Skip to content

Commit d564d43

Browse files
svozzasvozza
authored
Merge pull request #573 from aws-solutions/release/v2.2.1
update to v2.2.1
2 parents 2386c69 + a9a4ffa commit d564d43

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

57 files changed

+9079
-7037
lines changed

‎CHANGELOG.md

+63-43
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,26 @@ All notable changes to this project are documented in this file.
55
Based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8+
## [2.2.1] - 2025-02-07
9+
10+
### Added
11+
- Alert in AppInsights dashboard if discovery process runs out of memory
12+
- Alert in AppInsights dashboard if Config not enabled in discoverable region
13+
14+
### Fixed
15+
- Null pointer error in SAML identity provider custom resource [567](https://github.com/aws-solutions/workload-discovery-on-aws/issues/567)
16+
- Incorrect description string in diagram settings filter when hiding resources
17+
- Erroneous validation error when exporting diagrams with global resources to myApplications
18+
- Empty region dropdown list when exporting diagram with only global resources to myApplications
19+
- Security [vulnerability](https://github.com/advisories/GHSA-9crc-q9x8-hgqq) in `vite`.
20+
- Security [vulnerability](https://github.com/advisories/GHSA-vg6x-rcgg-rjx6) in `vitest`.
21+
- Security [vulnerability](https://github.com/advisories/GHSA-c76h-2ccp-4975) in `undici`.
22+
- Security [vulnerability](https://github.com/advisories/GHSA-gmj6-6f8f-6699) in `jinja`.
23+
- Security [vulnerability](https://github.com/advisories/GHSA-q2x7-8rv6-6q7h) in `jinja`.
24+
25+
### Changed
26+
- Use of `FARGATE` or `FARGATE_SPOT` for discovery process is configurable via a CloudFormation parameter.
27+
828
## [2.2.0] - 2024-11-20
929

1030
### Added
@@ -44,7 +64,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
4464
- Failed writes to OpenSearch should stop the corresponding write being made to Neptune
4565
- Metrics lambda times out when hundreds of accounts have been imported
4666

47-
## [2.1.15] - 2024-9-30
67+
## [2.1.15] - 2024-09-30
4868

4969
### Fixed
5070

@@ -53,7 +73,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
5373
- Security [vulnerability](https://github.com/advisories/GHSA-9cwx-2883-4wfx) in `vite`.
5474
- Security [vulnerability](https://github.com/advisories/GHSA-64vr-g452-qvp3) in `vite`.
5575

56-
## [2.1.14] - 2024-9-18
76+
## [2.1.14] - 2024-09-18
5777

5878
### Fixed
5979

@@ -64,25 +84,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
6484
- Security [vulnerability](https://github.com/advisories/GHSA-9wv6-86v2-598j) in `path-to-regexp`.
6585
- Security [vulnerability](https://github.com/advisories/GHSA-m6fv-jmcg-4jfg) in `send`.
6686

67-
## [2.1.13] - 2024-8-16
87+
## [2.1.13] - 2024-08-16
6888

6989
### Fixed
7090

7191
- Security [vulnerability](https://github.com/advisories/GHSA-8hc4-vh64-cxmj) in `axios`.
7292

73-
## [2.1.12] - 2024-7-31
93+
## [2.1.12] - 2024-07-31
7494

7595
### Fixed
7696

7797
- Security [vulnerability](https://github.com/advisories/GHSA-mpg4-rc92-vx8v) in `fast-xml-parser`.
7898

79-
## [2.1.11] - 2024-7-23
99+
## [2.1.11] - 2024-07-23
80100

81101
### Changed
82102

83103
- Use Amazon Linux 2023 as the base image for the discovery process Docker container
84104

85-
## [2.1.10] - 2024-7-16
105+
## [2.1.10] - 2024-07-16
86106

87107
### Fixed
88108

@@ -94,7 +114,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
94114

95115
- Restrict egress for Neptune lambda security group to VPC IP address range. [531](https://github.com/aws-solutions/workload-discovery-on-aws/discussions/531)
96116

97-
## [2.1.9] - 2024-6-24
117+
## [2.1.9] - 2024-06-24
98118

99119
### Fixed
100120

@@ -105,14 +125,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
105125

106126
- Removed dev environment CDK build pipeline
107127

108-
## [2.1.8] - 2024-6-13
128+
## [2.1.8] - 2024-06-13
109129

110130
### Fixed
111131

112132
- Security [vulnerability](https://github.com/advisories/GHSA-2p57-rm9w-gvfp) in `ip`.
113133
- Security [vulnerability](https://github.com/advisories/GHSA-grv7-fg5c-xmjg) in `braces`.
114134

115-
## [2.1.7] - 2024-5-15
135+
## [2.1.7] - 2024-05-15
116136

117137
### Fixed
118138

@@ -124,22 +144,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
124144
- Security [vulnerability](https://github.com/advisories/GHSA-9qxr-qj54-h672) in `undici`.
125145
- Security [vulnerability](https://github.com/advisories/GHSA-m4v8-wqvr-p9f7) in `undici`.
126146

127-
## [2.1.6] - 2024-2-22
147+
## [2.1.6] - 2024-02-22
128148

129149
### Fixed
130150

131151
- Null error when exporting to draw.io [458](https://github.com/aws-solutions/workload-discovery-on-aws/issues/458)
132152
- Security [vulnerability](https://github.com/advisories/GHSA-78xj-cgh5-2h22) in `ip`.
133153
- Security [vulnerability](https://github.com/advisories/GHSA-3787-6prv-h9w3) in `undici`.
134154

135-
## [2.1.5] - 2024-1-25
155+
## [2.1.5] - 2024-01-25
136156

137157
### Fixed
138158

139159
- Security [vulnerability](https://github.com/advisories/GHSA-c24v-8rfc-w8vw) in `vite`.
140160
- Security [vulnerability](https://github.com/advisories/GHSA-p6mc-m468-83gw) in `lodash`.
141161

142-
## [2.1.4] - 2024-1-18
162+
## [2.1.4] - 2024-01-18
143163

144164
### Fixed
145165

@@ -159,25 +179,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
159179
- Comma in Service Name Results causes GraphQL type error [491](https://github.com/aws-solutions/workload-discovery-on-aws/issues/491)
160180

161181
### Changed
162-
- Frequency at which the scheduled discovery process ECS task runs is now configurable via a CloudFormation parameter.
182+
- Frequency at which the scheduled discovery process ECS task runs is now configurable via a CloudFormation parameter.
163183

164184
## [2.1.2] - 2023-11-14
165185

166186
### Fixed
167187

168-
- Throttle `ListAccounts` API to prevent rate limiting from stopping the Discovery process discover accounts
169-
in large organisation. [478](https://github.com/aws-solutions/workload-discovery-on-aws/issues/478)
188+
- Throttle `ListAccounts` API to prevent rate limiting from stopping the Discovery process discover accounts
189+
in large organisation. [478](https://github.com/aws-solutions/workload-discovery-on-aws/issues/478)
170190
- Only attempt to discover accounts from provided OU and its children, rather than whole organization.
171191
- Throttle `SelectAggregateResourceConfig` API to prevent rate limiting from stopping discovery process from reading from the Config aggregator.
172192
- Remove Retain on organization-wide StackSet so IAM roles are no longer left in organization's accounts after solution is uninstalled.
173-
- Handle error message difference between AppSync VTL resolvers and JS resolvers that prevented discovery process from retrying
174-
requests to DB if payload was too large.
193+
- Handle error message difference between AppSync VTL resolvers and JS resolvers that prevented discovery process from retrying
194+
requests to DB if payload was too large.
175195

176196
### Changed
177-
- Move GraphQL queries that queried whole Neptune database to use DynamoDB, significantly reducing load on Neptune and
178-
improving rendering times on the frontend.
197+
- Move GraphQL queries that queried whole Neptune database to use DynamoDB, significantly reducing load on Neptune and
198+
improving rendering times on the frontend.
179199
- Retrieve the following resource types from AWS Config advanced query rather than `ListAggregateDiscoveredResources`
180-
and `BatchGetAggregateResourceConfig`.
200+
and `BatchGetAggregateResourceConfig`.
181201
- `AWS::EC2::LaunchTemplate`
182202
- `AWS::EC2::TransitGateway`
183203
- `AWS::EC2::TransitGatewayAttachment`
@@ -252,31 +272,31 @@ and `BatchGetAggregateResourceConfig`.
252272
### Added
253273

254274
- Solution now ingests all resource types [supported](https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html), as well as the following resource types
255-
- `AWS::APIGateway::Resource`
256-
- `AWS::APIGateway::Method`
257-
- `AWS::APIGateway::Authorizer`
258-
- `AWS::IAM::InlinePolicy`
259-
- `AWS::IAM::ManagedPolicy`
260-
- `AWS::ECS::Task`
261-
- `AWS::EKS:::NodeGroup`
262-
- `AWS::ElasticLoadBalancingV2::TargetGroup`
263-
- `AWS::Cognito::UserPool`
264-
- `AWS::EC2::Spot`
265-
- `AWS::EC2::SpotFleet`
275+
- `AWS::APIGateway::Resource`
276+
- `AWS::APIGateway::Method`
277+
- `AWS::APIGateway::Authorizer`
278+
- `AWS::IAM::InlinePolicy`
279+
- `AWS::IAM::ManagedPolicy`
280+
- `AWS::ECS::Task`
281+
- `AWS::EKS:::NodeGroup`
282+
- `AWS::ElasticLoadBalancingV2::TargetGroup`
283+
- `AWS::Cognito::UserPool`
284+
- `AWS::EC2::Spot`
285+
- `AWS::EC2::SpotFleet`
266286
- Large increase in number of relationships not captured by AWS Config, including, but not limited to:
267-
- Lambda -> SNS/SQS/Kinesis/MSK/EFS
268-
- AWS::APIGateway::Authorizer -> Cognito User Pool
269-
- CloudFront -> ELB/ELBv2
270-
- SecurityGroup -> SecurityGroup
271-
- ELBv2 -> ELBv2 Listener -> ELBv2 Target Group -> ASG
272-
- ECS Task -> EFS
273-
- EKS Cluster -> NodeGroup/VPC/Subnet/SecurityGroup/IAM Role
274-
- EKS NodeGroup -> ASG/VPC/Subnet/SecurityGroup/IAM Role/Launch Template
275-
- Transit Gateway -> VPC/Subnet
287+
- Lambda -> SNS/SQS/Kinesis/MSK/EFS
288+
- AWS::APIGateway::Authorizer -> Cognito User Pool
289+
- CloudFront -> ELB/ELBv2
290+
- SecurityGroup -> SecurityGroup
291+
- ELBv2 -> ELBv2 Listener -> ELBv2 Target Group -> ASG
292+
- ECS Task -> EFS
293+
- EKS Cluster -> NodeGroup/VPC/Subnet/SecurityGroup/IAM Role
294+
- EKS NodeGroup -> ASG/VPC/Subnet/SecurityGroup/IAM Role/Launch Template
295+
- Transit Gateway -> VPC/Subnet
276296
- New UI:
277-
- Uses [Cloudscape Design](https://cloudscape.design/) System to make look and feel more consistent
278-
- Migrated from modal dialogs to React router for page management
279-
- New Views feature to allow users to scope searches to only resource types they are interested in
297+
- Uses [Cloudscape Design](https://cloudscape.design/) System to make look and feel more consistent
298+
- Migrated from modal dialogs to React router for page management
299+
- New Views feature to allow users to scope searches to only resource types they are interested in
280300

281301
### Changed
282302

‎README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Workload Discovery on AWS (v2.2.0)
1+
# Workload Discovery on AWS (v2.2.1)
22

33
Workload Discovery on AWS is a tool that quickly visualizes AWS Cloud workloads as architecture diagrams.
44
You can use the solution to build, customize, and share detailed workload visualizations based on live data from AWS.
@@ -37,12 +37,12 @@ to learn about costs.
3737

3838
## Usage
3939

40-
A web interface is included with Workload Discovery. Refer to the [documentation](https://awslabs.github.io/workload-discovery-on-aws)
40+
A web interface is included with Workload Discovery. Refer to the [documentation](https://github.com/aws-solutions/workload-discovery-on-aws)
4141
to learn how to use the application.
4242

4343
## Feature requests
4444

45-
To submit an idea for a feature you would like to see implemented, please [create an issue](https://github.com/awslabs/workload-discovery-on-aws/issues) and use the 'enhancement' label. Your issue will be available on the [project board](https://github.com/awslabs/workload-discovery-on-aws/projects/2) for others to vote on.
45+
To submit an idea for a feature you would like to see implemented, please [create an issue](https://github.com/aws-solutions/workload-discovery-on-aws/issues) and use the 'enhancement' label.
4646

4747
## Architecture
4848

‎deployment/build-s3-dist.sh

-27
Original file line numberDiff line numberDiff line change
@@ -30,19 +30,6 @@ build_dist_dir="$template_dir/regional-s3-assets"
3030
source_dir="$template_dir/../source"
3131
nested_stack_template_dir="$source_dir/cfn/templates"
3232

33-
auditDeps () {
34-
npm_config_yes=true npx better-npm-audit audit --production
35-
OUTPUT=$?
36-
if [[ "$OUTPUT" -eq 0 ]];
37-
then
38-
echo dependencies are fine
39-
return 0
40-
else
41-
echo You have vulnerabilies in your package
42-
return 1
43-
fi
44-
}
45-
4633
# command that will work on both Linux and MacOS
4734
sedi () {
4835
sed --version >/dev/null 2>&1 && sed -i -- "$@" || sed -i "" "$@"
@@ -139,7 +126,6 @@ echo "--------------------------------------------------------------------------
139126
echo "[Rebuild] Account Import Template API"
140127
echo "------------------------------------------------------------------------------"
141128
cd "${source_dir}/backend/functions/account-import-templates-api"
142-
auditDeps
143129
npm run build
144130
cp ./dist/account-import-templates-api.zip "${build_dist_dir}/account-import-templates-api.zip"
145131

@@ -148,55 +134,48 @@ echo "[Rebuild] Gremlin Resolver"
148134
echo "------------------------------------------------------------------------------"
149135
cd "${source_dir}/backend/functions/graph-api"
150136

151-
auditDeps
152137
npm run build
153138
cp ./dist/graph-api.zip "${build_dist_dir}/graph-api.zip"
154139

155140
echo "------------------------------------------------------------------------------"
156141
echo "[Rebuild] opensearch-setup"
157142
echo "------------------------------------------------------------------------------"
158143
cd "${source_dir}/backend/functions/opensearch-setup"
159-
auditDeps
160144
npm run build
161145
cp ./dist/opensearch-setup.zip "${build_dist_dir}/opensearch-setup.zip"
162146

163147
echo "------------------------------------------------------------------------------"
164148
echo "[Rebuild] Search API"
165149
echo "------------------------------------------------------------------------------"
166150
cd "${source_dir}/backend/functions/search-api"
167-
auditDeps
168151
npm run build
169152
cp ./dist/search-api.zip "${build_dist_dir}/search-api.zip"
170153

171154
echo "------------------------------------------------------------------------------"
172155
echo "[Rebuild] Settings"
173156
echo "------------------------------------------------------------------------------"
174157
cd "${source_dir}/backend/functions/settings"
175-
auditDeps
176158
npm run build
177159
cp ./dist/settings.zip "${build_dist_dir}/settings.zip"
178160

179161
echo "------------------------------------------------------------------------------"
180162
echo "[Rebuild] Cost-Parser"
181163
echo "------------------------------------------------------------------------------"
182164
cd "${source_dir}/backend/functions/cost-parser"
183-
auditDeps
184165
npm run build
185166
cp ./dist/cost.zip "${build_dist_dir}/cost.zip"
186167

187168
echo "------------------------------------------------------------------------------"
188169
echo "[Rebuild] CUR-Notification"
189170
echo "------------------------------------------------------------------------------"
190171
cd "${source_dir}/backend/functions/cur-notification"
191-
auditDeps
192172
npm run build
193173
cp ./dist/cur-notification.zip "${build_dist_dir}/cur-notification.zip"
194174

195175
echo "------------------------------------------------------------------------------"
196176
echo "[Rebuild] CUR-Setup"
197177
echo "------------------------------------------------------------------------------"
198178
cd "${source_dir}/backend/functions/cur-setup"
199-
auditDeps
200179
npm run build
201180
cp ./dist/cur-setup.zip "${build_dist_dir}/cur-setup.zip"
202181

@@ -213,39 +192,33 @@ echo "--------------------------------------------------------------------------
213192
echo "[Rebuild] Metrics"
214193
echo "------------------------------------------------------------------------------"
215194
cd "${source_dir}/backend/functions/metrics"
216-
auditDeps
217195
npm run build
218196
cp ./dist/metrics.zip "${build_dist_dir}/metrics.zip"
219197

220198
echo "------------------------------------------------------------------------------"
221199
echo "[Rebuild] Metrics Subscription Filter"
222200
echo "------------------------------------------------------------------------------"
223201
cd "${source_dir}/backend/functions/metrics-subscription-filter"
224-
auditDeps
225202
npm run build
226203
cp ./dist/metrics-subscription-filter.zip "${build_dist_dir}/metrics-subscription-filter.zip"
227204

228205
echo "------------------------------------------------------------------------------"
229206
echo "[Rebuild] Export to myApplication"
230207
echo "------------------------------------------------------------------------------"
231208
cd "${source_dir}/backend/functions/myapplications"
232-
auditDeps
233209
npm run build
234210
cp ./dist/myapplications.zip "${build_dist_dir}/myapplications.zip"
235211

236212
echo "------------------------------------------------------------------------------"
237213
echo "[Rebuild] Discovery"
238214
echo "------------------------------------------------------------------------------"
239215
cd "${source_dir}/backend/discovery"
240-
auditDeps
241216
npm run build
242217
cp ./dist/discovery.zip "${build_dist_dir}/discovery.zip"
243218

244219
echo "------------------------------------------------------------------------------"
245220
echo "[Rebuild] UI"
246221
echo "------------------------------------------------------------------------------"
247222
cd "${source_dir}/frontend"
248-
auditDeps
249-
#npm run test
250223
npm run build
251224
cp ./dist/ui.zip "${build_dist_dir}/ui.zip"

0 commit comments

Comments
 (0)