Skip to content

Latest commit

 

History

History
395 lines (353 loc) · 28 KB

CHANGELOG.rst

File metadata and controls

395 lines (353 loc) · 28 KB
Raw

community.aws Release Notes

Topics

v1.4.0

Minor Changes

  • aws_kms - add support for setting the deletion window using pending_window (PendingWindowInDays) (ansible-collections#200).
  • aws_kms_info - Add key_id and alias parameters to support fetching a single key (ansible-collections#200).
  • dynamodb_ttl - use botocore_at_least helper for checking the available botocore version (ansible-collections#280).
  • ec2_instance - add automatic retries on all paginated queries for temporary errors (ansible-collections#373).
  • ec2_instance - migrate to shared implementation of get_ec2_security_group_ids_from_names. The module will now return an error if the subnet provided isn't in the requested VPC. (ansible-collections#214)
  • ec2_instance_info - added minimum_uptime option with alias uptime for filtering instances that have only been online for certain duration of time in minutes (ansible-collections#356).
  • ec2_launch_template - Add retries on common AWS failures (ansible-collections#326).
  • ec2_vpc_peer - use botocore_at_least helper for checking the available botocore version (ansible-collections#280).
  • ecs_task - use botocore_at_least helper for checking the available botocore version (ansible-collections#280).
  • route53 - migrated from boto to boto3 (ansible-collections#405).
  • various community.aws modules - cleanup error handling to use is_boto3_error_code and is_boto3_error_message helpers (ansible-collections#268).
  • various community.aws modules - cleanup of Python imports (ansible-collections#360).
  • various community.aws modules - improve consistency of handling Boto3 exceptions (ansible-collections#268).
  • various community.aws modules - migrate exception error message handling from fail_json to fail_json_aws (ansible-collections#361).

Deprecated Features

Bugfixes

  • aws_kms - fixes issue where module execution fails without the kms:GetKeyRotationStatus permission. (ansible-collections#200).
  • aws_kms_info - ensure that searching by tag works when tag only exists on some CMKs (ansible-collections#276).
  • aws_s3_cors - fix element type for rules parameter. (ansible-collections#408).
  • aws_ssm - fix the generation of CURL URL used to download Ansible Python file from S3 bucket by `_get_url() due to due to non-assignment of aws region in the URL and not using V4 signature as specified for AWS S3 signature URL by _get_boto_client()` in (ansible-collections#352).
  • aws_ssm - fixed UnicodeEncodeError error when using unicode file names (ansible-collections#295).
  • ec2_eip - fix eip association by instance id & private ip address due to case-sensitivity of the PrivateIpAddress parameter (ansible-collections#328).
  • ec2_vpc_endpoint - ensure changed is correctly set when deleting an endpoint (ansible-collections#362).
  • ec2_vpc_endpoint - fix exception when attempting to delete an endpoint which has already been deleted (ansible-collections#362).
  • ecs_task - use required_if to enforce mandatory parameters based on specified operation (ansible-collections#402).
  • elb_application_lb - during the removal of an instance, the associated listeners are also removed.

v1.3.0

Minor Changes

  • ec2_vpc_igw - Add AWSRetry decorators to improve reliability (ansible-collections#318).
  • ec2_vpc_igw - Add purge_tags parameter so that tags can be added without purging existing tags to match the collection standard tagging behaviour (ansible-collections#318).
  • ec2_vpc_igw_info - Add AWSRetry decorators to improve reliability (ansible-collections#318).
  • ec2_vpc_igw_info - Add convert_tags parameter so that tags can be returned in standard dict format rather than the both list of dict format (ansible-collections#318).
  • rds_instance - set no_log=False on force_update_password to clear warning (ansible-collections#241).
  • redshift - add support for setting tags.
  • s3_lifecycle - Add support for intelligent tiering and deep archive storage classes (ansible-collections#270)

Deprecated Features

  • ec2_vpc_igw_info - After 2022-06-22 the convert_tags parameter default value will change from False to True to match the collection standard behavior (ansible-collections#318).

Bugfixes

New Modules

  • s3_metrics_configuration - Manage s3 bucket metrics configuration in AWS

v1.2.1

Minor Changes

  • aws_ssm connection plugin - Change the (internal) variable name from timeout to plugin_timeout to avoid conflicts with ansible/ansible default timeout (#69284,
  • aws_ssm connection plugin - add STS token options to aws_ssm connection plugin.
  • ec2_scaling_policy - Add support for step_adjustments
  • ec2_scaling_policy - Migrate from boto to boto3
  • rds_subnet_group module - Add Boto3 support and remove Boto support.

Bugfixes

  • aws_ssm connection plugin - namespace file uploads to S3 into unique folders per host, to prevent name collisions. Also deletes files from S3 to ensure temp files are not left behind. (ansible-collections#221, ansible-collections#222)
  • rds_instance - fixed tag type conversion issue for creating read replicas.

v1.2.0

Minor Changes

  • Add retries for aws_api_gateway when AWS throws TooManyRequestsException
  • Migrate the remaning boto3 based modules to the module based helpers for creating AWS connections.

Bugfixes

  • aws_codecommit - fixes issue where module execution would fail if an existing repository has empty description (ansible-collections#195)
  • aws_kms_info - fixes issue where module execution fails because certain AWS KMS keys (e.g. aws/acm) do not permit the calling the API kms:GetKeyRotationStatus (example - https://forums.aws.amazon.com/thread.jspa?threadID=312992) (ansible-collections#199)
  • ec2_instance - Fix a bug where tags were updated in check_mode.
  • ec2_instance - fixes issue where security groups were not changed if the instance already existed. ansible-collections#22
  • iam - Fix false positive warning regarding use of no_log on update_password

v1.1.0

Minor Changes

  • Remaining community.aws AnsibleModule based modules migrated to AnsibleAWSModule.
  • sanity - add future imports in all missing places.

Deprecated Features

  • data_pipeline - the version option has been deprecated and will be removed in a later release. It has always been ignored by the module.
  • ec2_eip - the wait_timeout option has been deprecated and will be removed in a later release. It has had no effect since Ansible 2.3.
  • ec2_lc - the associate_public_ip_address option has been deprecated and will be removed after a later release. It has always been ignored by the module.
  • elb_network_lb - in a later release, the default behaviour for the state option will change from absent to present. To maintain the existing behavior explicitly set state to absent.
  • iam_managed_policy - the fail_on_delete option has been deprecated and will be removed after a later release. It has always been ignored by the module.
  • iam_policy - in a later release, the default value for the skip_duplicates option will change from true to false. To maintain the existing behavior explicitly set it to true.
  • iam_policy - the policy_document option has been deprecated and will be removed after a later release. To maintain the existing behavior use the policy_json option and read the file with the lookup plugin.
  • iam_role - in a later release, the purge_policies option (also know as purge_policy) default value will change from true to false
  • s3_lifecycle - the requester_pays option has been deprecated and will be removed after a later release. It has always been ignored by the module.
  • s3_sync - the retries option has been deprecated and will be removed after 2022-06-01. It has always been ignored by the module.

v1.0.0

Minor Changes

  • Allow all params that boto support in aws_api_gateway module
  • aws_acm - Add the module to group/aws for module_defaults.
  • aws_acm - Update automatic retries to stabilize the integration tests.
  • aws_codecommit - Support updating the description
  • aws_kms - Adds the enable_key_rotation option to enable or disable automatically key rotation.
  • aws_kms - code refactor, some error messages updated
  • aws_kms_info - Adds the enable_key_rotation info to the return value.
  • ec2_asg - Add support for Max Instance Lifetime
  • ec2_asg - Add the ability to use mixed_instance_policy in launch template driven autoscaling groups
  • ec2_asg - Migrated to AnsibleAWSModule
  • ec2_placement_group - make name a required field.
  • ecs_task_definition - Add network_mode=default to support Windows ECS tasks.
  • elb_network_lb - added support to UDP and TCP_UDP protocols
  • elb_target - add awsretry to prevent rate exceeded errors (ansible/ansible#51108)
  • elb_target_group - allow UDP and TCP_UDP protocols; permit only HTTP/HTTPS health checks using response codes and paths
  • iam - make name a required field.
  • iam_cert - make name a required field.
  • iam_policy - The iam_policy module has been migrated from boto to boto3.
  • iam_policy - make iam_name a required field.
  • iam_role - Add support for managing the maximum session duration
  • iam_role - Add support for removing the related instance profile when we delete the role
  • iam_role, iam_user and iam_group - the managed_policy option has been renamed to managed_policies (with an alias added)
  • iam_role, iam_user and iam_group - the purge_policy option has been renamed to purge_policies (with an alias added)
  • lambda - add a tracing_mode parameter to set the TracingConfig for AWS X-Ray. Also allow updating Lambda runtime.
  • purefa_volume - Change I(qos) parameter to I(bw_iops), but retain I(qos) as an alias for backwards compatability (ansible/ansible#61577).
  • redshift - Add AWSRetry calls for errors outside our control
  • route53 - the module now has diff support.
  • sns_topic - Add backoff when we get Topic NotFound exceptions while listing the subscriptions.
  • sqs_queue - Add support for tagging, KMS and FIFO queues
  • sqs_queue - updated to use boto3 instead of boto

Deprecated Features

  • cloudformation - The template_format option had no effect since Ansible 2.3 and will be removed after 2022-06-01
  • data_pipeline - The version option had no effect and will be removed after 2022-06-01
  • ec2_eip - The wait_timeout option had no effect and will be removed after 2022-06-01
  • ec2_key - The wait_timeout option had no effect and will be removed after 2022-06-01
  • ec2_key - The wait option had no effect and will be removed after 2022-06-01
  • ec2_lc - The associate_public_ip_address option had no effect and will be removed after 2022-06-01
  • elb_network_lb - The current default value of the state option has been deprecated and will change from absent to present after 2022-06-01
  • iam_managed_policy - The fail_on_delete option had no effect and will be removed after 2022-06-01
  • iam_policy - The policy_document will be removed after 2022-06-01. To maintain the existing behavior use the policy_json option and read the file with the lookup plugin.
  • iam_policy - The default value of skip_duplicates will change after 2022-06-01 from true to false.
  • iam_role - The default value of the purge_policies has been deprecated and will change from true to false after 2022-06-01
  • s3_lifecycle - The requester_pays option had no effect and will be removed after 2022-06-01
  • s3_sync - The retries option had no effect and will be removed after 2022-06-01

Bugfixes

  • security issue - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
  • security issue - Update AnsibleUnsafeText and AnsibleUnsafeBytes to maintain unsafe context by overriding .encode and .decode. This prevents future issues with to_text, to_bytes, or to_native removing the unsafe wrapper when converting between string types (CVE-2019-14856)
  • azure_rm_dnsrecordset_info - no longer returns empty azure_dnsrecordset facts when called as _info module.
  • azure_rm_resourcegroup_info - no longer returns azure_resourcegroups facts when called as _info module.
  • azure_rm_storageaccount_info - no longer returns empty azure_storageaccounts facts when called as _info module.
  • azure_rm_virtualmachineimage_info - no longer returns empty azure_vmimages facts when called as _info module.
  • azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ansible_facts result, when called as _info module.
  • azure_rm_virtualnetwork_info - no longer returns empty azure_virtualnetworks facts when called as _info module.
  • cloudfront_distribution - Always add field_level_encryption_id to cache behaviour to match AWS requirements
  • cloudwatchlogs_log_group - Fix a KeyError when updating a log group that does not have a retention period (ansible/ansible#47945)
  • cloudwatchlogs_log_group_info - remove limitation of max 50 results
  • ec2_asg - Ensure "wait" is honored during replace operations
  • ec2_launch_template - Update output to include latest_version and default_version, matching the documentation
  • ec2_transit_gateway - Use AWSRetry before ClientError is handled when describing transit gateways
  • ec2_transit_gateway - fixed issue where auto_attach set to yes was not being honored (ansible/ansible#61907)
  • edgeos_config - fix issue where module would silently filter out encrypted passwords
  • fixed issue with sns_topic's delivery_policy option resulting in changed always being true
  • lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (ansible/ansible#63756)
  • route53 - improve handling of octal encoded characters
  • win_credential - Fix issue that errors when trying to add a name with wildcards.

New Modules

  • aws_acm - Upload and delete certificates in the AWS Certificate Manager service
  • aws_acm_info - Retrieve certificate information from AWS Certificate Manager service
  • aws_api_gateway - Manage AWS API Gateway APIs
  • aws_application_scaling_policy - Manage Application Auto Scaling Scaling Policies
  • aws_batch_compute_environment - Manage AWS Batch Compute Environments
  • aws_batch_job_definition - Manage AWS Batch Job Definitions
  • aws_batch_job_queue - Manage AWS Batch Job Queues
  • aws_codebuild - Create or delete an AWS CodeBuild project
  • aws_codecommit - Manage repositories in AWS CodeCommit
  • aws_codepipeline - Create or delete AWS CodePipelines
  • aws_config_aggregation_authorization - Manage cross-account AWS Config authorizations
  • aws_config_aggregator - Manage AWS Config aggregations across multiple accounts
  • aws_config_delivery_channel - Manage AWS Config delivery channels
  • aws_config_recorder - Manage AWS Config Recorders
  • aws_config_rule - Manage AWS Config resources
  • aws_direct_connect_connection - Creates, deletes, modifies a DirectConnect connection
  • aws_direct_connect_gateway - Manage AWS Direct Connect gateway
  • aws_direct_connect_link_aggregation_group - Manage Direct Connect LAG bundles
  • aws_direct_connect_virtual_interface - Manage Direct Connect virtual interfaces
  • aws_eks_cluster - Manage Elastic Kubernetes Service Clusters
  • aws_elasticbeanstalk_app - Create, update, and delete an elastic beanstalk application
  • aws_glue_connection - Manage an AWS Glue connection
  • aws_glue_job - Manage an AWS Glue job
  • aws_inspector_target - Create, Update and Delete Amazon Inspector Assessment Targets
  • aws_kms - Perform various KMS management tasks.
  • aws_kms_info - Gather information about AWS KMS keys
  • aws_region_info - Gather information about AWS regions.
  • aws_s3_bucket_info - Lists S3 buckets in AWS
  • aws_s3_cors - Manage CORS for S3 buckets in AWS
  • aws_secret - Manage secrets stored in AWS Secrets Manager.
  • aws_ses_identity - Manages SES email and domain identity
  • aws_ses_identity_policy - Manages SES sending authorization policies
  • aws_ses_rule_set - Manages SES inbound receipt rule sets
  • aws_sgw_info - Fetch AWS Storage Gateway information
  • aws_ssm_parameter_store - Manage key-value pairs in aws parameter store.
  • aws_step_functions_state_machine - Manage AWS Step Functions state machines
  • aws_step_functions_state_machine_execution - Start or stop execution of an AWS Step Functions state machine.
  • aws_waf_condition - Create and delete WAF Conditions
  • aws_waf_info - Retrieve information for WAF ACLs, Rule , Conditions and Filters.
  • aws_waf_rule - Create and delete WAF Rules
  • aws_waf_web_acl - Create and delete WAF Web ACLs.
  • cloudformation_exports_info - Read a value from CloudFormation Exports
  • cloudformation_stack_set - Manage groups of CloudFormation stacks
  • cloudfront_distribution - Create, update and delete AWS CloudFront distributions.
  • cloudfront_info - Obtain facts about an AWS CloudFront distribution
  • cloudfront_invalidation - create invalidations for AWS CloudFront distributions
  • cloudfront_origin_access_identity - Create, update and delete origin access identities for a CloudFront distribution
  • cloudtrail - manage CloudTrail create, delete, update
  • cloudwatchevent_rule - Manage CloudWatch Event rules and targets
  • cloudwatchlogs_log_group - create or delete log_group in CloudWatchLogs
  • cloudwatchlogs_log_group_info - Get information about log_group in CloudWatchLogs
  • cloudwatchlogs_log_group_metric_filter - Manage CloudWatch log group metric filter
  • data_pipeline - Create and manage AWS Datapipelines
  • dms_endpoint - Creates or destroys a data migration services endpoint
  • dms_replication_subnet_group - creates or destroys a data migration services subnet group
  • dynamodb_table - Create, update or delete AWS Dynamo DB tables
  • dynamodb_ttl - Set TTL for a given DynamoDB table
  • ec2_ami_copy - copies AMI between AWS regions, return new image id
  • ec2_asg - Create or delete AWS AutoScaling Groups (ASGs)
  • ec2_asg_info - Gather information about ec2 Auto Scaling Groups (ASGs) in AWS
  • ec2_asg_lifecycle_hook - Create, delete or update AWS ASG Lifecycle Hooks.
  • ec2_customer_gateway - Manage an AWS customer gateway
  • ec2_customer_gateway_info - Gather information about customer gateways in AWS
  • ec2_eip - manages EC2 elastic IP (EIP) addresses.
  • ec2_eip_info - List EC2 EIP details
  • ec2_elb - De-registers or registers instances from EC2 ELBs
  • ec2_elb_info - Gather information about EC2 Elastic Load Balancers in AWS
  • ec2_instance - Create & manage EC2 instances
  • ec2_instance_info - Gather information about ec2 instances in AWS
  • ec2_launch_template - Manage EC2 launch templates
  • ec2_lc - Create or delete AWS Autoscaling Launch Configurations
  • ec2_lc_find - Find AWS Autoscaling Launch Configurations
  • ec2_lc_info - Gather information about AWS Autoscaling Launch Configurations.
  • ec2_metric_alarm - Create/update or delete AWS Cloudwatch 'metric alarms'
  • ec2_placement_group - Create or delete an EC2 Placement Group
  • ec2_placement_group_info - List EC2 Placement Group(s) details
  • ec2_scaling_policy - Create or delete AWS scaling policies for Autoscaling groups
  • ec2_snapshot_copy - Copies an EC2 snapshot and returns the new Snapshot ID.
  • ec2_transit_gateway - Create and delete AWS Transit Gateways
  • ec2_transit_gateway_info - Gather information about ec2 transit gateways in AWS
  • ec2_vpc_egress_igw - Manage an AWS VPC Egress Only Internet gateway
  • ec2_vpc_endpoint - Create and delete AWS VPC Endpoints.
  • ec2_vpc_endpoint_info - Retrieves AWS VPC endpoints details using AWS methods.
  • ec2_vpc_igw - Manage an AWS VPC Internet gateway
  • ec2_vpc_igw_info - Gather information about internet gateways in AWS
  • ec2_vpc_nacl - create and delete Network ACLs.
  • ec2_vpc_nacl_info - Gather information about Network ACLs in an AWS VPC
  • ec2_vpc_nat_gateway - Manage AWS VPC NAT Gateways.
  • ec2_vpc_nat_gateway_info - Retrieves AWS VPC Managed Nat Gateway details using AWS methods.
  • ec2_vpc_peer - create, delete, accept, and reject VPC peering connections between two VPCs.
  • ec2_vpc_peering_info - Retrieves AWS VPC Peering details using AWS methods.
  • ec2_vpc_route_table - Manage route tables for AWS virtual private clouds
  • ec2_vpc_route_table_info - Gather information about ec2 VPC route tables in AWS
  • ec2_vpc_vgw - Create and delete AWS VPN Virtual Gateways.
  • ec2_vpc_vgw_info - Gather information about virtual gateways in AWS
  • ec2_vpc_vpn - Create, modify, and delete EC2 VPN connections.
  • ec2_vpc_vpn_info - Gather information about VPN Connections in AWS.
  • ec2_win_password - Gets the default administrator password for ec2 windows instances
  • ecs_attribute - manage ecs attributes
  • ecs_cluster - Create or terminate ECS clusters.
  • ecs_ecr - Manage Elastic Container Registry repositories
  • ecs_service - Create, terminate, start or stop a service in ECS
  • ecs_service_info - List or describe services in ECS
  • ecs_tag - create and remove tags on Amazon ECS resources
  • ecs_task - Run, start or stop a task in ecs
  • ecs_taskdefinition - register a task definition in ecs
  • ecs_taskdefinition_info - Describe a task definition in ECS
  • efs - create and maintain EFS file systems
  • efs_info - Get information about Amazon EFS file systems
  • elasticache - Manage cache clusters in Amazon ElastiCache
  • elasticache_info - Retrieve information for AWS ElastiCache clusters
  • elasticache_parameter_group - Manage cache parameter groups in Amazon ElastiCache.
  • elasticache_snapshot - Manage cache snapshots in Amazon ElastiCache
  • elasticache_subnet_group - manage ElastiCache subnet groups
  • elb_application_lb - Manage an Application load balancer
  • elb_application_lb_info - Gather information about application ELBs in AWS
  • elb_classic_lb - Creates or destroys Amazon ELB.
  • elb_classic_lb_info - Gather information about EC2 Elastic Load Balancers in AWS
  • elb_instance - De-registers or registers instances from EC2 ELBs
  • elb_network_lb - Manage a Network Load Balancer
  • elb_target - Manage a target in a target group
  • elb_target_group - Manage a target group for an Application or Network load balancer
  • elb_target_group_info - Gather information about ELB target groups in AWS
  • elb_target_info - Gathers which target groups a target is associated with.
  • execute_lambda - Execute an AWS Lambda function
  • iam - Manage IAM users, groups, roles and keys
  • iam_cert - Manage server certificates for use on ELBs and CloudFront
  • iam_group - Manage AWS IAM groups
  • iam_managed_policy - Manage User Managed IAM policies
  • iam_mfa_device_info - List the MFA (Multi-Factor Authentication) devices registered for a user
  • iam_password_policy - Update an IAM Password Policy
  • iam_policy - Manage inline IAM policies for users, groups, and roles
  • iam_policy_info - Retrieve inline IAM policies for users, groups, and roles
  • iam_role - Manage AWS IAM roles
  • iam_role_info - Gather information on IAM roles
  • iam_saml_federation - Maintain IAM SAML federation configuration.
  • iam_server_certificate_info - Retrieve the information of a server certificate
  • iam_user - Manage AWS IAM users
  • iam_user_info - Gather IAM user(s) facts in AWS
  • kinesis_stream - Manage a Kinesis Stream.
  • lambda - Manage AWS Lambda functions
  • lambda_alias - Creates, updates or deletes AWS Lambda function aliases
  • lambda_event - Creates, updates or deletes AWS Lambda function event mappings
  • lambda_facts - Gathers AWS Lambda function details as Ansible facts
  • lambda_info - Gathers AWS Lambda function details
  • lambda_policy - Creates, updates or deletes AWS Lambda policy statements.
  • lightsail - Manage instances in AWS Lightsail
  • rds - create, delete, or modify Amazon rds instances, rds snapshots, and related facts
  • rds_instance - Manage RDS instances
  • rds_instance_info - obtain information about one or more RDS instances
  • rds_param_group - manage RDS parameter groups
  • rds_snapshot - manage Amazon RDS snapshots.
  • rds_snapshot_info - obtain information about one or more RDS snapshots
  • rds_subnet_group - manage RDS database subnet groups
  • redshift_cross_region_snapshots - Manage Redshift Cross Region Snapshots
  • redshift_info - Gather information about Redshift cluster(s)
  • route53 - add or delete entries in Amazons Route53 DNS service
  • route53_health_check - Add or delete health-checks in Amazons Route53 DNS service
  • route53_info - Retrieves route53 details using AWS methods
  • route53_zone - add or delete Route53 zones
  • s3_bucket_notification - Creates, updates or deletes S3 Bucket notification for lambda
  • s3_lifecycle - Manage s3 bucket lifecycle rules in AWS
  • s3_logging - Manage logging facility of an s3 bucket in AWS
  • s3_sync - Efficiently upload multiple files to S3
  • s3_website - Configure an s3 bucket as a website
  • sns - Send Amazon Simple Notification Service messages
  • sns_topic - Manages AWS SNS topics and subscriptions
  • sqs_queue - Creates or deletes AWS SQS queues.
  • sts_assume_role - Assume a role using AWS Security Token Service and obtain temporary credentials
  • sts_session_token - Obtain a session token from the AWS Security Token Service