Skip to content

v1.0.0

Latest
Latest

Choose a tag to compare

View all tags
@r41n403 r41n403 released this 24 Jun 11:21
· 18 commits to main since this release
v1.0.0
This tag was signed with the committer’s verified signature.
r41n403 Rain
GPG key ID: 7C6A0C709558390B
Verified
Learn about vigilant mode.
d2f3e8f
This commit was signed with the committer’s verified signature.
r41n403 Rain
GPG key ID: 7C6A0C709558390B
Verified
Learn about vigilant mode.

MAWS v1.0.0

First major release. This version brings significant new functionality across Script Runner, CloudFormation Templates, session management, and the app's overall polish.

What's New

⚡ Script Runner

  • 14 prebaked scripts covering security hardening, cost optimisation, IAM, and operations:
    • Convert gp2 → gp3 volumes
    • Audit & lock default security groups
    • Block S3 public access
    • Enable EBS encryption by default
    • Create Identity Center user
    • Enable cost alerts (CloudWatch billing alarm)
    • Enforce IMDSv2 on EC2 instances
    • Set CloudWatch Logs retention
    • Set up ALB access logs
    • Check EC2 tenancy
    • Delete unused security groups, orphaned AMIs, unused volumes, unattached EIPs (all with dry-run support)
    • Enable GuardDuty (with protection plan selection)
    • Enable Macie
    • Enable CloudTrail
    • New: Enable Amazon Detective — creates a behaviour graph and optionally auto-enables for new organisation accounts (requires GuardDuty)
  • Custom scripts now support category and danger tags
  • Import from file — pick any .sh, .py, or script file from your Downloads folder; imports are validated for size, encoding, binary content, line length, and script structure before being accepted
  • Favourites — star any script (prebaked or custom) to pin it to a Favourites section at the top of the list; filter to favourites only via the category dropdown

📐 CloudFormation Templates

  • Custom templates now support category and danger tags
  • Import from file — import YAML or JSON CFN templates with full structural validation (checks for CFN keys, JSON well-formedness, rejects binary/non-UTF-8 files)
  • Favourites — same starring and filtering as Script Runner

🕐 Session Management

  • Session remaining time displayed near the UTC clock — colour-coded green → yellow → red as expiry approaches
  • Manual refresh button — refresh your AWS session credentials on demand
  • Auto-refresh setting — configure MAWS to automatically refresh your session at a set interval (1–10 hours) before it expires

🕰 UTC Clock

  • Now syncs against a trusted time server (Cloudflare 1.1.1.1 with worldtimeapi.org fallback) rather than the Mac system clock
  • Shows a drift warning if the local system clock is off by 5 seconds or more

🔔 Health Alerts

  • Alerts are now dismissible — clicking Dismiss turns the health dot green
  • Dismissed state persists until genuinely new events appear (fingerprint-based), so you won't be re-alerted for the same issue
  • Tooltip no longer closes when moving the cursor from the health dot to the Dismiss button

ℹ️ About Panel

  • Now shows author name, email, and GitHub repository URL in the Credits field

Testing

83 unit tests across 7 suites — all passing:

  • file-validator — import validation (size, binary detection, UTF-8, line length, script/CFN structure)
  • script-runner-favorites — toggle, persist, list, multi-favorite, consistency
  • cfn-templates-favorites — same coverage for CFN templates
  • settings — extended with auto-refresh defaults and persistence
  • audit-logger, aws-auth-validation, cost-checker — existing suites unchanged

Installation

Download the .dmg from the assets below, open it, and drag MAWS to your Applications folder.

Requires macOS 12+ and a configured AWS profile (SSO or access key).

Full Changelog: v0.2.5...v1.0.0

Full Changelog: v0.2.5...v1.0.0

Assets 3
Loading