community.aws 2.1.0

Minor Changes

• aws_config_delivery_channel - replaced use of deprecated backoff decorator (#764).
• aws_direct_connect_confirm_connection - replaced use of deprecated backoff decorator (#764).
• aws_direct_connect_connection - replaced use of deprecated backoff decorator (#764).
• aws_direct_connect_link_aggregation_group - replaced use of deprecated backoff decorator (#764).
• aws_direct_connect_virtual_interface - replaced use of deprecated backoff decorator (#764).
• aws_inspector_target - replaced use of deprecated backoff decorator (#764).
• aws_kms - add support for kms_spec and kms_usage parameter (#774).
• aws_kms - replaced use of deprecated backoff decorator (#764).
• aws_kms_info - replaced use of deprecated backoff decorator (#764).
• cloudformation_stack_set - replaced use of deprecated backoff decorator (#764).
• cloudfront_distribution - add TLSv1.2_2021 security policy for viewer connections (#707).
• dms_endpoint - replaced use of deprecated backoff decorator (#764).
• dms_replication_subnet_group - replaced use of deprecated backoff decorator (#764).
• dynamodb_table - add support for setting the billing_mode option (#753).
• dynamodb_table - the module has been updated to use the boto3 AWS SDK (#726).
• ec2_asg - replaced use of deprecated backoff decorator (#764).
• ec2_eip - added support for tagging EIPs (#332).
• ec2_eip_info - added automatic retries for common temporary API failures (#332).
• ec2_eip_info - added support for tagging EIPs (#332).
• ec2_elb_info - replaced use of deprecated backoff decorator (#764).
• ec2_win_password - module updated to use the boto3 AWS SDK (#759).
• ecs_service - added support for forcing deletion of a service (#228).
• ecs_service_info - replaced use of deprecated backoff decorator (#764).
• ecs_taskdefinition - add placement_constraints option (#741).
• efs - add transition_to_ia parameter to support specifying the number of days before transitioning data to inactive storage (#522).
• elb_instance - added new updated_elbs return value (#773).
• elb_instance - the module has been migrated to the boto3 AWS SDK (#773).
• elb_target_group - add preserve_client_ip_enabled option (#670).
• elb_target_group - add proxy_protocol_v2_enabled option (#670).
• iam_managed_policy - replaced use of deprecated backoff decorator (#764).
• iam_role - Added wait option for IAM role creation / updates (#767).
• iam_saml_federation - replaced use of deprecated backoff decorator (#764).
• iam_server_certificate - add support for check_mode (#737).
• iam_server_certificate - migrate module to using the boto3 SDK (#737).
• lambda_info - add automatic retries for recoverable errors (#777).
• lambda_info - add support for tags (#375).
• lambda_info - use paginator for list queries (#777).
• rds - replaced use of deprecated backoff decorator (#764).
• redshift_subnet_group - added support for check_mode (#724).
• redshift_subnet_group - the group_description option has been renamed to description and is now optional. The old parameter name will continue to work (#724).
• redshift_subnet_group - the group_subnets option has been renamed to subnets and is now only required when creating a new group. The old parameter name will continue to work (#724).
• redshift_subnet_group - the module has been migrated to the boto3 AWS SDK (#724).
• route53_health_check - add support for tagging health checks (#765).
• route53_health_check - added support for check_mode (#734).
• route53_health_check - added support for disabling health checks (#756).
• route53_health_check - migrated to boto3 SDK (#734).
• route53_zone - add support for tagging Route 53 zones (#565).
• sqs_queue - Providing a kms_master_key_id will now enable SSE properly (#762)

Deprecated Features

• dynamodb_table - DynamoDB does not support specifying non-key-attributes when creating an ALL index. Passing includes for such indexes is currently ignored but will result in failures after version 3.0.0 (#726).
• dynamodb_table - DynamoDB does not support updating the primary indexes on a table. Attempts to make such changes are currently ignored but will result in failures after version 3.0.0 (#726).
• elb_instance - setting of the ec2_elb fact has been deprecated and will be removed in release 4.0.0 of the collection. See the module documentation for an alternative example using the register keyword (#773).
• iam_cert - the iam_cert module has been renamed to iam_server_certificate for consistency with the companion iam_server_certificate_info module. The usage of the module has not changed. The iam_cert alias will be removed in version 4.0.0 (#728).
• iam_server_certificate - Passing file names to the cert, chain_cert and key parameters has been deprecated. We recommend using a lookup plugin to read the files instead, see the documentation for an example (#735).
• iam_server_certificate - the default value for the dup_ok parameter is currently false, in version 4.0.0 this will be updated to true. To preserve the current behaviour explicitly set the dup_ok parameter to false (#737).
• rds_snapshot - the rds_snapshot module has been renamed to rds_instance_snapshot. The usage of the module has not changed. The rds_snapshot alias will be removed in version 4.0.0 (#783).

Bugfixes

• AWS action group - added missing aws_direct_connect_confirm_connection and efs_tag entries (ansible-collections/amazon.aws#557).
• cloudfront_info - Switch to native boto3 paginators to fix reported bug when over 100 distributions exist (#769).
• ec2_eip - fix bug when allocating an EIP but not associating it to a VPC (#731).
• elb_classic_lb_info - fix empty list returned when names not defined (#693).
• elb_instance - Python 3 compatibility fix (#384).
• iam_role_info - switch to jittered backoff to reduce rate limiting failures (#748).
• rds_instance - Fixed issue with enabling enhanced monitoring on a pre-existing RDS instance (#747).
• route53 - add missing set identifier in resource_record_set (#595).
• route53 - fix diff mode when deleting records (#802).
• route53 - return empty result for nonexistent records (#799).
• sns_topic ...

community.aws 2.0.0

Major Changes

• community.aws collection - The community.aws collection has dropped support for botocore<1.18.0 and boto3<1.15.0 (#711). Most modules will continue to work with older versions of the AWS SDK, however compatibility with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (ansible-collections/amazon.aws#442).

Minor Changes

• aws_eks_cluster - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• aws_kms_info - use a generator rather than list comprehension (#688).
• aws_s3_bucket_info - added test for botocore>=1.18.11 when attempting to fetch bucket ownership controls (#682)
• aws_ses_rule_set - use a generator rather than list comprehension (#688).
• aws_sgw_info - ensure module runs in check_mode (#659).
• cloudformation_exports_info - ensure module runs in check_mode (#659).
• cloudformation_stack_set - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• cloudfront_info - ensure module runs in check_mode (#659).
• cloudwatchevent_rule - use a generator rather than list comprehension (#688).
• dynamodb_table - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• dynamodb_ttl - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_ami_copy - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_asg - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_asg_info - ensure module runs in check_mode (#659).
• ec2_launch_template - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_lc_info - ensure module runs in check_mode (#659).
• ec2_transit_gateway - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_transit_gateway_info - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_vpc_peer - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ec2_vpc_peer - use shared code for tagging peering connections (#614).
• ec2_vpc_route_table - use shared code for tagging route tables (#616).
• ec2_vpc_vgw - fix arguments-renamed pylint issue (#686).
• ec2_vpc_vpn - fix arguments-renamed pylint issue (#686).
• ecs_ecr - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ecs_service - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ecs_task - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• ecs_task - remove unused import (#686).
• ecs_taskdefinition - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• efs - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• efs_info - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• elasticache_subnet_group - add return values (#723).
• elasticache_subnet_group - add support for check_mode (#723).
• elasticache_subnet_group - module migrated to boto3 AWS SDK (#723).
• elb_application_lb - added ip_address_type parameter to support changing application load balancer configuration (#499).
• elb_application_lb_info - added ip_address_type in output when gathering application load balancer parameters (#499).
• elb_instance - make elb_instance idempotent when deregistering instances. Merged from ec2_elb U(ansible/ansible#31660).
• elb_network_lb - added ip_address_type parameter to support changing network load balancer configuration (#499).
• elb_target_group - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• elb_target_group - use a generator rather than list comprehension (#688).
• iam - use a generator rather than list comprehension (#688).
• iam_group - use a generator rather than list comprehension (#688).
• iam_mfa_device_info - ensure module runs in check_mode (#659).
• iam_role - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• iam_role - use a generator rather than list comprehension (#688).
• iam_server_certificate_info - ensure module runs in check_mode (#659).
• iam_user - use a generator rather than list comprehension (#688).
• kms_info - added a new keys_attr parameter to continue returning the key details in the keys attribute as well as the kms_keys attribute (#648).
• lambda - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• rds_instance - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• rds_instance - convert preferred_maintenance_window days into lowercase so changed returns properly (#516).
• rds_instance - use a generator rather than list comprehension (#688).
• route53 - add rate-limiting retries while waiting for changes to propagate (#564).
• route53 - add retries on PriorRequestNotComplete errors (#564).
• route53 - update retry max_delay setting so that it can be set above 60 seconds (#564).
• sns_topic - Added topic_type parameter to select type of SNS topic (either FIFO or Standard) (#599).
• sqs_queue - Tests for compatibility with older versions of the AWS SDKs have been removed (#675).
• various community.aws modules - remove unused imports (#629)
• wafv2_resources_info - ensure module runs in check_mode (#659).
• wafv2_web_acl_info - ensure module runs in check_mode (#659).

Breaking Changes / Porting Guide

• ec2_instance - The module has been migrated to the amazon.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_instance.
• ec2_instance_info - The module has been migrated to the amazon.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_instance_info.
• ec2_vpc_endpoint - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_endpoint.
• ec2_vpc_endpoint_facts - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated...

community.aws 1.5.0

Minor Changes

• aws_config_aggregator - Fix typos in attribute names (#553).
• aws_glue_connection - Added multple connection types (#503).
• aws_glue_connection - Added support for check mode (#503).
• aws_glue_job - added number_of_workers, worker_type and glue_version attributes to the module (#370).
• aws_region_info - Add retries on common AWS failures (#422).
• aws_s3_bucket_info - new module options name, name_filter, bucket_facts and transform_location (#260).
• aws_ssm connection plugin - add support for specifying a profile to be used when connecting (#278).
• aws_ssm_parameter_store - added tier parameter option (ansible/ansible#59738).
• ec2_asg module - add support for all mixed_instances_policy parameters (#231).
• ec2_asg_info - gather information about asg lifecycle hooks (#233).
• ec2_instance - wait for new instances to return a status before attempting to set additional parameters (#533).
• ec2_instance_info - add retries on common AWS failures (#521).
• ec2_launch_template - added metadata_options parameter to support changing the IMDS configuration for instances (#322).
• ec2_metric_alarm - Added support for check mode (#470).
• ec2_metric_alarm - Made unit parameter optional (#470).
• ec2_vpc_egress_igw - Add retries on common AWS failures (#421).
• ec2_vpc_endpoint - Add retries on common AWS failures. (#473)
• ec2_vpc_endpoint - Added support for specifying vpc_endpoint_type (#460).
• ec2_vpc_endpoint - The module now supports tagging endpoints. (#473)
• ec2_vpc_endpoint - The module will now lookup existing endpoints and try to match on the provided parameters before creating a new endpoint for better idempotency. (#473)
• ec2_vpc_endpoint_info - ensure paginated endpoint description is retried on common AWS failures (#537).
• ec2_vpc_endpoint_info - use boto3 paginator when fetching services (#537).
• ec2_vpc_endpoint_service_info - new module added for fetching information about available VPC endpoint services (#346).
• ec2_vpc_nacl - add support for IPv6 (#398).
• ec2_vpc_nat_gateway - add AWSRetry decorators to improve reliability (#427).
• ec2_vpc_nat_gateway - code cleaning (#445)
• ec2_vpc_nat_gateway - imporove documentation (#445)
• ec2_vpc_nat_gateway - improve error handling (#445)
• ec2_vpc_nat_gateway - use custom waiters to manage NAT gateways states (deleted and available) (#445)
• ec2_vpc_nat_gateway - use pagination on describe calls to ensure all results are fetched (#427).
• ec2_vpc_nat_gateway_info - Add paginator (#472).
• ec2_vpc_nat_gateway_info - Improve documentation (#472).
• ec2_vpc_nat_gateway_info - Improve error handling (#472)
• ec2_vpc_nat_gateway_info - Use normalize_boto3_result (#472)
• ec2_vpc_nat_gateway_info - solve RequestLimitExceeded error by adding retry decorator (#446)
• ec2_vpc_peer - More return info added, also simplified module code a bit and extended tests (#355)
• ec2_vpc_peer - add support for waiting on state changes (#501).
• ec2_vpc_peering_info - add vpc_peering_connections return value to be consistent with boto3 modules (#501).
• ec2_vpc_peering_info - add retries on common AWS failures (#536).
• ec2_vpc_route_table - add AWSRetry decorators to improve reliability (#442).
• ec2_vpc_route_table - add boto3 pagination for some searches (#442).
• ec2_vpc_route_table_info - migrate to boto3 (#442).
• ec2_vpc_vgw - Add automatic retries for recoverable errors (#162).
• ec2_vpc_vpn - Add automatic retries for recoverable errors (#162).
• ecs_service - Add platform_version parameter to ecs_service (#353).
• ecs_task - added assign_public_ip option for network_configuration (#395).
• ecs_taskdefinition - Documentation improvement (#520)
• elasticache - Improve docs a little, add intgration tests (#410).
• elb_classic_info - If the provided load balancer doesn't exist, return an empty list instead of throwing an error. (#215).
• elb_target_group - Add elb target group attributes stickiness_app_cookie_name and stickiness_app_cookie_duration_seconds. Also update docs for stickiness_type to mention application cookie (#548)
• iam - Make iam module more predictable when returning the user_name it creates or deletes (#369).
• iam_saml_federation - module now returns the state of the provider when no changes are made (#419).
• kinesis_stream - check_mode is now based on the live settings rather than comparisons with a hard coded/fake stream definition (#27).
• kinesis_stream - now returns changed more accurately (#27).
• kinesis_stream - now returns tags consistently (#27).
• kinesis_stream - return values are now the same format when working with both encrypted and un-encrypted streams (#27).
• lambda_alias - add retries on common AWS failures (#396).
• lambda_alias - use common helper functions to create AWS connections (#396).
• lambda_alias - use common helper functions to perform snake_case to CamelCase conversions (#396).
• rds_instance - new purge_security_groups parameter (#385).
• rds_param_group - Add AWSRetry (#532).
• rds_param_group - Fix integration tests (#532).
• rds_param_group - Support check_mode (#532).
• rds_snapshot - added to the aws module_defaults group (#515).
• route53 - fixes AWS API error when attempting to create Alias records (#434).
• s3_lifecycle - Add a wait parameter to wait for changes to propagate after being set (#448).
• s3_lifecycle - Add retries on common AWS failures (#448).
• s3_lifecycle - Fix idempotency when using dates instead of days (#448).
• s3_logging - added support for check_mode (#447).
• s3_logging - migrated from boto to boto3 (#447).
• s3_sync - new storage_class feature allowing to specify the storage class when any object is added to an S3 bucket (#358).
• sanity tests - add ignore.txt for 2.12 (<https://github.com/ansible-collections/community.aws/pu...

community.aws 1.4.0

Minor Changes

• aws_kms - add support for setting the deletion window using pending_window (PendingWindowInDays) (#200).
• aws_kms_info - Add key_id and alias parameters to support fetching a single key (#200).
• dynamodb_ttl - use botocore_at_least helper for checking the available botocore version (#280).
• ec2_instance - add automatic retries on all paginated queries for temporary errors (#373).
• ec2_instance - migrate to shared implementation of get_ec2_security_group_ids_from_names. The module will now return an error if the subnet provided isn't in the requested VPC. (#214)
• ec2_instance_info - added minimum_uptime option with alias uptime for filtering instances that have only been online for certain duration of time in minutes (#356).
• ec2_launch_template - Add retries on common AWS failures (#326).
• ec2_vpc_peer - use botocore_at_least helper for checking the available botocore version (#280).
• ecs_task - use botocore_at_least helper for checking the available botocore version (#280).
• route53 - migrated from boto to boto3 (#405).
• various community.aws modules - cleanup error handling to use is_boto3_error_code and is_boto3_error_message helpers (#268).
• various community.aws modules - cleanup of Python imports (#360).
• various community.aws modules - improve consistency of handling Boto3 exceptions (#268).
• various community.aws modules - migrate exception error message handling from fail_json to fail_json_aws (#361).

Deprecated Features

• ec2_eip - formally deprecate the instance_id alias for device_id (#349).
• ec2_vpc_endpoint - deprecate the policy_file option and recommend using policy with a lookup (#366).

Bugfixes

• aws_kms - fixes issue where module execution fails without the kms:GetKeyRotationStatus permission. (#200).
• aws_kms_info - ensure that searching by tag works when tag only exists on some CMKs (#276).
• aws_s3_cors - fix element type for rules parameter. (#408).
• aws_ssm - fix the generation of CURL URL used to download Ansible Python file from S3 bucket by _get_url() due to due to non-assignment of aws region in the URL and not using V4 signature as specified for AWS S3 signature URL by _get_boto_client() in (#352).
• aws_ssm - fixed UnicodeEncodeError error when using unicode file names (#295).
• ec2_eip - fix eip association by instance id & private ip address due to case-sensitivity of the PrivateIpAddress parameter (#328).
• ec2_vpc_endpoint - ensure changed is correctly set when deleting an endpoint (#362).
• ec2_vpc_endpoint - fix exception when attempting to delete an endpoint which has already been deleted (#362).
• ecs_task - use required_if to enforce mandatory parameters based on specified operation (#402).
• elb_application_lb - during the removal of an instance, the associated listeners are also removed.

community.aws 1.3.0

Minor Changes

• ec2_vpc_igw - Add AWSRetry decorators to improve reliability (#318).
• ec2_vpc_igw - Add purge_tags parameter so that tags can be added without purging existing tags to match the collection standard tagging behaviour (#318).
• ec2_vpc_igw_info - Add AWSRetry decorators to improve reliability (#318).
• ec2_vpc_igw_info - Add convert_tags parameter so that tags can be returned in standard dict format rather than the both list of dict format (#318).
• rds_instance - set no_log=False on force_update_password to clear warning (#241).
• redshift - add support for setting tags.
• s3_lifecycle - Add support for intelligent tiering and deep archive storage classes (#270)

Deprecated Features

• ec2_vpc_igw_info - After 2022-06-22 the convert_tags parameter default value will change from False to True to match the collection standard behavior (#318).

Bugfixes

• aws_kms_info - fixed incompatibility with external and custom key-store keys. The module was attempting to call GetKeyRotationStatus, which raises UnsupportedOperationException for these key types (#311).
• ec2_win_password - on success return state as not changed (#145)
• ec2_win_password - return failed if unable to decode the password (#142)
• ecs_service - fix element type for load_balancers parameter (#265).
• ecs_taskdefinition - fixes elements type for containers parameter (#264).
• iam_policy - Added jittered_backoff to handle AWS rate limiting (#324).
• iam_policy_info - Added jittered_backoff to handle AWS rate limiting (#324).
• kinesis_stream - fixes issue where kinesis streams with > 100 shards get stuck in an infinite loop (#93)
• s3_sync - fix chunk_size calculation (#272)

New Modules

• s3_metrics_configuration - Manage s3 bucket metrics configuration in AWS

community.aws 1.2.1

Minor Changes

• aws_ssm connection plugin - Change the (internal) variable name from timeout to plugin_timeout to avoid conflicts with ansible/ansible default timeout (#69284,
• aws_ssm connection plugin - add STS token options to aws_ssm connection plugin.
• ec2_scaling_policy - Add support for step_adjustments
• ec2_scaling_policy - Migrate from boto to boto3
• rds_subnet_group module - Add Boto3 support and remove Boto support.

Bugfixes

• aws_ssm connection plugin - namespace file uploads to S3 into unique folders per host, to prevent name collisions. Also deletes files from S3 to ensure temp files are not left behind. (#221, #222)
• rds_instance - fixed tag type conversion issue for creating read replicas.

community.aws 1.2.0

Minor Changes

• Add retries for aws_api_gateway when AWS throws TooManyRequestsException
• Migrate the remaning boto3 based modules to the module based helpers for creating AWS connections.

Bugfixes

• aws_codecommit - fixes issue where module execution would fail if an existing repository has empty description (#195)
• aws_kms_info - fixes issue where module execution fails because certain AWS KMS keys (e.g. aws/acm) do not permit the calling the API kms:GetKeyRotationStatus (example - https://forums.aws.amazon.com/thread.jspa?threadID=312992) (#199)
• ec2_instance - Fix a bug where tags were updated in check_mode.
• ec2_instance - fixes issue where security groups were not changed if the instance already existed. #22
• iam - Fix false positive warning regarding use of no_log on update_password

community.aws 1.1.0

Minor Changes

• Remaining community.aws AnsibleModule based modules migrated to AnsibleAWSModule.
• sanity - add future imports in all missing places.

Deprecated Features

• data_pipeline - the version option has been deprecated and will be removed in a later release. It has always been ignored by the module.
• ec2_eip - the wait_timeout option has been deprecated and will be removed in a later release. It has had no effect since Ansible 2.3.
• ec2_lc - the associate_public_ip_address option has been deprecated and will be removed after a later release. It has always been ignored by the module.
• elb_network_lb - in a later release, the default behaviour for the state option will change from absent to present. To maintain the existing behavior explicitly set state to absent.
• iam_managed_policy - the fail_on_delete option has been deprecated and will be removed after a later release. It has always been ignored by the module.
• iam_policy - in a later release, the default value for the skip_duplicates option will change from true to false. To maintain the existing behavior explicitly set it to true.
• iam_policy - the policy_document option has been deprecated and will be removed after a later release. To maintain the existing behavior use the policy_json option and read the file with the lookup plugin.
• iam_role - in a later release, the purge_policies option (also know as purge_policy) default value will change from true to false
• s3_lifecycle - the requester_pays option has been deprecated and will be removed after a later release. It has always been ignored by the module.
• s3_sync - the retries option has been deprecated and will be removed after 2022-06-01. It has always been ignored by the module.

community.aws 1.0.0

Minor Changes

• Allow all params that boto support in aws_api_gateway module
• aws_acm - Add the module to group/aws for module_defaults.
• aws_acm - Update automatic retries to stabilize the integration tests.
• aws_codecommit - Support updating the description
• aws_kms - Adds the enable_key_rotation option to enable or disable automatically key rotation.
• aws_kms - code refactor, some error messages updated
• aws_kms_info - Adds the enable_key_rotation info to the return value.
• ec2_asg - Add support for Max Instance Lifetime
• ec2_asg - Add the ability to use mixed_instance_policy in launch template driven autoscaling groups
• ec2_asg - Migrated to AnsibleAWSModule
• ec2_placement_group - make name a required field.
• ecs_task_definition - Add network_mode=default to support Windows ECS tasks.
• elb_network_lb - added support to UDP and TCP_UDP protocols
• elb_target - add awsretry to prevent rate exceeded errors (ansible/ansible#51108)
• elb_target_group - allow UDP and TCP_UDP protocols; permit only HTTP/HTTPS health checks using response codes and paths
• iam - make name a required field.
• iam_cert - make name a required field.
• iam_policy - The iam_policy module has been migrated from boto to boto3.
• iam_policy - make iam_name a required field.
• iam_role - Add support for managing the maximum session duration
• iam_role - Add support for removing the related instance profile when we delete the role
• iam_role, iam_user and iam_group - the managed_policy option has been renamed to managed_policies (with an alias added)
• iam_role, iam_user and iam_group - the purge_policy option has been renamed to purge_policies (with an alias added)
• lambda - add a tracing_mode parameter to set the TracingConfig for AWS X-Ray. Also allow updating Lambda runtime.
• purefa_volume - Change I(qos) parameter to I(bw_iops), but retain I(qos) as an alias for backwards compatibility (ansible/ansible#61577).
• redshift - Add AWSRetry calls for errors outside our control
• route53 - the module now has diff support.
• sns_topic - Add backoff when we get Topic NotFound exceptions while listing the subscriptions.
• sqs_queue - Add support for tagging, KMS and FIFO queues
• sqs_queue - updated to use boto3 instead of boto

Deprecated Features

• cloudformation - The template_format option had no effect since Ansible 2.3 and will be removed after 2022-06-01
• data_pipeline - The version option had no effect and will be removed after 2022-06-01
• ec2_eip - The wait_timeout option had no effect and will be removed after 2022-06-01
• ec2_key - The wait_timeout option had no effect and will be removed after 2022-06-01
• ec2_key - The wait option had no effect and will be removed after 2022-06-01
• ec2_lc - The associate_public_ip_address option had no effect and will be removed after 2022-06-01
• elb_network_lb - The current default value of the state option has been deprecated and will change from absent to present after 2022-06-01
• iam_managed_policy - The fail_on_delete option had no effect and will be removed after 2022-06-01
• iam_policy - The policy_document will be removed after 2022-06-01. To maintain the existing behavior use the policy_json option and read the file with the lookup plugin.
• iam_policy - The default value of skip_duplicates will change after 2022-06-01 from true to false.
• iam_role - The default value of the purge_policies has been deprecated and will change from true to false after 2022-06-01
• s3_lifecycle - The requester_pays option had no effect and will be removed after 2022-06-01
• s3_sync - The retries option had no effect and will be removed after 2022-06-01

Bugfixes

• security issue - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
• security issue - Update AnsibleUnsafeText and AnsibleUnsafeBytes to maintain unsafe context by overriding .encode and .decode. This prevents future issues with to_text, to_bytes, or to_native removing the unsafe wrapper when converting between string types (CVE-2019-14856)
• azure_rm_dnsrecordset_info - no longer returns empty azure_dnsrecordset facts when called as _info module.
• azure_rm_resourcegroup_info - no longer returns azure_resourcegroups facts when called as _info module.
• azure_rm_storageaccount_info - no longer returns empty azure_storageaccounts facts when called as _info module.
• azure_rm_virtualmachineimage_info - no longer returns empty azure_vmimages facts when called as _info module.
• azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ansible_facts result, when called as _info module.
• azure_rm_virtualnetwork_info - no longer returns empty azure_virtualnetworks facts when called as _info module.
• cloudfront_distribution - Always add field_level_encryption_id to cache behaviour to match AWS requirements
• cloudwatchlogs_log_group - Fix a KeyError when updating a log group that does not have a retention period (ansible/ansible#47945)
• cloudwatchlogs_log_group_info - remove limitation of max 50 results
• ec2_asg - Ensure wait is honored during replace operations
• ec2_launch_template - Update output to include latest_version and default_version, matching the documentation
• ec2_transit_gateway - Use AWSRetry before ClientError is handled when describing transit gateways
• ec2_transit_gateway - fixed issue where auto_attach set to yes was not being honored (ansible/ansible#61907)
• edgeos_config - fix issue where module would silently filter out encrypted passwords
• fixed issue with sns_topic's delivery_policy option resulting in changed always being true
• lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (ansible/ansible#63756)
• route53 - improve handling of octal encoded characters
• win_credential - Fix issue that errors when trying to add a name with wildcards.

New Modules

• aws_acm - Upload and delete certificates in the AWS Certificate Manager service
• aws_acm_info - Retrieve certificate information from AWS Certificate Manager service
• aws_api_gateway - Manage AWS API Gateway APIs
• aws_application_scaling_policy - Manage Application Auto Scaling Scaling Policies
• aws_batch_compute_environment - Manage AWS Batch Compute Environments
• aws_batch_job_definition - Manage AWS Batch Job Definitions
• aws_batch_job_queue - Manage AWS Batch Job Queues
• aws_codebuild - Create or delete an AWS CodeBuild project
• aws_codecommit - Manage repositories in AWS CodeCommit
• aws_codepipeline - Create or delete AWS CodePipelines
• aws_config_aggregation_authorization - Manage cross-account AWS Config authorizations
• aws_config_aggregator - Manage AWS Config aggregations across multiple accounts
• aws_config_delivery_channel - Manage AWS Config delivery channels
• aws_config_recorder - Manage AWS Config Recorders
• aws_config_rule - Manage AWS Config resources
• aws_direct_connect_connection - Creates, deletes, modifies a DirectConnect connection
• aws_direct_connect_gateway - Manage AWS Direct Connect gateway
• aws_direct_connect_link_aggregation_group - Manage Direct Connect LAG bundles
• aws_direct_connect_virtual_interface - Manage Direct Connect virtual interfaces
• aws_eks_cluster - Manage Elastic Kubernetes Service Clusters
• aws_elasticbeanstalk_app - Create, update, and delete an elastic beanstalk application
• aws_glue_connection - Manage an AWS Glue connection
• aws_glue_job - Manage an AWS Glue job
• aws_inspector_target - Create, Update and Delete Amazon Inspector Assessment Targets
• aws_kms - Perform various KMS management tasks.
• aws_kms_info - Gather information about AWS KMS keys
• aws_region_info - Gather information about AWS regions.
• aws_s3_bucket_info - Lists S3 buckets in AWS
• aws_s3_cors - Manage CORS for S3 buckets in AWS
• aws_secret - Manage secrets stored in AWS Secrets Manager.
• aws_ses_identity - Manages SES email and domain identity
• aws_ses_identity_policy - Manages SES sending authorization policies
• aws_ses_rule_set - Manages SES inbound receipt rule sets
• aws_sgw_info - Fetch AWS Storage Gateway information
• aws_ssm_parameter_store - Manage key-value pairs in aws parameter store.
• aws_step_functions_state_machine - Manage AWS Step Functions state machines
• aws_step_functions_state_machine_execution - Start or stop execution of an AWS Step Functions state machine.
• aws_waf_condition - Create and delete WAF Conditions
• aws_waf_info - Retrieve information for WAF ACLs, Rule , Conditions and Filters.
• aws_waf_rule - Create and delete WAF Rules
• aws_waf_web_acl - Create and delete WAF Web ACLs.
• cloudformation_exports_info - Read a value from CloudFormation Exports
• cloudformation_stack_set - Manage groups of CloudFormation stacks
• cloudfront_distribution - Create, update and delete AWS CloudFront distributions.
• cloudfront_info - Obtain facts about an AWS CloudFront distribution
• cloudfront_invalidation - create invalidations for AWS CloudFront distributions
• cloudfront_origin_access_identity - Create, update and delete origin access identities for a CloudFront distribution
• cloudtrail - manage CloudTrail create, delete, update
• cloudwatchevent_rule - Manage CloudWatch Event rules and targets
• cloudwatchlogs_log_group - create or delete log_group in CloudWatchLogs
• cloudwatchlogs_log_group_info - Get information about log_group in CloudWatchLogs
• cloudwatchlogs_log_group_metric_filter - Manage CloudWatch log group metric filter
• data_pipeline - Create and manage AWS Datapipelines
• dms_endpoint - Creates or destroys a data migration services endpoint
• dms_repl...