures. (#473)
  • ec2_vpc_endpoint - Added support for specifying vpc_endpoint_type (#460).
  • ec2_vpc_endpoint - The module now supports tagging endpoints. (#473)
  • ec2_vpc_endpoint - The module will now lookup existing endpoints and try to match on the provided parameters before creating a new endpoint for better idempotency. (#473)
  • ec2_vpc_endpoint_info - ensure paginated endpoint description is retried on common AWS failures (#537).
  • ec2_vpc_endpoint_info - use boto3 paginator when fetching services (#537).
  • ec2_vpc_endpoint_service_info - new module added for fetching information about available VPC endpoint services (#346).
  • ec2_vpc_nacl - add support for IPv6 (#398).
  • ec2_vpc_nat_gateway - add AWSRetry decorators to improve reliability (#427).
  • ec2_vpc_nat_gateway - code cleaning (#445)
  • ec2_vpc_nat_gateway - imporove documentation (#445)
  • ec2_vpc_nat_gateway - improve error handling (#445)
  • ec2_vpc_nat_gateway - use custom waiters to manage NAT gateways states (deleted and available) (#445)
  • ec2_vpc_nat_gateway - use pagination on describe calls to ensure all results are fetched (#427).
  • ec2_vpc_nat_gateway_info - Add paginator (#472).
  • ec2_vpc_nat_gateway_info - Improve documentation (#472).
  • ec2_vpc_nat_gateway_info - Improve error handling (#472)
  • ec2_vpc_nat_gateway_info - Use normalize_boto3_result (#472)
  • ec2_vpc_nat_gateway_info - solve RequestLimitExceeded error by adding retry decorator (#446)
  • ec2_vpc_peer - More return info added, also simplified module code a bit and extended tests (#355)
  • ec2_vpc_peer - add support for waiting on state changes (#501).
  • ec2_vpc_peering_info - add vpc_peering_connections return value to be consistent with boto3 modules (#501).
  • ec2_vpc_peering_info - add retries on common AWS failures (#536).
  • ec2_vpc_route_table - add AWSRetry decorators to improve reliability (#442).
  • ec2_vpc_route_table - add boto3 pagination for some searches (#442).
  • ec2_vpc_route_table_info - migrate to boto3 (#442).
  • ec2_vpc_vgw - Add automatic retries for recoverable errors (#162).
  • ec2_vpc_vpn - Add automatic retries for recoverable errors (#162).
  • ecs_service - Add platform_version parameter to ecs_service (#353).
  • ecs_task - added assign_public_ip option for network_configuration (#395).
  • ecs_taskdefinition - Documentation improvement (#520)
  • elasticache - Improve docs a little, add intgration tests (#410).
  • elb_classic_info - If the provided load balancer doesn't exist, return an empty list instead of throwing an error. (#215).
  • elb_target_group - Add elb target group attributes stickiness_app_cookie_name and stickiness_app_cookie_duration_seconds. Also update docs for stickiness_type to mention application cookie (#548)
  • iam - Make iam module more predictable when returning the user_name it creates or deletes (#369).
  • iam_saml_federation - module now returns the state of the provider when no changes are made (#419).
  • kinesis_stream - check_mode is now based on the live settings rather than comparisons with a hard coded/fake stream definition (#27).
  • kinesis_stream - now returns changed more accurately (#27).
  • kinesis_stream - now returns tags consistently (#27).
  • kinesis_stream - return values are now the same format when working with both encrypted and un-encrypted streams (#27).
  • lambda_alias - add retries on common AWS failures (#396).
  • lambda_alias - use common helper functions to create AWS connections (#396).
  • lambda_alias - use common helper functions to perform snake_case to CamelCase conversions (#396).
  • rds_instance - new purge_security_groups parameter (#385).
  • rds_param_group - Add AWSRetry (#532).
  • rds_param_group - Fix integration tests (#532).
  • rds_param_group - Support check_mode (#532).
  • rds_snapshot - added to the aws module_defaults group (#515).
  • route53 - fixes AWS API error when attempting to create Alias records (#434).
  • s3_lifecycle - Add a wait parameter to wait for changes to propagate after being set (#448).
  • s3_lifecycle - Add retries on common AWS failures (#448).
  • s3_lifecycle - Fix idempotency when using dates instead of days (#448).
  • s3_logging - added support for check_mode (#447).
  • s3_logging - migrated from boto to boto3 (#447).
  • s3_sync - new storage_class feature allowing to specify the storage class when any object is added to an S3 bucket (#358).
  • sanity tests - add ignore.txt for 2.12 (#527).
  • state_machine_arn - return state_machine_arn when state is unchanged (#302).

Deprecated Features

  • ec2_vpc_endpoint_info - the query option has been deprecated and will be removed after 2022-12-01 (#346). The ec2_vpc_endpoint_info now defaults to listing information about endpoints. The ability to search for information about available services has been moved to the dedicated module ec2_vpc_endpoint_service_info.

Security Fixes

  • aws_direct_connect_virtual_interface - mark the authentication_key parameter as no_log to avoid accidental leaking of secrets in logs (#475).
  • aws_secret - flag the secret parameter as containing sensitive data which shouldn't be logged (#471).
  • sts_assume_role - mark the mfa_token parameter as no_log to avoid accidental leaking of secrets in logs (#475).
  • sts_session_token - mark the mfa_token parameter as no_log to avoid accidental leaking of secrets in logs (#475).

Bugfixes

  • aws_ssm - Adds destructor to SSM connection plugin to ensure connections are properly cleaned up after usage (#542).
  • aws_ssm - enable aws ssm connections if AWS_SESSION_TOKEN is missing (#535).
  • cloudtrail - fix always reporting changed = true when kms alias used (#506).
  • cloudtrail - fix lower casing of tag keys (#506).
  • ec2_asg - fix target group update logic (#493).
  • ec2_instance - ensure that termination protection isn't modified when using check_mode (ansible/ansible#67716).
  • ec2_instance - fix key errors when instance has no tags (#476).
  • ec2_launch_template - ensure that empty parameters are properly removed before passing to AWS (#230).
  • ec2_launch_template - fixes parameter validation failure when passing a instance profile ARN instead of just the role name (#371).
  • ec2_vpc_peer - fix idempotency when rejecting and deleting peering connections (#501).
  • ec2_vpc_route_table - catch RouteAlreadyExists error when rerunning same task twice to make module idempotent (#357).
  • elasticache - Fix KeyError issue when updating security group (#410).
  • kinesis_stream - fixed issue where streams get marked as changed even if no encryption actions were necessary (ansible/ansible#65928).
  • rds_instance - fixes bug preventing the use of tags when creating an RDS instance from a snapshot (#530).
  • route53 - ensure that the old return values are re-added along side the new ones (#523).
  • route53 - fix AttributeError in get_zone_id_by_name when a vpc_id on a private zone is provided (#509).
  • route53 - fix handling for characters escaped by AWS in record names, like * and @. This fixes idempotency for such record names (#524).
  • route53 - fix when using state=get on private DNS zones and add tests to cover this scenario (#424).
  • route53 - make sure that CAA values order is again ignored during idempotency comparsion (#524).
  • sns_topic - Add + to allowable characters in SMS endpoints (#454).
  • sqs_queue - fix UnboundLocalError when passing a boolean parameter (#172).

New Modules

  • ec2_vpc_endpoint_service_info - retrieves AWS VPC endpoint service details
  • wafv2_ip_set - wafv2_ip_set
  • wafv2_ip_set_info - Get information about wafv2 ip sets
  • wafv2_resources - wafv2_web_acl
  • wafv2_resources_info - wafv2_resources_info
  • wafv2_rule_group - wafv2_web_acl
  • wafv2_rule_group_info - wafv2_web_acl_info
  • wafv2_web_acl - wafv2_web_acl
  • wafv2_web_acl_info - wafv2_web_acl