Releases: drata/aws-cloudformation-drata-setup
Releases · drata/aws-cloudformation-drata-setup
1.3.0
What's Changed
New Features
- target_account_ids: Target specific AWS account IDs (must be 12 digits)
- account_filter_type: Control filtering behavior when both OUs and accounts are specified (INTERSECTION, UNION, DIFFERENCE, NONE)
- tags: Apply custom tags to StackSet and StackSet Instance resources
- stack_set_name: Customize the StackSet name to avoid naming conflicts
Account Targeting Modes
- Default: Deploy to all accounts in the organization (unchanged behavior)
- OU-only: Deploy to specific organizational units
- Combined: Use account_filter_type to control intersection, union, or difference logic
Implementation Details
- All new variables have safe defaults that preserve existing behavior
- account_filter_type is only set when both OUs and accounts are specified (prevents forced replacement)
- Enhanced README with comprehensive examples and use cases
- Input validation for account IDs (12-digit format) and filter types (enum)
Backwards Compatibility
- Fully backwards compatible - existing customers can upgrade without any changes to their configuration or infrastructure. All new variables are optional with defaults matching previous hardcoded behavior.
Full Changelog: 1.2.1...1.3.0
1.2.1
1.2.0
First Release
This version creates a CloudFormation StackSet to spread the IAM role to the sub accounts specified.