v1.6.0

What's Changed

Security

• At-rest volume encryption end-to-end (CMMC Level 1 Compliant)
• Intra-AZ traffic encrypted by default (IPsec)

Identity (IAM/STS)

• STS: AssumeRole + GetCallerIdentity with session credentials
• IAM roles and instance profiles

Compute

• NVIDIA MIG GPU slicing, selectable per instance via mig.<profile> types
• GPU inventory in the admin UI and instance-type picker
• Ubuntu 26.04 NVIDIA and AMD GPU AMIs
• Intel/AMD instance types schedulable on any host (t3↔t3a, c5↔c5a)

Load Balancing (ELBv2)

• ModifyListener: edit listeners in place without downtime
• Listener rules with host, path, header, method, source-IP, and query routing
• ModifyTargetGroup health-check settings

Networking

• AWS-correct route tables: private subnets stay isolated from the internet gateway
• Connectivity restored automatically after an EIP is reused
• Per-subnet NAT gateway egress

Reliability

• DescribeInstanceTypes / DescribeInstanceAttribute fixed for Terraform on multi-node clusters
• Volume attachments resolve correctly via aws_volume_attachment
• Multi-tenant default VPCs each get reliable instance connectivity