2025-05-21 v0.8.0

It is still not recommended to use this in production (yet)

Breaking: Module ecs_service now passes secrets as a list/array
Fix: Upgrade EC2 SSM policy from AmazonEC2RoleforSSM to AmazonSSMManagedInstanceCore
Fix: Refine Debian AMI name filter to avoid backports
Add: Module db_mariadb for MariaDB instance
Add: Support for Debian 11 (bullseye) and 12 (bookworm)
Add: Security Module - ResourceExplorer
Add: Module bucket_private log bucket can now receive CloudWatch logs
Add: Module ecs_service supports skeleton creation
Add: Module ecs_service supports use_registry to re-use another container registry
Add: Module ecs_service supports replicas (default 1)
Add: Database tools to the bastion hosts init scripts (debian/al2023)
Add: Common tools to the bastion hosts init scripts (debian/al2023)
Add: Tags to VPC Flow Logs, VPC IAM Roles, and SSM IAM Roles
Add: Variable for container command to execute in ECS
Add: VPC outputs NAT EIP
Add: Valkey module outputs endpoint address
Add: Load Balancer now accepts security group IDs
Add: Bastion RHEL9 Golang
Add: Bastion RHEL9 Docker Compose Plugin
Add: Bastion Debian 11/12 Golang 1.24.3 and Node.js v22.x
Add: Bastion Rocky Linux 9 (RHEL9 base)
Edit: Always adding private DNS record for ECS service
Edit: Moving SSM settings out of VPC to its own module to prevent conflicts
Edit: Terraform State Bucket Name tag and deletion protection
Edit: Changing default Bastion machine type from "t3" to "t3a" for small cost savings
Dependencies: Upgrade provider aws to v5.97.0

Navigation Menu