Skip to content

Commit 2180544

Browse files
rgd11rgd11
committed
release/v1.3.0
1 parent dac8acc commit 2180544

23 files changed

+94
-35
lines changed

‎CHANGELOG.md

+59
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,65 @@ All notable changes to this project will be documented in this file.
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8+
## [1.3.0] - 2022-12-21
9+
10+
### Added
11+
12+
- feat(installer): add support for organization only install
13+
- feat(network): add ability to create site-to-site vpn to tgw
14+
- feat(network): add ability to specify file with list of suricata rules for network firewall
15+
- feat(network): add ability to specify transit gateway peering
16+
- feat(network): add ability to create routes for vpc peering connections
17+
- feat(network): add ability to create and reference VGWs for VPNs, subnet routes, and gateway route table associations
18+
- feat(network): add ability to create third-party firewalls
19+
- feat(network): add ability to configure firewall manager
20+
- feat(network): add ability to define ALBs and NLBs
21+
- feat(logs): allow specification of centralized logging bucket region independent of home region
22+
- feat(iam): add ability for IAM policy replacements
23+
- feat(organizations): add support to ignore organizational units
24+
- feat(organizations): add functionality to move accounts between ous (orgs-only install)
25+
- feat(security): add centralized and configurable sns topics
26+
- feat(security): add ability to create ACM from s3 and integrate that with ELBv2
27+
- feat(guardDuty): enable S3 export config override
28+
- feat(guardDuty): provide functionality to enable EKS protection
29+
- feat(ssm): enable SSM Inventory
30+
- feat(securityhub): add support for CIS 1.4.0 controls in SecurityHub
31+
- feat(cloudformation): Create custom CloudFormation stacks
32+
- feat(s3): add ability to define policy statements to s3 buckets and keys
33+
- feat(quotas): limits increase for services
34+
- feat(sso): add ability to configure iam identity center
35+
- feat(mad): add ability to configure managed ad
36+
- feat(kms): allow parameter replacement in key files
37+
38+
### Changed
39+
40+
- enhancement(network): add use of static CIDR property for VPC templates
41+
- enhancement(network): update Direct Connect custom resource logic to handle asynchronous actions
42+
- enhancement(network): add Resolver endpoint name to deployed endpoints
43+
- enhancement(logging): transform cloudwatch logs data to allow query from athena
44+
- enhancement(organizations): move replacements to stack level
45+
- enhancement(organizations): added checks for scps with no OUs or accounts
46+
- enhancement(organizations): validate scp count
47+
- enhancement(configs): add config rules and ssm auto remediation in AWS GovCloud (US) reference config
48+
- fix(logging): update central log key lookup set log bucket to central log region
49+
- fix(logging): move account CloudTrail S3 logs to central log bucket
50+
- fix(organizations): add cases for null organizations and accounts in SCP
51+
- fix(pipeline): force bootstraping to run in global region and home region if missing
52+
- fix(ssm) limit api calls to 20 accounts per invocation
53+
- fix(sns): update sns policies
54+
- fix(sns): added account check on sns kms key policy
55+
- fix(kms): add ebs kms policy for cloud9
56+
- fix(security): updated sns topic to use home region rather than global region
57+
58+
### New Configurations
59+
60+
- [US Aerospace](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/aerospace.html)
61+
- [US State and Local Government Central IT](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/central-it.html)
62+
- [Canadian Centre for Cyber Security (CCCS) Cloud Medium](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/canadian-centre-for-cyber-security-cccs-cloud-medium.html)
63+
- [Trusted Secure Enclaves Sensitive Edition (TSE-SE) for National Security, Defence, and National Law Enforcement](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/trusted-secure-enclaves-sensitive-edition-for-national-security-defence-and-national-law-enforcement.html)
64+
- [Elections](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/elections.html)
65+
- [Finance (Tax)](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/finance-tax.html)
66+
867
## [1.2.2] - 2022-11-04
968

1069
### Changed

‎source/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "landing-zone-accelerator-on-aws",
3-
"version": "1.2.2",
3+
"version": "1.3.0",
44
"description": "Landing Zone Accelerator on AWS",
55
"license": "Apache-2.0",
66
"author": {

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/accounts-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -926,7 +926,7 @@ Object {
926926
"Properties": Object {
927927
"Name": "/accelerator/AWSAccelerator-AccountsStack-111111111111-us-east-1/version",
928928
"Type": "String",
929-
"Value": "1.2.2",
929+
"Value": "1.3.0",
930930
},
931931
"Type": "AWS::SSM::Parameter",
932932
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/applications-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ Object {
77
"Properties": Object {
88
"Name": "/accelerator/AWSAccelerator-CustomizationsStack-444444444444-us-east-1/version",
99
"Type": "String",
10-
"Value": "1.2.2",
10+
"Value": "1.3.0",
1111
},
1212
"Type": "AWS::SSM::Parameter",
1313
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/bootstrap-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -797,7 +797,7 @@ Object {
797797
"Properties": Object {
798798
"Name": "/accelerator/AWSAccelerator-BootstrapStack-111111111111-us-east-1/version",
799799
"Type": "String",
800-
"Value": "1.2.2",
800+
"Value": "1.3.0",
801801
},
802802
"Type": "AWS::SSM::Parameter",
803803
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/customizations-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ Resources:
7474
"Properties": Object {
7575
"Name": "/accelerator/AWSAccelerator-CustomizationsStack-111111111111-us-east-1/version",
7676
"Type": "String",
77-
"Value": "1.2.2",
77+
"Value": "1.3.0",
7878
},
7979
"Type": "AWS::SSM::Parameter",
8080
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/finalize-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -151,7 +151,7 @@ Object {
151151
"Properties": Object {
152152
"Name": "/accelerator/AWSAccelerator-FinalizeStack-111111111111-us-east-1/version",
153153
"Type": "String",
154-
"Value": "1.2.2",
154+
"Value": "1.3.0",
155155
},
156156
"Type": "AWS::SSM::Parameter",
157157
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/key-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -475,7 +475,7 @@ Object {
475475
"Properties": Object {
476476
"Name": "/accelerator/AWSAccelerator-KeyStack-222222222222-us-east-1/version",
477477
"Type": "String",
478-
"Value": "1.2.2",
478+
"Value": "1.3.0",
479479
},
480480
"Type": "AWS::SSM::Parameter",
481481
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/logging-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -2681,7 +2681,7 @@ Object {
26812681
"Properties": Object {
26822682
"Name": "/accelerator/AWSAccelerator-LoggingStack-333333333333-us-east-1/version",
26832683
"Type": "String",
2684-
"Value": "1.2.2",
2684+
"Value": "1.3.0",
26852685
},
26862686
"Type": "AWS::SSM::Parameter",
26872687
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-associations-gwlb-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -699,7 +699,7 @@ Object {
699699
"Properties": Object {
700700
"Name": "/accelerator/AWSAccelerator-NetworkAssociationsGwlbStack-555555555555-us-east-1/version",
701701
"Type": "String",
702-
"Value": "1.2.2",
702+
"Value": "1.3.0",
703703
},
704704
"Type": "AWS::SSM::Parameter",
705705
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-associations-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -1736,7 +1736,7 @@ Object {
17361736
"Properties": Object {
17371737
"Name": "/accelerator/AWSAccelerator-NetworkAssociationsStack-555555555555-us-east-1/version",
17381738
"Type": "String",
1739-
"Value": "1.2.2",
1739+
"Value": "1.3.0",
17401740
},
17411741
"Type": "AWS::SSM::Parameter",
17421742
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-prep-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -1171,7 +1171,7 @@ drop http $HOME_NET any -> $EXTERNAL_NET any (http.host; content:\\"example.com\
11711171
"Properties": Object {
11721172
"Name": "/accelerator/AWSAccelerator-NetworkPrepStack-555555555555-us-east-1/version",
11731173
"Type": "String",
1174-
"Value": "1.2.2",
1174+
"Value": "1.3.0",
11751175
},
11761176
"Type": "AWS::SSM::Parameter",
11771177
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-dns-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -438,7 +438,7 @@ Object {
438438
"Properties": Object {
439439
"Name": "/accelerator/AWSAccelerator-NetworkVpcDnsStack-555555555555-us-east-1/version",
440440
"Type": "String",
441-
"Value": "1.2.2",
441+
"Value": "1.3.0",
442442
},
443443
"Type": "AWS::SSM::Parameter",
444444
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-endpoints-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -855,7 +855,7 @@ Object {
855855
"Properties": Object {
856856
"Name": "/accelerator/AWSAccelerator-NetworkVpcEndpointsStack-555555555555-us-east-1/version",
857857
"Type": "String",
858-
"Value": "1.2.2",
858+
"Value": "1.3.0",
859859
},
860860
"Type": "AWS::SSM::Parameter",
861861
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -2114,7 +2114,7 @@ Object {
21142114
"Properties": Object {
21152115
"Name": "/accelerator/AWSAccelerator-NetworkVpcStack-555555555555-us-east-1/version",
21162116
"Type": "String",
2117-
"Value": "1.2.2",
2117+
"Value": "1.3.0",
21182118
},
21192119
"Type": "AWS::SSM::Parameter",
21202120
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/operations-stack.test.ts.snap

+2-2
Original file line numberDiff line numberDiff line change
@@ -710,7 +710,7 @@ Object {
710710
"Properties": Object {
711711
"Name": "/accelerator/AWSAccelerator-OperationsStack-111111111111-us-east-1/version",
712712
"Type": "String",
713-
"Value": "1.2.2",
713+
"Value": "1.3.0",
714714
},
715715
"Type": "AWS::SSM::Parameter",
716716
},
@@ -1635,7 +1635,7 @@ Object {
16351635
"Properties": Object {
16361636
"Name": "/accelerator/AWSAccelerator-OperationsStack-111111111111-us-east-1/version",
16371637
"Type": "String",
1638-
"Value": "1.2.2",
1638+
"Value": "1.3.0",
16391639
},
16401640
"Type": "AWS::SSM::Parameter",
16411641
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/organizations-stack.test.ts.snap

+3-3
Original file line numberDiff line numberDiff line change
@@ -2536,7 +2536,7 @@ Object {
25362536
"Properties": Object {
25372537
"Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
25382538
"Type": "String",
2539-
"Value": "1.2.2",
2539+
"Value": "1.3.0",
25402540
},
25412541
"Type": "AWS::SSM::Parameter",
25422542
},
@@ -5104,7 +5104,7 @@ Object {
51045104
"Properties": Object {
51055105
"Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
51065106
"Type": "String",
5107-
"Value": "1.2.2",
5107+
"Value": "1.3.0",
51085108
},
51095109
"Type": "AWS::SSM::Parameter",
51105110
},
@@ -7672,7 +7672,7 @@ Object {
76727672
"Properties": Object {
76737673
"Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
76747674
"Type": "String",
7675-
"Value": "1.2.2",
7675+
"Value": "1.3.0",
76767676
},
76777677
"Type": "AWS::SSM::Parameter",
76787678
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/pipeline-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -1957,7 +1957,7 @@ Object {
19571957
"Properties": Object {
19581958
"Name": "/accelerator/PipelineStack/version",
19591959
"Type": "String",
1960-
"Value": "1.2.2",
1960+
"Value": "1.3.0",
19611961
},
19621962
"Type": "AWS::SSM::Parameter",
19631963
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/prepare-stack.test.ts.snap

+1-1
Original file line numberDiff line numberDiff line change
@@ -4322,7 +4322,7 @@ Object {
43224322
"Properties": Object {
43234323
"Name": "/accelerator/AWSAccelerator-PrepareStack-111111111111-us-east-1/version",
43244324
"Type": "String",
4325-
"Value": "1.2.2",
4325+
"Value": "1.3.0",
43264326
},
43274327
"Type": "AWS::SSM::Parameter",
43284328
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/security-audit-stack.test.ts.snap

+2-2
Original file line numberDiff line numberDiff line change
@@ -2348,7 +2348,7 @@ def script_handler(events, context):
23482348
"Properties": Object {
23492349
"Name": "/accelerator/AWSAccelerator-SecurityAuditStack-222222222222-us-east-1/version",
23502350
"Type": "String",
2351-
"Value": "1.2.2",
2351+
"Value": "1.3.0",
23522352
},
23532353
"Type": "AWS::SSM::Parameter",
23542354
},
@@ -4731,7 +4731,7 @@ def script_handler(events, context):
47314731
"Properties": Object {
47324732
"Name": "/accelerator/AWSAccelerator-SecurityAuditStack-222222222222-us-east-1/version",
47334733
"Type": "String",
4734-
"Value": "1.2.2",
4734+
"Value": "1.3.0",
47354735
},
47364736
"Type": "AWS::SSM::Parameter",
47374737
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/security-resources-stack.test.ts.snap

+2-2
Original file line numberDiff line numberDiff line change
@@ -2983,7 +2983,7 @@ Object {
29832983
"Properties": Object {
29842984
"Name": "/accelerator/AWSAccelerator-SecurityResourcesStack-111111111111-us-east-1/version",
29852985
"Type": "String",
2986-
"Value": "1.2.2",
2986+
"Value": "1.3.0",
29872987
},
29882988
"Type": "AWS::SSM::Parameter",
29892989
},
@@ -6269,7 +6269,7 @@ Object {
62696269
"Properties": Object {
62706270
"Name": "/accelerator/AWSAccelerator-SecurityResourcesStack-111111111111-us-east-1/version",
62716271
"Type": "String",
6272-
"Value": "1.2.2",
6272+
"Value": "1.3.0",
62736273
},
62746274
"Type": "AWS::SSM::Parameter",
62756275
},

‎source/packages/@aws-accelerator/accelerator/test/__snapshots__/security-stack.test.ts.snap

+2-2
Original file line numberDiff line numberDiff line change
@@ -973,7 +973,7 @@ Object {
973973
"Properties": Object {
974974
"Name": "/accelerator/AWSAccelerator-SecurityStack-111111111111-us-east-1/version",
975975
"Type": "String",
976-
"Value": "1.2.2",
976+
"Value": "1.3.0",
977977
},
978978
"Type": "AWS::SSM::Parameter",
979979
},
@@ -1786,7 +1786,7 @@ Object {
17861786
"Properties": Object {
17871787
"Name": "/accelerator/AWSAccelerator-SecurityStack-111111111111-us-east-1/version",
17881788
"Type": "String",
1789-
"Value": "1.2.2",
1789+
"Value": "1.3.0",
17901790
},
17911791
"Type": "AWS::SSM::Parameter",
17921792
},

‎source/packages/@aws-accelerator/installer/test/__snapshots__/installer.test.ts.snap

+8-8
Original file line numberDiff line numberDiff line change
@@ -184,7 +184,7 @@ Object {
184184
"RepositoryBranchName": Object {
185185
"AllowedPattern": ".+",
186186
"ConstraintDescription": "The repository branch name must not be empty",
187-
"Default": "release/v1.2.2",
187+
"Default": "release/v1.3.0",
188188
"Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
189189
"Type": "String",
190190
},
@@ -2049,7 +2049,7 @@ phases:
20492049
"Properties": Object {
20502050
"Name": "/accelerator/AWSAccelerator-Test-InstallerStack/version",
20512051
"Type": "String",
2052-
"Value": "1.2.2",
2052+
"Value": "1.3.0",
20532053
},
20542054
"Type": "AWS::SSM::Parameter",
20552055
},
@@ -2701,7 +2701,7 @@ Object {
27012701
"RepositoryBranchName": Object {
27022702
"AllowedPattern": ".+",
27032703
"ConstraintDescription": "The repository branch name must not be empty",
2704-
"Default": "release/v1.2.2",
2704+
"Default": "release/v1.3.0",
27052705
"Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
27062706
"Type": "String",
27072707
},
@@ -4556,7 +4556,7 @@ phases:
45564556
"Properties": Object {
45574557
"Name": "/accelerator/AWSAccelerator-Test-InstallerStack/version",
45584558
"Type": "String",
4559-
"Value": "1.2.2",
4559+
"Value": "1.3.0",
45604560
},
45614561
"Type": "AWS::SSM::Parameter",
45624562
},
@@ -5240,7 +5240,7 @@ Object {
52405240
"RepositoryBranchName": Object {
52415241
"AllowedPattern": ".+",
52425242
"ConstraintDescription": "The repository branch name must not be empty",
5243-
"Default": "release/v1.2.2",
5243+
"Default": "release/v1.3.0",
52445244
"Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
52455245
"Type": "String",
52465246
},
@@ -7229,7 +7229,7 @@ phases:
72297229
],
72307230
},
72317231
"Type": "String",
7232-
"Value": "1.2.2",
7232+
"Value": "1.3.0",
72337233
},
72347234
"Type": "AWS::SSM::Parameter",
72357235
},
@@ -7956,7 +7956,7 @@ Object {
79567956
"RepositoryBranchName": Object {
79577957
"AllowedPattern": ".+",
79587958
"ConstraintDescription": "The repository branch name must not be empty",
7959-
"Default": "release/v1.2.2",
7959+
"Default": "release/v1.3.0",
79607960
"Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
79617961
"Type": "String",
79627962
},
@@ -9935,7 +9935,7 @@ phases:
99359935
],
99369936
},
99379937
"Type": "String",
9938-
"Value": "1.2.2",
9938+
"Value": "1.3.0",
99399939
},
99409940
"Type": "AWS::SSM::Parameter",
99419941
},

0 commit comments

Comments
 (0)