community.aws 5.0.0

In this release many community modules have been promoted to Red Hat supported status. Those modules have been moved from the community.aws to amazon.aws collection.

The community.aws collection has dropped support for botocore<1.21.0 and boto3<1.18.0. Support for ansible-core<2.11 has also been dropped.

This release also brings some new features, bugfixes, breaking changes and deprecated features.

Full Changelog

Minor Changes

• acm_certificate - Move to jittered backoff (ansible-collections/amazon.aws#946).
• acm_certificate_info - Move to jittered backoff (ansible-collections/amazon.aws#946).
• api_gateway_domain - Move to jittered backoff (#1386).
• autoscaling_group_info - minor sanity test fixes (#1410).
• aws_acm - the aws_acm module has been renamed to acm_certificate, aws_acm remains as an alias (#1263).
• aws_acm_info - the aws_acm_info module has been renamed to acm_certificate_info, aws_acm_info remains as an alias (#1263).
• aws_api_gateway - the aws_api_gateway module has been renamed to api_gateway, aws_api_gateway remains as an alias (#1288).
• aws_api_gateway_domain - the aws_api_gateway_domain module has been renamed to api_gateway_domain, aws_api_gateway_domain remains as an alias (#1288).
• aws_application_scaling_policy - the aws_application_scaling_policy module has been renamed to application_autoscaling_policy, aws_application_scaling_policy remains as an alias (#1314).
• aws_batch_compute_environment - the aws_batch_compute_environment module has been renamed to batch_compute_environment, aws_batch_compute_environment remains as an alias (#1272).
• aws_batch_job_definition - the aws_batch_job_definition module has been renamed to batch_job_definition, aws_batch_job_definition remains as an alias (#1272).
• aws_batch_job_queue - the aws_batch_job_queue module has been renamed to batch_job_queue, aws_batch_job_queue remains as an alias (#1272).
• aws_codebuild - the aws_codebuild module has been renamed to codebuild_project, aws_codebuild remains as an alias (#1308).
• aws_codecommit - the aws_codecommit module has been renamed to codecommit_repository, aws_codecommit remains as an alias (#1308).
• aws_codepipeline - the aws_codepipeline module has been renamed to codepipeline, aws_codepipeline remains as an alias (#1308).
• aws_config_aggregation_authorization - the aws_config_aggregation_authorization module has been renamed to config_aggregation_authorization, aws_config_aggregation_authorization remains as an alias (#1305).
• aws_config_aggregator - the aws_config_aggregator module has been renamed to config_aggregator, aws_config_aggregator remains as an alias (#1305).
• aws_config_delivery_channel - the aws_config_delivery_channel module has been renamed to config_delivery_channel, aws_config_delivery_channel remains as an alias (#1305).
• aws_config_recorder - the aws_config_recorder module has been renamed to config_recorder, aws_config_recorder remains as an alias (#1305).
• aws_config_rule - the aws_config_rule module has been renamed to config_rule, aws_config_rule remains as an alias (#1305).
• aws_direct_connect_confirm_connection - the aws_direct_connect_confirm_connection module has been renamed to directconnect_confirm_connection, aws_direct_connect_confirm_connection remains as an alias (#1286).
• aws_direct_connect_connection - the aws_direct_connect_connection module has been renamed to directconnect_connection, aws_direct_connect_connection remains as an alias (#1286).
• aws_direct_connect_gateway - the aws_direct_connect_gateway module has been renamed to directconnect_gateway, aws_direct_connect_gateway remains as an alias (#1286).
• aws_direct_connect_link_aggregation_group - the aws_direct_connect_link_aggregation_group module has been renamed to directconnect_link_aggregation_group, aws_direct_connect_link_aggregation_group remains as an alias (#1286).
• aws_direct_connect_virtual_interface - the aws_direct_connect_virtual_interface module has been renamed to directconnect_virtual_interface, aws_direct_connect_virtual_interface remains as an alias (#1286).
• aws_eks_cluster - the aws_eks_cluster module has been renamed to eks_cluster, aws_eks_cluster remains as an alias (#1269).
• aws_glue_connection - the aws_glue_connection module has been renamed to glue_connection, aws_glue_connection remains as an alias (#1300).
• aws_glue_crawler - the aws_glue_crawler module has been renamed to glue_crawler, aws_glue_crawler remains as an alias (#1300).
• aws_glue_job - the aws_glue_job module has been renamed to glue_job, aws_glue_job remains as an alias (#1300).
• aws_inspector_target - the aws_inspector_target module has been renamed to inspector_target, aws_inspector_target remains as an alias (#1318).
• aws_kms - the aws_kms module has been renamed to kms_key, aws_kms remains as an alias (#1284).
• aws_kms_info - the aws_kms_info module has been renamed to kms_key_info, aws_kms_info remains as an alias (#1284).
• aws_msk_cluster - the aws_msk_cluster module has been renamed to msk_cluster, aws_msk_cluster remains as an alias (#1311).
• aws_msk_config - the aws_msk_config module has been renamed to msk_config, aws_msk_config remains as an alias (#1311).
• aws_s3_bucket_info - the aws_s3_bucket_info module has been renamed to s3_bucket_info, aws_s3_bucket_info remains as an alias (#1271).
• aws_s3_cors - the aws_s3_cors module has been renamed to s3_cors, aws_s3_cors remains as an alias (#1271).
• aws_secret - the aws_secret module has been renamed to secretsmanager_secret, aws_secret remains as an alias (#1315).
• aws_ses_identity - the aws_ses_identity module has been renamed to ses_identity, aws_ses_identity remains as an alias (#1264).
• aws_ses_identity_policy - the aws_ses_identity_policy module has been renamed to ses_identity_policy, aws_ses_identity_policy remains as an alias (#1264).
• aws_ses_rule_set - the aws_ses_rule_set module has been renamed to ses_rule_set, aws_ses_rule_set remains as an alias (#1264).
• aws_sgw_info - the aws_sgw_info module has been renamed to storagegateway_info, aws_sgw_info remains as an alias (#1301).
• aws_ssm_parameter_store - the aws_ssm_parameter_store module has been renamed to ssm_parameter, aws_ssm_parameter_store remains as an alias (#1313).
• aws_step_functions_state_machine - the aws_step_functions_state_machine module has been renamed to stepfunctions_state_machine, aws_step_functions_state_machine remains as an alias (#1310).
• aws_step_functions_state_machine_execution - the aws_step_functions_state_machine_execution module has been renamed to stepfunctions_state_machine_execution, aws_step_functions_state_machine_execution remains as an alias (#1310).
• aws_waf_condition - the aws_waf_condition module has been renamed to waf_condition, aws_waf_condition remains as an alias (#1299).
• aws_waf_info - the aws_waf_info module has been renamed to waf_info, aws_waf_info remains as an alias (#1299).
• aws_waf_rule - the aws_waf_rule module has been renamed to waf_rule, aws_waf_rule remains as an alias (#1299).
• aws_waf_web_acl - the aws_waf_web_acl module has been renamed to waf_web_acl, aws_waf_web_acl remains as an alias (#1299).
• cloudfront_distribution - minor sanity test fixes (#1410).
• cloudfront_info - the cloudfront_info module has been renamed to cloudfront_distribution_info, cloudfront_info remains as an alias (#1352).
• cloudfront_origin_access_identity - minor sanity test fixes (#1410).
• cloudtrail - minor sanity test fixes (#1410).
• community.aws modules - the ec2_url parameter has been renamed to endpoint_url for consistency, ec2_url remains as an alias (ansible-collections/amazon.aws#992).
• ec2_asg - the ec2_asg module has been renamed to autoscaling_group, ec2_asg remains as an alias (#1294).
• ec2_asg_info - the ec2_asg_info module has been renamed to autoscaling_group_info, ec2_asg_info remains as an alias (#1294).
• ec2_asg_instance_refresh - the ec2_asg_instance_refresh module has been renamed to autoscaling_instance_refresh, ec2_asg_instance_refresh remains as an alias (#1294).
• ec2_asg_instance_refresh_info - the ec2_asg_instance_refresh_info module has been renamed to autoscaling_instance_refresh_info, ec2_asg_instance_refresh_info remains as an alias (#1294).
• ec2_asg_lifecycle_hook - the ec2_asg_lifecycle_hook module has been renamed to autoscaling_lifecycle_hool, ec2_asg_lifecycle_hook remains as an alias (#1294).
• ec2_asg_scheduled_action - the ec2_asg_scheduled_action module has been renamed to autoscaling_scheduled_action, ec2_asg_scheduled_action remains as an alias (#1294).
• ec2_lc - the ec2_lc module has been renamed to autoscaling_launch_config, ec2_lc remains as an alias (#1294).
• ec2_lc_find - the ec2_lc_find module has been renamed to autoscaling_launch_config_find, ec2_lc_find remains as an alias (#1294).
• ec2_lc_info - the ec2_lc_info module has been renamed to autoscaling_launch_config_info, ec2_lc_info remains as an alias (#1294).
• ec2_metric_alarm - the ec2_metric_alarm module has been renamed to cloudwatch_metric_alarm, ec2_metric_alarm remains as an alias (#1304).
• ec2_scaling_policy - the ec2_scaling_policy module has been renamed to autoscaling_policy, ec2_scaling_policy remains as an alias (#1294).
• ec2_vpc_nacl - minor sanity test fixes (#1410).
• ec2_vpc_vpn - minor tweak to VPNConnectionException to pass message through to the superclass (#1407).
• eks_fargate_profile - minor sanity test fixes (#1410).
• elb_target_group - instead of completely ignoring health_check_path and successful_response_codes if health_check_protocol is not supplied, now raises an error (#29).
• redshift - minor sanity test fixes (#1410).
• s3_bucket_info - minor sanity test fixes (#1410).
• waf_condition - Move to jittered backoff (ansible-collections/amazon.aws#946).
• waf_info - Move to jittered backoff (ansible-collections/amazon.aws#946).
• waf_rule - Move to jittered backoff (ansible-collections/amazon.aws#946).
• waf_web_acl - Move to jittered backoff (ansible-collections/amazon.aws#946).

Breaking Changes / Porting Guide

• acm_certificate - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• autoscaling_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.autoscaling_group.
• autoscaling_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.autoscaling_group_info.
• cloudfront_distribution - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• cloudtrail - The module has been migrated to the amazon.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudtrail.
• cloudwatch_metric_alarm - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatch_metric_alarm.
• cloudwatchevent_rule - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchevent_rule.
• cloudwatchlogs_log_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group.
• cloudwatchlogs_log_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group_info.
• cloudwatchlogs_log_group_metric_filter - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group_metric_filter.
• community.aws collection - Support for ansible-core < 2.11 has been dropped (#1541).
• community.aws collection - The community.aws collection has dropped support for botocore<1.21.0 and boto3<1.18.0. Most modules will continue to work with older versions of the AWS SDK, however compatability with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (#1362).
• ec2_eip - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_eip.
• ec2_eip_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_eip_info.
• ec2_vpc_vpn - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• elb_application_lb - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.elb_application_lb.
• elb_application_lb_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.elb_application_lb_info.
• execute_lambda - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.execute_lambda.
• iam_policy - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_policy.
• iam_policy_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_policy_info.
• iam_server_certificate - Passing file names to the cert, chain_cert and key parameters has been removed. We recommend using a lookup plugin to read the files instead, see the documentation for an example (#1265).
• iam_server_certificate - the default value for the dup_ok parameter has been changed to true. To preserve the original behaviour explicitly set the dup_ok parameter to false (#1265).
• iam_user - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_user.
• iam_user_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_user_info.
• kms_key - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.kms_key.
• kms_key - managing the KMS IAM Policy via policy_mode and policy_grant_types was previously deprecated and has been removed in favor of the policy option (#1344).
• kms_key - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• kms_key_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.kms_key_info.
• lambda - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda.
• lambda_alias - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_alias.
• lambda_event - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_event.
• lambda_execute - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_execute.
• lambda_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_info.
• lambda_policy - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_policy.
• rds_cluster - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster.
• rds_cluster_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster_info.
• rds_cluster_snapshot - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster_snapshot.
• rds_instance - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance.
• rds_instance_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance_info.
• rds_instance_snapshot - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance_snapshot.
• rds_option_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_option_group.
• rds_option_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_option_group_info.
• rds_param_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_param_group.
• rds_param_group - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• rds_snapshot_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_snapshot_info.
• rds_subnet_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_subnet_group.
• route53 - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53.
• route53_health_check - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_health_check.
• route53_health_check - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• route53_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_info.
• route53_zone - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_zone.
• route53_zone - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).
• sqs_queue - the previously deprecated default value of purge_tags=False has been updated to purge_tags=True (#1343).

Deprecated Features

• community.aws collection - due to the AWS SDKs announcing the end of support for Python less than 3.7 (https://aws.amazon.com/blogs/developer/python-support-policy-updates-for-aws-sdks-and-tools/) support for Python less than 3.7 by this collection has been deprecated and will be removed in a release after 2023-05-31 (#1361).

Bugfixes

• ec2_placement_group - Handle a potential race creation during the creation of a new Placement Group (#1477).
• elb_network_lb - fixes bug where ip_address_type in return value was not updated (#1365).
• rds_cluster - fixes bug where specifiying an rds cluster parameter group raises a KeyError (#1417).
• s3_sync - fix etag generation when running in FIPS mode (#757).

New Modules

• accessanalyzer_validate_policy_info - Performs validation of IAM policies