Mike Arnold

Add an optional list of IP CIDRs which can access the S3 website.

2

## what * We have a need to restrict access to the S3 website. This change allows adding the `aws:SourceIp` condition to the IAM bucket policy via the new optional...

Set DNS ALIAS instead of CNAME.

4

## what * We are switching from using DNS CNAMEs to using AWS DNS ALIAS which produces 'A' resource records. * Swapping module `cloudposse/terraform-aws-route53-alias` for module `cloudposse/terraform-aws-route53-alias`. * Supporting the...

SECURITY: iam:PassRole is dangerous

2

## Describe the Bug The inline policy `*-eb-default` in [main.tf line 138](https://github.com/cloudposse/terraform-aws-elastic-beanstalk-environment/blob/cc92c16b66ec1f264bf32ea28343f0ef3fb02c4b/main.tf#L138) is generally overreaching with all of it's permissions, but in particular `Action: ["iam:PassRole"]` with `Resource: "*"` is downright...

## Describe the Bug Use [terraform-aws-route53-alias](https://github.com/cloudposse/terraform-aws-route53-alias) instead of [terraform-aws-route53-cluster-hostname](https://github.com/cloudposse/terraform-aws-route53-cluster-hostname) in order to create a Route53 ALIAS instead of a CNAME. ## Expected Behavior I expect Route53 to be configured with...

## Describe the Bug Missing documentation of a minimal, working implementation. ## Expected Behavior A working, clear, and **concise** example of how to use this module along with others (ie...

skip_final_snapshot=false causes destroy failure

3

## Describe the Bug When `skip_final_snapshot = false`, running `terraform destroy` fails to delete the RDS option group. ## Expected Behavior Terraform destroy should not fail. If `skip_final_snapshot = false`,...

"Error: Invalid count argument" when access_logs_s3_bucket_id is set

1

## Describe the Bug Similar to #103. When `access_logs_s3_bucket_id = "bucketname"` is set on this module, it produces the following error: ``` Error: Invalid count argument on .terraform/modules/alb.access_logs.s3_bucket/main.tf line 163,...

## Describe the Feature Allow passing of a new variable `aws_sns_topic_arn` and do not create yet another SNS topic. ## Use Case We have a lot of SNS topics. We...

mpssh -r does not copy script to remote system

1

mpssh-1.3.3 Trying to run `mpssh -f HOSTLIST -r ${GITREPO}/evaluate.sh -o evaluate-pre` results in the evaluate.sh not being copied to the remote systems. If I scp the file and _then_ run...

Support for a puppetmaster that is not a certificate authority

5

http://docs.puppetlabs.com/guides/passenger.html http://docs.puppetlabs.com/guides/scaling_multiple_masters.html > If this puppet master is not the certificate authority, you will need to use different paths to the CA certificate and CRL. There should also be a...