Benjamin Morris
Benjamin Morris
**Terraform Version & Prov:** **AFT Version:** (Can be found in the AFT Management Account in the SSM Parameter `/aft/config/aft/version`) CURRENT **Terraform Version & Provider Versions** N/A **Bug Description** `aft-invoke-customizations-execution-role` is...
THIS IS A DRAFT UNTIL THE AGC TARBALL IS UPDATED TO CONTAIN AN IMDSv2-supported VERSION of amazon-ebs-autoscale. **Description of Changes** Add metadataOptions to require IMDSv2. This is a security best...
License checks can be very useful to add to pipelines -- they can prevent lots of expensive conversations with lawyers downstream. Would it be possible to add some basic license...
*Issue #, if available:* Part of #400 *Description of changes:* This partially implements issue 400. Config does not support Proactive evaluation modes for Organization rules. Only single-account rules support EvaluationMode...
Would it make sense to offer some sort of integration with GenAI for rule generation? eg. `rdk create --runtime python3.11-lib --gen-ai-prompt "Config rule to check for RDS databases without the...
The documentation in cross-account may not be the latest and greatest. At minimum, linking to some sources that go into more depth could be worthwhile, like: https://aws.amazon.com/blogs/mt/deploying-custom-aws-config-rules-in-an-aws-organization-environment/ This could be...
RDK Custom Policy (sometimes called CfnGuard) Rules - #356 and #357, though may need implementation changes for 357. Proactive eval mode - #400 Better Terraform support - #377, #331 (Mark...
*Issue #, if available:* Closes #356 *Description of changes:* This is currently a DRAFT, with a LOT of placeholders for where the code still needs to be developed. The general...
This change adds support for Terraform 1.x, both as a regular Config rule and an Organizational Config rule. There's a few other minor changes thrown in here: 1. The `liblogging`...