CHANGELOG.md

aws Cookbook CHANGELOG

This file is used to list changes made in each version of the aws cookbook.

Unreleased

9.2.1 - 2024-11-18

Standardise files with files in sous-chefs/repo-management

Standardise files with files in sous-chefs/repo-management

9.2.0 - 2024-10-27

• Enable the use of the FIPS endpoint for the S3_file resource and update the create_aws_interface method to support this functionality

9.1.7 - 2024-07-10

Standardise files with files in sous-chefs/repo-management

Standardise files with files in sous-chefs/repo-management

9.1.6 - 2024-05-02

9.1.5 - 2024-05-02

9.1.4 - 2023-12-27

9.1.3 - 2023-10-31

9.1.2 - 2023-09-28

9.1.1 - 2023-09-28

9.1.0 - 2023-08-17

Allow attributes group and owner of s3_file to be String or Integer

9.0.16 - 2023-07-10

9.0.15 - 2023-05-17

9.0.14 - 2023-04-07

• Standardise files with files in sous-chefs/repo-management
• Update workflows

9.0.13 - 2023-04-01

Standardise files with files in sous-chefs/repo-management

9.0.12 - 2023-04-01

Standardise files with files in sous-chefs/repo-management

9.0.11 - 2023-04-01

Standardise files with files in sous-chefs/repo-management

9.0.10 - 2023-03-02

Standardise files with files in sous-chefs/repo-management

9.0.9 - 2023-03-01

Update workflows

9.0.8 - 2023-02-18

Standardise files with files in sous-chefs/repo-management

9.0.7 - 2023-02-16

Standardise files with files in sous-chefs/repo-management

9.0.6 - 2023-02-15

Standardise files with files in sous-chefs/repo-management

9.0.5 - 2023-02-14

Standardise files with files in sous-chefs/repo-management

9.0.4 - 2023-02-02

Update checkout to v3 in ci.yml

9.0.3 - 2022-12-08

• Standardise files with files in sous-chefs/repo-management
• Remove delivery folder

9.0.2 - 2021-11-06

• Fixed array length comparison in ec2 fallback_region function

9.0.1 - 2021-11-04

• Fixed a logic bug when relying on ec2 fallback_region from a local zone. Local zones have weird AZ names.

9.0.0 - 2021-09-01

• resolved cookstyle error: resources/route53_record.rb:1:1 refactor: Chef/Deprecations/ResourceWithoutUnifiedTrue
• resolved cookstyle error: resources/security_group.rb:1:1 refactor: Chef/Deprecations/ResourceWithoutUnifiedTrue
• resolved cookstyle error: resources/ssm_parameter_store.rb:1:1 refactor: Chef/Deprecations/ResourceWithoutUnifiedTrue
• resolved cookstyle error: test/fixtures/cookbooks/aws_test/recipes/ssm_parameter_store.rb:93:7 convention: Layout/LeadingCommentSpace
• Require Chef 15.3+ for unified mode
• Require unified_mode for Chef 17+ support

8.4.1 - 2021-08-26

8.4.0 - 2021-01-24

• Sous Chefs Adoption
• Standardise files with files in sous-chefs/repo-management
• Cookstyle fixes
• feat(volume-type): add gp3 and io2 volume types to allowed types
• fix(ebs): update the ec2 gem and correct array membership test
• Update aws-sdk-kms to latest

8.3.1 (2020-12-04)

• Resolve cookstyle warnings - @cookstyle
• Update AWS S3 gem dependency - @arothian

8.3.0 (2020-08-06)

• Cookstyle 6.2.9 Fixes - @xorimabot
• Ensure we have resource_name in addition to provides in resources - @tas50
• Avoid resource overloading for aws_route53_record - @chakri-pd
• Avoid assigning a value only to return it - @tas50

8.2.0 (2020-02-11)

• Add documentation for return_key - @mbaitelman
• Ignore tags with prefix aws: instead of aws - @tamimkh
• Remove unnecessary Foodcritic comments - @tas50
• Require Chef 12.15+ - @tas50

8.1.1 (2019-11-10)

• bump aws-partitions for aws-sdk-core fix - @scalp42

8.1.0 (2019-11-08)

• Add Security group functionality (#379) - @smcavallo
• Adding support for virtualHost on s3
• Remove the long_description and if respond_to? in metadata.rb - @tas50
• Remove the ChefSpec matchers - @tas50
• Remove use_inline_resources in the provider - @tas50
• Remove the why-run check in the dynamo provider - @tas50
• Use platform? helpers where we can - @tas50
• Attempt to fix gem install issues with aws gems - @majormoses

8.0.4 (2019-05-16)

• Added a basic chefspec test - @dualbus
• Add code owners file - @tas50
• Rename the kitchen config - @tas50
• Cookstyle fixes - @tas50
• Add security section to the readme - @smcavallo
• mark all secret_access_key/session_token parameters as sensitive - @smcavallo
• account for timezone in setting s3 presigned url expiration - @majormoses
• bump aws-sdk-* gems for aws-sigv4 compatibility - @scalp42

8.0.3 (2018-12-21)

• Use the right alias - @majormoses
• remove refs to return_keys - @majormoses

8.0.2 (2018-12-18)

• add alias_method for reutrn_key and return_keys - @majormoses

8.0.1 (2018-12-14)

• Fix the gem metadata to prevent failurs to install the gems - @majormoses

8.0.0 (2018-12-14)

• Switch to aws-sdk-v3 gems and only install the minimum required gems - @bdwyertech
• s3_file: Fixed local ETag calculation to handle file originally uploaded as multi part. - @joshs85
• s3_file: Created s3_url property to be able to retrieve the pre signed url. - @joshs85
• s3_file: Made secret access key and token sensitive properties so they don't show up in logs. - @joshs85
• ssm_parameter_store: Fix namespacing issues and clean up the ssm_parameter_store resource parameters. This is a BREAKING CHANGE as it removes the parameters path from the key returned to the run_state. If you had a path such as /creds-path/, a credential called some_token, and a return_keys of some-app: node.run_state['some-app'] will contain {"some_token"=>"token_value"} where previously it returned {"/creds-path/some_token"=>"token_value"}. As such you will need to update all refrences that use this. - @bdwyertech
• ssm_parameter_store: add proper handling of pagination for path-based queries - @bdwyertech
• Lock aws gems to their latest minor version to prevent installing every updated gem Amazon releases - @majormoses

7.5.0 (2018-07-18)

• Fixing getting Route53 record when geo location is set
• added autoscaling resource
• Adds http_proxy to the AWS client options so the Seahorse client traverses the proxy if the environment variable is defined
• Cleanup tests so they can be more easily run outside Chef

7.4.1 (2018-05-17)

• Rescue Aws::EC2::Errors::InvalidSnapshotInUse with a friendly message

7.4.0 (2018-05-17)

• Allow installation of either aws-sdk v2 or v3
• Add support for STS assumed roles
• Add default empty hashes to several properties
• Resolve a few more Chef 14 incompatibilities
• Fix a failure when deleting ebs volumes

7.3.1 (2018-03-21)

• Check for nil as well as empty tags in ebs_volume

7.3.0 (2018-03-20)

• add aws_instance_role
• Add option to tag the new volumes and snapshots
• Added basic functionality for parameter store
• add requester_pays option to s3_file
• fix etag request via head_object when requester_pays
• Remove name property that isn't necessary
• Added SSM Parameter Store get functionality
• Chef 14: Avoid passing nils to remote_file in aws_s3_file resource

7.2.2 (2017-11-14)

• Resolve FC108 warning
• Make sure ip is listed as required for elastic_ip in the readme

7.2.1 (2017-09-08)

• Add missing aws_instance_term_protection matcher. Rename kinetic to kinesis matcher.

7.2.0 (2017-09-06)

• Add instance_term_protection resource
• Added named_iam_capability option to the cloudformation_stack resource

7.1.2 (2017-06-19)

• Multiple fixes to issues with the elastic_ip resource that prevented converges

7.1.1 (2017-06-16)

• Use the correct region value to prevent converge failures introduced in 7.0 with the ebs_volume resource
• Better handle snapshots when the user passes a volume_id instead of a snapshot ID
• Reload Ohai data when a ebs volume in attached or detached so the node data is correct
• Properly error if the user does not pass device to ebs_volume when its needed

7.1.0 (2017-06-16)

• Refactor and fix the secondary_ip resource

  • Fix failures that occured when assigning IPs via the resource (aka make it actually work)
  • Move all helpers out of the EC2 libary and into the resource itself
  • Instead of using open-uri to query the metadata endpoint use EC2 data from Ohai
  • Make IP a required property since we need that to run
  • Refactor the wait loop that broke notification when the resources updated
  • Reload Ohai data in the resource so downstream recipes will know about the new IP

7.0.0 (2017-06-15)

• The route53_record resource from the route53 resource has been moved into this cookbook. The resource is now named aws_route53_record, but can be referenced by the old name: route53_record. The resource now accepts all authentication methods supported by this cookbook and a new zone_name property can be used in place of the zone_id property so you now only need to know the name of the zone the record is placed into.
• Added a new aws_route53_zone resource for adding zones to Route53
• Added new aws_s3_bucket resource. This is a very simple resource at the moment, but it lays the groundwork for a more complex resource for adding buckets with ACLs and other features
• Converted all resources except for dynamodb_table to be custom resources. Logging and converging of resources has been updated and code has been cleaned up
• Simplified the cookbook libraries by collapsing most of the libraries into the individual resources. For the most part these just added unnecessary complexity to the cookbook
• Reworked how aws region information is determined and how the connection to AWS is initialized to work with some the new resources and the existing route53 resources
• Moved the libraries from the Opscode::Aws namespace to the AwsCookbook namespace.
• Large scale readme cleanup. There were multiple resources missing and some resources documented in 2 places. The documentation for resources is now ordered alphabetically and contains all actions and properties.
• Updated elastic_ip resource to reload ohai after changes so ohai data reflects the current node state
• Remove storage of IP information on the node when using the elastic_ip resource. This is a bad practice in general as node data can be changed or deleted by users or chef itself. This is potentially a breaking change for users that relied on this behavior.
• Updated resource_tag to properly support why-run mode

6.1.1 (2017-06-05)

• Resolve frozen string warning on Chef 13 in the s3_file rsource
• Resolve useless assignment cookstyle warning in the EC2 library
• Make the ELB deletion messaging consistent with the create messaging

6.1.0 (2017-05-01)

• Converted aws_cloudwath and aws_elb to custom resources with code cleanup
• Add create/delete actions to the aws_elb resource. This resource is currently not able to update the state of the ELB and does not setup health checks. It's mostly used to allow us to test the existing attach/detach actions, but it will be expanded in the future to allow for full ELB management
• Cleanup of the EC2 helper and removal of a few unnecessary helpers

6.0.0 (2017-04-27)

• Resolve deprecation warning in the chefspecs
• Remove the EBS Raid resource, which did not work on modern EC2 instance types and only worked on select Linux systems. We highly recommend users utilize provisioned IOPS on EBS volumes as they offer far greater reliability. If that's not an option you may want to pin to the 5.X release of this cookbook.
• Remove the ec2_hints recipe as newer Chef releases auto detect EC2 and don't require hints to be applied
• Use Chef's gem install in the metadata to handle gem installation. This increases the minimum required Chef release to 12.9
• Convert instance_monitoring to a custom resource with improved logging and converge notification
• Consider pending to be enabled as well within instance_monitoring to avoid enabling again

5.0.1 (2017-04-18)

• Fix for Issue #283 (error on aws_resource_tag): Updated deprecated Chef::Resource call with valid Chef::ResourceResolver drop-in

5.0.0 (2017-04-11)

• Calculate the presigned url after the md5 check as it may timeout when the existing file is very large
• Update testing for Chef 13 and use local delivery
• Update apache2 license string
• Require the latest ohai cookbook which fixes Chef 13 compatibility. With this change this cookbook now requires Chef 12.6 or later

4.2.2 (2017-02-24)

• Let the API decide what the default volume type is for EBS volumes. This doesn't actually change anything at the moment, but keeps us up to date with the defaults of the aws-sdk

4.2.1 (2017-02-24)

• Tweaks to the readme for clarity
• Remove Ubuntu 12.04 and openSUSE 13.2 from Test Kitchen matrix as these are both on the way to EOL
• Remove the sensitive, retries, and retry_delay from the s3_file resource for Chef 13 compatibility since chef itself defines these

4.2.0 (2017-01-21)

• README: Add ec2:ModifyInstanceAttribute to sample IAM policy (fixes #241)
• Added a new resource for managing CloudWatch alarms

4.1.3 (2016-11-01)

• Dont declare region twice in S3_file

4.1.2 (2016-10-04)

• Add matcher definitions for ChefSpec

4.1.1 (2016-09-19)

• Fix false "volume no longer exists" errors.
• Use alias_method to cleanup backwards compatibility in s3_file

4.1.0 (2016-09-19)

• Pass through retry_delay to remote_file
• Require ohai 4.0+ cookbook and use new compile_time method for ohai_hint resource
• Remove Chef 11 compatibility code in the aws-sdk gem install

4.0.0 (2016-09-15)

• Testing updates
• Require Chef 12.1 or later
• Use node.normal instead of node.set to avoid deprecation notices
• Warn in the logs if the default recipe is included
• Remove the ohai reload on every run in the hint recipe
• Remove chef 11 compat in the metadata

3.4.1 (2016-08-09)

• Modified find_snapshot_id method to make it work as intended
• Testing framework updates

v3.4.0 (2016-06-30)

• Added retries property to s3_file
• Switched docker based test kitchen testing to kitchen-dokken
• Added chef_version support metadata
• Added suse, opensuse, and opensuseleap as supported platforms
• Fixed Assume role credentials bug

v3.3.3 (2016-05-10)

• Add support for new ebs volume types: sc1 st1

v3.3.2 (2016-04-13)

• Resolved no method error when using the elb resource
• Fixed a bug in the md5 check in the s3_file resource

v3.3.1 (2016-03-25)

• Only install the aws-sdk gem at compile_time if chef-client supports that

v3.3.0 (2016-03-25)

• The AWS gem is now automatically installed as needed by the providers
• Added ChefSpec matchers for: cloudformation_stack, dynamodb_table, elastic_lb, iam_*, kinetic_stream, scondary_ip.

v3.2.0 (2016-03-23)

• Add the :delete action to the ebs_volume provider

v3.1.0 (2016-03-22)

• Added the sensitive attribute to the s3_file provider
• s3_file provider now compares md5sums of local files against those in S3 to determine if the file should be downloaded during the chef-client run
• s3_file provider now properly handles region by defaulting to us-east-1 unless a region is provided in the resource
• An inspec test suite has been added for the s3_file provider
• s3 connection objects are no longer stored in a per-region hash as this is longer necessary with the changes to how connection objects are stored
• The region method in the S3 module has been removed as it wasn't being used after region handling refactoring in the 3.0 release

v3.0.0 (2016-03-20)

Breaking changes

• Removed the ability to use databags for credentials with the ebs_raid provider. You must now pass the credentials in via the resource, @tas50
• #218 Remove support for Chef < 11.6.0, @tas50
• Switched to Ohai to gather information on the AWS instance instead of direct AWS metadata calls. This also removes the node['region'] attribute, which is no longer necessary. If you would like to mock the region for some reason in local testing set node['ec2']['placement_availability_zone'] to the AZ, as this is used to determine the region, @tas50
• aws-sdk gem is no longer loaded in default recipe

Other Changes

• #172 Several new features (AWS CloudFormation Support, IAM Support, Kinesis, DynamoDB, and local auth options) @vancluever
• Changes the AWS connect to not be shared accross resources. This allows each resource to run against a different region or use different credentials, @tas50
• #63 Add xfs support for ebs_raid filesystem, @bazbremner
• Fixed nil default value deprecation warnings in the providers, @tas50
• Fixed errors in the ebs_raid provider, @tas50
• Fixed missing values in the converge messaging in the ebs_volume provider, @tas50
• Fixed a failure when detaching ebs volumes, @dhui
• Added use_inline_resources to all providers, @tas50

v2.9.3 (2016-03-07)

• Resolved a default value warning in ebs_raid when running Chef 12.7.2+
• Updated development and testing Gem dependencies
• Resolved the latest rubocop warnings

v2.9.2 (2016-01-26)

• Fix a missing space in the ohai dependency

v2.9.1 (2016-01-26)

• Require ohai 2.1.0 or later due to a bug in previous releases that prevented ohai hints from being created
• Added inspec tests for the ohai hint file creation
• Added supported platforms to the metadata so the platform badges will display on the Supermarket

v2.9.0 (2016-01-26)

• #191 Add region attribute to s3_file provider, @zl4bv
• #203 Create the ec2 hint using the ohai provider for Windows compatibility, @tas50
• #205 Fix elb register/deregister, @obazoud

v2.8.0 (2016-01-21)

• #192 Fix secondary_ip failure, add windows support, and document in the readme, @Scythril
• #185 Update the aws-sdk dependency to the 2.2.X release, @tas50
• #189 Loosen the dependency on the aws-sdk to bring in current releases, @philoserf
• #183 Load the aws-sdk gem directly in the providers, @shortdudey123
• #165 Fix encryption support in ebs_raid provider, @DrMerlin
• #190 Add support for AssumeRole granted credentials using the either provided key or an instance profile, @knorby
• #160 Add an attribute to define the region if you're not running in AWS @ubiquitousthey
• #162 Update the Berksfile syntax, @miketheman
• Added testing in Travis CI
• Added a Gemfile with testing dependencies
• Added cookbook version and Travis CI status badges to the readme
• Test on the latest Chef releases instead of 11.16.0
• Update contributing and testing documentation
• Add Rakefile for simplified testing
• Add maintainers.md/maintainers.toml files and a Rake task for managing the MD file
• Update provider resources to use the Chef 11+ default_action format

v2.7.2 (2015-06-29)

• #124 Retain compatibility with Chef 11, @dhui
• #128 Use correct pageable response from aws-sdk v2 update, [@drywheat]
• #133 Fix ELB registration to detect correctly, deregister fix, @purgatorio
• #154 Update the contributing guide, @miketheman
• #156 Fix ebs_raid behavior without a snapshot_id, @mkantor
• Updates for ignores, use correct supermarket url, @tas50

v2.7.1 (2015-06-04)

• Adding support for aws_session_token

v2.7.0 (2015-04-06)

• Support for encrypted EBS volumes
• secondary_ip resource and provider
• Improvement of resource_tag id regex
• Add ChefSpec matchers for aws cookbook resources

v2.6.6 (2015-05-06)

• #123 Cleans up README and adds more metadata

v2.6.5 (2015-03-19)

• #110 Fix chef_gem compile time usage, also in conjunction with chef-sugar and Chef 11

v2.6.4 (2015-02-18)

• Reverting all chef_gem compile_time edits

v2.6.3 (2015-02-18)

• Fixing chef_gem with Chef::Resource::ChefGem.method_defined?(:compile_time)

v2.6.2 (2015-02-18)

• Fixing chef_gem for Chef below 12.1.0

v2.6.1 (2015-02-17)

• Being explicit about usage of the chef_gem's compile_time property.
• Eliminating future deprecation warnings in Chef 12.1.0.

v2.6.0 (2015-02-10)

• Convert to use aws-sdk instead of right_aws

v2.5.0 (2014-10-22)

• #60 Updates to CHANGELOG
• #85 Lots of testing harness goodness
• #89 Add a recipe to setup ec2 hints in ohai
• #74 README and CHANGELOG updates
• #65 Add a resource for enabling CloudWatch Detailed Monitoring
• #90 Add tests for aws_instance_monitoring

v2.4.0 (2014-08-07)

• #64 - force proxy off for metadata queries

v2.3.0 (2014-07-02)

• Added support for provisioning General Purpose (SSD) volumes (gp2)

v2.2.2 (2014-05-19)

• [COOK-4655] - Require ec2 gem

v2.2.0 (2014-04-23)

• [COOK-4500] Support IAM roles for ELB

v2.1.1 (2014-03-18)

• [COOK-4415] disk_existing_raid resource name inconsistency

v2.1.0 (2014-02-25)

Improvement

• [COOK-4008] - Add name property for aws_elastic_ip LWRP

v2.0.0 (2014-02-19)

• [COOK-2755] Add allocate action to the elastic ip resource
• [COOK-2829] Expose AWS credentials for ebs_raid LWRP as parameters
• [COOK-2935]
• [COOK-4213] Use use_inline_resources
• [COOK-3467] Support IAM role
• [COOK-4344] Add support for mounting existing raids and reusing volume
• [COOK-3859] Add VPC support (allocation_id) to AWS elastic_ip LWRPJoseph Smith

v1.0.0

Improvement

• [COOK-2829] - Expose AWS credentials for ebs_raid LWRP as parameters
• Changing attribute defaults begs a major version bump

v0.101.6

Bug

• [COOK-3475] - Fix an issue where invoking action detach in the ebs_volume provider when the volume is already detached resulted in a failure

v0.101.4

Improvement

• [COOK-3345] - Add aws_s3_file LWRP
• [COOK-3264] - Allow specifying of file ownership for ebs_raid resource mount_point

Bug

• [COOK-3308] - Ensure mdadm properly allocates the device number

v0.101.2

Bug

• [COOK-2951]: aws cookbook has foodcritic failures

Improvement

• [COOK-1471]: aws cookbook should mention the route53 cookbook

v0.101.0

Bug

• [COOK-1355]: AWS::ElasticIP recipe uses an old RightAWS API to associate an elastic ip address to an EC2 instance
• [COOK-2659]: volume_compatible_with_resource_definition fails on valid snapshot_id configurations
• [COOK-2670]: AWS cookbook doesn't use node[:aws][:databag_name], etc. in create_raid_disks
• [COOK-2693]: exclude AWS reserved tags from tag update
• [COOK-2914]: Foodcritic failures in Cookbooks

Improvement

• [COOK-2587]: Resource attribute for using most recent snapshot instead of earliest
• [COOK-2605]: "WARN: Missing gem 'right_aws'" always prints when including 'aws' in metadata

New Feature

• [COOK-2503]: add EBS raid volumes and provisioned IOPS support for AWS

v0.100.6

• [COOK-2148] - aws_ebs_volume attach action saves nil volume_id in node

v0.100.4

• Support why-run mode in LWRPs
• [COOK-1836] - make aws_elastic_lb idempotent

v0.100.2

• [COOK-1568] - switch to chef_gem resource
• [COOK-1426] - declare default actions for LWRPs

v0.100.0

• [COOK-1221] - convert node attribute accessors to strings
• [COOK-1195] - manipulate AWS resource tags (instances, volumes, snapshots
• [COOK-627] - add aws_elb (elastic load balancer) LWRP

v0.99.1

• [COOK-530] - aws cookbook doesn't save attributes with chef 0.10.RC.0
• [COOK-600] - In AWS Cookbook specifying just the device doesn't work
• [COOK-601] - in aws cookbook :prune action keeps 1 less snapshot than snapshots_to_keep
• [COOK-610] - Create Snapshot action in aws cookbook should allow description attribute
• [COOK-819] - fix documentation bug in aws readme
• [COOK-829] - AWS cookbook does not work with most recent right_aws gem but no version is locked in the recipe