v1.0.0

MAWS v1.0.0

First major release. This version brings significant new functionality across Script Runner, CloudFormation Templates, session management, and the app's overall polish.

---

What's New

⚡ Script Runner

• 14 prebaked scripts covering security hardening, cost optimisation, IAM, and operations:
  • Convert gp2 → gp3 volumes
  • Audit & lock default security groups
  • Block S3 public access
  • Enable EBS encryption by default
  • Create Identity Center user
  • Enable cost alerts (CloudWatch billing alarm)
  • Enforce IMDSv2 on EC2 instances
  • Set CloudWatch Logs retention
  • Set up ALB access logs
  • Check EC2 tenancy
  • Delete unused security groups, orphaned AMIs, unused volumes, unattached EIPs (all with dry-run support)
  • Enable GuardDuty (with protection plan selection)
  • Enable Macie
  • Enable CloudTrail
  • New: Enable Amazon Detective — creates a behaviour graph and optionally auto-enables for new organisation accounts (requires GuardDuty)
• Custom scripts now support category and danger tags
• Import from file — pick any .sh, .py, or script file from your Downloads folder; imports are validated for size, encoding, binary content, line length, and script structure before being accepted
• Favourites — star any script (prebaked or custom) to pin it to a Favourites section at the top of the list; filter to favourites only via the category dropdown

📐 CloudFormation Templates

• Custom templates now support category and danger tags
• Import from file — import YAML or JSON CFN templates with full structural validation (checks for CFN keys, JSON well-formedness, rejects binary/non-UTF-8 files)
• Favourites — same starring and filtering as Script Runner

🕐 Session Management

• Session remaining time displayed near the UTC clock — colour-coded green → yellow → red as expiry approaches
• Manual refresh button — refresh your AWS session credentials on demand
• Auto-refresh setting — configure MAWS to automatically refresh your session at a set interval (1–10 hours) before it expires

🕰 UTC Clock

• Now syncs against a trusted time server (Cloudflare 1.1.1.1 with worldtimeapi.org fallback) rather than the Mac system clock
• Shows a drift warning if the local system clock is off by 5 seconds or more

🔔 Health Alerts

• Alerts are now dismissible — clicking Dismiss turns the health dot green
• Dismissed state persists until genuinely new events appear (fingerprint-based), so you won't be re-alerted for the same issue
• Tooltip no longer closes when moving the cursor from the health dot to the Dismiss button

ℹ️ About Panel

• Now shows author name, email, and GitHub repository URL in the Credits field

---

Testing

83 unit tests across 7 suites — all passing:

• file-validator — import validation (size, binary detection, UTF-8, line length, script/CFN structure)
• script-runner-favorites — toggle, persist, list, multi-favorite, consistency
• cfn-templates-favorites — same coverage for CFN templates
• settings — extended with auto-refresh defaults and persistence
• audit-logger, aws-auth-validation, cost-checker — existing suites unchanged

---

Installation

Download the .dmg from the assets below, open it, and drag MAWS to your Applications folder.

Requires macOS 12+ and a configured AWS profile (SSO or access key).

Full Changelog: v0.2.5...v1.0.0

Full Changelog: v0.2.5...v1.0.0