Files
offline_kubespray/collection/community/aws/changelogs/changelog.yaml
ByeonJungHun 360c6eef4a offline 작업
2024-02-19 16:02:29 +09:00

1584 lines
94 KiB
YAML

ancestor: null
releases:
1.0.0:
changes:
bugfixes:
- '**security issue** - Convert CLI provided passwords to text initially, to
prevent unsafe context being lost when converting from bytes->text during
post processing of PlayContext. This prevents CLI provided passwords from
being incorrectly templated (CVE-2019-14856)'
- '**security issue** - Update ``AnsibleUnsafeText`` and ``AnsibleUnsafeBytes``
to maintain unsafe context by overriding ``.encode`` and ``.decode``. This
prevents future issues with ``to_text``, ``to_bytes``, or ``to_native`` removing
the unsafe wrapper when converting between string types (CVE-2019-14856)'
- azure_rm_dnsrecordset_info - no longer returns empty ``azure_dnsrecordset``
facts when called as ``_info`` module.
- azure_rm_resourcegroup_info - no longer returns ``azure_resourcegroups`` facts
when called as ``_info`` module.
- azure_rm_storageaccount_info - no longer returns empty ``azure_storageaccounts``
facts when called as ``_info`` module.
- azure_rm_virtualmachineimage_info - no longer returns empty ``azure_vmimages``
facts when called as ``_info`` module.
- azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ``ansible_facts``
result, when called as ``_info`` module.
- azure_rm_virtualnetwork_info - no longer returns empty ``azure_virtualnetworks``
facts when called as ``_info`` module.
- cloudfront_distribution - Always add field_level_encryption_id to cache behaviour
to match AWS requirements
- cloudwatchlogs_log_group - Fix a KeyError when updating a log group that does
not have a retention period (https://github.com/ansible/ansible/issues/47945)
- cloudwatchlogs_log_group_info - remove limitation of max 50 results
- ec2_asg - Ensure "wait" is honored during replace operations
- ec2_launch_template - Update output to include latest_version and default_version,
matching the documentation
- ec2_transit_gateway - Use AWSRetry before ClientError is handled when describing
transit gateways
- ec2_transit_gateway - fixed issue where auto_attach set to yes was not being
honored (https://github.com/ansible/ansible/issues/61907)
- edgeos_config - fix issue where module would silently filter out encrypted
passwords
- fixed issue with sns_topic's delivery_policy option resulting in changed always
being true
- lineinfile - properly handle inserting a line when backrefs are enabled and
the line already exists in the file (https://github.com/ansible/ansible/issues/63756)
- route53 - improve handling of octal encoded characters
- win_credential - Fix issue that errors when trying to add a ``name`` with
wildcards.
deprecated_features:
- cloudformation - The ``template_format`` option had no effect since Ansible
2.3 and will be removed after 2022-06-01
- data_pipeline - The ``version`` option had no effect and will be removed after
2022-06-01
- ec2_eip - The ``wait_timeout`` option had no effect and will be removed after
2022-06-01
- ec2_key - The ``wait_timeout`` option had no effect and will be removed after
2022-06-01
- ec2_key - The ``wait`` option had no effect and will be removed after 2022-06-01
- ec2_lc - The ``associate_public_ip_address`` option had no effect and will
be removed after 2022-06-01
- elb_network_lb - The current default value of the ``state`` option has been
deprecated and will change from absent to present after 2022-06-01
- iam_managed_policy - The ``fail_on_delete`` option had no effect and will
be removed after 2022-06-01
- iam_policy - The ``policy_document`` will be removed after 2022-06-01. To
maintain the existing behavior use the ``policy_json`` option and read the
file with the ``lookup`` plugin.
- iam_policy - The default value of ``skip_duplicates`` will change after 2022-06-01
from ``true`` to ``false``.
- iam_role - The default value of the purge_policies has been deprecated and
will change from true to false after 2022-06-01
- s3_lifecycle - The ``requester_pays`` option had no effect and will be removed
after 2022-06-01
- s3_sync - The ``retries`` option had no effect and will be removed after 2022-06-01
minor_changes:
- Allow all params that boto support in aws_api_gateway module
- aws_acm - Add the module to group/aws for module_defaults.
- aws_acm - Update automatic retries to stabilize the integration tests.
- aws_codecommit - Support updating the description
- aws_kms - Adds the ``enable_key_rotation`` option to enable or disable automatically
key rotation.
- aws_kms - code refactor, some error messages updated
- aws_kms_info - Adds the ``enable_key_rotation`` info to the return value.
- ec2_asg - Add support for Max Instance Lifetime
- ec2_asg - Add the ability to use mixed_instance_policy in launch template
driven autoscaling groups
- ec2_asg - Migrated to AnsibleAWSModule
- ec2_placement_group - make ``name`` a required field.
- ecs_task_definition - Add network_mode=default to support Windows ECS tasks.
- elb_network_lb - added support to UDP and TCP_UDP protocols
- elb_target - add awsretry to prevent rate exceeded errors (https://github.com/ansible/ansible/issues/51108)
- elb_target_group - allow UDP and TCP_UDP protocols; permit only HTTP/HTTPS
health checks using response codes and paths
- iam - make ``name`` a required field.
- iam_cert - make ``name`` a required field.
- iam_policy - The iam_policy module has been migrated from boto to boto3.
- iam_policy - make ``iam_name`` a required field.
- iam_role - Add support for managing the maximum session duration
- iam_role - Add support for removing the related instance profile when we delete
the role
- iam_role, iam_user and iam_group - the managed_policy option has been renamed
to managed_policies (with an alias added)
- iam_role, iam_user and iam_group - the purge_policy option has been renamed
to purge_policies (with an alias added)
- lambda - add a tracing_mode parameter to set the TracingConfig for AWS X-Ray.
Also allow updating Lambda runtime.
- purefa_volume - Change I(qos) parameter to I(bw_iops), but retain I(qos) as
an alias for backwards compatability (https://github.com/ansible/ansible/pull/61577).
- redshift - Add AWSRetry calls for errors outside our control
- route53 - the module now has diff support.
- sns_topic - Add backoff when we get Topic ``NotFound`` exceptions while listing
the subscriptions.
- sqs_queue - Add support for tagging, KMS and FIFO queues
- sqs_queue - updated to use boto3 instead of boto
fragments:
- 480004-cloudwatchlogs_log_group-KeyError.yaml
- 56468-deprecate-lnb-absent.yml
- 58118-aws_api_gateway-params.yml
- 58822-aws-lamda-tracing-config.yaml
- 59597-ecs-allow_default_network_mode.yml
- 60508-route53-improve-octal-characters-handling.yml
- 60944-sns_topic-delivery_policy-changed.yml
- 61263-aws_codecommit-description.yml
- 61271-cloudfront_distribution-encryptionid.yml
- 61279-ec2_launch_template-output.yml
- 61577-support-iops-in-purefa_volume.yml
- 61805-azure-facts-info.yml
- 61933-ec2_transit_gateway-honor-auto_attach-setting.yaml
- 62014-iam_role_session_instanceprofile.yml
- 63362-remove-edgeos-filtering.yaml
- 63924-boto3.yml
- 63961-deprecate-fail_on_delete.yml
- 63989-deprecate-unused.yml
- 64230-deprecate-unused.yml
- 64258-purge_policies.yml
- 64368-deprecate-unused.yml
- 64598-add-next-token-support.yml
- 64867-route53-diff.yml
- 65265-allow-udp-tcpudp-protocol.yaml
- 65555-amazon-sanity-required.yml
- 65557-iam-make-name-required.yml
- 65558-iam_cert-require-name.yml
- 65559-iam_policy-require-iam_name.yml
- 66037-aws_kms.yml
- 66673-elb_target-awsretry.yaml
- 66779-redshift-backoff.yml
- 66795-sqs_queue-boto3.yaml
- 66863-ec2_asg-max_instance_lifetime-and-honor-wait-on-replace.yaml
- 67045-ec2_asg_mixed_instance_policy.yml
- 67089-sns_topic-notfound-backoff.yaml
- 67247-fix-ec2_transit_gateway-retries.yaml
- 67651-aws-kms-key-rotation.yml
- 67671-aws_acm-module_defaults.yaml
- 67770-aws-kms-info-key-rotation.yml
- dont-template-cli-passwords.yml
- lineinfile-backrefs-match-object-type.yaml
- win_credential-wildcard.yaml
modules:
- description: Upload and delete certificates in the AWS Certificate Manager service
name: aws_acm
namespace: ''
- description: Retrieve certificate information from AWS Certificate Manager service
name: aws_acm_info
namespace: ''
- description: Manage AWS API Gateway APIs
name: aws_api_gateway
namespace: ''
- description: Manage Application Auto Scaling Scaling Policies
name: aws_application_scaling_policy
namespace: ''
- description: Manage AWS Batch Compute Environments
name: aws_batch_compute_environment
namespace: ''
- description: Manage AWS Batch Job Definitions
name: aws_batch_job_definition
namespace: ''
- description: Manage AWS Batch Job Queues
name: aws_batch_job_queue
namespace: ''
- description: Create or delete an AWS CodeBuild project
name: aws_codebuild
namespace: ''
- description: Manage repositories in AWS CodeCommit
name: aws_codecommit
namespace: ''
- description: Create or delete AWS CodePipelines
name: aws_codepipeline
namespace: ''
- description: Manage cross-account AWS Config authorizations
name: aws_config_aggregation_authorization
namespace: ''
- description: Manage AWS Config aggregations across multiple accounts
name: aws_config_aggregator
namespace: ''
- description: Manage AWS Config delivery channels
name: aws_config_delivery_channel
namespace: ''
- description: Manage AWS Config Recorders
name: aws_config_recorder
namespace: ''
- description: Manage AWS Config resources
name: aws_config_rule
namespace: ''
- description: Creates, deletes, modifies a DirectConnect connection
name: aws_direct_connect_connection
namespace: ''
- description: Manage AWS Direct Connect gateway
name: aws_direct_connect_gateway
namespace: ''
- description: Manage Direct Connect LAG bundles
name: aws_direct_connect_link_aggregation_group
namespace: ''
- description: Manage Direct Connect virtual interfaces
name: aws_direct_connect_virtual_interface
namespace: ''
- description: Manage Elastic Kubernetes Service Clusters
name: aws_eks_cluster
namespace: ''
- description: Create, update, and delete an elastic beanstalk application
name: aws_elasticbeanstalk_app
namespace: ''
- description: Manage an AWS Glue connection
name: aws_glue_connection
namespace: ''
- description: Manage an AWS Glue job
name: aws_glue_job
namespace: ''
- description: Create, Update and Delete Amazon Inspector Assessment Targets
name: aws_inspector_target
namespace: ''
- description: Perform various KMS management tasks.
name: aws_kms
namespace: ''
- description: Gather information about AWS KMS keys
name: aws_kms_info
namespace: ''
- description: Gather information about AWS regions.
name: aws_region_info
namespace: ''
- description: Lists S3 buckets in AWS
name: aws_s3_bucket_info
namespace: ''
- description: Manage CORS for S3 buckets in AWS
name: aws_s3_cors
namespace: ''
- description: Manage secrets stored in AWS Secrets Manager.
name: aws_secret
namespace: ''
- description: Manages SES email and domain identity
name: aws_ses_identity
namespace: ''
- description: Manages SES sending authorization policies
name: aws_ses_identity_policy
namespace: ''
- description: Manages SES inbound receipt rule sets
name: aws_ses_rule_set
namespace: ''
- description: Fetch AWS Storage Gateway information
name: aws_sgw_info
namespace: ''
- description: Manage key-value pairs in aws parameter store.
name: aws_ssm_parameter_store
namespace: ''
- description: Manage AWS Step Functions state machines
name: aws_step_functions_state_machine
namespace: ''
- description: Start or stop execution of an AWS Step Functions state machine.
name: aws_step_functions_state_machine_execution
namespace: ''
- description: Create and delete WAF Conditions
name: aws_waf_condition
namespace: ''
- description: Retrieve information for WAF ACLs, Rule , Conditions and Filters.
name: aws_waf_info
namespace: ''
- description: Create and delete WAF Rules
name: aws_waf_rule
namespace: ''
- description: Create and delete WAF Web ACLs.
name: aws_waf_web_acl
namespace: ''
- description: Read a value from CloudFormation Exports
name: cloudformation_exports_info
namespace: ''
- description: Manage groups of CloudFormation stacks
name: cloudformation_stack_set
namespace: ''
- description: Create, update and delete AWS CloudFront distributions.
name: cloudfront_distribution
namespace: ''
- description: Obtain facts about an AWS CloudFront distribution
name: cloudfront_info
namespace: ''
- description: create invalidations for AWS CloudFront distributions
name: cloudfront_invalidation
namespace: ''
- description: Create, update and delete origin access identities for a CloudFront
distribution
name: cloudfront_origin_access_identity
namespace: ''
- description: manage CloudTrail create, delete, update
name: cloudtrail
namespace: ''
- description: Manage CloudWatch Event rules and targets
name: cloudwatchevent_rule
namespace: ''
- description: create or delete log_group in CloudWatchLogs
name: cloudwatchlogs_log_group
namespace: ''
- description: Get information about log_group in CloudWatchLogs
name: cloudwatchlogs_log_group_info
namespace: ''
- description: Manage CloudWatch log group metric filter
name: cloudwatchlogs_log_group_metric_filter
namespace: ''
- description: Create and manage AWS Datapipelines
name: data_pipeline
namespace: ''
- description: Creates or destroys a data migration services endpoint
name: dms_endpoint
namespace: ''
- description: creates or destroys a data migration services subnet group
name: dms_replication_subnet_group
namespace: ''
- description: Create, update or delete AWS Dynamo DB tables
name: dynamodb_table
namespace: ''
- description: Set TTL for a given DynamoDB table
name: dynamodb_ttl
namespace: ''
- description: copies AMI between AWS regions, return new image id
name: ec2_ami_copy
namespace: ''
- description: Create or delete AWS AutoScaling Groups (ASGs)
name: ec2_asg
namespace: ''
- description: Gather information about ec2 Auto Scaling Groups (ASGs) in AWS
name: ec2_asg_info
namespace: ''
- description: Create, delete or update AWS ASG Lifecycle Hooks.
name: ec2_asg_lifecycle_hook
namespace: ''
- description: Manage an AWS customer gateway
name: ec2_customer_gateway
namespace: ''
- description: Gather information about customer gateways in AWS
name: ec2_customer_gateway_info
namespace: ''
- description: manages EC2 elastic IP (EIP) addresses.
name: ec2_eip
namespace: ''
- description: List EC2 EIP details
name: ec2_eip_info
namespace: ''
- description: De-registers or registers instances from EC2 ELBs
name: ec2_elb
namespace: ''
- description: Gather information about EC2 Elastic Load Balancers in AWS
name: ec2_elb_info
namespace: ''
- description: Create & manage EC2 instances
name: ec2_instance
namespace: ''
- description: Gather information about ec2 instances in AWS
name: ec2_instance_info
namespace: ''
- description: Manage EC2 launch templates
name: ec2_launch_template
namespace: ''
- description: Create or delete AWS Autoscaling Launch Configurations
name: ec2_lc
namespace: ''
- description: Find AWS Autoscaling Launch Configurations
name: ec2_lc_find
namespace: ''
- description: Gather information about AWS Autoscaling Launch Configurations.
name: ec2_lc_info
namespace: ''
- description: Create/update or delete AWS Cloudwatch 'metric alarms'
name: ec2_metric_alarm
namespace: ''
- description: Create or delete an EC2 Placement Group
name: ec2_placement_group
namespace: ''
- description: List EC2 Placement Group(s) details
name: ec2_placement_group_info
namespace: ''
- description: Create or delete AWS scaling policies for Autoscaling groups
name: ec2_scaling_policy
namespace: ''
- description: Copies an EC2 snapshot and returns the new Snapshot ID.
name: ec2_snapshot_copy
namespace: ''
- description: Create and delete AWS Transit Gateways
name: ec2_transit_gateway
namespace: ''
- description: Gather information about ec2 transit gateways in AWS
name: ec2_transit_gateway_info
namespace: ''
- description: Manage an AWS VPC Egress Only Internet gateway
name: ec2_vpc_egress_igw
namespace: ''
- description: Create and delete AWS VPC Endpoints.
name: ec2_vpc_endpoint
namespace: ''
- description: Retrieves AWS VPC endpoints details using AWS methods.
name: ec2_vpc_endpoint_info
namespace: ''
- description: Manage an AWS VPC Internet gateway
name: ec2_vpc_igw
namespace: ''
- description: Gather information about internet gateways in AWS
name: ec2_vpc_igw_info
namespace: ''
- description: create and delete Network ACLs.
name: ec2_vpc_nacl
namespace: ''
- description: Gather information about Network ACLs in an AWS VPC
name: ec2_vpc_nacl_info
namespace: ''
- description: Manage AWS VPC NAT Gateways.
name: ec2_vpc_nat_gateway
namespace: ''
- description: Retrieves AWS VPC Managed Nat Gateway details using AWS methods.
name: ec2_vpc_nat_gateway_info
namespace: ''
- description: create, delete, accept, and reject VPC peering connections between
two VPCs.
name: ec2_vpc_peer
namespace: ''
- description: Retrieves AWS VPC Peering details using AWS methods.
name: ec2_vpc_peering_info
namespace: ''
- description: Manage route tables for AWS virtual private clouds
name: ec2_vpc_route_table
namespace: ''
- description: Gather information about ec2 VPC route tables in AWS
name: ec2_vpc_route_table_info
namespace: ''
- description: Create and delete AWS VPN Virtual Gateways.
name: ec2_vpc_vgw
namespace: ''
- description: Gather information about virtual gateways in AWS
name: ec2_vpc_vgw_info
namespace: ''
- description: Create, modify, and delete EC2 VPN connections.
name: ec2_vpc_vpn
namespace: ''
- description: Gather information about VPN Connections in AWS.
name: ec2_vpc_vpn_info
namespace: ''
- description: Gets the default administrator password for ec2 windows instances
name: ec2_win_password
namespace: ''
- description: manage ecs attributes
name: ecs_attribute
namespace: ''
- description: Create or terminate ECS clusters.
name: ecs_cluster
namespace: ''
- description: Manage Elastic Container Registry repositories
name: ecs_ecr
namespace: ''
- description: Create, terminate, start or stop a service in ECS
name: ecs_service
namespace: ''
- description: List or describe services in ECS
name: ecs_service_info
namespace: ''
- description: create and remove tags on Amazon ECS resources
name: ecs_tag
namespace: ''
- description: Run, start or stop a task in ecs
name: ecs_task
namespace: ''
- description: register a task definition in ecs
name: ecs_taskdefinition
namespace: ''
- description: Describe a task definition in ECS
name: ecs_taskdefinition_info
namespace: ''
- description: create and maintain EFS file systems
name: efs
namespace: ''
- description: Get information about Amazon EFS file systems
name: efs_info
namespace: ''
- description: Manage cache clusters in Amazon ElastiCache
name: elasticache
namespace: ''
- description: Retrieve information for AWS ElastiCache clusters
name: elasticache_info
namespace: ''
- description: Manage cache parameter groups in Amazon ElastiCache.
name: elasticache_parameter_group
namespace: ''
- description: Manage cache snapshots in Amazon ElastiCache
name: elasticache_snapshot
namespace: ''
- description: manage ElastiCache subnet groups
name: elasticache_subnet_group
namespace: ''
- description: Manage an Application load balancer
name: elb_application_lb
namespace: ''
- description: Gather information about application ELBs in AWS
name: elb_application_lb_info
namespace: ''
- description: Creates or destroys Amazon ELB.
name: elb_classic_lb
namespace: ''
- description: Gather information about EC2 Elastic Load Balancers in AWS
name: elb_classic_lb_info
namespace: ''
- description: De-registers or registers instances from EC2 ELBs
name: elb_instance
namespace: ''
- description: Manage a Network Load Balancer
name: elb_network_lb
namespace: ''
- description: Manage a target in a target group
name: elb_target
namespace: ''
- description: Manage a target group for an Application or Network load balancer
name: elb_target_group
namespace: ''
- description: Gather information about ELB target groups in AWS
name: elb_target_group_info
namespace: ''
- description: Gathers which target groups a target is associated with.
name: elb_target_info
namespace: ''
- description: Execute an AWS Lambda function
name: execute_lambda
namespace: ''
- description: Manage IAM users, groups, roles and keys
name: iam
namespace: ''
- description: Manage server certificates for use on ELBs and CloudFront
name: iam_cert
namespace: ''
- description: Manage AWS IAM groups
name: iam_group
namespace: ''
- description: Manage User Managed IAM policies
name: iam_managed_policy
namespace: ''
- description: List the MFA (Multi-Factor Authentication) devices registered for
a user
name: iam_mfa_device_info
namespace: ''
- description: Update an IAM Password Policy
name: iam_password_policy
namespace: ''
- description: Manage inline IAM policies for users, groups, and roles
name: iam_policy
namespace: ''
- description: Retrieve inline IAM policies for users, groups, and roles
name: iam_policy_info
namespace: ''
- description: Manage AWS IAM roles
name: iam_role
namespace: ''
- description: Gather information on IAM roles
name: iam_role_info
namespace: ''
- description: Maintain IAM SAML federation configuration.
name: iam_saml_federation
namespace: ''
- description: Retrieve the information of a server certificate
name: iam_server_certificate_info
namespace: ''
- description: Manage AWS IAM users
name: iam_user
namespace: ''
- description: Gather IAM user(s) facts in AWS
name: iam_user_info
namespace: ''
- description: Manage a Kinesis Stream.
name: kinesis_stream
namespace: ''
- description: Manage AWS Lambda functions
name: lambda
namespace: ''
- description: Creates, updates or deletes AWS Lambda function aliases
name: lambda_alias
namespace: ''
- description: Creates, updates or deletes AWS Lambda function event mappings
name: lambda_event
namespace: ''
- description: Gathers AWS Lambda function details as Ansible facts
name: lambda_facts
namespace: ''
- description: Gathers AWS Lambda function details
name: lambda_info
namespace: ''
- description: Creates, updates or deletes AWS Lambda policy statements.
name: lambda_policy
namespace: ''
- description: Manage instances in AWS Lightsail
name: lightsail
namespace: ''
- description: create, delete, or modify Amazon rds instances, rds snapshots,
and related facts
name: rds
namespace: ''
- description: Manage RDS instances
name: rds_instance
namespace: ''
- description: obtain information about one or more RDS instances
name: rds_instance_info
namespace: ''
- description: manage RDS parameter groups
name: rds_param_group
namespace: ''
- description: manage Amazon RDS snapshots.
name: rds_snapshot
namespace: ''
- description: obtain information about one or more RDS snapshots
name: rds_snapshot_info
namespace: ''
- description: manage RDS database subnet groups
name: rds_subnet_group
namespace: ''
- description: Manage Redshift Cross Region Snapshots
name: redshift_cross_region_snapshots
namespace: ''
- description: Gather information about Redshift cluster(s)
name: redshift_info
namespace: ''
- description: add or delete entries in Amazons Route53 DNS service
name: route53
namespace: ''
- description: Add or delete health-checks in Amazons Route53 DNS service
name: route53_health_check
namespace: ''
- description: Retrieves route53 details using AWS methods
name: route53_info
namespace: ''
- description: add or delete Route53 zones
name: route53_zone
namespace: ''
- description: Creates, updates or deletes S3 Bucket notification for lambda
name: s3_bucket_notification
namespace: ''
- description: Manage s3 bucket lifecycle rules in AWS
name: s3_lifecycle
namespace: ''
- description: Manage logging facility of an s3 bucket in AWS
name: s3_logging
namespace: ''
- description: Efficiently upload multiple files to S3
name: s3_sync
namespace: ''
- description: Configure an s3 bucket as a website
name: s3_website
namespace: ''
- description: Send Amazon Simple Notification Service messages
name: sns
namespace: ''
- description: Manages AWS SNS topics and subscriptions
name: sns_topic
namespace: ''
- description: Creates or deletes AWS SQS queues.
name: sqs_queue
namespace: ''
- description: Assume a role using AWS Security Token Service and obtain temporary
credentials
name: sts_assume_role
namespace: ''
- description: Obtain a session token from the AWS Security Token Service
name: sts_session_token
namespace: ''
release_date: '2020-06-24'
1.1.0:
changes:
deprecated_features:
- data_pipeline - the ``version`` option has been deprecated and will be removed
in a later release. It has always been ignored by the module.
- ec2_eip - the ``wait_timeout`` option has been deprecated and will be removed
in a later release. It has had no effect since Ansible 2.3.
- ec2_lc - the ``associate_public_ip_address`` option has been deprecated and
will be removed after a later release. It has always been ignored by the module.
- elb_network_lb - in a later release, the default behaviour for the ``state``
option will change from ``absent`` to ``present``. To maintain the existing
behavior explicitly set state to ``absent``.
- iam_managed_policy - the ``fail_on_delete`` option has been deprecated and
will be removed after a later release. It has always been ignored by the
module.
- iam_policy - in a later release, the default value for the ``skip_duplicates``
option will change from ``true`` to ``false``. To maintain the existing behavior
explicitly set it to ``true``.
- iam_policy - the ``policy_document`` option has been deprecated and will be
removed after a later release. To maintain the existing behavior use the ``policy_json``
option and read the file with the ``lookup`` plugin.
- iam_role - in a later release, the ``purge_policies`` option (also know as
``purge_policy``) default value will change from ``true`` to ``false``
- s3_lifecycle - the ``requester_pays`` option has been deprecated and will
be removed after a later release. It has always been ignored by the module.
- s3_sync - the ``retries`` option has been deprecated and will be removed after
2022-06-01. It has always been ignored by the module.
minor_changes:
- Remaining community.aws AnsibleModule based modules migrated to AnsibleAWSModule.
- sanity - add future imports in all missing places.
fragments:
- 173-ansibleawsmodule.yaml
- porting-guide.yml
- sanity_fix_future_boilerplate.yml
release_date: '2020-08-13'
1.2.0:
changes:
bugfixes:
- aws_codecommit - fixes issue where module execution would fail if an existing
repository has empty description (https://github.com/ansible-collections/community.aws/pull/195)
- aws_kms_info - fixes issue where module execution fails because certain AWS
KMS keys (e.g. aws/acm) do not permit the calling the API kms:GetKeyRotationStatus
(example - https://forums.aws.amazon.com/thread.jspa?threadID=312992) (https://github.com/ansible-collections/community.aws/pull/199)
- ec2_instance - Fix a bug where tags were updated in check_mode.
- ec2_instance - fixes issue where security groups were not changed if the instance
already existed. https://github.com/ansible-collections/community.aws/pull/22
- iam - Fix false positive warning regarding use of ``no_log`` on ``update_password``
minor_changes:
- Add retries for aws_api_gateway when AWS throws `TooManyRequestsException`
- Migrate the remaning boto3 based modules to the module based helpers for creating
AWS connections.
fragments:
- 161-retries.yml
- 188-boto3_conn.yml
- 189-ec2_instance-check_mode-tags.yml
- 195-aws_codecommit-empty-description.yaml
- 199-aws_kms_info-key-rotation-status.yaml
- 22-ec2_instance-mod-sgs.yml
- iam_no_log.yml
release_date: '2020-08-28'
1.2.1:
changes:
bugfixes:
- aws_ssm connection plugin - namespace file uploads to S3 into unique folders
per host, to prevent name collisions. Also deletes files from S3 to ensure
temp files are not left behind. (https://github.com/ansible-collections/community.aws/issues/221,
https://github.com/ansible-collections/community.aws/issues/222)
- rds_instance - fixed tag type conversion issue for creating read replicas.
minor_changes:
- aws_ssm connection plugin - Change the (internal) variable name from timeout
to plugin_timeout to avoid conflicts with ansible/ansible default timeout
(#69284,
- aws_ssm connection plugin - add STS token options to aws_ssm connection plugin.
- ec2_scaling_policy - Add support for step_adjustments
- ec2_scaling_policy - Migrate from boto to boto3
- rds_subnet_group module - Add Boto3 support and remove Boto support.
fragments:
- 197-ec2_scaling_policy-boto3.yml
- 221_222_ssm_bucket_operations.yaml
- 224-port-rds_subnet_group-boto3.yaml
- 229-fix-type-conversion-for-creating-read-replicas.yaml
- 234-fix_ssm_inventory_plugin_timeout_var.yaml
- 25-add-sts-token-to-aws-ssm-conn-plugin.yaml
release_date: '2020-10-07'
1.3.0:
changes:
bugfixes:
- aws_kms_info - fixed incompatibility with external and custom key-store keys.
The module was attempting to call `GetKeyRotationStatus`, which raises `UnsupportedOperationException`
for these key types (https://github.com/ansible-collections/community.aws/pull/311).
- ec2_win_password - on success return state as not changed (https://github.com/ansible-collections/community.aws/issues/145)
- ec2_win_password - return failed if unable to decode the password (https://github.com/ansible-collections/community.aws/issues/142)
- ecs_service - fix element type for ``load_balancers`` parameter (https://github.com/ansible-collections/community.aws/issues/265).
- ecs_taskdefinition - fixes elements type for ``containers`` parameter (https://github.com/ansible-collections/community.aws/issues/264).
- iam_policy - Added jittered_backoff to handle AWS rate limiting (https://github.com/ansible-collections/community.aws/pull/324).
- iam_policy_info - Added jittered_backoff to handle AWS rate limiting (https://github.com/ansible-collections/community.aws/pull/324).
- kinesis_stream - fixes issue where kinesis streams with > 100 shards get stuck
in an infinite loop (https://github.com/ansible-collections/community.aws/pull/93)
- s3_sync - fix chunk_size calculation (https://github.com/ansible-collections/community.aws/issues/272)
deprecated_features:
- ec2_vpc_igw_info - After 2022-06-22 the ``convert_tags`` parameter default
value will change from ``False`` to ``True`` to match the collection standard
behavior (https://github.com/ansible-collections/community.aws/pull/318).
minor_changes:
- ec2_vpc_igw - Add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/318).
- ec2_vpc_igw - Add ``purge_tags`` parameter so that tags can be added without
purging existing tags to match the collection standard tagging behaviour (https://github.com/ansible-collections/community.aws/pull/318).
- ec2_vpc_igw_info - Add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/318).
- ec2_vpc_igw_info - Add ``convert_tags`` parameter so that tags can be returned
in standard dict format rather than the both list of dict format (https://github.com/ansible-collections/community.aws/pull/318).
- rds_instance - set ``no_log=False`` on ``force_update_password`` to clear
warning (https://github.com/ansible-collections/community.aws/issues/241).
- redshift - add support for setting tags.
- s3_lifecycle - Add support for intelligent tiering and deep archive storage
classes (https://github.com/ansible-collections/community.aws/issues/270)
fragments:
- 244-rds_instance-no_log.yml
- 264-fix-elemt-type-for-containers-in-ecs_taskdefinition.yml
- 265-fix-element-type-ecs_service.yml
- 270_add_additional_storage_classes_to_S3_lifecycle_transition_list.yml
- 273-fix-s3sync-etag-calculation.yaml
- 283-fixed-ec2_win_password-return-state.yaml
- 311-fix-aws_kms_info-external-keys.yaml
- 318-cleanup-vpc_igw.yml
- 324-add-jittered-backoff-to-iam_policy-modules.yaml
- 34-redshift-tags.yml
- 93-kinesis_stream-get-more-shards-resolve.yml
modules:
- description: Manage s3 bucket metrics configuration in AWS
name: s3_metrics_configuration
namespace: ''
release_date: '2020-12-10'
1.4.0:
changes:
bugfixes:
- aws_kms - fixes issue where module execution fails without the kms:GetKeyRotationStatus
permission. (https://github.com/ansible-collections/community.aws/pull/200).
- aws_kms_info - ensure that searching by tag works when tag only exists on
some CMKs (https://github.com/ansible-collections/community.aws/issues/276).
- aws_s3_cors - fix element type for rules parameter. (https://github.com/ansible-collections/community.aws/pull/408).
- aws_ssm - fix the generation of CURL URL used to download Ansible Python file
from S3 bucket by ```_get_url()``` due to due to non-assignment of aws region
in the URL and not using V4 signature as specified for AWS S3 signature URL
by ```_get_boto_client()``` in (https://github.com/ansible-collections/community.aws/pull/352).
- aws_ssm - fixed ``UnicodeEncodeError`` error when using unicode file names
(https://github.com/ansible-collections/community.aws/pull/295).
- ec2_eip - fix eip association by instance id & private ip address due to case-sensitivity
of the ``PrivateIpAddress`` parameter (https://github.com/ansible-collections/community.aws/pull/328).
- ec2_vpc_endpoint - ensure ``changed`` is correctly set when deleting an endpoint
(https://github.com/ansible-collections/community.aws/pull/362).
- ec2_vpc_endpoint - fix exception when attempting to delete an endpoint which
has already been deleted (https://github.com/ansible-collections/community.aws/pull/362).
- ecs_task - use `required_if` to enforce mandatory parameters based on specified
operation (https://github.com/ansible-collections/community.aws/pull/402).
- elb_application_lb - during the removal of an instance, the associated listeners
are also removed.
deprecated_features:
- ec2_eip - formally deprecate the ``instance_id`` alias for ``device_id`` (https://github.com/ansible-collections/community.aws/pull/349).
- ec2_vpc_endpoint - deprecate the policy_file option and recommend using policy
with a lookup (https://github.com/ansible-collections/community.aws/pull/366).
minor_changes:
- aws_kms - add support for setting the deletion window using `pending_window`
(PendingWindowInDays) (https://github.com/ansible-collections/community.aws/pull/200).
- aws_kms_info - Add ``key_id`` and ``alias`` parameters to support fetching
a single key (https://github.com/ansible-collections/community.aws/pull/200).
- dynamodb_ttl - use ``botocore_at_least`` helper for checking the available
botocore version (https://github.com/ansible-collections/community.aws/pull/280).
- ec2_instance - add automatic retries on all paginated queries for temporary
errors (https://github.com/ansible-collections/community.aws/pull/373).
- ec2_instance - migrate to shared implementation of get_ec2_security_group_ids_from_names.
The module will now return an error if the subnet provided isn't in the requested
VPC. (https://github.com/ansible-collections/community.aws/pull/214)
- ec2_instance_info - added ``minimum_uptime`` option with alias ``uptime``
for filtering instances that have only been online for certain duration of
time in minutes (https://github.com/ansible-collections/community.aws/pull/356).
- ec2_launch_template - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/326).
- ec2_vpc_peer - use ``botocore_at_least`` helper for checking the available
botocore version (https://github.com/ansible-collections/community.aws/pull/280).
- ecs_task - use ``botocore_at_least`` helper for checking the available botocore
version (https://github.com/ansible-collections/community.aws/pull/280).
- route53 - migrated from boto to boto3 (https://github.com/ansible-collections/community.aws/pull/405).
- various community.aws modules - cleanup error handling to use ``is_boto3_error_code``
and ``is_boto3_error_message`` helpers (https://github.com/ansible-collections/community.aws/pull/268).
- various community.aws modules - cleanup of Python imports (https://github.com/ansible-collections/community.aws/pull/360).
- various community.aws modules - improve consistency of handling Boto3 exceptions
(https://github.com/ansible-collections/community.aws/pull/268).
- various community.aws modules - migrate exception error message handling from
fail_json to fail_json_aws (https://github.com/ansible-collections/community.aws/pull/361).
fragments:
- 200-aws_kms-deletion.yaml
- 214-get_ec2_security_group_ids_from_names.yml
- 268-is_boto3_error.yml
- 280-cleanup-botocore_at_least.yml
- 295-connection-aws_ssm.yml
- 326-launch_template_retry.yml
- 328-fix-ec2_eip-instance-id-private-ip-address.yml
- 349-ec2_eip-deprecate-instance_id.yml
- 350_elb_application_lb_purges_listeners.yaml
- 352-fix-aws-region-and-v4-signature-for-s3-boto-client.yml
- 356_add_minimum_uptime_parameter.yaml
- 360-imports-cleanup.yml
- 361-fail_json_aws.yml
- 362-ec2_vpc_endpoint-deletion-changed.yml
- 366-ec2_vpc_endpoint-policy_file.yml
- 373-ec2_instance-retry-pagination.yml
- 402-ecs_task-mandatory_params.yml
- 404-fix-dict-element-for-rule-param-in-aws-s3-cors.yml
- 405-route53-boto3.yml
release_date: '2021-02-16'
1.5.0:
changes:
bugfixes:
- aws_ssm - Adds destructor to SSM connection plugin to ensure connections are
properly cleaned up after usage (https://github.com/ansible-collections/community.aws/pull/542).
- aws_ssm - enable aws ssm connections if **AWS_SESSION_TOKEN** is missing (https://github.com/ansible-collections/community.aws/pull/535).
- cloudtrail - fix always reporting changed = true when kms alias used (https://github.com/ansible-collections/community.aws/pull/506).
- cloudtrail - fix lower casing of tag keys (https://github.com/ansible-collections/community.aws/pull/506).
- ec2_asg - fix target group update logic (https://github.com/ansible-collections/community.aws/pull/493).
- ec2_instance - ensure that termination protection isn't modified when using
check_mode (https://github.com/ansible/ansible/issues/67716).
- ec2_instance - fix key errors when instance has no tags (https://github.com/ansible-collections/community.aws/pull/476).
- ec2_launch_template - ensure that empty parameters are properly removed before
passing to AWS (https://github.com/ansible-collections/community.aws/issues/230).
- ec2_launch_template - fixes parameter validation failure when passing a instance
profile ARN instead of just the role name (https://github.com/ansible-collections/community.aws/pull/371).
- ec2_vpc_peer - fix idempotency when rejecting and deleting peering connections
(https://github.com/ansible-collections/community.aws/pull/501).
- ec2_vpc_route_table - catch RouteAlreadyExists error when rerunning same task
twice to make module idempotent (https://github.com/ansible-collections/community.aws/issues/357).
- elasticache - Fix ``KeyError`` issue when updating security group (https://github.com/ansible-collections/community.aws/pull/410).
- kinesis_stream - fixed issue where streams get marked as changed even if no
encryption actions were necessary (https://github.com/ansible/ansible/issues/65928).
- rds_instance - fixes bug preventing the use of tags when creating an RDS instance
from a snapshot (https://github.com/ansible-collections/community.aws/issues/530).
- route53 - ensure that the old return values are re-added along side the new
ones (https://github.com/ansible-collections/community.aws/issues/523).
- route53 - fix ``AttributeError`` in ``get_zone_id_by_name`` when a vpc_id
on a private zone is provided (https://github.com/ansible-collections/community.aws/issues/509).
- route53 - fix handling for characters escaped by AWS in record names, like
``*`` and ``@``. This fixes idempotency for such record names (https://github.com/ansible-collections/community.aws/issues/524).
- route53 - fix when using ``state=get`` on private DNS zones and add tests
to cover this scenario (https://github.com/ansible-collections/community.aws/pull/424).
- route53 - make sure that CAA values order is again ignored during idempotency
comparsion (https://github.com/ansible-collections/community.aws/issues/524).
- sns_topic - Add ``+`` to allowable characters in SMS endpoints (https://github.com/ansible-collections/community.aws/pull/454).
- sqs_queue - fix UnboundLocalError when passing a boolean parameter (https://github.com/ansible-collections/community.aws/issues/172).
deprecated_features:
- ec2_vpc_endpoint_info - the ``query`` option has been deprecated and will
be removed after 2022-12-01 (https://github.com/ansible-collections/community.aws/pull/346).
The ec2_vpc_endpoint_info now defaults to listing information about endpoints.
The ability to search for information about available services has been moved
to the dedicated module ``ec2_vpc_endpoint_service_info``.
minor_changes:
- aws_config_aggregator - Fix typos in attribute names (https://github.com/ansible-collections/community.aws/pull/553).
- aws_glue_connection - Added multple connection types (https://github.com/ansible-collections/community.aws/pull/503).
- aws_glue_connection - Added support for check mode (https://github.com/ansible-collections/community.aws/pull/503).
- aws_glue_job - added ``number_of_workers``, ``worker_type`` and ``glue_version``
attributes to the module (https://github.com/ansible-collections/community.aws/pull/370).
- aws_region_info - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/422).
- aws_s3_bucket_info - new module options ``name``, ``name_filter``, ``bucket_facts``
and ``transform_location`` (https://github.com/ansible-collections/community.aws/pull/260).
- aws_ssm connection plugin - add support for specifying a profile to be used
when connecting (https://github.com/ansible-collections/community.aws/pull/278).
- aws_ssm_parameter_store - added tier parameter option (https://github.com/ansible/ansible/issues/59738).
- ec2_asg module - add support for all mixed_instances_policy parameters (https://github.com/ansible-collections/community.aws/issues/231).
- ec2_asg_info - gather information about asg lifecycle hooks (https://github.com/ansible-collections/community.aws/pull/233).
- ec2_instance - wait for new instances to return a status before attempting
to set additional parameters (https://github.com/ansible-collections/community.aws/pull/533).
- ec2_instance_info - add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/521).
- ec2_launch_template - added ``metadata_options`` parameter to support changing
the IMDS configuration for instances (https://github.com/ansible-collections/community.aws/pull/322).
- ec2_metric_alarm - Added support for check mode (https://github.com/ansible-collections/community.aws/pull/470).
- ec2_metric_alarm - Made ``unit`` parameter optional (https://github.com/ansible-collections/community.aws/pull/470).
- ec2_vpc_egress_igw - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/421).
- ec2_vpc_endpoint - Add retries on common AWS failures. (https://github.com/ansible-collections/community.aws/pull/473)
- ec2_vpc_endpoint - Added support for specifying ``vpc_endpoint_type`` (https://github.com/ansible-collections/community.aws/pull/460).
- ec2_vpc_endpoint - The module now supports tagging endpoints. (https://github.com/ansible-collections/community.aws/pull/473)
- ec2_vpc_endpoint - The module will now lookup existing endpoints and try to
match on the provided parameters before creating a new endpoint for better
idempotency. (https://github.com/ansible-collections/community.aws/pull/473)
- ec2_vpc_endpoint_info - ensure paginated endpoint description is retried on
common AWS failures (https://github.com/ansible-collections/community.aws/pull/537).
- ec2_vpc_endpoint_info - use boto3 paginator when fetching services (https://github.com/ansible-collections/community.aws/pull/537).
- ec2_vpc_endpoint_service_info - new module added for fetching information
about available VPC endpoint services (https://github.com/ansible-collections/community.aws/pull/346).
- ec2_vpc_nacl - add support for IPv6 (https://github.com/ansible-collections/community.aws/pull/398).
- ec2_vpc_nat_gateway - add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/427).
- ec2_vpc_nat_gateway - code cleaning (https://github.com/ansible-collections/community.aws/pull/445)
- ec2_vpc_nat_gateway - imporove documentation (https://github.com/ansible-collections/community.aws/pull/445)
- ec2_vpc_nat_gateway - improve error handling (https://github.com/ansible-collections/community.aws/pull/445)
- ec2_vpc_nat_gateway - use custom waiters to manage NAT gateways states (deleted
and available) (https://github.com/ansible-collections/community.aws/pull/445)
- ec2_vpc_nat_gateway - use pagination on describe calls to ensure all results
are fetched (https://github.com/ansible-collections/community.aws/pull/427).
- ec2_vpc_nat_gateway_info - Add paginator (https://github.com/ansible-collections/community.aws/pull/472).
- ec2_vpc_nat_gateway_info - Improve documentation (https://github.com/ansible-collections/community.aws/pull/472).
- ec2_vpc_nat_gateway_info - Improve error handling (https://github.com/ansible-collections/community.aws/pull/472)
- ec2_vpc_nat_gateway_info - Use normalize_boto3_result (https://github.com/ansible-collections/community.aws/pull/472)
- ec2_vpc_nat_gateway_info - solve RequestLimitExceeded error by adding retry
decorator (https://github.com/ansible-collections/community.aws/pull/446)
- ec2_vpc_peer - More return info added, also simplified module code a bit and
extended tests (https://github.com/ansible-collections/community.aws/pull/355)
- ec2_vpc_peer - add support for waiting on state changes (https://github.com/ansible-collections/community.aws/pull/501).
- ec2_vpc_peering_info - add ``vpc_peering_connections`` return value to be
consistent with boto3 modules (https://github.com/ansible-collections/community.aws/pull/501).
- ec2_vpc_peering_info - add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/536).
- ec2_vpc_route_table - add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/442).
- ec2_vpc_route_table - add boto3 pagination for some searches (https://github.com/ansible-collections/community.aws/pull/442).
- ec2_vpc_route_table_info - migrate to boto3 (https://github.com/ansible-collections/community.aws/pull/442).
- ec2_vpc_vgw - Add automatic retries for recoverable errors (https://github.com/ansible-collections/community.aws/pull/162).
- ec2_vpc_vpn - Add automatic retries for recoverable errors (https://github.com/ansible-collections/community.aws/pull/162).
- ecs_service - Add ``platform_version`` parameter to ``ecs_service`` (https://github.com/ansible-collections/community.aws/pull/353).
- ecs_task - added ``assign_public_ip`` option for network_configuration (https://github.com/ansible-collections/community.aws/pull/395).
- ecs_taskdefinition - Documentation improvement (https://github.com/ansible-collections/community.aws/issues/520)
- elasticache - Improve docs a little, add intgration tests (https://github.com/ansible-collections/community.aws/pull/410).
- elb_classic_info - If the provided load balancer doesn't exist, return an
empty list instead of throwing an error. (https://github.com/ansible-collections/community.aws/pull/215).
- elb_target_group - Add elb target group attributes ``stickiness_app_cookie_name``
and ``stickiness_app_cookie_duration_seconds``. Also update docs for stickiness_type
to mention application cookie (https://github.com/ansible-collections/community.aws/pull/548)
- iam - Make iam module more predictable when returning the ``user_name`` it
creates or deletes (https://github.com/ansible-collections/community.aws/pull/369).
- iam_saml_federation - module now returns the state of the provider when no
changes are made (https://github.com/ansible-collections/community.aws/pull/419).
- kinesis_stream - check_mode is now based on the live settings rather than
comparisons with a hard coded/fake stream definition (https://github.com/ansible-collections/community.aws/pull/27).
- kinesis_stream - now returns changed more accurately (https://github.com/ansible-collections/community.aws/pull/27).
- kinesis_stream - now returns tags consistently (https://github.com/ansible-collections/community.aws/pull/27).
- kinesis_stream - return values are now the same format when working with both
encrypted and un-encrypted streams (https://github.com/ansible-collections/community.aws/pull/27).
- lambda_alias - add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/396).
- lambda_alias - use common helper functions to create AWS connections (https://github.com/ansible-collections/community.aws/pull/396).
- lambda_alias - use common helper functions to perform snake_case to CamelCase
conversions (https://github.com/ansible-collections/community.aws/pull/396).
- rds_instance - new ``purge_security_groups`` parameter (https://github.com/ansible-collections/community.aws/issues/385).
- rds_param_group - Add AWSRetry (https://github.com/ansible-collections/community.aws/pull/532).
- rds_param_group - Fix integration tests (https://github.com/ansible-collections/community.aws/pull/532).
- rds_param_group - Support check_mode (https://github.com/ansible-collections/community.aws/pull/532).
- rds_snapshot - added to the aws module_defaults group (https://github.com/ansible-collections/community.aws/pull/515).
- route53 - fixes AWS API error when attempting to create Alias records (https://github.com/ansible-collections/community.aws/issues/434).
- s3_lifecycle - Add a ``wait`` parameter to wait for changes to propagate after
being set (https://github.com/ansible-collections/community.aws/pull/448).
- s3_lifecycle - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/448).
- s3_lifecycle - Fix idempotency when using dates instead of days (https://github.com/ansible-collections/community.aws/pull/448).
- s3_logging - added support for check_mode (https://github.com/ansible-collections/community.aws/pull/447).
- s3_logging - migrated from boto to boto3 (https://github.com/ansible-collections/community.aws/pull/447).
- s3_sync - new ``storage_class`` feature allowing to specify the storage class
when any object is added to an S3 bucket (https://github.com/ansible-collections/community.aws/issues/358).
- sanity tests - add ignore.txt for 2.12 (https://github.com/ansible-collections/community.aws/pull/527).
- state_machine_arn - return ``state_machine_arn`` when state is unchanged (https://github.com/ansible-collections/community.aws/pull/302).
security_fixes:
- aws_direct_connect_virtual_interface - mark the ``authentication_key`` parameter
as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475).
- aws_secret - flag the ``secret`` parameter as containing sensitive data which
shouldn't be logged (https://github.com/ansible-collections/community.aws/pull/471).
- sts_assume_role - mark the ``mfa_token`` parameter as ``no_log`` to avoid
accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475).
- sts_session_token - mark the ``mfa_token`` parameter as ``no_log`` to avoid
accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475).
fragments:
- 162-vgw-retries.yml
- 23-kinesis_stream-changed.yml
- 230-ec2_launch_template-None-types.yml
- 232-fully-support-mixed-instances-policy.yaml
- 233-info-about-asg-lifecycle-hooks.yaml
- 260-extending-s3_bucket_info-module.yml
- 27-kinesis_stream-do-not-mark-as-changed-no-enc-actions.yaml
- 278-aws_ssm-profile-support.yml
- 302-aws_step_functions_state_machine-ARN-not-change.yml
- 305-aws-ssm-parameter-tier-option.yml
- 322-ec2_launch_template-add-metadata_options.yml
- 346-ec2_vpc_endpoint_service_info.yml
- 353-add_platform_to_ecs_service.yml
- 355-ec2_vpc_peer_improvements.yml
- 359-fix-ec2_vpc_route_table.yml
- 369-iam-return-values.yml
- 370_add_attributes_glue_module.yaml
- 371-ec2_launch_template-profile-arn.yml
- 389-sqs-queue-UnboundLocalError.yml
- 395_add_assign_public_ip.yaml
- 396-lambda_alias.yml
- 398-ec2-vpc-nacl-add-ipv6.yaml
- 406-elb_classic_info-return-empty-list.yml
- 406-route53-state-get.yml
- 410-elasticache-fixes.yml
- 414-rds_instance-tags-on-creation-from-snapshot.yml
- 419-iam_saml_federation-results.yml
- 421-ec2_vpc_egress_igw-retry.yml
- 422-aws_region_info-retry.yml
- 427-ec2_vpc_nat_gateway-stability.yml
- 442-ec2_vpc_route_table-stability.yml
- 445-ec2_vpc_nat_gateway-cleanup.yml
- 446-ec2_vpc_nat_gateway_info_stability.yml
- 447-s3_logging-boto3.yml
- 448-s3_lifecycle-stability.yml
- 454-sns_topic_fix_sms_endpoint_canonicalization.yaml
- 460-add-support-for-vpc-endpoint-type.yml
- 470-ec2_metric_alarm-unit-optional.yml
- 471-no_log.yml
- 472-ec2_vpc_nat_gateway_info-stability.yml
- 473-ec2_vpc_endpoint_stabilization.yml
- 475-no_log-missing.yml
- 476-ec2_instance_fix_key_error_when_instance_has_no_tags.yaml
- 493-ec2_asg_tg_updates.yaml
- 497-s3_sync-add-storage_class.yaml
- 500-rds_instance-purge-sg-option.yml
- 501-vpc_peering_connections.yml
- 502-route53-aliases.yml
- 503-aws_glue_connection-types-check-mode.yml
- 505-ec2_instance-terminate_protection.yml
- 506-cloudtrail_fix_always_reporting_changed_with_kms_alias.yaml
- 510-fix-route53-private-zone-vpc.yaml
- 515-rds_snapshot-aws-group.yml
- 521-ec2_instance_info-retries.yml
- 525-route53-idempotency-regressions.yml
- 528-route_53-return-values.yml
- 532-ec2_instance-wait-status.yml
- 532-rds_param_group-fix.yml
- 534-ecs_taskdefinition-depends_on-feature.yaml
- 535-aws-ssm-session-token-missing.yml
- 536-ec2_vpc_peering_info-retry.yml
- 537-ec2_vpc_endpoint_info-retries.yml
- 542-ensure-ssm-plugin-terminates-connections.yml
- 548-elb-target-group-app-stickiness.yaml
- 553-aws_config_aggregator-fix-organization-source.yml
- ignore_212.yml
modules:
- description: retrieves AWS VPC endpoint service details
name: ec2_vpc_endpoint_service_info
namespace: ''
- description: wafv2_ip_set
name: wafv2_ip_set
namespace: ''
- description: Get information about wafv2 ip sets
name: wafv2_ip_set_info
namespace: ''
- description: wafv2_web_acl
name: wafv2_resources
namespace: ''
- description: wafv2_resources_info
name: wafv2_resources_info
namespace: ''
- description: wafv2_web_acl
name: wafv2_rule_group
namespace: ''
- description: wafv2_web_acl_info
name: wafv2_rule_group_info
namespace: ''
- description: wafv2_web_acl
name: wafv2_web_acl
namespace: ''
- description: wafv2_web_acl
name: wafv2_web_acl_info
namespace: ''
release_date: '2021-04-27'
2.0.0:
changes:
breaking_changes:
- ec2_instance - The module has been migrated to the ``amazon.aws`` collection.
Playbooks using the Fully Qualified Collection Name for this module should
be updated to use ``amazon.aws.ec2_instance``.
- ec2_instance_info - The module has been migrated to the ``amazon.aws`` collection.
Playbooks using the Fully Qualified Collection Name for this module should
be updated to use ``amazon.aws.ec2_instance_info``.
- ec2_vpc_endpoint - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_endpoint``.
- ec2_vpc_endpoint_facts - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_endpoint_info``.
- ec2_vpc_endpoint_info - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_endpoint_info``.
- ec2_vpc_endpoint_service_info - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_endpoint_service_info``.
- ec2_vpc_igw - The module has been migrated from the ``community.aws`` collection.
Playbooks using the Fully Qualified Collection Name for this module should
be updated to use ``amazon.aws.ec2_vpc_igw``.
- ec2_vpc_igw_facts - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_igw_info``.
- ec2_vpc_igw_info - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_igw_info``.
- ec2_vpc_nat_gateway - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_nat_gateway``.
- ec2_vpc_nat_gateway_facts - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_nat_gateway_info``.
- ec2_vpc_nat_gateway_info - The module has been migrated from the ``community.aws``
collection. Playbooks using the Fully Qualified Collection Name for this module
should be updated to use ``amazon.aws.ec2_vpc_nat_gateway_info``.
- kms_info - key details are now returned in the ``kms_keys`` attribute rather
than the ``keys`` attribute (https://github.com/ansible-collections/community.aws/pull/648).
bugfixes:
- aws_secret - fix deletion idempotency when not using instant deletion (https://github.com/ansible-collections/community.aws/pull/681).
- aws_ssm - rename ``retries`` to ``reconnection_retries`` to avoid conflict
with task retries
- ec2_vpc_peer - automatically retry when attempting to tag freshly created
peering connections (https://github.com/ansible-collections/community.aws/pull/614).
- ec2_vpc_route_table - automatically retry when attempting to modify freshly
created route tables (https://github.com/ansible-collections/community.aws/pull/616).
- ecs_taskdefinition - ensure cast to integer (https://github.com/ansible-collections/community.aws/pull/574).
- ecs_taskdefinition - fix idempotency (https://github.com/ansible-collections/community.aws/pull/574).
- ecs_taskdefinition - fix typo in ecs task defination for env file validations
(https://github.com/ansible-collections/community.aws/pull/600).
- iam_role - Modified iam_role internal code to replace update_role_description
with update_role (https://github.com/ansible-collections/community.aws/pull/697).
- route53 - fix typo in waiter configuration that prevented management of the
delays (https://github.com/ansible-collections/community.aws/pull/564).
- s3_sync - fix handling individual file path to upload a individual file to
s3 bucket (https://github.com/ansible-collections/community.aws/pull/692).
- sqs_queue - fix queue attribute comparison to make module idempotent (https://github.com/ansible-collections/community.aws/pull/592).
deprecated_features:
- ec2_elb - the ``ec2_elb`` module has been removed and redirected to the ``elb_instance``
module which functions identically. The original ``ec2_elb`` name is now deprecated
and will be removed in release 3.0.0 (https://github.com/ansible-collections/community.aws/pull/586).
- ec2_elb_info - the boto based ``ec2_elb_info`` module has been deprecated
in favour of the boto3 based ``elb_classic_lb_info`` module. The ``ec2_elb_info``
module will be removed in release 3.0.0 (https://github.com/ansible-collections/community.aws/pull/586).
- elb_classic_lb - the ``elb_classic_lb`` module has been removed and redirected
to the ``amazon.aws.ec2_elb_lb`` module which functions identically.
- iam - the boto based ``iam`` module has been deprecated in favour of the boto3
based ``iam_user``, ``iam_group`` and ``iam_role`` modules. The ``iam`` module
will be removed in release 3.0.0 (https://github.com/ansible-collections/community.aws/pull/664).
- rds - the boto based ``rds`` module has been deprecated in favour of the boto3
based ``rds_instance`` module. The ``rds`` module will be removed in release
3.0.0 (https://github.com/ansible-collections/community.aws/pull/663).
- script_inventory_ec2 - The ec2.py inventory script is being moved to a new
repository. The script can now be downloaded from https://github.com/ansible-community/contrib-scripts/blob/main/inventory/ec2.py
and will be removed from this collection in the 3.0 release. We recommend
migrating from the script to the `amazon.aws.ec2` inventory plugin.
major_changes:
- community.aws collection - The community.aws collection has dropped support
for ``botocore<1.18.0`` and ``boto3<1.15.0`` (https://github.com/ansible-collections/community.aws/pull/711).
Most modules will continue to work with older versions of the AWS SDK, however
compatability with older versions of the SDK is not guaranteed and will not
be tested. When using older versions of the SDK a warning will be emitted
by Ansible (https://github.com/ansible-collections/amazon.aws/pull/442).
minor_changes:
- aws_eks_cluster - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- aws_kms_info - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- aws_s3_bucket_info - added test for botocore>=1.18.11 when attempting to fetch
bucket ownership controls (https://github.com/ansible-collections/community.aws/pull/682)
- aws_ses_rule_set - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- aws_sgw_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- cloudformation_exports_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- cloudformation_stack_set - Tests for compatability with older versions of
the AWS SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- cloudfront_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- cloudwatchevent_rule - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- dynamodb_table - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- dynamodb_ttl - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_ami_copy - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_asg - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_asg_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- ec2_launch_template - Tests for compatability with older versions of the AWS
SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_lc_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- ec2_transit_gateway - Tests for compatability with older versions of the AWS
SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_transit_gateway_info - Tests for compatability with older versions of
the AWS SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_vpc_peer - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ec2_vpc_peer - use shared code for tagging peering connections (https://github.com/ansible-collections/community.aws/pull/614).
- ec2_vpc_route_table - use shared code for tagging route tables (https://github.com/ansible-collections/community.aws/pull/616).
- ec2_vpc_vgw - fix arguments-renamed pylint issue (https://github.com/ansible-collections/community.aws/pull/686).
- ec2_vpc_vpn - fix arguments-renamed pylint issue (https://github.com/ansible-collections/community.aws/pull/686).
- ecs_ecr - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ecs_service - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ecs_task - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- ecs_task - remove unused import (https://github.com/ansible-collections/community.aws/pull/686).
- ecs_taskdefinition - Tests for compatability with older versions of the AWS
SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- efs - Tests for compatability with older versions of the AWS SDKs have been
removed (https://github.com/ansible-collections/community.aws/pull/675).
- efs_info - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- elasticache_subnet_group - add return values (https://github.com/ansible-collections/community.aws/pull/723).
- elasticache_subnet_group - add support for check_mode (https://github.com/ansible-collections/community.aws/pull/723).
- elasticache_subnet_group - module migrated to boto3 AWS SDK (https://github.com/ansible-collections/community.aws/pull/723).
- elb_application_lb - added ``ip_address_type`` parameter to support changing
application load balancer configuration (https://github.com/ansible-collections/community.aws/pull/499).
- elb_application_lb_info - added ``ip_address_type`` in output when gathering
application load balancer parameters (https://github.com/ansible-collections/community.aws/pull/499).
- elb_instance - make elb_instance idempotent when deregistering instances. Merged
from ec2_elb U(https://github.com/ansible/ansible/pull/31660).
- elb_network_lb - added ``ip_address_type`` parameter to support changing network
load balancer configuration (https://github.com/ansible-collections/community.aws/pull/499).
- elb_target_group - Tests for compatability with older versions of the AWS
SDKs have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- elb_target_group - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- iam - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- iam_group - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- iam_mfa_device_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- iam_role - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- iam_role - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- iam_server_certificate_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- iam_user - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- kms_info - added a new ``keys_attr`` parameter to continue returning the key
details in the ``keys`` attribute as well as the ``kms_keys`` attribute (https://github.com/ansible-collections/community.aws/pull/648).
- lambda - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- rds_instance - Tests for compatability with older versions of the AWS SDKs
have been removed (https://github.com/ansible-collections/community.aws/pull/675).
- rds_instance - convert ``preferred_maintenance_window`` days into lowercase
so changed returns properly (https://github.com/ansible-collections/community.aws/pull/516).
- rds_instance - use a generator rather than list comprehension (https://github.com/ansible-collections/community.aws/pull/688).
- route53 - add rate-limiting retries while waiting for changes to propagate
(https://github.com/ansible-collections/community.aws/pull/564).
- route53 - add retries on ``PriorRequestNotComplete`` errors (https://github.com/ansible-collections/community.aws/pull/564).
- route53 - update retry ``max_delay`` setting so that it can be set above 60
seconds (https://github.com/ansible-collections/community.aws/pull/564).
- sns_topic - Added ``topic_type`` parameter to select type of SNS topic (either
FIFO or Standard) (https://github.com/ansible-collections/community.aws/pull/599).
- sqs_queue - Tests for compatability with older versions of the AWS SDKs have
been removed (https://github.com/ansible-collections/community.aws/pull/675).
- various community.aws modules - remove unused imports (https://github.com/ansible-collections/community.aws/pull/629)
- wafv2_resources_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
- wafv2_web_acl_info - ensure module runs in check_mode (https://github.com/ansible-collections/community.aws/issues/659).
fragments:
- 499-elb-module-add-ip_address_type_option.yml
- 516-rds_instance-preferred_maintenance_window.yml
- 564-route53-retries.yml
- 574-ecs_taskdefinition-improvement.yml
- 586-elb-renames.yml
- 592-sqs_queue-idempotent.yml
- 600-ecs-task-defination-env-file-validations.yml
- 614-ec2_vpc_peer-tagging.yml
- 616-ec2_vpc_route_table-tagging.yml
- 629-imports-cleanup.yml
- 648-kms_info.yml
- 659-checkmode.yml
- 663-deprecate-rds.yml
- 664-deprecate-iam.yml
- 675-boto3-minimums.yml
- 675-boto3-minimums.yml
- 681-aws_secret-deletion-idempotency.yml
- 682-aws_s3_bucket_info-botocore.yml
- 686-pylint.yml
- 688-pylint.yml
- 692-s3_sync-individual-file-path.yml
- 697-iam_role-replace-UpdateRoleDescription-with-UpdateRole.yml
- 723-elasticache_subnet_group-boto3.yml
- deprecate_ec2_inv_script.yml
- migrate_ec2_instance.yml
- migrate_ec2_vpc_endpoint.yml
- migrate_ec2_vpc_igw.yml
- migrate_ec2_vpc_nat_gateway.yml
- rename-connection-retries.yml
- sns_topic_type.yml
modules:
- description: Manage Amazon MSK clusters.
name: aws_msk_cluster
namespace: ''
- description: Manage Amazon MSK cluster configurations.
name: aws_msk_config
namespace: ''
- description: create and remove tags on Amazon EFS resources
name: efs_tag
namespace: ''
release_date: '2021-09-14'
2.1.0:
changes:
bugfixes:
- AWS action group - added missing ``aws_direct_connect_confirm_connection``
and ``efs_tag`` entries (https://github.com/ansible-collections/amazon.aws/issues/557).
- cloudfront_info - Switch to native boto3 paginators to fix reported bug when
over 100 distributions exist (https://github.com/ansible-collections/community.aws/issues/769).
- ec2_eip - fix bug when allocating an EIP but not associating it to a VPC (https://github.com/ansible-collections/community.aws/pull/731).
- elb_classic_lb_info - fix empty list returned when names not defined (https://github.com/ansible-collections/community.aws/pull/693).
- elb_instance - Python 3 compatability fix (https://github.com/ansible-collections/community.aws/issues/384).
- iam_role_info - switch to jittered backoff to reduce rate limiting failures
(https://github.com/ansible-collections/community.aws/pull/748).
- rds_instance - Fixed issue with enabling enhanced monitoring on a pre-existing
RDS instance (https://github.com/ansible-collections/community.aws/pull/747).
- route53 - add missing set identifier in resource_record_set (https://github.com/ansible-collections/community.aws/pull/595).
- route53 - fix diff mode when deleting records (https://github.com/ansible-collections/community.aws/pull/802).
- route53 - return empty result for nonexistent records (https://github.com/ansible-collections/community.aws/pull/799).
- sns_topic - define suboptions for delivery_policy option (https://github.com/ansible-collections/community.aws/issues/713).
deprecated_features:
- dynamodb_table - DynamoDB does not support specifying non-key-attributes when
creating an ``ALL`` index. Passing ``includes`` for such indexes is currently
ignored but will result in failures after version 3.0.0 (https://github.com/ansible-collections/community.aws/pull/726).
- dynamodb_table - DynamoDB does not support updating the primary indexes on
a table. Attempts to make such changes are currently ignored but will result
in failures after version 3.0.0 (https://github.com/ansible-collections/community.aws/pull/726).
- elb_instance - setting of the ``ec2_elb`` fact has been deprecated and will
be removed in release 4.0.0 of the collection. See the module documentation
for an alternative example using the register keyword (https://github.com/ansible-collections/community.aws/pull/773).
- iam_cert - the iam_cert module has been renamed to iam_server_certificate
for consistency with the companion iam_server_certificate_info module. The
usage of the module has not changed. The iam_cert alias will be removed in
version 4.0.0 (https://github.com/ansible-collections/community.aws/pull/728).
- iam_server_certificate - Passing file names to the ``cert``, ``chain_cert``
and ``key`` parameters has been deprecated. We recommend using a lookup plugin
to read the files instead, see the documentation for an example (https://github.com/ansible-collections/community.aws/pull/735).
- iam_server_certificate - the default value for the ``dup_ok`` parameter is
currently ``false``, in version 4.0.0 this will be updated to ``true``. To
preserve the current behaviour explicitly set the ``dup_ok`` parameter to
``false`` (https://github.com/ansible-collections/community.aws/pull/737).
- rds_snapshot - the rds_snapshot module has been renamed to rds_instance_snapshot.
The usage of the module has not changed. The rds_snapshot alias will be removed
in version 4.0.0 (https://github.com/ansible-collections/community.aws/pull/783).
minor_changes:
- aws_config_delivery_channel - replaced use of deprecated backoff decorator
(https://github.com/ansible-collections/community.aws/pull/764).
- aws_direct_connect_confirm_connection - replaced use of deprecated backoff
decorator (https://github.com/ansible-collections/community.aws/pull/764).
- aws_direct_connect_connection - replaced use of deprecated backoff decorator
(https://github.com/ansible-collections/community.aws/pull/764).
- aws_direct_connect_link_aggregation_group - replaced use of deprecated backoff
decorator (https://github.com/ansible-collections/community.aws/pull/764).
- aws_direct_connect_virtual_interface - replaced use of deprecated backoff
decorator (https://github.com/ansible-collections/community.aws/pull/764).
- aws_inspector_target - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- aws_kms - add support for ``kms_spec`` and ``kms_usage`` parameter (https://github.com/ansible-collections/community.aws/pull/774).
- aws_kms - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- aws_kms_info - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- cloudformation_stack_set - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- cloudfront_distribution - add ``TLSv1.2_2021`` security policy for viewer
connections (https://github.com/ansible-collections/community.aws/pull/707).
- dms_endpoint - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- dms_replication_subnet_group - replaced use of deprecated backoff decorator
(https://github.com/ansible-collections/community.aws/pull/764).
- dynamodb_table - add support for setting the `billing_mode` option (https://github.com/ansible-collections/community.aws/pull/753).
- dynamodb_table - the module has been updated to use the boto3 AWS SDK (https://github.com/ansible-collections/community.aws/pull/726).
- ec2_asg - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- ec2_eip - added support for tagging EIPs (https://github.com/ansible-collections/community.aws/pull/332).
- ec2_eip_info - added automatic retries for common temporary API failures (https://github.com/ansible-collections/community.aws/pull/332).
- ec2_eip_info - added support for tagging EIPs (https://github.com/ansible-collections/community.aws/pull/332).
- ec2_elb_info - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- ec2_win_password - module updated to use the boto3 AWS SDK (https://github.com/ansible-collections/community.aws/pull/759).
- ecs_service - added support for forcing deletion of a service (https://github.com/ansible-collections/community.aws/pull/228).
- ecs_service_info - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- ecs_taskdefinition - add ``placement_constraints`` option (https://github.com/ansible-collections/community.aws/pull/741).
- efs - add ``transition_to_ia`` parameter to support specifying the number
of days before transitioning data to inactive storage (https://github.com/ansible-collections/community.aws/pull/522).
- elb_instance - added new ``updated_elbs`` return value (https://github.com/ansible-collections/community.aws/pull/773).
- elb_instance - the module has been migrated to the boto3 AWS SDK (https://github.com/ansible-collections/community.aws/pull/773).
- elb_target_group - add ``preserve_client_ip_enabled`` option (https://github.com/ansible-collections/community.aws/pull/670).
- elb_target_group - add ``proxy_protocol_v2_enabled`` option (https://github.com/ansible-collections/community.aws/pull/670).
- iam_managed_policy - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- iam_role - Added `wait` option for IAM role creation / updates (https://github.com/ansible-collections/community.aws/pull/767).
- iam_saml_federation - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- iam_server_certificate - add support for check_mode (https://github.com/ansible-collections/community.aws/pull/737).
- iam_server_certificate - migrate module to using the boto3 SDK (https://github.com/ansible-collections/community.aws/pull/737).
- lambda_info - add automatic retries for recoverable errors (https://github.com/ansible-collections/community.aws/pull/777).
- lambda_info - add support for tags (https://github.com/ansible-collections/community.aws/pull/375).
- lambda_info - use paginator for list queries (https://github.com/ansible-collections/community.aws/pull/777).
- rds - replaced use of deprecated backoff decorator (https://github.com/ansible-collections/community.aws/pull/764).
- redshift_subnet_group - added support for check_mode (https://github.com/ansible-collections/community.aws/pull/724).
- redshift_subnet_group - the ``group_description`` option has been renamed
to ``description`` and is now optional. The old parameter name will continue
to work (https://github.com/ansible-collections/community.aws/pull/724).
- redshift_subnet_group - the ``group_subnets`` option has been renamed to ``subnets``
and is now only required when creating a new group. The old parameter name
will continue to work (https://github.com/ansible-collections/community.aws/pull/724).
- redshift_subnet_group - the module has been migrated to the boto3 AWS SDK
(https://github.com/ansible-collections/community.aws/pull/724).
- route53_health_check - add support for tagging health checks (https://github.com/ansible-collections/community.aws/pull/765).
- route53_health_check - added support for check_mode (https://github.com/ansible-collections/community.aws/pull/734).
- route53_health_check - added support for disabling health checks (https://github.com/ansible-collections/community.aws/pull/756).
- route53_health_check - migrated to boto3 SDK (https://github.com/ansible-collections/community.aws/pull/734).
- route53_zone - add support for tagging Route 53 zones (https://github.com/ansible-collections/community.aws/pull/565).
- sqs_queue - Providing a kms_master_key_id will now enable SSE properly (https://github.com/ansible-collections/community.aws/pull/762)
fragments:
- 0-copy_ignore_txt.yml
- 228-ecs_service-force_delete.yml
- 332-ec2_eip-tagging.yml
- 375-lambda_info-tags.yml
- 384-elb_instance-python3-fixups.yml
- 522-efs-IA-transition.yml
- 557-action_group-missing-entry.yml
- 565-route53-tagging.yml
- 595-fix-route53-identifer.yaml
- 670-elb_target_group-new_attriibutes.yml
- 693-elb_classic_lb_info-without-names.yml
- 707-add-cloudfront-new-security-policy-2021.yaml
- 724-redshift_subnet_group-boto3.yml
- 726-dynamodb_table-boto3.yml
- 728-iam_cert.yml
- 731-ec2_eip-not_in_vpc.yml
- 734-route53_health_check.yml
- 735-iam_server_certificate-file-names.yml
- 737-iam_server_certificate-boto3.yml
- 739-sns_topic-delivery_policy-shape.yml
- 741-ecs_taskdefinition-placement.yml
- 747-rds-enhanced-monitoring-bug-fix.yml
- 748-iam_role_info-jittered-backoff.yaml
- 753-dynamodb-billing_mode.yml
- 756-route53_health_check-disable.yml
- 759-ec2_win_password.yml
- 762-fix-kmsmasterkeyid-attr.yaml
- 764-awsretry-backoff.yml
- 765-route53_health_check-tags.yml
- 767-iam_role-add-waiter-support.yml
- 773-elb_instance-boto3.yml
- 774-add-aws_kms_parameters.yml
- 777-lambda_info-awsretry.yml
- 780-fix-cloudfront_info-pagination.yml
- 783-rds_snapshot.yml
- 798-fix-route53-empty-result.yaml
- 802-fix-diif-mode.yml
modules:
- description: Manage AWS IAM User access keys
name: iam_access_key
namespace: ''
- description: fetch information about AWS IAM User access keys
name: iam_access_key_info
namespace: ''
- description: rds_option_group module
name: rds_option_group
namespace: ''
- description: rds_option_group_info module
name: rds_option_group_info
namespace: ''
release_date: '2021-11-12'
2.2.0:
changes:
bugfixes:
- aws_eks - Fix EKS cluster creation with short names (https://github.com/ansible-collections/community.aws/pull/818).
minor_changes:
- aws_msk_config - remove duplicated and unspecific requirements (https://github.com/ansible-collections/community.aws/pull/863).
- aws_ssm connection plugin - add parameters to explicitly specify SSE mode
and KMS key id for uploads on the file transfer bucket. (https://github.com/ansible-collections/community.aws/pull/763)
- ecs_taskdefinition - remove duplicated and unspecific requirements (https://github.com/ansible-collections/community.aws/pull/863).
- iam_user - add boto3 waiter for iam user creation (https://github.com/ansible-collections/community.aws/pull/822).
- iam_user - add password management support bringing parity with `iam` module
(https://github.com/ansible-collections/community.aws/pull/822).
- s3_lifecycle - Add ``abort_incomplete_multipart_upload_days`` and ``expire_object_delete_marker``
parameters (https://github.com/ansible-collections/community.aws/pull/794).
release_summary: This is a backport release of the ``community.aws`` collection.
fragments:
- 2.2.0.yml
- 763-aws_ssm_connection-add-sse-parameters.yml
- 794-s3_lifecycle_abort_expire.yml
- 818-fix-eks-short-name.yml
- 822-add-password-support-iam_user.yml
- 863-requirements-doc-fix.yml
modules:
- description: Create, modify and delete ASG scheduled scaling actions.
name: ec2_asg_scheduled_action
namespace: ''
release_date: '2022-01-13'
2.3.0:
changes:
bugfixes:
- cloudfront_distribution - Dont pass ``s3_origin_access_identity_enabled``
to API request (https://github.com/ansible-collections/community.aws/pull/881).
- execute_lambda - Wait for Lambda function State = Active before executing
(https://github.com/ansible-collections/community.aws/pull/857)
- lambda - Wait for Lambda function State = Active & LastUpdateStatus = Successful
before updating (https://github.com/ansible-collections/community.aws/pull/857)
minor_changes:
- elb_instance - `wait` parameter is no longer ignored (https://github.com/ansible-collections/community.aws/pull/826)
release_summary: 'This is the minor release of the ``community.aws`` collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.'
fragments:
- 2.3.0.yml
- 825-fix-elb-wait.yml
- 857-lambda-wait-before.yml
- 881-cloudfront-bug.yml
release_date: '2022-02-14'
2.4.0:
changes:
bugfixes:
- Add backoff retry logic to elb_application_lb_info (https://github.com/ansible-collections/community.aws/pull/977)
- ecs_taskdefinition - include launch_type comparison when comparing task definitions
(https://github.com/ansible-collections/community.aws/pull/840)
- elb_target_group_info - Add backoff retry logic (https://github.com/ansible-collections/community.aws/pull/1001)
- iam_role - Removes unnecessary removal of permission boundary from a role
when deleting a role. Unlike inline policies, permission boundaries do not
need to be removed from an IAM role before deleting the IAM role. This behavior
causes issues when a permission boundary is inherited that prevents removal
of the permission boundary. (https://github.com/ansible-collections/community.aws/pull/961)
- redshift_info - fix invalid import path for botocore exceptions (https://github.com/ansible-collections/community.aws/issues/968).
- wafv2_web_acl - fix exception when a rule contains lists values (https://github.com/ansible-collections/community.aws/pull/962).
minor_changes:
- Added suport for retries (AWSRetry.jittered_backoff) for cloudfront_distribution
(https://github.com/ansible-collections/community.aws/issues/296)
release_summary: 'This is the minor release of the ``community.aws`` collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.'
fragments:
- 1001-add-backoff-logic-elb_target_group_info.yml
- 2.4.0.yml
- 297-aws-retry-cloudfront-distribution.yml
- 840-ecs_taskdefinition-fix-task-definition-comparison.yml
- 961-iam-role-should-not-remove-permission-boundary-before-deletion.yml
- 962-fix-waf-list-conditions.yml
- 970-redshift_info-boto-import.yml
- 977-add-backoff-logic-elb-info.yml
release_date: '2022-03-30'