v1.535.4

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#28)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.535.3

🤖 Automatic Updates

chore(deps): update terraform cloudposse/elasticsearch/aws to v0.48.0 @[renovate[bot]](https://github.com/apps/renovate) (#4)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/elasticsearch/aws (source)	module	minor	0.42.0 -> 0.48.0

---

Release Notes

cloudposse/terraform-aws-elasticsearch (cloudposse/elasticsearch/aws)

v0.48.0

Compare Source

Provide support for using custom domain name @​rmandziarz-spoton (#​199)

Provide support for using custom domain name as a fix for this limit: the domain name has a limit of 3-28 characters.

🤖 Automatic Updates

Migrate new test account @​osterman (#​194)

what

• Update .github/settings.yml
• Update .github/chatops.yml files

why

• Re-apply .github/settings.yml from org level to get terratest environment
• Migrate to new test account

References

• DEV-388 Automate clean up of test account in new organization
• DEV-387 Update terratest to work on a shared workflow instead of a dispatch action
• DEV-386 Update terratest to use new testing account with GitHub OIDC

Update .github/settings.yml @​osterman (#​191)

what

• Update .github/settings.yml
• Drop .github/auto-release.yml files

why

• Re-apply .github/settings.yml from org level
• Use organization level auto-release settings

references

• DEV-1242 Add protected tags with Repository Rulesets on GitHub

Update .github/settings.yml @​osterman (#​190)

what

• Update .github/settings.yml
• Drop .github/auto-release.yml files

why

• Re-apply .github/settings.yml from org level
• Use organization level auto-release settings

references

• DEV-1242 Add protected tags with Repository Rulesets on GitHub

Update .github/settings.yml @​osterman (#​189)

what

• Update .github/settings.yml
• Drop .github/auto-release.yml files

why

• Re-apply .github/settings.yml from org level
• Use organization level auto-release settings

references

• DEV-1242 Add protected tags with Repository Rulesets on GitHub

Update release workflow to allow pull-requests: write @​osterman (#​188)

what

• Update workflow (.github/workflows/release.yaml) to have permission to comment on PR

why

• So we can support commenting on PRs with a link to the release

Update GitHub Workflows to use shared workflows from '.github' repo @​osterman (#​187)

what

• Update workflows (.github/workflows) to use shared workflows from .github repo

why

• Reduce nested levels of reusable workflows

Update GitHub Workflows to Fix ReviewDog TFLint Action @​osterman (#​186)

what

• Update workflows (.github/workflows) to add issue: write permission needed by ReviewDog tflint action

why

• The ReviewDog action will comment with line-level suggestions based on linting failures

Update GitHub workflows @​osterman (#​185)

what

• Update workflows (.github/workflows/settings.yaml)

why

• Support new readme generation workflow.
• Generate banners

Use GitHub Action Workflows from `cloudposse/.github` Repo @​osterman (#​183)

what

• Install latest GitHub Action Workflows

why

• Use shared workflows from cldouposse/.github repository
• Simplify management of workflows from centralized hub of configuration

Add GitHub Settings @​osterman (#​182)

what

• Install a repository config (.github/settings.yaml)

why

• Programmatically manage GitHub repo settings

Update README.md and docs @​cloudpossebot (#​177)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Update Scaffolding @​osterman (#​178)

what

• Reran make readme to rebuild README.md from README.yaml
• Migrate to square badges
• Add scaffolding for repo settings and Mergify

why

• Upstream template changed in the .github repo
• Work better with repository rulesets
• Modernize look & feel

v0.47.0

Compare Source

Adding support for opensearch domains @​srhopkins (#​144)

what

• Adds support for opensearch domains

why

• Amazon OpenSearch Service is the successor to Amazon Elasticsearch Service and supports OpenSearch and legacy Elasticsearch OSS (up to 7.10, the final open source version of the software).

references

• Link to any supporting github issues or helpful documentation to add some context (e.g. stackoverflow).
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/opensearch_domain

v0.46.0

Compare Source

Fix Reference to Undeclared Variable @​sherifabdlnaby (#​169)

what

• Correct variable name for var.auto_tune.cron_schedule

why

• cron_expression_for_recurrence referred to the wrong variable name, with _ not .

references

v0.45.0

Compare Source

Support AWS Provider V5 @​max-lobur (#​167)

what

Support AWS Provider V5
Linter fixes

why

Maintenance

references

https://github.com/hashicorp/terraform-provider-aws/releases/tag/v5.0.0

Sync github @​max-lobur (#​163)

Rebuild github dir from the template

v0.44.0

Compare Source

• No changes

v0.43.0

Compare Source

Add var.create_elasticsearch_user_role @​mohamed-essam (#​161)

what

• Add variable to control creation of aws_iam_role.elasticsearch_user

why

• Resource not needed and can cause compliance issues

references

closes #​160

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#27)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/lambda-elasticsearch-cleanup/aws to v0.14.1 @[renovate[bot]](https://github.com/apps/renovate) (#3)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/lambda-elasticsearch-cleanup/aws (source)	module	patch	0.14.0 -> 0.14.1

---

Release Notes

cloudposse/terraform-aws-lambda-elasticsearch-cleanup (cloudposse/lambda-...

v1.535.2

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#26)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/stack-config/yaml to v1.8.0 @[renovate[bot]](https://github.com/apps/renovate) (#6)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/stack-config/yaml (source)	module	minor	1.5.0 -> 1.8.0

---

Release Notes

cloudposse/terraform-yaml-stack-config (cloudposse/stack-config/yaml)

v1.8.0: [remote-state] Improve backend compatibility

Compare Source

Among other things detailed below, this release enables users to fix deprecation warnings like:

│ Warning: Deprecated Parameters
│ 
│   with module.account_map.data.terraform_remote_state.data_source[0],
│   on .terraform/modules/account_map/modules/remote-state/data-source.tf line 88, in data "terraform_remote_state" "data_source":
│   88: data "terraform_remote_state" "data_source" {
│ 
│ The following parameters have been deprecated. Replace them as follows:
│   * role_arn -> assume_role.role_arn

(cf. #​93 and #​96)

If you are receiving deprecation warnings from remote-state, they can now be resolved by updating your backend/remote_state_backend configuration to match the version of Terraform or Tofu you are using. For example, change

terraform:
  backend:
    s3:
      bucket: my-tfstate-bucket
      dynamodb_table: my-tfstate-lock-table
      role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
  remote_state_backend:
    s3:
      role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role

to

terraform:
  backend:
    s3:
      bucket: my-tfstate-bucket
      dynamodb_table: my-tfstate-lock-table
      assume_role:
        role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
  remote_state_backend:
    s3:
      assume_role:
        role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role

🚀 Enhancements

[remote-state] Improve backend compatibility @​Nuru (#​105)

what

• Improve remote-state backend compatibility

Rather than trying to parse the backend configuration, as a general rule we now just pass it through to the data source. This provides future-proof compatibility with all backends supported by Terraform and OpenTofu.

why

• This prevents the need for updates like #​99 to provide configuration for future S3 backends, while eliminating compatibility issues like #​102.
• This also eliminates deprecation warnings caused by forcing configuration to look a certain way.
• Now, users can manage their own remote state configuration to match their toolset.

references

• Closes #​102

v1.7.0: (not recommended)

Compare Source

feat: support for gcs backends @​burnzy (#​95)

what

Simple change to add support for GCS backends

why

Allows GCP users (users with gcs backends) to make use of this remote-state module for sharing data between components.

references

• https://developer.hashicorp.com/terraform/language/settings/backends/gcs
• https://atmos.tools/core-concepts/share-data/#using-remote-state

🚀 Enhancements

Support local backend @​Nuru (#​104)

what

• Support retrieving remote state from local backends
  • NOTE: Using relative paths in local backends is tricky, because the path needs to resolve to the same directory from the source root module directory as from the client root module directory.
• Fix Terratests
  • The spacelift test suite is broken, and we never previously required it to work, so it is now skipped
• Update test suite to use go v1.21 and update dependencies

why

• When running demos and tests, it is more convenient to use local backends
• Maintain some degree of testing
• Closes multiple dependabot PRs:
  • Supersedes and Closes #​82
  • Supersedes and Closes #​83
  • Supersedes and Closes #​84
  • Supersedes and Closes #​87
  • Supersedes and Closes #​88

🤖 Automatic Updates

Bump the go_modules group in /test/src with 5 updates @​dependabot (#​94)

Bumps the go_modules group in /test/src with 5 updates:

Package	From	To
github.com/hashicorp/go-getter	1.7.1	1.7.5
golang.org/x/crypto	0.1.0	0.17.0
golang.org/x/net	0.8.0	0.10.0
google.golang.org/grpc	1.51.0	1.56.3
google.golang.org/protobuf	1.28.1	1.30.0

Updates github.com/hashicorp/go-getter from 1.7.1 to 1.7.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.5

What's Changed

• Prevent Git Config Alteration on Git Update by @​​dduzgun-security in hashicorp/go-getter#497

New Contributors

• @​​dduzgun-security made their first contribution in hashicorp/go-getter#497

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.4...v1.7.5

v1.7.4

What's Changed

• Escape user-provided strings in git commands hashicorp/go-getter#483
• Fixed a bug in .netrc handling if the file does not exist hashicorp/go-getter#433

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.3...v1.7.4

v1.7.3

What's Changed

• SEC-090: Automated trusted workflow pinning (2023-04-21) by @​​hashicorp-tsccr in hashicorp/go-getter#432
• SEC-090: Automated trusted workflow pinning (2023-09-11) by @​​hashicorp-tsccr in hashicorp/go-getter#454
• SEC-090: Automated trusted workflow pinning (2023-09-18) by @​​hashicorp-tsccr in hashicorp/go-getter#458
• don't change GIT_SSH_COMMAND when there is no sshKeyFile by @​​jbardin in hashicorp/go-getter#459

New Contributors

• @​​hashicorp-tsccr made their first contribution i...

v1.535.1

🤖 Automatic Updates

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.38.0 @[renovate[bot]](https://github.com/apps/renovate) (#7)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.38.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.38.0

Compare Source

What's Changed

Breaking Changes

• Update AWS provider/module and generated content by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/837
  • Remove Amazon Chime rules
    • aws_chime_voice_connector_group_invalid_name
    • aws_chime_voice_connector_invalid_aws_region
    • aws_chime_voice_connector_invalid_name
    • aws_chime_voice_connector_logging_invalid_voice_connector_id
    • aws_chime_voice_connector_origination_invalid_voice_connector_id
    • aws_chime_voice_connector_streaming_invalid_voice_connector_id
    • aws_chime_voice_connector_termination_credentials_invalid_voice_connector_id
    • aws_chime_voice_connector_termination_invalid_default_phone_number
    • aws_chime_voice_connector_termination_invalid_voice_connector_id

Enhancements

• feat: add aws_security_group_inline_rules rule by @​kayman-mk in https://github.com/terraform-linters/tflint-ruleset-aws/pull/793

Chores

• Bump github.com/aws/aws-sdk-go-v2/service/ecs from 1.53.1 to 1.53.2 in the aws-sdk group by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/806
• Bump github.com/zclconf/go-cty from 1.15.1 to 1.16.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/807
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/809
• Bump golang.org/x/net from 0.33.0 to 0.34.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/811
• Bump github.com/terraform-linters/tflint-plugin-sdk from 0.21.0 to 0.22.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/812
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.59 to 2.0.0-beta.60 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/810
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.60 to 2.0.0-beta.61 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/816
• Bump github.com/zclconf/go-cty from 1.16.0 to 1.16.1 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/817
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/815
• Bump github.com/zclconf/go-cty from 1.16.1 to 1.16.2 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/819
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/818
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/823
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/824
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.61 to 2.0.0-beta.62 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/825
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/826
• Bump golang.org/x/net from 0.34.0 to 0.35.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/827
• Bump github.com/aws/smithy-go from 1.22.2 to 1.22.3 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/830
• Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/831
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/829
• deps: Go 1.24 by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/832
• rule template: fix typo by @​bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/834
• Remove hard-coded versions from integration tests by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/835
• Add make release for release automation by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/836

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.37.0...v0.38.0

v0.37.0

Compare Source

Breaking Changes

• #​789 #​798: Update AWS provider/module and generated content
  • Removed the following rules
    • aws_service_discovery_http_namespace_invalid_name
    • aws_service_discovery_private_dns_namespace_invalid_name
    • aws_service_discovery_public_dns_namespace_invalid_name

Enhancements

• #​787 #​800: Add new db.m8g, r8g, r7i, r6i-preconfigured, m7i, c6gd instances (@​gnetsman, @​wata727)
• #​786: feat: add aws_iam_policy_attachment_exclusive_attachment rule (@​kayman-mk)
• #​790: feat: add aws_security_group_rule_deprecated rule (@​kayman-mk)
• #​801: rules: Add missing DB engines (@​wata727)
• [#​802](https://redirect.github.com/terraform-linters/tflint-rules...

v1.535.0

Migrate component from cloudposse/terraform-aws-components

v1.534.0

Migrate component from cloudposse/terraform-aws-components

v1.533.0

Migrate component from cloudposse/terraform-aws-components

v1.532.0

Migrate component from cloudposse/terraform-aws-components