Skip to content

v0.9.0

Latest
Latest

Choose a tag to compare

View all tags
@ryanlelek ryanlelek released this 26 Aug 19:53
· 14 commits to main since this release
0.9.0
c1bb175

2025-08-26 v0.9.0

It is still not recommended to use this in production (yet).
Consider this a "beta" version, but you can use and test it to see if it meets your needs.

  • Removed: Redis module, use Valkey instead (license fork)
  • Removed: Resource Explorer in module "security" (create in console instead)
  • Breaking: Moving Valkey password to Secrets Manager
  • Breaking: Moving OpenSearch password to Secrets Manager
  • Fix: Output ordering of VPC subnets
  • Edit: Improve module sns
  • Edit: Default log retention changed from 365 days to 400 days
  • Edit: Refine VPC Flow Logs IAM Role/Policy
  • Edit: EC2 Monitoring enabled, EBS Optimization enabled, Dev Mode, remove AZ, Add Recovery Alarm
  • Edit: ASG EBS Optimized, Dynamic AMI Lookup, Encrypted Disk, Health Check, KMS Encryption, Dev Mode, Alarms
  • Edit: ECS Cluster to better utilize resources, Dev Mode, CloudWatch Log Group, CloudWatch alarms
  • Edit: Load Balancer, more restrictive TLS/ciphers, cross-zone load balancing, CloudWatch alarms, encrypted WAF logs
  • Edit: WAF: rate limits, SQLi/Unix/Linux rule sets, Geo Blocking
  • Edit: SSM now uses its own KMS key, and has CloudTrail alarms
  • Edit: Bucket Private Logging Bucket, Allow CloudWatch Logs (BucketOwnerPreferred)
  • Add: Module Bucket Public with CloudFront
  • Add: Module Kafka_MSK (experimental)
  • Add: Aurora MySQL (primary with optional readers)
  • Add: ECS Service option: additional_hosts
  • Add: Load Balancer option: waf_enabled
  • Add: VPC Endpoints to modules/vpc (S3/DynamoDB are free and enabled by default)
  • Add: Module for AMI Lookup
  • Add: Enable switches for IGW/NAT to modules/vpc (default: false)
  • Add: Module security_global
  • Add: Example for Debian ARM64 bastion instances
  • Add: Rocky Linux 10
  • Add: RHEL 10
  • Add: Valkey cluster mode switch selection
  • Add: Example for allowing only Cloudflare IP traffic on public Load Balancer
  • Dependencies: Upgrade provider aws to 6.10.0
  • Dependencies: Upgrade OpenTofu minimum from v1.9 to v1.10
  • Dependencies: Upgrade golang to v1.25.0
  • Dependencies: Upgrade PostgreSQL default version from v17.4 to v17.6
  • Dependencies: Upgrade Valkey default version from v8.0 to v8.1
  • Dependencies: Upgrade OpenSearch default version from v2.17 to v2.19
  • Dependencies: Upgrade MariaDB default version from v11.4.5 to v11.8.3
Assets 2
Loading