Release v1.6.3

This release concerns AWS Lambda functions using the Node.js 18 runtime in the ASEA code:

AWS is ending support for Node.js 18 in Lambda on September 1, 2025. This follows Node.js 18 End-Of-Life (EOL) reached on April 30, 2025.

Customers should upgrade to v1.6.3 to address this.

• ASEA to LZA Documentation updates (#1279) (f76f198)
• nodejs22 update (#1256) (7d9e9fb)
• chore(upgrade) support ASEA accountKey property with spaces in the identifier (#1266) (87816c3)
• fix(upgrade): modify config converter to use SessionManagerLogging po… (#1264) (edcf783)
• Updating package to 1.6.2 (84c1a7a)

Release v1.6.2

This release includes updates to the tooling to support an in-place upgrade of ASEA to LZA. There are no functional changes to ASEA between version v1.6.1 and v1.6.2 other than those needed to support the upgrade.
The documentation for the ASEA to LZA upgrade is available in the AWS Secure Environment Accelerator guide on GitHub pages and the upgrade tools are available in the reference-artifacts/Custom-Scripts/lza-upgrade folder of this repository.

• fix(upgrade): enable organization cloudtrail in config converter. For… (#1263) (1b06a29)
• fix(post-migration) remove asea config aggregator (#1261) (8bc0506)
• fix(snapshot) skip subscription filters for IA log groups (#1260) (c7470d3)
• fix(convert-config): fix sub-pool missing in assignedCidr filter (#1259) (a629e7e)
• fix(upgrade) don't fail on errors when snapshot kms keys (#1254) (fbf1047)
• Update lint-prettier.yml (055ad81)
• Update build.yml (2ff2bb8)
• fix(outputs): correct issue with nested stack outputs (#1257) (0b388bd)
• fix(upgrade): include all dns-resolver-query logs in config (#1253) (afea322)
• fix(resource-mapping) fix nested stacks lookup for resource mapping (#1255) (0e9a3c6)
• Updating package to 1.6.1 (a42cccc)

Release v1.6.1

This release includes updates to the tooling to support an in-place upgrade of ASEA to LZA. There are no functional changes to ASEA between version v1.6.0 and v1.6.1 other than those needed to support the upgrade.
The documentation for the ASEA to LZA upgrade is available in the AWS Secure Environment Accelerator guide on GitHub pages and the upgrade tools are available in the reference-artifacts/Custom-Scripts/lza-upgrade folder of this repository.

• only add vpcflowlog filter if in asea config (#1252) (4ca1855)
• Lza upgrade doc ASEA v1.6.1 (#1251) (101ad14)
• feat(convert-config): adding lza vpcflowlog log group pattern to dynamic-parition (#1250) (775f39c)
• fix(convert-config): Remove warning for ssm-remediation with nested ous in convert-config (#1249) (23192ef)
• fix: improve nested stack check by using physical ids patterns instead of stack name based pattern (#1247) (5dd1c64)
• fix(resourcemapping): added compare and next token for list stack (#1248) (82ab1ce)
• lza-upgrade: Improve network drift detection script (#1245) (cd011af)
• fix(upgrade): disable ASEA subscription filter rules in the asea-prep step (#1244) (c818f69)
• Bump cross-spawn in /reference-artifacts/Custom-Scripts/lza-upgrade (#1242) (f11f080)
• Bump micromatch in /reference-artifacts/Custom-Scripts/lza-upgrade (#1241) (6317011)
• Updating package to 1.6.0 (69159bf)

Release v1.6.0

This release includes the tooling to support an in-place upgrade of ASEA to LZA. There are no functional changes to ASEA between version v1.5.11 and v1.6.0 other than those needed to support the upgrade.
The documentation for the ASEA to LZA upgrade is available in the AWS Secure Environment Accelerator guide on GitHub pages and the upgrade tools are available in the reference-artifacts/Custom-Scripts/lza-upgrade folder of this repository.

• LZA Upgrade (#1240) (9e22081)
• Opt-in region State Machine enhancements (#1231) (33e4dfa)
• Update README.md (3bb5b7f)
• Updating package to 1.5.11 (5d3fa3a)

Release v1.5.11

• Update release.yml with change of v2 to v4 of GitHub Actions Artifacts (aab6095)
• fix for tgw peering multiple attachments issue (#1237) (be9b11a)
• Bump braces from 3.0.2 to 3.0.3 in /reference-artifacts/Add-ons/opensiem (#1230) (d961589)

Release v1.5.10

NOTES

• Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments

• Customers MUST update their ASEA installer stack with the provided CloudFormation template for this release.

  • This release includes important runtime and bug fix updates that customers should install. This release focuses on stability and preparing for the end of support.
  • It's recommend customers on older versions upgrade to v1.5.9-b first before moving to v1.5.10.
  • Upgrade testing for future releases will only be for upgrades from v1.5.10 or higher
  • ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
  • End of support is expected in Q2 2025. Upgrades from ASEA to LZA will occur over the few quarters.

FEATURES

• code changes to support use of ca-west-1 (Canada West) region.
• enables opt-in region for guardduty logging (#1222) (2102ceb)
• ca-west-1 config sample and documentation (#1225) (1ed3ea3)

FIXES

• fix for 1205 (#1223) (6cfa5eb)
• eslint config upgrade (#1224) (a588e9a)
• s3 template update (#1221) (b59818b)

Release v1.5.9-b

NOTES

• Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments

• Customers MUST update their ASEA installer stack with the provided CloudFormation template for this release.

  • This release includes important runtime and bug fix updates that customers should install. This release focuses on stability and preparing for the end of support.
  • It's recommend customers on older versions upgrade to v1.5.8-d first before moving to v1.5.9-b.
  • Upgrade testing for future releases will only be for upgrades from v1.5.9-b or higher
  • ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
  • End of support is expected in Q2 2025. Upgrades from ASEA to LZA will occur over the few quarters.

FEATURES

• None

FIXES

• Fix for cross-account Security Group rules using dynamic cidr ranges (#1220) (b31529a)
• Add ca-west-1 (#1218) (63ca3b3)
• Added latest proxy-agent version (#1215) (76b4e8f)
• Removed strict flag (#1216) (e0eb93e)
• Removed proxy-agent dependency (#1209) (32ee10c)
• Update retry logic to match error (#1208) (8a62515)
• Increase memory size for ALB IP forwarding lambdas (#1204) (9c17165)
• Fix cannot find module 'aws-sdk' on custom config rule lambdas (#1207) (1660d5c)

Release v1.5.8-d

NOTES

• Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments

• Customers MUST update their ASEA installer stack with the provided CloudFormation template for this release.

  • This release includes important runtime and bug fix updates that customers should install. This release focuses on stability and preparing for the end of support.
  • It's recommend customers on older versions upgrade to 1.5.7-b first before moving to v1.5.8-d.
  • Upgrade testing for future releases will only be for upgrades from v1.5.8-d or higher
  • ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
  • End of support is expected in Q2 2025. Upgrades from ASEA to LZA will occur over the few quarters.

FEATURES

• None

FIXES

• Fix issue with vpcEndpoint az lookup (#1194) (8f590e0)
• Upgrade to Node 18 runtimes (#1189) (d940dfa)
• Fix wrong argument passed to updateTerminationProtection function (#1197) (f93a132)
• increase lambda memory (#1201) (c09266c)
• added memory (#1202) (5e33f47)

Release v1.5.8-c

NOTES

• Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments

• Customers MUST update their ASEA installer stack with the provided CloudFormation template for this release.

  • This release includes important runtime and bug fix updates that customers should install. This release focuses on stability and preparing for the end of support.
  • It's recommend customers on older versions upgrade to 1.5.7-b first before moving to v1.5.8-c.
  • Upgrade testing for future releases will only be for upgrades from v1.5.8-c or higher
  • ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
  • End of support is expected in Q2 2025. Upgrades from ASEA to LZA will occur over the few quarters.

FEATURES

• None

FIXES

• Fix issue with vpcEndpoint az lookup (#1194) (8f590e0)
• Upgrade to Node 18 runtimes (#1189) (d940dfa)
• Fix wrong argument passed to updateTerminationProtection function (#1197) (f93a132)
• increase lambda memory (#1201) (c09266c)

Release v1.5.8-b

NOTES

• Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments

• Customers MUST update their ASEA installer stack with the provided CloudFormation template for this release.

  • This release includes important runtime and bug fix updates that customers should install. This release focuses on stability and preparing for the end of support.
  • It's recommend customers on older versions upgrade to 1.5.7-b first before moving to v1.5.8-b.
  • Upgrade testing for future releases will only be for upgrades from v1.5.8-b or higher
  • ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
  • End of support is expected in Q2 2025. Upgrades from ASEA to LZA will occur over the few quarters.

FEATURES

• None

FIXES

• Fix issue with vpcEndpoint az lookup (#1194) (8f590e0)
• Upgrade to Node 18 runtimes (#1189) (d940dfa)
• Fix wrong argument passed to updateTerminationProtection function (#1197) (f93a132)