Fix
kms-env
: Forward SIGKILL/SIGTERM to child process
New
ecs-run-task
: Add--task-overrides-json
New
ecs-deploy
: Add--update-task-definition-only
New
iam-session
: Add--print-identity-url
New
ecs-deploy
: Add task definition variable substitution
Fix
ecs-dashboard
: Fix dashboard not loading correctly with more than 10 ECS servicesecs-dashboard
: Updated some npm dependencies vulnerabilities
Breaking
aws-dump
: Config file format changed
New
- all: Use go modules and upgrade dependencies, including the AWS go SDK to support the metadata service v2
aws-dump
: Added new resourcesecs-deploy
: Added--overwrite-account-ids
Fix
kms-env
: Fixed--refresh-max-retries
not being set properlyecs-dashboard
: Fixed some npm dependencies vulnerabilities
New
- All tools supporting
--assume-role-arn
can now be given a policy to assume with the role with--assume-role-policy
. docs
: Added more details on IAM policies for some tools.
Fix
aws-dump
: Filter out default RDS option groups.
Breaking
aws-dump
: Updated the id foriam:role
to the role ID instead of name.aws-dump
: ARN resources include qualifier (update of common). Addresses collision of IDs with some role names.common
: ARN parsing include the qualifier in the resource name instead of dropping it.
New
aws-dump
: New reportsautoscaling:launch-configurations
ec2:launch-configurations
iam:instance-profiles
rds:db-clusters
rds:db-instance-automated-backups
rds:db-instances
rds:db-parameter-groups
rds:db-security-groups
rds:db-snapshots
rds:db-subnet-groups
rds:event-subscriptions
rds:events
rds:global-clusters
rds:option-groups
rds:reserved-db-instances
aws-dump
: Added--list-reports
common
: More options toFlattenMap
.docs
: Added more examples to ecs-deploydocs
: Added basic help forcloudwatch-put-metric-data
ands3-download
Fix
aws-dump
: Log errors instead of silently failing.docs
: Updated mostREADME.md
for undocumented CLI args.
New
kms-env
: Added support for value prefixes (ssm://
,secrets-manager://
,kms://
andfile://
)aws-dump
: Added theec2:key-pairs
report.
New
iam-request-ssh-key-signature
: New toollambda-sign-ssh-key
: New toolaws-dump
: Added new reportec2:nat-gateways
- All tools now use the same flags for log output.
New
iam-session
: Added support forAWS_CONFIG_FILE
andAWS_SHARED_CREDENTIALS_FILE
kms-env
: Added refreshing the environment with--refresh-action
,--refresh-interval
and--refresh-max-retries
New
iam-sync-users
:- Added logging
- Added expiring accounts with
chage
- Added setting an invalid password for new user to support Ubuntu account unlocking
New
iam-sync-users
: Manage sudo with IAM tags
New
iam-sync-users
- Added locking users not in IAM with
--lock-missing
and--lock-ignore-user
- Added setting groups from IAM tags with
--iam-tags-prefix
- Made sudo optional with
--sudo
/--no-sudo
- Added locking users not in IAM with
New
aws-dump
: Added LastUsed to metadata
Fix
elb-resolve-alb-external-url
: Fix incorrect resolution
Breaking changes
aws-dump
changed the report argument format
New
aws-dump
added more resources
New
- Added
ec2-describe-instances
aws-dump
added more resources
New
- Added
aws-dump
New
- Added
iam-sync-users
Fix
iam-session
returns the command exit codekms-env
returns the command exit code
New
- Added
--task-json
toecs-deploy
Fix
ecs-deploy
would return before the deployment was completed
New
- Added support for secrets manager in
kms-env
New
- Added
ecs-locate
Fix
- MFA support in
iam-auth-proxy
New
- Added
iam-auth-proxy
New
- Added
--version
to all commands exceptecs-dashboard
New
- Added SSM support in
kms-env
New
- Added
--dns-prefix
toelb-resolve-alb-external-url
to filter the right dns when there is more than one alias for an ALB
Fix
- Fix a crash when using
ec2-ip-from-name
when a terminated instance exists
New
lambda-ping
: Ping a URL with lambda and publish a cloudwatch custom metric
New
cloudwatch-put-metric-data
: New dimension argument
Fixes
ecs-dashboard
: Use the same code to open session as the other tools. Fixes an issue where role assumption wasn't working sometimes from ECS.
New
- Added
kms-env
New
- Added support for profiles with MFA and role assumption in all tools
- Added a check for trailing spaces in env vars to catch copy paste mistakes
- Added
common.OpenSession
to make it easier to open a session with config
Breaking Changes
ecs-run-task
:--cluster-name
renamed to--cluster
to matchecs-deploy
New
- Added support for role assumption and MFA
New
- Added
iam-public-ssh-keys
New
- Added
iam-session
Breaking Changes
- Changed flag in
ecs-deploy
New
- Added
ecr-get-login
No changelog for older versions, check commit logs