1.6.8

What's Changed

• PRMP-910 Add lifecycle rule review bucket by @NogaNHS in #519
• [NDR-333] Allow FHIR lambdas access to the core dynamodb table by @jameslinnell in #529
• [PRMP-978] Fix daily health check cypress tests by @adamwhitingnhs in #532
• [NDR-319] Add PR checklist by @megan-bower4 in #530
• [PRMP-978] Change folder path to correct build folder by @adamwhitingnhs in #533
• [PRMP-978] Change folder path to correct build folder by @adamwhitingnhs in #534
• [NDR-293] Update preprod common name by @megan-bower4 in #535
• [PRMP-809] Add S3 event trigger for document review prefix by @NogaNHS in #518
• [PRMP-881] Update upload review DynamoDB table by @NogaNHS in #514
• [PRMP-1090] Update Review Status lambda infra to use correct env vars by @steph-torres-nhs in #540

Full Changelog: 1.6.7...1.6.8

1.6.7

What's Changed

• [NDR-313] Add slack notification to workflow failures by @megan-bower4 in #502
• [PRMP-626] Expedite SQS Queue by @SWhyteAnswer in #501
• [PRM-521] Allow US communications in non-production environments (to enable UI smoke tests) by @chrisbloe in #509
• [PRMP-876] Create a new S3 bucket for the Review feature by @steph-torres-nhs in #511
• [PRMP-585] document review processor lambda and SQS changes by @NogaNHS in #510
• [PRMP-594] New lambda for get doc ref by @adamwhitingnhs in #493
• [PRMP-586] Create GET and PATCH/DocumentReview API endpoints and Lambdas by @steph-torres-nhs in #482
• [PRMP-579] Adding CloudFront with secondary bucket option to module by @steph-torres-nhs in #475
• [NDR-313] Provide environment to notify-slack step by @megan-bower4 in #515
• [PRMP-386] Update number of concurrent lambda executions by @PedroSoaresNHS in #507
• [PRMP - 541] Enforce virus scans on expedite files by @PedroSoaresNHS in #506
• [PRMP-817] Create new endpoint infrastructure for review status by @steph-torres-nhs in #513
• [PRM-537] Introduce markdown validation on PRs by @chrisbloe in #520
• [PRMP-840] Add POST method and IAM roles for document review by @NogaNHS in #517
• [PRMP-927] Add missing dependency block to the review lambda by @steph-torres-nhs in #524
• [NDR-316] Script to easily export policies from an IAM role by @tim-knight-nhs in #508
• [NDR-328] Add the new CORE dynamodb table by @jameslinnell in #525
• [PRM-624] Remove logging_config block from "aws_cloudfront_distribution" by @chrisbloe in #528

New Contributors

• @tim-knight-nhs made their first contribution in #508

Full Changelog: 1.6.6...1.6.7

1.6.6

What's Changed

• [PRMP-388] Migration DynamoDB Step Function by @SWhyteAnswer in #474
• [PRM-596] Resolve mtls API Gateway destroy race condition issue by @chrisbloe in #485
• [PRMP-538] Add S3 listener to 'expedite' folder by @MohammadIqbalAD-NHS in #487
• [PRMP-166] Add update doc ref lambda and refactor create gateway to use shared doc ref gateway by @adamwhitingnhs in #454
• [PRMP-582] Add DynamoDB table module for document review records by @NogaNHS in #468
• PRMP-583 Document review SQS and lambda by @NogaNHS in #464
• [NDR-307] Build your sandbox from a single make command by @jameslinnell in #488
• [PRM-600] Backup vault terraform | Add AdministratorRestriction IAM policy & update aws provider to v6 by @chrisbloe in #489
• [NDR-284] Create ssm params for foobar cert & key by @megan-bower4 in #491
• [NDR-284] Remove trailing underscore by @megan-bower4 in #492
• [PRMP-538] Revert S3 Listener to 'expedite' folder by @robg-test in #490
• [NDR-284] Rename certificate params by @megan-bower4 in #494
• [PRM-591] Add -lock-timeout=20m to ndr-dev terraform plan/apply commands by @chrisbloe in #495
• [PRMP-570] Step Function Error Handling by @SWhyteAnswer in #486
• [PRMP-824] Add SSM access policy to Lambda search document references by @NogaNHS in #498
• [PRMP-538] Add EventBridge rule for expedite folder by @MohammadIqbalAD-NHS in #497
• [PRMP-586] Disable upload workflows in dev and sandbox configurations by @NogaNHS in #500
• [PRMP-835] Update DynamoDB module configuration for production by @NogaNHS in #499
• [PRMP-835] Conditionalize DynamoDB access policies for non-production environments by @NogaNHS in #504
• [PRMP-835] Replace null values in policy docs with empty strings and compact() list by @adamwhitingnhs in #505

Full Changelog: 1.6.5...1.6.6

1.6.5

What's Changed

• [PRMP-399] Segment Lambda for DynamoDB Migration by @SWhyteAnswer in #456
• [PRMP-580] Add create before destroy to gateways by @adamwhitingnhs in #462
• [NDR-285] Trigger virus scan lambda on PDM upload by @jameslinnell in #473
• [PRMP 562] Implement DynamoDB Migration Segment Worker Lambda by @PedroSoaresNHS in #471
• [PRM-587] Daily health check - runs-on: ubuntu-22.04 -> ubuntu-latest by @chrisbloe in #472
• [PRM-581] Prevent BAU Administrator access from deleting .tfstate files by @chrisbloe in #465
• [PRM-581] Add conditional count for IAM policy resource by @chrisbloe in #476
• [PRMP-741] concurrent reserved only in prod by @SWhyteAnswer in #477
• [NDR-270] Update apim url by @megan-bower4 in #479
• [NDR-281] Allow assume role for POST FHIR by @jameslinnell in #481

Full Changelog: 1.6.4...1.6.5

1.6.4

What's Changed

• [NDR-235] Certificate generation for mTLS by @megan-bower4 in #437
• [NDR-244] Add policies to Fhir lambdas for reading db and s3 by @jameslinnell in #450
• [NDR-271] Add PDM env vars to virus check by @jameslinnell in #455
• [PRM-539] Adding SBOM Repo Scanning by @chrisbloe in #449
• [PRM-563] add write permission to automated deploy for SBOM action by @steph-torres-nhs in #458
• [NDR-244] Remove API key requirement from mTLS gateway by @megan-bower4 in #457
• Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #459
• [PRM-551] Workflow job/step names review by @chrisbloe in #451
• [NDR-254] Run pre-commit for terraform. by @jameslinnell in #460
• [PRMP-195] Write to dynamo (bulk upload report) table for invalid file names by @MohammadIqbalAD-NHS in #406
• [PRM-536] GitHub Org migration changes by @chrisbloe in #447
• [PRM-536] Update GIT_WORKFLOW_PAT creation comment by @chrisbloe in #461
• [PRM-579] Virus Scanner Upgrade from css9.02.001 to css9.03.000 by @chrisbloe in #463

Full Changelog: 1.6.3...1.6.4

1.6.3

What's Changed

• [PRM-534] Deploy - Sandbox | Don't run main over main by @chrisbloe in #445
• [PRM-526] Upgrade Terraform from 1.11.4 to 1.13.3 by @chrisbloe in #439
• [NDR-266] Split jobs on sandbox by @jameslinnell in #446
• Bump SonarSource/sonarqube-scan-action from 5 to 6 by @dependabot[bot] in #444
• [NDR-251] Add PDM DYNAMODB to POST/GET/SEARCH lambda env vars by @jameslinnell in #448
• [NDR-245] Change lambda to kms on ReadOnlyExtra policy by @jameslinnell in #452
• [PRM-552] Add eventbridge to virus scan trigger by @adamwhitingnhs in #453

Full Changelog: 1.6.2...1.6.3

1.6.2

What's Changed

• [NDR-205] Remove "count = 1" from any resources that have it. by @jameslinnell in #400
• [NDR-246] Fix sqs-mns index by @jameslinnell in #416
• [NDR-248] Add count back to api-gateway by @jameslinnell in #420
• [NDR-248] Import api-gateway by @jameslinnell in #421
• Revert "[NDR-248] Import api-gateway" by @jameslinnell in #423
• [NDR-245] Add a ReadOnlyExtraAccess policy by @jameslinnell in #415
• Revert "[NDR-245] Add a ReadOnlyExtraAccess policy" by @jameslinnell in #424
• [NDR-245] Readonly Extra permissions by @jameslinnell in #425
• [NDR-213] Create ACM certificate for use with mTLS Api Gateway by @megan-bower4 in #426
• [PRM-459] ITOC - Feedback and alerts from NDR Portal to Slack and Teams channel by @steph-torres-nhs in #397
• Bump actions/github-script from 7 to 8 by @dependabot[bot] in #410
• Bump aws-actions/configure-aws-credentials from 4 to 5 by @dependabot[bot] in #411
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #412
• Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #413
• [NDR-213] Create ACM per workspace by @megan-bower4 in #427
• [PRM-392] Updated workflow names by @chrisbloe in #414
• [PRM-392] Rename workflow files by @chrisbloe in #429
• [NDR-213] Create truststore bucket for persistent environments only by @megan-bower4 in #430
• [PRM-392] Updated workflow references with new filenames by @chrisbloe in #432
• [NDR-250] Remove lambda layer imports from workflows by @jameslinnell in #431
• [NDR-213] Add mTLS api gateway by @megan-bower4 in #401
• [NDR-217] Remove resources by @jameslinnell in #409
• [PRM-392] Workflow enhancements: Input cleanup, cron file renaming, prod releases limited to tags, sandbox name limit (9 characters), introducing run-names and tear down fix (Virus Scanner) by @chrisbloe in #433
• [PRMT-610] Check on existence of Backup Vault before deleting by @robg-test in #435
• [NDR-232] Remove DynamoDB terraform state lock by @SWhyteAnswer in #436
• [NDR-232] Removing references to DynamoDB for state locking by @chrisbloe in #440
• [NDR-255] Revert MNS index changes by @jameslinnell in #441
• [PRMT-612] Removing lambda triggers for data collection and statistical report by @SWhyteAnswer in #442
• [PRM-528] Virus scanner upgrade 1.8.8 -> 1.8.9 by @chrisbloe in #443

New Contributors

• @robg-test made their first contribution in #435

Full Changelog: 1.6.1...1.6.2

1.6.1

What's Changed

• [NDR-196] Manage AWS KMS resources into IaC for Lambdas by @jameslinnell in #388
• [NDR-197] Manage AWS log group resources into IaC for sandoxes by @jameslinnell in #393
• [NDR-108] Replace DynamoDB lock with lockfile by @SWhyteAnswer-NHS in #390
• [NDR-142] Removing virus scanning dir by @SWhyteAnswer in #399
• [NDR-162] Delete redundant resources from dev by @jameslinnell in #402
• [PRMT-466] Create alarm for old messages in the queue by @PedroSoaresNHS in #341
• [NDR-222] Script to delete CloudWatch dashboards by @SWhyteAnswer in #403
• [NDR-234] Virus Scanner upgrade and on-demand lambda-VPC attachment by @chrisbloe in #404
• [PRME-253] Add missing production logic to CORS policy on S3 buckets by @adamwhitingnhs in #408
• [NDR-198] Manage AWS lambda layers after lambda has been destroyed by @jameslinnell in #391

New Contributors

• @SWhyteAnswer made their first contribution in #399

Full Changelog: 1.6.0...1.6.1

1.6.0.1

Full Changelog: 1.6.0...1.6.0.1

1.6.0

What's Changed

• [PRM-453] Upgrades actions/checkout to v5 by @jack-nhs in #392
• [NDR-193] Removing splunk sqs queue by @SWhyteAnswer-NHS in #385
• [NDR-204] Enable GET document reference in all environments by @NogaNHS in #394
• [NDR-211-truststore] Create truststore bucket for CA cert for mTLS by @megan-bower4 in #396
• [NDR-215] enable POST and GET FHIR document reference in all environments by @NogaNHS in #398

New Contributors

• @megan-bower4 made their first contribution in #396

Full Changelog: 1.5.21...1.6.0