community.aws 1.5.0
Minor Changes
- aws_config_aggregator - Fix typos in attribute names (#553).
- aws_glue_connection - Added multple connection types (#503).
- aws_glue_connection - Added support for check mode (#503).
- aws_glue_job - added
number_of_workers
,worker_type
andglue_version
attributes to the module (#370). - aws_region_info - Add retries on common AWS failures (#422).
- aws_s3_bucket_info - new module options
name
,name_filter
,bucket_facts
andtransform_location
(#260). - aws_ssm connection plugin - add support for specifying a profile to be used when connecting (#278).
- aws_ssm_parameter_store - added tier parameter option (ansible/ansible#59738).
- ec2_asg module - add support for all mixed_instances_policy parameters (#231).
- ec2_asg_info - gather information about asg lifecycle hooks (#233).
- ec2_instance - wait for new instances to return a status before attempting to set additional parameters (#533).
- ec2_instance_info - add retries on common AWS failures (#521).
- ec2_launch_template - added
metadata_options
parameter to support changing the IMDS configuration for instances (#322). - ec2_metric_alarm - Added support for check mode (#470).
- ec2_metric_alarm - Made
unit
parameter optional (#470). - ec2_vpc_egress_igw - Add retries on common AWS failures (#421).
- ec2_vpc_endpoint - Add retries on common AWS failures. (#473)
- ec2_vpc_endpoint - Added support for specifying
vpc_endpoint_type
(#460). - ec2_vpc_endpoint - The module now supports tagging endpoints. (#473)
- ec2_vpc_endpoint - The module will now lookup existing endpoints and try to match on the provided parameters before creating a new endpoint for better idempotency. (#473)
- ec2_vpc_endpoint_info - ensure paginated endpoint description is retried on common AWS failures (#537).
- ec2_vpc_endpoint_info - use boto3 paginator when fetching services (#537).
- ec2_vpc_endpoint_service_info - new module added for fetching information about available VPC endpoint services (#346).
- ec2_vpc_nacl - add support for IPv6 (#398).
- ec2_vpc_nat_gateway - add AWSRetry decorators to improve reliability (#427).
- ec2_vpc_nat_gateway - code cleaning (#445)
- ec2_vpc_nat_gateway - imporove documentation (#445)
- ec2_vpc_nat_gateway - improve error handling (#445)
- ec2_vpc_nat_gateway - use custom waiters to manage NAT gateways states (deleted and available) (#445)
- ec2_vpc_nat_gateway - use pagination on describe calls to ensure all results are fetched (#427).
- ec2_vpc_nat_gateway_info - Add paginator (#472).
- ec2_vpc_nat_gateway_info - Improve documentation (#472).
- ec2_vpc_nat_gateway_info - Improve error handling (#472)
- ec2_vpc_nat_gateway_info - Use normalize_boto3_result (#472)
- ec2_vpc_nat_gateway_info - solve RequestLimitExceeded error by adding retry decorator (#446)
- ec2_vpc_peer - More return info added, also simplified module code a bit and extended tests (#355)
- ec2_vpc_peer - add support for waiting on state changes (#501).
- ec2_vpc_peering_info - add
vpc_peering_connections
return value to be consistent with boto3 modules (#501). - ec2_vpc_peering_info - add retries on common AWS failures (#536).
- ec2_vpc_route_table - add AWSRetry decorators to improve reliability (#442).
- ec2_vpc_route_table - add boto3 pagination for some searches (#442).
- ec2_vpc_route_table_info - migrate to boto3 (#442).
- ec2_vpc_vgw - Add automatic retries for recoverable errors (#162).
- ec2_vpc_vpn - Add automatic retries for recoverable errors (#162).
- ecs_service - Add
platform_version
parameter toecs_service
(#353). - ecs_task - added
assign_public_ip
option for network_configuration (#395). - ecs_taskdefinition - Documentation improvement (#520)
- elasticache - Improve docs a little, add intgration tests (#410).
- elb_classic_info - If the provided load balancer doesn't exist, return an empty list instead of throwing an error. (#215).
- elb_target_group - Add elb target group attributes
stickiness_app_cookie_name
andstickiness_app_cookie_duration_seconds
. Also update docs for stickiness_type to mention application cookie (#548) - iam - Make iam module more predictable when returning the
user_name
it creates or deletes (#369). - iam_saml_federation - module now returns the state of the provider when no changes are made (#419).
- kinesis_stream - check_mode is now based on the live settings rather than comparisons with a hard coded/fake stream definition (#27).
- kinesis_stream - now returns changed more accurately (#27).
- kinesis_stream - now returns tags consistently (#27).
- kinesis_stream - return values are now the same format when working with both encrypted and un-encrypted streams (#27).
- lambda_alias - add retries on common AWS failures (#396).
- lambda_alias - use common helper functions to create AWS connections (#396).
- lambda_alias - use common helper functions to perform snake_case to CamelCase conversions (#396).
- rds_instance - new
purge_security_groups
parameter (#385). - rds_param_group - Add AWSRetry (#532).
- rds_param_group - Fix integration tests (#532).
- rds_param_group - Support check_mode (#532).
- rds_snapshot - added to the aws module_defaults group (#515).
- route53 - fixes AWS API error when attempting to create Alias records (#434).
- s3_lifecycle - Add a
wait
parameter to wait for changes to propagate after being set (#448). - s3_lifecycle - Add retries on common AWS failures (#448).
- s3_lifecycle - Fix idempotency when using dates instead of days (#448).
- s3_logging - added support for check_mode (#447).
- s3_logging - migrated from boto to boto3 (#447).
- s3_sync - new
storage_class
feature allowing to specify the storage class when any object is added to an S3 bucket (#358). - sanity tests - add ignore.txt for 2.12 (#527).
- state_machine_arn - return
state_machine_arn
when state is unchanged (#302).
Deprecated Features
- ec2_vpc_endpoint_info - the
query
option has been deprecated and will be removed after 2022-12-01 (#346). The ec2_vpc_endpoint_info now defaults to listing information about endpoints. The ability to search for information about available services has been moved to the dedicated moduleec2_vpc_endpoint_service_info
.
Security Fixes
- aws_direct_connect_virtual_interface - mark the
authentication_key
parameter asno_log
to avoid accidental leaking of secrets in logs (#475). - aws_secret - flag the
secret
parameter as containing sensitive data which shouldn't be logged (#471). - sts_assume_role - mark the
mfa_token
parameter asno_log
to avoid accidental leaking of secrets in logs (#475). - sts_session_token - mark the
mfa_token
parameter asno_log
to avoid accidental leaking of secrets in logs (#475).
Bugfixes
- aws_ssm - Adds destructor to SSM connection plugin to ensure connections are properly cleaned up after usage (#542).
- aws_ssm - enable aws ssm connections if AWS_SESSION_TOKEN is missing (#535).
- cloudtrail - fix always reporting changed = true when kms alias used (#506).
- cloudtrail - fix lower casing of tag keys (#506).
- ec2_asg - fix target group update logic (#493).
- ec2_instance - ensure that termination protection isn't modified when using check_mode (ansible/ansible#67716).
- ec2_instance - fix key errors when instance has no tags (#476).
- ec2_launch_template - ensure that empty parameters are properly removed before passing to AWS (#230).
- ec2_launch_template - fixes parameter validation failure when passing a instance profile ARN instead of just the role name (#371).
- ec2_vpc_peer - fix idempotency when rejecting and deleting peering connections (#501).
- ec2_vpc_route_table - catch RouteAlreadyExists error when rerunning same task twice to make module idempotent (#357).
- elasticache - Fix
KeyError
issue when updating security group (#410). - kinesis_stream - fixed issue where streams get marked as changed even if no encryption actions were necessary (ansible/ansible#65928).
- rds_instance - fixes bug preventing the use of tags when creating an RDS instance from a snapshot (#530).
- route53 - ensure that the old return values are re-added along side the new ones (#523).
- route53 - fix
AttributeError
inget_zone_id_by_name
when a vpc_id on a private zone is provided (#509). - route53 - fix handling for characters escaped by AWS in record names, like
*
and@
. This fixes idempotency for such record names (#524). - route53 - fix when using
state=get
on private DNS zones and add tests to cover this scenario (#424). - route53 - make sure that CAA values order is again ignored during idempotency comparsion (#524).
- sns_topic - Add
+
to allowable characters in SMS endpoints (#454). - sqs_queue - fix UnboundLocalError when passing a boolean parameter (#172).
New Modules
- ec2_vpc_endpoint_service_info - retrieves AWS VPC endpoint service details
- wafv2_ip_set - wafv2_ip_set
- wafv2_ip_set_info - Get information about wafv2 ip sets
- wafv2_resources - wafv2_web_acl
- wafv2_resources_info - wafv2_resources_info
- wafv2_rule_group - wafv2_web_acl
- wafv2_rule_group_info - wafv2_web_acl_info
- wafv2_web_acl - wafv2_web_acl
- wafv2_web_acl_info - wafv2_web_acl