V2.6.1

What's Changed

• Bump github/codeql-action from 3.25.14 to 3.25.15 by @dependabot in #383
• Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #384
• Bump bridgecrewio/checkov-action from 12.2836.0 to 12.2840.0 by @dependabot in #385
• Bump bridgecrewio/checkov-action from 12.2840.0 to 12.2843.0 by @dependabot in #386
• Bump bridgecrewio/checkov-action from 12.2843.0 to 12.2844.0 by @dependabot in #387
• Bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #388
• Bump bridgecrewio/checkov-action from 12.2844.0 to 12.2845.0 by @dependabot in #389
• Bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #390
• Bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #391
• Bump bridgecrewio/checkov-action from 12.2845.0 to 12.2847.0 by @dependabot in #392
• Bump bridgecrewio/checkov-action from 12.2847.0 to 12.2849.0 by @dependabot in #393
• Bump github/codeql-action from 3.26.0 to 3.26.1 by @dependabot in #394
• Bump github/codeql-action from 3.26.1 to 3.26.2 by @dependabot in #395
• Bump bridgecrewio/checkov-action from 12.2849.0 to 12.2852.0 by @dependabot in #396
• Bump github/codeql-action from 3.26.2 to 3.26.3 by @dependabot in #397
• Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 by @dependabot in #399
• Bump bridgecrewio/checkov-action from 12.2852.0 to 12.2857.0 by @dependabot in #400
• Bump github/codeql-action from 3.26.3 to 3.26.4 by @dependabot in #401
• Bump bridgecrewio/checkov-action from 12.2857.0 to 12.2858.0 by @dependabot in #402
• Bump github/codeql-action from 3.26.4 to 3.26.5 by @dependabot in #403
• Bump bridgecrewio/checkov-action from 12.2858.0 to 12.2860.0 by @dependabot in #404
• Bump github/codeql-action from 3.26.5 to 3.26.6 by @dependabot in #405
• Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #406
• Bump bridgecrewio/checkov-action from 12.2860.0 to 12.2863.0 by @dependabot in #407
• Bump bridgecrewio/checkov-action from 12.2863.0 to 12.2864.0 by @dependabot in #408
• Bump bridgecrewio/checkov-action from 12.2864.0 to 12.2867.0 by @dependabot in #409
• Bump terraform-docs/gh-actions from 1.2.0 to 1.2.2 by @dependabot in #410
• Bump bridgecrewio/checkov-action from 12.2867.0 to 12.2868.0 by @dependabot in #412
• Bump bridgecrewio/checkov-action from 12.2868.0 to 12.2869.0 by @dependabot in #413
• Bump bridgecrewio/checkov-action from 12.2869.0 to 12.2871.0 by @dependabot in #414
• random update 2 by @wullub in #417

Full Changelog: v2.6.0...V2.6.1

v2.6.0

What's New

This version of the module, automatically adds the arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore policy to the AWS launch template instance profile

What's Changed

• Bump bridgecrewio/checkov-action from 12.2777.0 to 12.2780.0 by @dependabot in #347
• Bump github/codeql-action from 3.25.9 to 3.25.10 by @dependabot in #346
• Bump bridgecrewio/checkov-action from 12.2780.0 to 12.2782.0 by @dependabot in #348
• Bump bridgecrewio/checkov-action from 12.2782.0 to 12.2785.0 by @dependabot in #351
• Bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #349
• Bump bridgecrewio/checkov-action from 12.2785.0 to 12.2786.0 by @dependabot in #352
• Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 in /test by @dependabot in #353
• Bump bridgecrewio/checkov-action from 12.2786.0 to 12.2787.0 by @dependabot in #354
• Bump bridgecrewio/checkov-action from 12.2787.0 to 12.2796.0 by @dependabot in #356
• Bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #357
• Adds redact output script to the unit test workflow. by @mikereiddigital in #358
• Bump bridgecrewio/checkov-action from 12.2796.0 to 12.2801.0 by @dependabot in #359
• Update go-terratest.yml by @ASTRobinson in #360
• Bump bridgecrewio/checkov-action from 12.2801.0 to 12.2802.0 by @dependabot in #361
• Bump bridgecrewio/checkov-action from 12.2802.0 to 12.2807.0 by @dependabot in #362
• Bump bridgecrewio/checkov-action from 12.2807.0 to 12.2809.0 by @dependabot in #363
• Removes the use of tee from the unit test workflow by @mikereiddigital in #364
• Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #365
• Bump bridgecrewio/checkov-action from 12.2809.0 to 12.2812.0 by @dependabot in #366
• Bump bridgecrewio/checkov-action from 12.2812.0 to 12.2814.0 by @dependabot in #367
• Bump bridgecrewio/checkov-action from 12.2814.0 to 12.2818.0 by @dependabot in #370
• Bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by @dependabot in #368
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #369
• Bump bridgecrewio/checkov-action from 12.2818.0 to 12.2821.0 by @dependabot in #371
• Bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #372
• Bump bridgecrewio/checkov-action from 12.2821.0 to 12.2824.0 by @dependabot in #373
• Bump bridgecrewio/checkov-action from 12.2824.0 to 12.2825.0 by @dependabot in #374
• Bump bridgecrewio/checkov-action from 12.2825.0 to 12.2826.0 by @dependabot in #375
• Bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #376
• Bump bridgecrewio/checkov-action from 12.2826.0 to 12.2829.0 by @dependabot in #377
• Bump bridgecrewio/checkov-action from 12.2829.0 to 12.2831.0 by @dependabot in #378
• Bump bridgecrewio/checkov-action from 12.2831.0 to 12.2832.0 by @dependabot in #379
• Bump bridgecrewio/checkov-action from 12.2832.0 to 12.2836.0 by @dependabot in #380
• Bump github/codeql-action from 3.25.13 to 3.25.14 by @dependabot in #381
• feature 7412 - added AmazonSSMManagedInstanceCore policy to module by @Kudzai-moj in #382

New Contributors

• @mikereiddigital made their first contribution in #358

Full Changelog: v2.5.6...v2.6.0

v2.5.6

What's Changed

• Bump bridgecrewio/checkov-action from 12.2769.0 to 12.2772.0 by @dependabot in #340
• Bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #341
• Bump bridgecrewio/checkov-action from 12.2772.0 to 12.2777.0 by @dependabot in #342
• Bump github/codeql-action from 3.25.8 to 3.25.9 by @dependabot in #343
• Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #344
• ok_actions by @wullub in #345

Full Changelog: v2.5.5...v2.5.6

v2.5.5

What's Changed

• Lots of dependabot bumps
• DSOS-2838: instance refresh fix by @drobinson-moj in #339

Full Changelog: v.2.5.4...v2.5.5

Allow default max capacity to be set

This release contains a bug fix - allow default max capacity to be set by allowing null value for max_group_prepared_capacity. This is better than setting to max size (tested in nomis account - fixes the issue).

This release also includes security updates (see What's Changed section for details).

What's Changed

• Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #318
• Bump bridgecrewio/checkov-action from 12.2740.0 to 12.2742.0 by @dependabot in #317
• Bump bridgecrewio/checkov-action from 12.2742.0 to 12.2743.0 by @dependabot in #319
• Bump bridgecrewio/checkov-action from 12.2743.0 to 12.2744.0 by @dependabot in #320
• DSOS-2759: allow default max capacity to be set by @drobinson-moj in #321

Full Changelog: v.2.5.3...v.2.5.4

v.2.5.3

What's Changed

• Bump bridgecrewio/checkov-action from 12.2655.0 to 12.2656.0 by @dependabot in #253
• Bump bridgecrewio/checkov-action from 12.2656.0 to 12.2657.0 by @dependabot in #254
• Bump bridgecrewio/checkov-action from 12.2657.0 to 12.2660.0 by @dependabot in #255
• Bump bridgecrewio/checkov-action from 12.2660.0 to 12.2664.0 by @dependabot in #257
• Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #256
• Bump bridgecrewio/checkov-action from 12.2664.0 to 12.2669.0 by @dependabot in #258
• Bump bridgecrewio/checkov-action from 12.2669.0 to 12.2671.0 by @dependabot in #259
• Bump bridgecrewio/checkov-action from 12.2671.0 to 12.2672.0 by @dependabot in #260
• Bump bridgecrewio/checkov-action from 12.2672.0 to 12.2673.0 by @dependabot in #261
• Bump bridgecrewio/checkov-action from 12.2673.0 to 12.2674.0 by @dependabot in #262
• Bump bridgecrewio/checkov-action from 12.2674.0 to 12.2675.0 by @dependabot in #263
• Bump bridgecrewio/checkov-action from 12.2675.0 to 12.2676.0 by @dependabot in #264
• Bump bridgecrewio/checkov-action from 12.2676.0 to 12.2678.0 by @dependabot in #265
• Bump bridgecrewio/checkov-action from 12.2678.0 to 12.2680.0 by @dependabot in #266
• Bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #267
• Bump bridgecrewio/checkov-action from 12.2680.0 to 12.2683.0 by @dependabot in #268
• Bump bridgecrewio/checkov-action from 12.2683.0 to 12.2684.0 by @dependabot in #269
• Bump bridgecrewio/checkov-action from 12.2684.0 to 12.2685.0 by @dependabot in #270
• Bump bridgecrewio/checkov-action from 12.2685.0 to 12.2687.0 by @dependabot in #271
• Bump bridgecrewio/checkov-action from 12.2687.0 to 12.2688.0 by @dependabot in #273
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #272
• Bump bridgecrewio/checkov-action from 12.2688.0 to 12.2689.0 by @dependabot in #274
• Bump bridgecrewio/checkov-action from 12.2689.0 to 12.2690.0 by @dependabot in #276
• Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 in /test by @dependabot in #275
• Bump bridgecrewio/checkov-action from 12.2690.0 to 12.2691.0 by @dependabot in #277
• Bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #278
• Bump bridgecrewio/checkov-action from 12.2691.0 to 12.2693.0 by @dependabot in #279
• Bump bridgecrewio/checkov-action from 12.2693.0 to 12.2695.0 by @dependabot in #280
• Bump bridgecrewio/checkov-action from 12.2695.0 to 12.2699.0 by @dependabot in #283
• Bump terraform-docs/gh-actions from 1.0.0 to 1.1.0 by @dependabot in #282
• Bump bridgecrewio/checkov-action from 12.2699.0 to 12.2700.0 by @dependabot in #284
• Bump bridgecrewio/checkov-action from 12.2700.0 to 12.2702.0 by @dependabot in #286
• Bump bridgecrewio/checkov-action from 12.2702.0 to 12.2703.0 by @dependabot in #287
• Bump bridgecrewio/checkov-action from 12.2703.0 to 12.2705.0 by @dependabot in #288
• Bump bridgecrewio/checkov-action from 12.2705.0 to 12.2707.0 by @dependabot in #289
• Bump bridgecrewio/checkov-action from 12.2707.0 to 12.2712.0 by @dependabot in #290
• Bump bridgecrewio/checkov-action from 12.2712.0 to 12.2717.0 by @dependabot in #291
• Bump bridgecrewio/checkov-action from 12.2717.0 to 12.2720.0 by @dependabot in #292
• Bump bridgecrewio/checkov-action from 12.2720.0 to 12.2723.0 by @dependabot in #295
• Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #294
• Bump golang.org/x/net from 0.17.0 to 0.23.0 in /test by @dependabot in #296
• Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #297
• Bump bridgecrewio/checkov-action from 12.2723.0 to 12.2726.0 by @dependabot in #298
• Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #299
• Bump hashicorp/setup-terraform from 3.0.0 to 3.1.0 by @dependabot in #300
• Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #301
• Bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.4 in /test by @dependabot in #303
• Added trivy by @ep-93 in #302
• update README.md by @Khatraf in #305
• feature/6675-GitHub Action Status Badges by @Kudzai-moj in #306
• Bump bridgecrewio/checkov-action from 12.2726.0 to 12.2731.0 by @dependabot in #307
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #308
• Bump bridgecrewio/checkov-action from 12.2731.0 to 12.2734.0 by @dependabot in #309
• Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #310
• Bump bridgecrewio/checkov-action from 12.2734.0 to 12.2736.0 by @dependabot in #311
• Bump hashicorp/setup-terraform from 3.1.0 to 3.1.1 by @dependabot in #312
• Bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by ...

v.2.5.2

What's Changed

• Bump bridgecrewio/checkov-action from 12.2653.0 to 12.2654.0 by @dependabot in #249
• Bump bridgecrewio/checkov-action from 12.2654.0 to 12.2655.0 by @dependabot in #250
• DSOS-2590: allow healthcheck protocol specify and remove unused variable by @drobinson-moj in #252

Full Changelog: v2.5.0...v2.5.2

v2.5.1

What's Changed

Fix SSM parameter and secrets policy.
Bug fix: changed "and" condition to "or". Ensures policy is created if either SSM Params or Secrets are created.
Best practice: add minimum possible permissions (e.g. only need Put if there are placeholder params/secrets)

• Bump bridgecrewio/checkov-action from 12.2599.0 to 12.2600.0 by @dependabot in #213
• DSOS-2423: ssm and secrets policy fix by @drobinson-moj in #214
• Bump bridgecrewio/checkov-action from 12.2600.0 to 12.2601.0 by @dependabot in #215

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's New

• SecretsManager secrets can now be populated with fixed or random values, and can have a recovery_window_in_days set.

What's Changed

• Bump bridgecrewio/checkov-action from 12.2598.0 to 12.2599.0 by @dependabot in #211
• DSOS-2406: align secretsmanager options with ssm by @drobinson-moj in #212

Full Changelog: v2.4.0...v2.5.0

v2.4.0

What's Changed

• Bump bridgecrewio/checkov-action from 12.2564.0 to 12.2567.0 by @dependabot in #199
• secretsmanager compatibility by @wullub in #200

New Contributors

• @wullub made their first contribution in #200

Full Changelog: v2.2.0...v2.4.0