v2.2.1

Added

• Alert in AppInsights dashboard if discovery process runs out of memory
• Alert in AppInsights dashboard if Config not enabled in discoverable region

Fixed

• Null pointer error in SAML identity provider custom resource 567
• Incorrect description string in diagram settings filter when hiding resources
• Erroneous validation error when exporting diagrams with global resources to myApplications
• Empty region dropdown list when exporting diagram with only global resources to myApplications
• Security vulnerability in vite.
• Security vulnerability in vitest.
• Security vulnerability in undici.
• Security vulnerability in jinja.
• Security vulnerability in jinja.

Changed

• Use of FARGATE or FARGATE_SPOT for discovery process is configurable via a CloudFormation parameter.

v2.2.0

Added

• Support for custom identity providers (SAML and OIDC) 61 510
• Export of diagrams to myApplications
• Export of diagrams to SVG
• Application Insights dashboard to monitor health of solution
• Number of supported resource types is over 450, newly added types include, but are not limited to:
  • AWS::AppSync::DataSource
  • AWS::AppSync::Resolver
  • AWS::MediaConnect::Flow
  • AWS::MediaConnect::FlowEntitlement
  • AWS::MediaConnect::FlowSource
  • AWS::MediaConnect::FlowVpcInterface
  • AWS::MediaPackage::PackagingConfiguration
  • AWS::MediaPackage::PackagingGroup
  • AWS::ServiceCatalogAppRegistry::Application
• Increase in number of relationships not captured by AWS Config, including, but not limited to:
  • AWS::AppSync::DataSource -> AWS::Lambda::Function/AWS::DynamoDB::Table/AWS::Events::EventBus/AWS::RDS::DBCluster/AWS::OpenSearchService::Domain
  • AWS::AppSync::Resolver -> AWS::AppSync::GraphQLApi/AWS::AppSync::DataSource
  • AWS::S3::Bucket -> AWS::Lambda::Function/AWS::SQS::Queue/AWS::SNS::Topic
  • AWS::IAM::InstanceProfile -> AWS::IAM::Role
  • AWS::MediaConnect::FlowEntitlement -> AWS::MediaConnect::Flow
  • AWS::MediaConnect::FlowSource -> AWS::MediaConnect::Flow/AWS::MediaConnect::FlowEntitlement/AWS::MediaConnect::FlowVpcInterface/AWS::IAM::Role/AWS::SecretsManager::Secret
  • AWS::MediaConnect::FlowVpcInterface -> AWS::EC2::VPC/AWS::EC2::Subnet/AWS::EC2::SecurityGroup/AWS::EC2::NetworkInterface
  • AWS::MediaPackage::PackagingConfiguration -> AWS::MediaPackage::PackagingGroup/AWS::IAM::Role

Changed

• Multiple resources can now be selected in the search bar on the Diagram page
• Migrate AppRegistry integration to myApplications for monitoring solution costs and usage.
• Migrate JavaScript lambda functions and the discovery process from CommonJS to ESM
• Update Neptune Engine version to 1.3.1.0.
• Update OpenSearch version to 2.11.0.

Fixed

• AWS::EC2::NetworkInterface -> AWS::OpenSearchService::Domain relationships are not discovered
• Failed writes to OpenSearch should stop the corresponding write being made to Neptune
• Metrics lambda times out when hundreds of accounts have been imported

v2.1.15

Fixed

• Cron expression for running discovery process every 24 hours. 546
• Security vulnerability in rollup.
• Security vulnerability in vite.
• Security vulnerability in vite.

v2.1.14

Fixed

• Cron expression for running discovery process every 24 hours. 546
• Intermittent failures in cleanup-bucket custom resource. 545
• SCP error relating to putConfigAggregator when adding accounts in an AWS organisation using Control Tower. 544
• Security vulnerability in micromatch.
• Security vulnerability in path-to-regexp.
• Security vulnerability in send.

v2.1.13

Fixed

• Security vulnerability in axios.

v2.1.12

Fixed

• Security vulnerability in fast-xml-parser.

v2.1.11

Changed

• Use Amazon Linux 2023 as the base image for the discovery process Docker container

v2.1.10

Fixed

• Security vulnerability in fast-loops.
• Security vulnerability in zipp.
• Security vulnerability in undici.

Changed

• Restrict egress for Neptune lambda security group to VPC IP address range. 531

v2.1.9

Fixed

• Security vulnerability in ws.
• Add better logging if individual accounts aggregator supplied when cross account discovery mode is AWS_ORGANIZATIONS. 529

Changed

• Removed dev environment CDK build pipeline

v2.1.8

Fixed

• Security vulnerability in ip.
• Security vulnerability in braces.