Sophie Somerville

## Summary When logging out, this change will cause a redirect to the `end_session_endpoint` from the discovery doc if that endpoint is specified, and if the `enable-logout-redirect` option is selected....

Logout redirect should use the end session endpoint from the discovery doc if it exists

4

Currently, when the `enable-logout-redirect` option is on, a user is redirected to `$ISSUER/protocol/openid-connect/logout`. This is not always the correct endpoint, and I believe that the `end_session_endpoint` from the discovery doc...

When a dictionary is passed as a message to `logger.exception`, it can be modified unexpectedly, and this can cause issues if the dict is reused. For instance, this code will...

*Description of changes:* Switches `auto_enable = true` to `auto_enable_organization_members = "ALL"`, and removes resources for adding guardduty members. The [original argument is now deprecated](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/guardduty_organization_configuration#auto_enable), which this resolves. This change means...

Baseline is ignored when using the --redact argument

1

**Describe the bug** When using the `--redact` argument, a baseline file is not taken into account, and leaks are still reported. **To Reproduce** Starting in a new git repo, commit...

Allow default tags to be set using a variable

1

In our organisation, we require a set of tags to be set on all resources. It currently isn't possible to do that on AFT created resources, and this PR allows...

### Is there an existing issue for this? - [x] I have searched the existing issues ### Package ecosystem Terraform ### Package manager version _No response_ ### Language version _No...