-
3.0.0cfceb58c · ·
- feat: introduces `audit` scope through `var.iam_policy_entity_arns.audit` for auditing secrets and related KMS key - feat: adds optional `var.testing_prefix` and `var.current_account_id` - feat: adds `var.iam_policy_restrict_by_regions` to restrict policies by regions - feat: adds `var.iam_policy_source_arns` to restrict policies by source ARNs - feat: (BREAKING) deprecates the following variables and provide replacements: - `iam_policy_create` => *no_replacement* - `iam_policy_group_arns` => *no_replacement* - `iam_policy_external_resources_enabled` => *no_replacement* - `iam_policy_external_resources_arns` => `iam_policy_identity.resources_arns` - `iam_policy_source_policy_documents` => `iam_policy_identity.source_policy_documents` - `iam_policy_name_template` => `iam_policy_identity.name_template` - `iam_policy_description` => `iam_policy_identity.description_template` - `iam_policy_path` => `iam_policy_identity.path` - `iam_policy_tags` => `iam_policy_identity.tags` - `iam_policy_export_json` => `iam_policy_identity_export_jsons` - `secrets.json_policy` => `iam_policy_identity_export_jsons` - feat: (BREAKING) removes the following outputs and provided replacements: - `iam_policies` => `aws_iam_policies` - `iam_policy_jsons` => `aws_iam_policies.xxx.json` - `iam_policy_actions` => `precomputed.aws_iam_policies.xxx.actions` - `secrets` => `aws_secretsmanager_secrets` - `kms_key` => `aws_kms_key`, `aws_kms_alias`, `replica_aws_kms_key` and `replica_aws_kms_alias` - feat: do not automatically deprecated fetch groups members from `var.iam_policy_entity_arns` anymore - feat: data like regions and current account ID can be passed as variables to prevent unneeded API calls
-
latestcfceb58c · ·
- feat: introduces `audit` scope through `var.iam_policy_entity_arns.audit` for auditing secrets and related KMS key - feat: adds optional `var.testing_prefix` and `var.current_account_id` - feat: adds `var.iam_policy_restrict_by_regions` to restrict policies by regions - feat: adds `var.iam_policy_source_arns` to restrict policies by source ARNs - feat: (BREAKING) deprecates the following variables and provide replacements: - `iam_policy_create` => *no_replacement* - `iam_policy_group_arns` => *no_replacement* - `iam_policy_external_resources_enabled` => *no_replacement* - `iam_policy_external_resources_arns` => `iam_policy_identity.resources_arns` - `iam_policy_source_policy_documents` => `iam_policy_identity.source_policy_documents` - `iam_policy_name_template` => `iam_policy_identity.name_template` - `iam_policy_description` => `iam_policy_identity.description_template` - `iam_policy_path` => `iam_policy_identity.path` - `iam_policy_tags` => `iam_policy_identity.tags` - `iam_policy_export_json` => `iam_policy_identity_export_jsons` - `secrets.json_policy` => `iam_policy_identity_export_jsons` - feat: (BREAKING) removes the following outputs and provided replacements: - `iam_policies` => `aws_iam_policies` - `iam_policy_jsons` => `aws_iam_policies.xxx.json` - `iam_policy_actions` => `precomputed.aws_iam_policies.xxx.actions` - `secrets` => `aws_secretsmanager_secrets` - `kms_key` => `aws_kms_key`, `aws_kms_alias`, `replica_aws_kms_key` and `replica_aws_kms_alias` - feat: do not automatically deprecated fetch groups members from `var.iam_policy_entity_arns` anymore - feat: data like regions and current account ID can be passed as variables to prevent unneeded API calls
-
3.0cfceb58c · ·
- feat: introduces `audit` scope through `var.iam_policy_entity_arns.audit` for auditing secrets and related KMS key - feat: adds optional `var.testing_prefix` and `var.current_account_id` - feat: adds `var.iam_policy_restrict_by_regions` to restrict policies by regions - feat: adds `var.iam_policy_source_arns` to restrict policies by source ARNs - feat: (BREAKING) deprecates the following variables and provide replacements: - `iam_policy_create` => *no_replacement* - `iam_policy_group_arns` => *no_replacement* - `iam_policy_external_resources_enabled` => *no_replacement* - `iam_policy_external_resources_arns` => `iam_policy_identity.resources_arns` - `iam_policy_source_policy_documents` => `iam_policy_identity.source_policy_documents` - `iam_policy_name_template` => `iam_policy_identity.name_template` - `iam_policy_description` => `iam_policy_identity.description_template` - `iam_policy_path` => `iam_policy_identity.path` - `iam_policy_tags` => `iam_policy_identity.tags` - `iam_policy_export_json` => `iam_policy_identity_export_jsons` - `secrets.json_policy` => `iam_policy_identity_export_jsons` - feat: (BREAKING) removes the following outputs and provided replacements: - `iam_policies` => `aws_iam_policies` - `iam_policy_jsons` => `aws_iam_policies.xxx.json` - `iam_policy_actions` => `precomputed.aws_iam_policies.xxx.actions` - `secrets` => `aws_secretsmanager_secrets` - `kms_key` => `aws_kms_key`, `aws_kms_alias`, `replica_aws_kms_key` and `replica_aws_kms_alias` - feat: do not automatically deprecated fetch groups members from `var.iam_policy_entity_arns` anymore - feat: data like regions and current account ID can be passed as variables to prevent unneeded API calls
-
3cfceb58c · ·
- feat: introduces `audit` scope through `var.iam_policy_entity_arns.audit` for auditing secrets and related KMS key - feat: adds optional `var.testing_prefix` and `var.current_account_id` - feat: adds `var.iam_policy_restrict_by_regions` to restrict policies by regions - feat: adds `var.iam_policy_source_arns` to restrict policies by source ARNs - feat: (BREAKING) deprecates the following variables and provide replacements: - `iam_policy_create` => *no_replacement* - `iam_policy_group_arns` => *no_replacement* - `iam_policy_external_resources_enabled` => *no_replacement* - `iam_policy_external_resources_arns` => `iam_policy_identity.resources_arns` - `iam_policy_source_policy_documents` => `iam_policy_identity.source_policy_documents` - `iam_policy_name_template` => `iam_policy_identity.name_template` - `iam_policy_description` => `iam_policy_identity.description_template` - `iam_policy_path` => `iam_policy_identity.path` - `iam_policy_tags` => `iam_policy_identity.tags` - `iam_policy_export_json` => `iam_policy_identity_export_jsons` - `secrets.json_policy` => `iam_policy_identity_export_jsons` - feat: (BREAKING) removes the following outputs and provided replacements: - `iam_policies` => `aws_iam_policies` - `iam_policy_jsons` => `aws_iam_policies.xxx.json` - `iam_policy_actions` => `precomputed.aws_iam_policies.xxx.actions` - `secrets` => `aws_secretsmanager_secrets` - `kms_key` => `aws_kms_key`, `aws_kms_alias`, `replica_aws_kms_key` and `replica_aws_kms_alias` - feat: do not automatically deprecated fetch groups members from `var.iam_policy_entity_arns` anymore - feat: data like regions and current account ID can be passed as variables to prevent unneeded API calls
-
-
-
-
-
-
-
-
-
-
-
-
-