Update module sources and add ECR registry policy @goruha (#63)
## what * Used `account_map` module from git * Added ECR registry policy to allow principals to use docker pull through cache * Support `account-map` disabled patternwhy
- Migrate to
atmos authstrategy - Fix ECR pull-through cache.
Summary by CodeRabbit
-
New Features
- Added account map configuration (enable flag, account map object, tenant/environment/stage inputs) for account-aware controls.
- Added ECR registry policy management with computed policies and dynamic principals based on caller identity and account map settings.
-
Chores
- Switched module sources from local paths to remote GitHub modules; added module-level controls for account map propagation.
✏️ Tip: You can customize this high-level summary in your review settings.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#64)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /test @[dependabot[bot]](https://github.com/apps/dependabot) (#62)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.36.0 to 0.45.0.Commits
4e0068cgo.mod: update golang.org/x dependenciese79546essh: curb GSSAPI DoS risk by limiting number of specified OIDsf91f7a7ssh/agent: prevent panic on malformed constraint2df4153acme/autocert: let automatic renewal work with short lifetime certsbcf6a84acme: pass context to requestb4f2b62ssh: fix error message on unsupported cipher79ec3a5ssh: allow to bind to a hostname in remote forwarding122a78fgo.mod: update golang.org/x dependenciesc0531f9all: eliminate vet diagnostics0997000all: fix some comments- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.44.0 @[renovate[bot]](https://github.com/apps/renovate) (#61)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| terraform-linters/tflint-ruleset-aws | plugin | minor | 0.43.0 -> 0.44.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.44.0
What's Changed
Support for Cosign signatures has been removed from this release. The checksums.txt.keyless.sig and checksums.txt.pem will not be included in the release.
These files are not used in normal use cases, so in most cases this will not affect you, but if you are affected, you can use Artifact Attestations instead.
Breaking Changes
- Bump github.com/terraform-linters/tflint-plugin-sdk from 0.22.0 to 0.23.1 by @dependabot[bot] in #966
- Requires TFLint v0.46+
Enhancements
- Update AWS provider/module and generated content by @github-actions[bot] in #954
- Update AWS provider/module and generated content by @github-actions[bot] in #959
- Update Lambda runtime deprecation dates by @Copilot in #969
- Add missing ElastiCache node type: cache.r6gd.large by @Copilot in #971
- Fix typos in AWS RDS DB instance types by @Copilot in #972
- Add missing AWS S3 bucket naming restrictions by @Copilot in #976
Chores
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.251.2 to 1.253.0 in the aws-sdk group by @dependabot[bot] in #952
- Bump github.com/hashicorp/terraform-json from 0.26.0 to 0.27.2 by @dependabot[bot] in #953
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #956
- Bump the aws-sdk group with 2 updates by @dependabot[bot] in #957
- Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.66 to 2.0.0-beta.67 by @dependabot[bot] in #958
- Bump github.com/aws/aws-sdk-go-v2/service/rds from 1.108.0 to 1.108.2 in the aws-sdk group by @dependabot[bot] in #960
- Bump golang.org/x/net from 0.44.0 to 0.46.0 by @dependabot[bot] in #961
- Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #962
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #963
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #965
- Drop support for Cosign signatures by @wata727 in #968
- Add documentation to AWS MQ engine type validation rules by @Copilot in #974
- Reorder S3 bucket ACL enum values for consistency by @Copilot in #975
New Contributors
Full Changelog: terraform-linters/tflint-ruleset-aws@v0.43.0...v0.44.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.