v2.0.2

chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#32)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#33)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v2.0.1

Initial V2 Release Candidate @Benbentwo (#30)

what

Summary:

• Bugfix from the Major version v2 initial release with external networking mode supported
• Cleanup Readme with examples on getting started.

---

This pull request introduces updates to the documentation and configuration files to reflect changes in the Runs On component, including support for version 2.8.3, improved networking options, and updated parameters for better resource management. Key changes include the addition of new configuration options, updates to URLs and parameters, and enhancements to networking documentation.

Documentation Updates

• Updated references to defaults.yaml to runs-on/defaults.yaml in README.md and README.yaml to align with the new directory structure. [1] [2]
• Enhanced networking documentation to include details on using an external VPC and deprecated Transit Gateway configuration. [1] [2]

Configuration Enhancements

• Updated template_url to point to version 2.8.3 of the CloudFormation template and added a link to the changelog. [1] [2]
• Revised default parameters, such as reducing AppCPU and AppMemory, changing EmailAddress, and adding new options like EncryptEbs, SSHAllowed, and log retention settings. [1] [2]

Module Updates

• Changed the source for iam_roles module from a local path to cloudposse/iam-roles/aws version 0.10.0 for consistency and maintainability.

Formatting Improvements

• Fixed formatting issues in README.md and README.yaml, such as replacing <br/> tags with proper Markdown syntax for better readability.

Summary by CodeRabbit

• Documentation

  • Updated documentation to clarify and reorganize networking configuration options, including new examples for using existing VPCs and updated default parameter values.
  • Revised references to default configuration paths and template versions.
  • Consolidated and visually de-emphasized deprecated networking instructions.

• Chores

  • Updated ignored files to exclude .atmos/ directories.

• Refactor

  • Improved internal configuration logic for handling subnet and security group IDs, with added clarifying comments.

• Style

  • Applied minor formatting improvements in documentation for clarity.

• Bug Fixes

  • Removed validation checks requiring VPC and subnet IDs when using external networking, allowing more flexible configuration.

feat: support network_stack parameter @dudymas (#19)

## what - **feat(external-net): added** - **chore(remote-state): tidy unused module** - **chore(external-net): update parameters** - **chore(src): format changes** - **chore(docs): updated for network_stack**

why

• Configuring external networking is simpler when using brownfield or
  customized VPCs

• Transit Gateway setup can be difficult to troubleshoot

Summary by CodeRabbit

• New Features

  • Added support for configuring networking as either "embedded" (managed automatically) or "external" (using existing VPC, subnets, and security groups).
  • Introduced new variables for specifying VPC ID, subnet IDs, security group ID, and custom security group rules.
  • Outputs now include the security group ID for easier reference.
  • Enabled conditional creation and management of security groups and rules based on configuration.

• Documentation

  • Expanded and restructured documentation to clarify networking configuration options, usage patterns, and deprecation of older methods.
  • Updated examples and input/output descriptions for improved clarity.
  • Removed detailed autogenerated Terraform documentation and references for simplicity.

• Chores

  • Removed deprecated variables and modules related to VPC peering.
  • Updated module versions and improved formatting for consistency.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#29)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Enable merge queue @goruha (#28)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#27)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Summary by CodeRabbit

• Chores
  • Minor formatting update to internal configuration files. No user-facing changes.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#18)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#4)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.40.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.40.0

Compare Source

What's Changed

Enhancements

• feat: warn against data sources with ephemeral alternatives by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
• rules: Update Lambda deprecated runtimes by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870

Chores

• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
• docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @​dependabot in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/879](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/879...

v2.0.0

feat: support network_stack parameter @dudymas (#19)

## what - **feat(external-net): added** - **chore(remote-state): tidy unused module** - **chore(external-net): update parameters** - **chore(src): format changes** - **chore(docs): updated for network_stack**

why

• Configuring external networking is simpler when using brownfield or
  customized VPCs

• Transit Gateway setup can be difficult to troubleshoot

Summary by CodeRabbit

• New Features

  • Added support for configuring networking as either "embedded" (managed automatically) or "external" (using existing VPC, subnets, and security groups).
  • Introduced new variables for specifying VPC ID, subnet IDs, security group ID, and custom security group rules.
  • Outputs now include the security group ID for easier reference.
  • Enabled conditional creation and management of security groups and rules based on configuration.

• Documentation

  • Expanded and restructured documentation to clarify networking configuration options, usage patterns, and deprecation of older methods.
  • Updated examples and input/output descriptions for improved clarity.
  • Removed detailed autogenerated Terraform documentation and references for simplicity.

• Chores

  • Removed deprecated variables and modules related to VPC peering.
  • Updated module versions and improved formatting for consistency.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#29)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Enable merge queue @goruha (#28)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#27)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Summary by CodeRabbit

• Chores
  • Minor formatting update to internal configuration files. No user-facing changes.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#18)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#4)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.40.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.40.0

Compare Source

What's Changed

Enhancements

• feat: warn against data sources with ephemeral alternatives by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
• rules: Update Lambda deprecated runtimes by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870

Chores

• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
• docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
• Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/882
• Bump github.com/hashicorp/terraform-json from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/884

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.39.0...v0.40.0

v0.39.0

Compare Source

What's Changed

Enhancements

• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/840
• Add aws_iam_role_deprecated_policy_attributes rule by @​alexjfisher in https://github.com/terraform-linters/tflint-ruleset-aws/pull/833
• aws_write_only_arguments: recommend write-only arguments where available by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/860
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/855

Bug Fixes

• provider_missing_default_tags: correctly handle unknown values by @​bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/851

Chores

• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/839
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/842
• Bump the aws-sdk group with 7 updates by [@​dependabot...

v1.535.1

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#15)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/stack-config/yaml to v1.8.0 @[renovate[bot]](https://github.com/apps/renovate) (#3)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/stack-config/yaml (source)	module	minor	1.5.0 -> 1.8.0

---

Release Notes

cloudposse/terraform-yaml-stack-config (cloudposse/stack-config/yaml)

v1.8.0: [remote-state] Improve backend compatibility

Compare Source

Among other things detailed below, this release enables users to fix deprecation warnings like:

│ Warning: Deprecated Parameters
│ 
│   with module.account_map.data.terraform_remote_state.data_source[0],
│   on .terraform/modules/account_map/modules/remote-state/data-source.tf line 88, in data "terraform_remote_state" "data_source":
│   88: data "terraform_remote_state" "data_source" {
│ 
│ The following parameters have been deprecated. Replace them as follows:
│   * role_arn -> assume_role.role_arn

(cf. #​93 and #​96)

If you are receiving deprecation warnings from remote-state, they can now be resolved by updating your backend/remote_state_backend configuration to match the version of Terraform or Tofu you are using. For example, change

terraform:
  backend:
    s3:
      bucket: my-tfstate-bucket
      dynamodb_table: my-tfstate-lock-table
      role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
  remote_state_backend:
    s3:
      role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role

to

terraform:
  backend:
    s3:
      bucket: my-tfstate-bucket
      dynamodb_table: my-tfstate-lock-table
      assume_role:
        role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
  remote_state_backend:
    s3:
      assume_role:
        role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role

🚀 Enhancements

[remote-state] Improve backend compatibility @​Nuru (#​105)

what

• Improve remote-state backend compatibility

Rather than trying to parse the backend configuration, as a general rule we now just pass it through to the data source. This provides future-proof compatibility with all backends supported by Terraform and OpenTofu.

why

• This prevents the need for updates like #​99 to provide configuration for future S3 backends, while eliminating compatibility issues like #​102.
• This also eliminates deprecation warnings caused by forcing configuration to look a certain way.
• Now, users can manage their own remote state configuration to match their toolset.

references

• Closes #​102

v1.7.0: (not recommended)

Compare Source

feat: support for gcs backends @​burnzy (#​95)

what

Simple change to add support for GCS backends

why

Allows GCP users (users with gcs backends) to make use of this remote-state module for sharing data between components.

references

• https://developer.hashicorp.com/terraform/language/settings/backends/gcs
• https://atmos.tools/core-concepts/share-data/#using-remote-state

🚀 Enhancements

Support local backend @​Nuru (#​104)

what

• Support retrieving remote state from local backends
  • NOTE: Using relative paths in local backends is tricky, because the path needs to resolve to the same directory from the source root module directory as from the client root module directory.
• Fix Terratests
  • The spacelift test suite is broken, and we never previously required it to work, so it is now skipped
• Update test suite to use go v1.21 and update dependencies

why

• When running demos and tests, it is more convenient to use local backends
• Maintain some degree of testing
• Closes multiple dependabot PRs:
  • Supersedes and Closes #​82
  • Supersedes and Closes #​83
  • Supersedes and Closes #​84
  • Supersedes and Closes #​87
  • Supersedes and Closes #​88

🤖 Automatic Updates

Bump the go_modules group in /test/src with 5 updates @​dependabot (#​94)

Bumps the go_modules group in /test/src with 5 updates:

Package	From	To
github.com/hashicorp/go-getter	1.7.1	1.7.5
golang.org/x/crypto	0.1.0	0.17.0
golang.org/x/net	0.8.0	0.10.0
google.golang.org/grpc	1.51.0	1.56.3
google.golang.org/protobuf	1.28.1	1.30.0

Updates github.com/hashicorp/go-getter from 1.7.1 to 1.7.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.5

What's Changed

• Prevent Git Config Alteration on Git Update by @​​dduzgun-security in hashicorp/go-getter#497

New Contributors

• @​​dduzgun-security made their first contribution in hashicorp/go-getter#497

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.4...v1.7.5

v1.7.4

What's Changed

• Escape user-provided strings in git commands hashicorp/go-getter#483
• Fixed a bug in .netrc handling if the file does not exist hashicorp/go-getter#433

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.3...v1.7.4

v1.7.3

What's Changed

• SEC-090: Automated trusted workflow pinning (2023-04-21) by @​​hashicorp-tsccr in hashicorp/go-getter#432
• SEC-090: Automated trusted workflow pinning (2023-09-11) by @​​hashicorp-tsccr in hashicorp/go-getter#454
• SEC-090: Automated trusted workflow pinning (2023-09-18) by @​​hashicorp-tsccr in hashicorp/go-getter#458
• don't change GIT_SSH_COMMAND when there is no sshKeyFile by @​​jbardin in hashicorp/go-getter#459

New Contributors

• @​​hashicorp-tsccr made their first contribution i...

v1.535.0

Migrate component from cloudposse/terraform-aws-components

v1.534.0

Migrate component from cloudposse/terraform-aws-components

v1.533.0

Migrate component from cloudposse/terraform-aws-components

v1.532.0

Migrate component from cloudposse/terraform-aws-components