Skip to content

Releases: drata/aws-cloudformation-drata-setup

1.3.0

03 Oct 20:05
5114624

Choose a tag to compare

What's Changed

New Features

  • target_account_ids: Target specific AWS account IDs (must be 12 digits)
  • account_filter_type: Control filtering behavior when both OUs and accounts are specified (INTERSECTION, UNION, DIFFERENCE, NONE)
  • tags: Apply custom tags to StackSet and StackSet Instance resources
  • stack_set_name: Customize the StackSet name to avoid naming conflicts

Account Targeting Modes

  • Default: Deploy to all accounts in the organization (unchanged behavior)
  • OU-only: Deploy to specific organizational units
  • Combined: Use account_filter_type to control intersection, union, or difference logic

Implementation Details

  • All new variables have safe defaults that preserve existing behavior
  • account_filter_type is only set when both OUs and accounts are specified (prevents forced replacement)
  • Enhanced README with comprehensive examples and use cases
  • Input validation for account IDs (12-digit format) and filter types (enum)

Backwards Compatibility

  • Fully backwards compatible - existing customers can upgrade without any changes to their configuration or infrastructure. All new variables are optional with defaults matching previous hardcoded behavior.

Full Changelog: 1.2.1...1.3.0

1.2.1

01 Oct 16:00
d25f9a4

Choose a tag to compare

What's Changed

  • chore(cloudformation): merge in changes from public prs by @camlough in #7

Full Changelog: 1.2.0...1.2.1

1.2.0

10 Dec 21:59
9f60e04

Choose a tag to compare

What's Changed

  • chore(cloudformation): update json template to include new permissions [ENG-59310] by @camlough in #5

New Contributors

Full Changelog: 1.1.0...1.2.0

First Release

07 May 19:18
ec3df04

Choose a tag to compare

This version creates a CloudFormation StackSet to spread the IAM role to the sub accounts specified.