Adds the option to create AWS Firehose resources.

What's Changed

• Adds the creation of AWS Firehose & associated resources. by @mikereiddigital in #338

New Contributors

• @ASTRobinson made their first contribution in #209
• @mikereiddigital made their first contribution in #338

Full Changelog: v2.2.0...v2.3.0

v2.2.0

What's Changed

• Bump bridgecrewio/checkov-action to 12.2461.0 by @dependabot in #194
• Add protected subnets to output by @dms1981 in #195

Full Changelog: v2.1.1...v2.2.0

v2.1.1

What's Changed

• fixed reference to security group resource name by @dms1981 in #181

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• Bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #161
• Bump ministryofjustice/github-actions from 13 to 14 by @dependabot in #160
• Bump bridgecrewio/checkov-action 12.2436.0 by @dependabot in #179
• Allow use of redshift endpoints by @dms1981 in #180

Full Changelog: v2.0.0...v2.1.0

v2.0.0

Breaking Changes

• AWS Provider constraint is now set to ~> 5.x.
• This will conflict with modules that enforce a constraint of ~> 4.x. You can use terraform providers to show any potential conflicts.

What's Changed

• Add OSSF scorecards and pin github actions to specific versions as recommended in the github actions security hardening guidance by @davidkelliott in #23
• Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @dependabot in #24
• Github actions security improvements by @davidkelliott in #26
• Bump github/codeql-action from 2.1.32 to 2.1.35 by @dependabot in #27
• Bump github/codeql-action from 2.1.35 to 2.1.36 by @dependabot in #28
• Bump ministryofjustice/github-actions from 8 to 9 by @dependabot in #30
• Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #29
• Bump github/codeql-action from 2.1.36 to 2.1.37 by @dependabot in #32
• Bump ossf/scorecard-action from 2.0.6 to 2.1.0 by @dependabot in #31
• Bump ossf/scorecard-action from 2.1.0 to 2.1.2 by @dependabot in #34
• Bump actions/upload-artifact from 3.1.1 to 3.1.2 by @dependabot in #36
• Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #35
• Bump ministryofjustice/github-actions from 9 to 10 by @dependabot in #37
• Bump github/codeql-action from 2.1.37 to 2.1.38 by @dependabot in #38
• Bump github/codeql-action from 2.1.38 to 2.1.39 by @dependabot in #39
• Bump github/codeql-action from 2.1.39 to 2.2.1 by @dependabot in #41
• Bump github/codeql-action from 2.2.1 to 2.2.2 by @dependabot in #42
• Bump github/codeql-action from 2.2.2 to 2.2.3 by @dependabot in #43
• Bump github/codeql-action from 2.2.3 to 2.2.4 by @dependabot in #44
• Added code scanning workflow task by @dms1981 in #45
• Ensure sarif upload runs regardless of scanning exit code by @dms1981 in #48
• Bump actions/cache from 3.2.5 to 3.2.6 by @dependabot in #46
• Bump bridgecrewio/checkov-action from 12.2138.0 to 12.2149.0 by @dependabot in #47
• Bump bridgecrewio/checkov-action from 12.2149.0 to 12.2152.0 by @dependabot in #49
• Update code-scanning to support GITHUB_TOKEN, scoped permissions, added scan exclusions by @dms1981 in #50
• Bump bridgecrewio/checkov-action from 12.2151.0 to 12.2155.0 by @dependabot in #51
• Bump github/codeql-action from 2.2.4 to 2.2.5 by @dependabot in #52
• Bump bridgecrewio/checkov-action from 12.2155.0 to 12.2160.0 by @dependabot in #53
• Bump bridgecrewio/checkov-action from 12.2160.0 to 12.2164.0 by @dependabot in #54
• Bump bridgecrewio/checkov-action from 12.2164.0 to 12.2166.0 by @dependabot in #55
• Bump bridgecrewio/checkov-action from 12.2166.0 to 12.2172.0 by @dependabot in #57
• Bump bridgecrewio/checkov-action from 12.2172.0 to 12.2174.0 by @dependabot in #59
• Bump ministryofjustice/github-actions from 10 to 11 by @dependabot in #58
• Bump bridgecrewio/checkov-action from 12.2174.0 to 12.2180.0 by @dependabot in #60
• Bump bridgecrewio/checkov-action from 12.2180.0 to 12.2183.0 by @dependabot in #61
• Bump bridgecrewio/checkov-action from 12.2183.0 to 12.2184.0 by @dependabot in #62
• Bump bridgecrewio/checkov-action from 12.2184.0 to 12.2188.0 by @dependabot in #63
• Bump actions/cache from 3.2.6 to 3.3.0 by @dependabot in #64
• Bump bridgecrewio/checkov-action from 12.2188.0 to 12.2191.0 by @dependabot in #67
• Bump actions/cache from 3.3.0 to 3.3.1 by @dependabot in #66
• Bump github/codeql-action from 2.2.5 to 2.2.6 by @dependabot in #65
• Bump bridgecrewio/checkov-action from 12.2191.0 to 12.2197.0 by @dependabot in #68
• Bump bridgecrewio/checkov-action from 12.2197.0 to 12.2201.0 by @dependabot in #69
• Bump bridgecrewio/checkov-action from 12.2201.0 to 12.2203.0 by @dependabot in #71
• Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #72
• Bump github/codeql-action from 2.2.6 to 2.2.7 by @dependabot in #70
• Bump bridgecrewio/checkov-action from 12.2203.0 to 12.2204.0 by @dependabot in #73
• Bump bridgecrewio/checkov-action from 12.2204.0 to 12.2216.0 by @dependabot in #76
• Bump github/codeql-action from 2.2.7 to 2.2.8 by @dependabot in #78
• Bump bridgecrewio/checkov-action from 12.2216.0 to 12.2218.0 by @dependabot in #77
• Bump bridgecrewio/checkov-action from 12.2218.0 to 12.2229.0 by @dependabot in #81
• Bump github/codeql-action from 2.2.8 to 2.2.9 by @dependabot in #82
• Bump bridgecrewio/checkov-action from 12.2229.0 to 12.2232.0 by @dependabot in #83
• Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #80
• Bump bridgecrewio/checkov-action from 12.2232.0 to 12.2236.0 by @dependabot in #84
• Bump bridgecrewio/checkov-action from 12.2236.0 to 12.2242.0 by @dependabot in #86
• Bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in #85
• Bump bridgecrewio/checkov-action from 12.2242.0 to 12.2256.0 by @dependabot in #89
• Bump bridgecrewio/checkov-action from 12.2256.0 to 12.2258.0 by @dependabot in #90
• Bump github/codeql-action from 2.2.9 to 2.2.10 by @dependabot in htt...

v1.3.0 - Default routes via Transit Gateway

• Requests a Transit Gateway ID be supplied
• Adds a default route to routable non-public route tables via the Transit Gateway

v1.2.0 - New output functionality

• Add outputs for subnet IDs based on tag names

v1.1.0 - Network ACL code removed

• aws_network_acl and aws_network_acl_rule resources removed from this release
• local values relevant to the population of removed resources also removed from this release
• Network ACL code can now be found in the main modernisation-platform repository

v1.0.3 - Allow SMTP-TLS traffic to protected subnets

• Add aws_network_acl resource allowing traffic over tcp/587 to protected subnets

What's Changed

• Allow SMTP-TLS traffic through NACL by @dms1981 in #12

Full Changelog: v1.0.2...v1.0.3

v1.0.2 - Allow secure access to endpoints

What's Changed

• Added CODEOWNERS file to the repo. It had not been added when it was … by @SteveLinden in #5
• Add dependabot and compliance badge by @davidkelliott in #6
• Update README.md by @davidkelliott in #7
• Allow smtp to endpoints by @dms1981 in #10

New Contributors

• @SteveLinden made their first contribution in #5
• @davidkelliott made their first contribution in #6
• @dms1981 made their first contribution in #8

Full Changelog: v1.0.1...v1.0.2