amazon.aws 8.0.1

Release Summary

This release includes some bug fixes for the s3_object, ec2_instance and backup_plan_info modules.

Bugfixes

• backup_plan_info - Bugfix to enable getting info of all backup plans (#2083).
• ec2_instance - do not ignore IPv6 addresses when a single network interface is specified (#1979).
• s3_object - fixed issue which was causing MemoryError exceptions when downloading large files (#2107).

amazon.aws 7.6.1

Release Summary

This release includes some bug fixes for the ec2_instance and backup_plan_info modules.

Bugfixes

• backup_plan_info - Bugfix to enable getting info of all backup plans (#2083).
• ec2_instance - do not ignore IPv6 addresses when a single network interface is specified (#1979).

amazon.aws 8.0.0

Release Summary

This major release brings several new features, bug fixes, and deprecated features. It also includes the removal of some functionality for iam_role, iam_role_info and module_utils.policy that were previously deprecated. We have also removed support for ansible-core<2.15.

Minor Changes

• autoscaling_group - removed unused code (#1996).
• cloudformation - apply automatic retries when paginating through stack events without a filter (#2049).
• cloudtrail - removed unused code (#1996).
• ec2_instance - removed unused code (#1996).
• ec2_vol - Ensure volume state is not one of deleted or deleting when trying to delete volume, to guaranty idempotency (#2052).
• ec2_vol - removed unused code (#1996).
• elb_classic_lb - removed unused code (#1996).
• kms_key - removed unused code (#1996).
• lambda_event - Add support for setting the maximum_batching_window_in_seconds option (#2025).
• module_uils/botocore - support sets and tuples of errors as well as lists (#1829).
• module_utils/elbv2 - Add support for adding listener with multiple certificates during ALB creation. Allows elb_application_elb module to handle mentioned use case. (#1950).
• module_utils/elbv2 - Add the possibility to update SslPolicy, Certificates and AlpnPolicy for TLS listeners (#1198).
• rds_instance - Allow passing empty list to enable_cloudwatch_logs_exports in order to remove all existing exports (#1917).
• s3_bucket - refactor s3_bucket module code for improved readability and maintainability (#2057).
• s3_object - removed unused code (#1996).

Breaking Changes / Porting Guide

• amazon.aws collection - Support for ansible-core < 2.15 has been dropped (#2093).
• iam_role - iam_role.assume_role_policy_document is no longer converted from CamelCase to snake_case (#2040).
• iam_role_info - iam_role.assume_role_policy_document is no longer converted from CamelCase to snake_case (#2040).
• kms_key - the policies return value has been renamed to key_policies the contents has not been changed (#2040).
• kms_key_info - the policies return value has been renamed to key_policies the contents has not been changed (#2040).
• lambda_event - | batch_size no longer defaults to 100. According to the boto3 API (https://boto3.amazonaws.com/v1/documentation/api/1.26.78/reference/services/lambda.html#Lambda.Client.create_event_source_mapping), batch_size defaults to 10 for sqs sources and to 100 for stream sources (#2025).

Deprecated Features

• aws_ec2 inventory plugin - removal of the previously deprecated include_extra_api_calls option has been assigned to release 9.0.0 (#2040).
• cloudformation - the template parameter has been deprecated and will be removed in a release after 2026-05-01. The template_body parameter can be used in conjungtion with the lookup plugin (#2048).
• iam_policy - removal of the previously deprecated policies return key has been assigned to release 9.0.0. Use the policy_names return key instead (#2040).
• module_utils.botocore - the boto3 parameter for get_aws_connection_info() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).
• module_utils.botocore - the boto3 parameter for get_aws_region() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).
• module_utils.ec2 - the boto3 parameter for get_ec2_security_group_ids_from_names() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).
• rds_param_group - the rds_param_group module has been renamed to rds_instance_param_group. The usage of the module has not changed. The rds_param_group alias will be removed in version 10.0.0 (#2058).

Removed Features (previously deprecated)

• iam_role - the iam_role.assume_role_policy_document_raw return value has been deprecated. iam_role.assume_role_policy_document now returns the same format as iam_role.assume_role_policy_document_raw (#2040).
• iam_role_info - the iam_role.assume_role_policy_document_raw return value has been deprecated. iam_role.assume_role_policy_document now returns the same format as iam_role.assume_role_policy_document_raw (#2040).
• module_utils.policy - the previously deprecated sort_json_policy_dict() function has been removed, consider using compare_policies() instead (#2052).

Bugfixes

• elb_classic_lb - fixes bug where proxy_protocol not being set or being set to None may result in unexpected behaviour or errors (#2049).
• lambda_event - Fix when batch_size is greater than 10, by enabling support for setting maximum_batching_window_in_seconds (#2025).
• lambda_event - Retrieve function ARN using AWS API (get_function) instead of building it with AWS account information (#1859).

amazon.aws 7.6.0

Release Summary

This release brings several bugfixes, minor changes and some new rds modules (rds_cluster_param_group, rds_cluster_param_group_info and rds_engine_versions_info). It also introduces a deprecation for the cloudformation module.

Minor Changes

• ec2_instance - add support for host option in placement.tenancy (#2026).
• ec2_vol - Ensure volume state is not one of deleted or deleting when trying to delete volume, to guaranty idempotency (#2052).

Deprecated Features

• cloudformation - the template parameter has been deprecated and will be removed in a release after 2026-05-01. The template_body parameter can be used in conjungtion with the lookup plugin (#2048).
• module_utils.botocore - the boto3 parameter for get_aws_connection_info() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).
• module_utils.botocore - the boto3 parameter for get_aws_region() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).
• module_utils.ec2 - the boto3 parameter for get_ec2_security_group_ids_from_names() will be removed in a release after 2025-05-01. The boto3 parameter has been ignored since release 4.0.0 (#2047).

Bugfixes

• iam_managed_policy - fixes bug that causes ParamValidationError when attempting to delete a policy that's attached to a role or a user (#2067).
• iam_role_info - fixes bug in handling paths missing the / prefix and/or suffix (#2065).
• s3_object - fix idempotency issue when copying object uploaded using multipart upload (#2016).

New Modules

• rds_cluster_param_group - Manage RDS cluster parameter groups
• rds_cluster_param_group_info - Describes the properties of specific RDS cluster parameter group.
• rds_engine_versions_info - Describes the properties of specific versions of DB engines.

amazon.aws 7.5.0

Release Summary

This release includes a new feature for the iam_user_info module, bugfixes for the cloudwatchlogs_log_group_info and s3_object modules and the inventory plugins, and some internal refactoring of module_utils.

Minor Changes

• iam_user_info - Add login_profile to return info that is get from a user, to know if they can login from AWS console (#2012).
• module_utils.iam - refactored normalization functions to use boto3_resource_to_ansible_dict() and boto3_resource_list_to_ansible_dict() (#2006).
• module_utils.transformations - add boto3_resource_to_ansible_dict() and boto3_resource_list_to_ansible_dict() helpers (#2006).

Bugfixes

• cloudwatchlogs_log_group_info - Implement exponential backoff when making API calls to prevent throttling exceptions (#2011).
• plugin_utils.inventory - Ensure templated options in lookup plugins are converted (#1955).
• s3_object - Fix the issue when copying an object with overriding metadata. (#1991).

amazon.aws 6.5.4

Release Summary

This release includes bugfixes for the cloudwatchlogs_log_group_info module and the inventory plugins.

Bugfixes

• cloudwatchlogs_log_group_info - Implement exponential backoff when making API calls to prevent throttling exceptions (#2011).
• plugin_utils.inventory - Ensure templated options in lookup plugins are converted (#1955).

amazon.aws 6.5.3

Release Summary

This release includes bugfixes for the``cloudwatchevent_rule`` module and secretsmanager_secret lookup plugin.

Bugfixes

• cloudwatchevent_rule - Fix to avoid adding quotes to JSON input for provided input_template (#1883).
• lookup/secretsmanager_secret - fix the issue when the nested secret is missing and on_missing is set to warn, the lookup was raising an error instead of a warning message (#1781).

amazon.aws 7.4.0

Release Summary

This release brings several bugfixes and minor changes. It also introduces a deprecation for the iam_role_info plugin.

Minor Changes

• AnsibeAWSModule - added fail_json_aws_error() as a wrapper for fail_json() and fail_json_aws() when passed an AnsibleAWSError exception (#1997).
• iam_access_key - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_access_key_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_group - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_instance_profile - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_instance_profile_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_managed_policy - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_mfa_device_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_role - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_role_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_user - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).
• iam_user_info - refactored code to use AnsibleIAMError and IAMErrorHandler as well as moving shared code into module_utils.iam (#1998).

Deprecated Features

• iam_role_info - in a release after 2026-05-01 paths must begin and end with / (#1998).

Bugfixes

• cloudwatchevent_rule - Fix to avoid adding quotes to JSON input for provided input_template (#1883).
• lookup/secretsmanager_secret - fix the issue when the nested secret is missing and on_missing is set to warn, the lookup was raising an error instead of a warning message (#1781).
• module_utils/elbv2 - Fix issue when creating or modifying Load balancer rule type authenticate-oidc using ClientSecret parameter and UseExistingClientSecret=true (#1877).

amazon.aws 6.5.2

Release Summary

This release includes a bugfix for the amazon.aws.aws_ec2 inventory plugin when retrieving information for more than 40 instances with use_ssm_inventory.

Bugfixes

• plugins/inventory/aws_ec2 - Fix failure when retrieving information for more than 40 instances with use_ssm_inventory (#1713).

amazon.aws 7.3.0

Release Summary

The amazon.aws 7.3.0 release includes a number of minor bugfixes, some new features and improvements.

Minor Changes

• backup_plan - Let user to set schedule_expression_timezone for backup plan rules when when using botocore >= 1.31.36 (#1952).
• iam_user - refactored error handling to use a decorator (#1951).
• lambda - added support for using ECR images for the function (#1939).
• module_utils.errors - added a basic error handler decorator (#1951).
• rds_cluster - Add support for ServerlessV2ScalingConfiguration to create and modify cluster operations (#1839).
• s3_bucket_info - add parameter bucket_versioning to return the versioning state of a bucket (#1919).
• s3_object_info - fix exception raised when listing objects from empty bucket (#1919).

Bugfixes

• backup_plan - Fix idempotency issue when using botocore >= 1.31.36 (#1952).
• plugins/inventory/aws_ec2 - Fix failure when retrieving information for more than 40 instances with use_ssm_inventory (#1713).