All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Upgrade cross-spawn to mitigate CVE-2024-21538
- Migrated from pip to poetry
- Update base python image to mitigate CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2023-7104
- Some user sesssions not appearing in session table due to batchWrite API limit being reached
- Security.md file
- Workspace analysis failing when pervious data is recorded in database but empty.
- Workspace analysis failing when timestamps from user connected data doesn't exist in other metric data.
- Workspace only reporting 24 hour period
- Workspace not reporting tags
- Updated micromatch to mitigate CVE-2024-4067.
- Workspace performance metrics
- DynamoDB tables for workspace data and for individual user sessions
- Auto-updating container image for most recent patches up to next minor release
- Private subnets for Fargate container
- Powertools logging
- Operational insights CloudWatch dashboard
- Support for G4DN workspaces
- sts token expired after one hour
- Updated the base python image in the Dockerfile used to mitigate CVE-2023-50387, CVE-2023-5678, CVE-2024-0727, CVE-2023-6129 and several low severity vulnerabilities
- Updated braces to mitigate CVE-2024-4068.
- Updated IDNA to mitigate CVE-2024-3651.
- Updated urllib3 to mitigate CVE-2024-37891.
- Updated setuptools to mitigate CVE-2024-6345.
- Updated requests to mitigate CVE-2024-35195.
- Updated Certifi to mitigate CVE-2024-39689.
- Updated boto3, botocore, s3transfer to resolve conflicting dependencies.
- Updated the base python image in the Dockerfile used to mitigate CVE-2023-47038.
- Update pip to mitigate CVE-2023-5752.
- Add dependency to route to mitigate race condition between internet gateway and the route to the internet gateway.
- Updated @babel/traverse to mitigate CVE-2023-45133
- Updated urllib3 to mitigate CVE-2023-45803
- Updated the base python image in the Dockerfile used to fix the following CVEs: CVE-2023-29491, CVE-2023-4911, CVE-2023-36054, CVE-2023-3446, CVE-2023-3817.
- Added the bugfix to skip the processing of the workspaces in error state.
- Updated all the package versions to resolve security vulnerabilities.
- Patch Certifi vulnerability. Removal of e-Tugra root certificate CVE-2023-37920
- Patch Requests vulnerability. Leaking Proxy-Authorization headers CVE-2023-32681
- Patch aws-cdk-lib vulnerability. EKS overly permissive trust policies CVE-2023-35165
- Patch ECR base image vulnerabilities, fixing the following: CVE-2023-2650 CVE-2022-29458 CVE-2022-3821 CVE-2023-0465 CVE-2022-4415 CVE-2023-0464 CVE-2023-0466
- Updated the docker base image to the python 3.11.
- Updated all the lambda runtimes to python 3.11.
- Changed the Object Ownership for logging bucket from 'Object writer' to 'Bucket owner enforced' to mitigate the impact caused by new S3 default settings.
- Updated S3 bucket policy to support access logging.
- Added support to block customer misconfiguration for 'Terminate Unused Workspaces' feature. The feature will terminate workspaces only on the last day of the month to avoid accidental termination due to misconfiguration.
- Updated the solution to use CDK V2 to generate CloudFormation templates and support CDK deployments.
- Updated the 'Terminate Workspace' feature to accept user input for number of months to check for before terminating unused workspaces.
- Added a retention policy of 365 days to ECS logs to optimize the costs.
- The CFN templates from the deployment folder as we are using CDK V2 to generate templates.
- Fixed vulnerabilities py CVE-2022-42969, pytest, requests, certifi CVE-2022-23491
- Added support for AWS Organizations
- Added VPC Endpoints for S3 and DynamoDB
- Fixed the bug to get all the workspaces in a directory
- Fixed the bug to correctly calculate billable hours if user disconnects workspace within autostop timeout
- Feature to terminate unused workspaces
- Generate aggregated reports
- Feature to specify AWS Regions to monitor
- Support for Gov cloud partition
- Fixed the bug to catch InvalidResourceException during the modify_workspace API Call
- Fixed the bug to catch the Timeout error when sending solution metrics
- Feature to support using existing VPC for ECS task
- Calculate ADMIN_MAINTENANCE hours and add it to final billable hours
- Added new columns to the daily report
- Improved the accuracy to calculate billable hours
- Removed the the api call for describe_workspace_bundles to address the throttling issue
- Changed the metric to calculate billable hours from "Stopped" to "UserConnected"
- Made tagging case insensitive
- Removed duplicate handler in CF