v1.535.6

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#43)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform github.com/cloudposse-terraform-components/aws-datadog-credentials to v1.535.6 @[renovate[bot]](https://github.com/apps/renovate) (#42)

This PR contains the following updates:

Package	Type	Update	Change
github.com/cloudposse-terraform-components/aws-datadog-credentials	module	patch	v1.535.5 -> v1.535.6

---

Release Notes

cloudposse-terraform-components/aws-datadog-credentials (github.com/cloudposse-terraform-components/aws-datadog-credentials)

v1.535.6

Compare Source

🤖 Automatic Updates

Update README.md and docs @​[cloudposse-releaser[bot]](https://redirect.github.com/apps/cloudposse-releaser) (#​41)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform github.com/cloudposse-terraform-components/aws-account-map to v1.535.4 @​[renovate[bot]](https://redirect.github.com/apps/renovate) (#​40)

This PR contains the following updates:

Package	Type	Update	Change
github.com/cloudposse-terraform-components/aws-account-map	module	patch	v1.535.3 -> v1.535.4

---

Release Notes

cloudposse-terraform-components/aws-account-map (github.com/cloudposse-terraform-components/aws-account-map)

v1.535.4

Compare Source

chore(deps): restrict aws provider version to < 6.0.0 @​&#​8203;Benbentwo (#&#​8203;32)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

Summary by CodeRabbit

• Chores
  • Updated AWS provider version constraints to allow versions >= 4.9.0 and < 6.0.0, preventing use of version 6.0.0 or higher.

🤖 Automatic Updates

Update README.md and docs @​&#​8203;[cloudposse-releaser[bot]](https://redirect.github.com/apps/cloudposse-releaser) (#&#​8203;33)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Enable merge queue @​&#​8203;goruha (#&#​8203;31)

what

• Added auto-merge workflow
• Update settings.yaml
• Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @​&#​8203;goruha (#&#​8203;30)

what

• Added auto-merge workflow
• Update settings.yaml
• Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @​&#​8203;[renovate[bot]](https://redirect.github.com/apps/renovate) (#&#​8203;3)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.40.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.40.0

Compare Source

What's Changed

Enhancements

• feat: warn against data sources with ephemeral alternatives by @​​​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
• rules: Update Lambda deprecated runtimes by @​​​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
• Update AWS provider/module and generated content by @​​​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870

Chores

• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
• Bump the aws-sdk group with 3 updates by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
• docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @​​​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
• Bump the aws-sdk group with 2 updates by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
• Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
• Bump the aws-sdk group with 3 updates by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/882
• Bump github.com/hashicorp/terraform-json from 0.24.0 to 0.25.0 by @​​​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/884

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.39.0...v0.40.0

v0.39.0

Compare Source

What's Changed

Enhancements

• Update AWS provider/module and generated content by @​​​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/840
• Add aws_iam_role_deprecated_policy_attributes rule by @​​​alexjfisher in https://github.com/terraform-linters/tflint-ruleset-aws/pull/833
• aws_write_only_arguments: recommend write-only arguments where available by [@​​​aristosvo](https://redirect.github.com/aristosvo...

v1.535.5

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#41)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform github.com/cloudposse-terraform-components/aws-datadog-credentials to v1.535.5 @[renovate[bot]](https://github.com/apps/renovate) (#40)

This PR contains the following updates:

Package	Type	Update	Change
github.com/cloudposse-terraform-components/aws-datadog-credentials	module	patch	v1.535.4 -> v1.535.5

---

Release Notes

cloudposse-terraform-components/aws-datadog-credentials (github.com/cloudposse-terraform-components/aws-datadog-credentials)

v1.535.5

Compare Source

chore(deps): restrict aws provider version to < 6.0.0 @​Benbentwo (#​37)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

🤖 Automatic Updates

Update README.md and docs @​[cloudposse-releaser[bot]](https://redirect.github.com/apps/cloudposse-releaser) (#​38)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

v1.535.4

chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#37)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#38)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.535.3

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#36)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform github.com/cloudposse-terraform-components/aws-datadog-credentials to v1.535.4 @[renovate[bot]](https://github.com/apps/renovate) (#35)

This PR contains the following updates:

Package	Type	Update	Change
github.com/cloudposse-terraform-components/aws-datadog-credentials	module	patch	v1.535.3 -> v1.535.4

---

Release Notes

cloudposse-terraform-components/aws-datadog-credentials (github.com/cloudposse-terraform-components/aws-datadog-credentials)

v1.535.4

Compare Source

Remove tags prefix @​goruha (#​35)

what

• The change updates the source URL for modules to remove the tags/ prefix in the version reference.

why

• Terraform handles incorrectly git paths which have slashes in ref parameter

references

• https://github.com/hashicorp/go-getter/issues/469
• https://github.com/cloudposse-terraform-components/aws-datadog-credentials/pull/33
• https://github.com/cloudposse/test-harness/pull/56

🤖 Automatic Updates

Update README.md and docs @​[cloudposse-releaser[bot]](https://redirect.github.com/apps/cloudposse-releaser) (#​36)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

v1.535.2

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#34)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform github.com/cloudposse-terraform-components/aws-datadog-credentials to v1.535.3 @[renovate[bot]](https://github.com/apps/renovate) (#33)

This PR contains the following updates:

Package	Type	Update	Change
github.com/cloudposse-terraform-components/aws-datadog-credentials	module	patch	tags/v1.535.2 -> v1.535.3

---

Release Notes

cloudposse-terraform-components/aws-datadog-credentials (github.com/cloudposse-terraform-components/aws-datadog-credentials)

v1.535.3

Compare Source

Bugfix: Providers tf ref @​Benbentwo (#​33)

This pull request includes a minor change to the `src/modules/datadog_keys/providers.tf` file. The change updates the `source` URL for the `iam_roles` module to remove the `tags/` prefix in the version reference.

Refs

• https://github.com/cloudposse/test-harness/pull/56
• https://github.com/hashicorp/go-getter/issues/469

Summary by CodeRabbit

• Chores
  • Updated the reference format for an internal module to improve consistency. No impact on user-facing features or functionality.

🤖 Automatic Updates

Update README.md and docs @​[cloudposse-releaser[bot]](https://redirect.github.com/apps/cloudposse-releaser) (#​34)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

v1.535.1

Pin module reference @goruha (#28)

## what * Pin module reference

why

• Relative path is not working with polyrepo pattern

Summary by CodeRabbit

• Chores
  • Updated the source of the Datadog credentials module to use a specific version from a remote repository.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#32)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/ssm-parameter-store/aws to v0.13.0 @[renovate[bot]](https://github.com/apps/renovate) (#4)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/ssm-parameter-store/aws (source)	module	minor	0.11.0 -> 0.13.0

---

Release Notes

cloudposse/terraform-aws-ssm-parameter-store (cloudposse/ssm-parameter-store/aws)

v0.13.0

Compare Source

chore: add overwrite argument back @​gberenice (#​53)

what

• Unfortunately, we have to add the overwrite argument back due to the confusion of its deprecation:

Lastly, and unfortunately, configurations expecting the standard update flow will need to keep overwrite = true set until this becomes the default behavior in v6.0.0. Removing it in v5.X will result in the default value of false, preventing the parameter value from being updated, causing persistent differences.

why

• Prevent undesired behaviour.

references

• https://github.com/hashicorp/terraform-provider-aws/issues/25636#issuecomment-1623661159

v0.12.0

Compare Source

chore: remove deprecated `overwrite` argument @​meysam81 (#​52)

fixes #​51

Sync github @​max-lobur (#​48)

Rebuild github dir from the template

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#31)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/datadog-integration/aws to v2 @[renovate[bot]](https://github.com/apps/renovate) (#16)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/datadog-integration/aws (source)	module	major	1.3.0 -> 2.0.0

---

Release Notes

cloudposse/terraform-aws-datadog-integration (cloudposse/datadog-integration/aws)

v2.0.0

Compare Source

🚀 Enhancements

feat: restructure and add new datadog integration policies @​RoseSecurity (#​69)

Why

• Expanding permission sets as Datadog and AWS evolve

What

• Style update: change all join("", resource.kind.*.name) and resource.kind[0].name to one(resource.kind[*].name)
• Deprecate var.integrations and add var.policies in its place
  1. Update the description to indicate it is deprecated
  2. Make its default value null
• Add var.policies
• Create a local.policies which is the list of policies specified via var.integrations and var.policies combined with mappings and then de-duplicated

[!NOTE]
For compatibility, map var.integrations "core" -> "core_integration" and "all" -> "full_integration" when adding to local.policies.

• Rename the "all" policy "full-integration" and update it
• Rename iam_policy_all.tf -> iam-policy-full-integration.tf and rename all the resources etc. named "all" to "full_integration", and trigger it with policy name "full-integration"
• Update the policy reference
• Update the permissions (statement.actions) from those sources:

full-integration permissions

  actions = [
    "apigateway:GET",
    "autoscaling:Describe*",
    "backup:List*",
    "budgets:ViewBudget",
    "cloudfront:GetDistributionConfig",
    "cloudfront:ListDistributions",
    "cloudtrail:DescribeTrails",
    "cloudtrail:GetTrailStatus",
    "cloudtrail:LookupEvents",
    "cloudwatch:Describe*",
    "cloudwatch:Get*",
    "cloudwatch:List*",
    "codedeploy:List*",
    "codedeploy:BatchGet*",
    "directconnect:Describe*",
    "dynamodb:List*",
    "dynamodb:Describe*",
    "ec2:Describe*",
    "ec2:GetTransitGatewayPrefixListReferences",
    "ec2:SearchTransitGatewayRoutes",
    "ecs:Describe*",
    "ecs:List*",
    "elasticache:Describe*",
    "elasticache:List*",
    "elasticfilesystem:DescribeFileSystems",
    "elasticfilesystem:DescribeTags",
    "elasticfilesystem:DescribeAccessPoints",
    "elasticloadbalancing:Describe*",
    "elasticmapreduce:List*",
    "elasticmapreduce:Describe*",
    "es:ListTags",
    "es:ListDomainNames",
    "es:DescribeElasticsearchDomains",
    "events:CreateEventBus",
    "fsx:DescribeFileSystems",
    "fsx:ListTagsForResource",
    "health:DescribeEvents",
    "health:DescribeEventDetails",
    "health:DescribeAffectedEntities",
    "kinesis:List*",
    "kinesis:Describe*",
    "lambda:GetPolicy",
    "lambda:List*",
    "logs:DeleteSubscriptionFilter",
    "logs:DescribeLogGroups",
    "logs:DescribeLogStreams",
    "logs:DescribeSubscriptionFilters",
    "logs:FilterLogEvents",
    "logs:PutSubscriptionFilter",
    "logs:TestMetricFilter",
    "oam:ListSinks",
    "oam:ListAttachedLinks",
    "organizations:Describe*",
    "organizations:List*",
    "rds:Describe*",
    "rds:List*",
    "redshift:DescribeClusters",
    "redshift:DescribeLoggingStatus",
    "route53:List*",
    "s3:GetBucketLogging",
    "s3:GetBucketLocation",
    "s3:GetBucketNotification",
    "s3:GetBucketTagging",
    "s3:ListAllMyBuckets",
    "s3:PutBucketNotification",
    "ses:Get*",
    "sns:List*",
    "sns:Publish",
    "sns:GetSubscriptionAttributes",
    "sqs:ListQueues",
    "states:ListStateMachines",
    "states:DescribeStateMachine",
    "support:DescribeTrustedAdvisor*",
    "support:RefreshTrustedAdvisorCheck",
    "tag:GetResources",
    "tag:GetTagKeys",
    "tag:GetTagValues",
    "wafv2:ListLoggingConfigurations",
    "wafv2:GetLoggingConfiguration",
    "xray:BatchGetTraces",
    "xray:GetTraceSummaries"
  ],

• Rename iam_policy_core.tf -> iam-policy-core-integration.tf and rename all the resources etc. named "core" to "core_integration", and trigger it with policy name "core-integration"
• Update the policy reference
• Update the permissions (statement.actions) by removing 'support:*'
• Create iam-policy-resource-collection.tf
• Follow the pattern of iam-policy-full-integration.tf and create iam-policy-resource-collection.tf to implem...

v1.535.0

Migrate component from cloudposse/terraform-aws-components

v1.534.0

Migrate component from cloudposse/terraform-aws-components

v1.533.0

Migrate component from cloudposse/terraform-aws-components

v1.532.0

Migrate component from cloudposse/terraform-aws-components