Skip to content

v0.2.2

Choose a tag to compare

View all tags
@gofastercloud gofastercloud released this 10 Feb 03:21
· 33 commits to main since this release
v0.2.2
0919057
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Fixed

  • KMS key policy missing CloudWatch Logs service principal — CloudWatch Logs uses a regional service principal (logs.<region>.amazonaws.com) with a kms:EncryptionContext condition. The Lambda log group failed to create with AccessDeniedException. Added a dedicated AllowCloudWatchLogs statement to the KMS key policy.

  • GuardDuty Malware Protection Plan creation failed — The GuardDuty IAM role was missing S3 bucket notification permissions (s3:GetBucketNotification, s3:PutBucketNotification) and EventBridge managed rule permissions (events:PutRule, events:PutTargets, events:DeleteRule, events:RemoveTargets, events:DescribeRule).

  • Transfer Family user creation failed with trailing slash — Home directory mapping targets included a trailing / which Transfer Family rejects. Fixed with trimsuffix().

Changed

  • lambda_reserved_concurrency now accepts -1 — Uses unreserved account concurrency, necessary for accounts where reserving even 10 would drop below the 50-unreserved minimum.

Full Changelog: v0.2.1...v0.2.2

Assets 2
Loading