v1.535.3

Add max_session_duration to IAM role configuration @goruha (#41)

## what * Add max_session_duration to IAM role configuration

why

• Increase session durtion for long running jobs

references

• https://sweetops.slack.com/archives/G014YEKDH4K/p1756980084638969
• https://github.com/cloudposse/terraform-aws-service-control-policies/actions/runs/17460058661/job/50713688780

Summary by CodeRabbit

• New Features
  • IAM role session duration is now configurable. Users can customize authentication timeout settings to suit their infrastructure and workflow requirements, providing greater control over session management.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

🤖 Automatic Updates

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.44.0 @[renovate[bot]](https://github.com/apps/renovate) (#39)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.43.0 -> 0.44.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.44.0

Compare Source

What's Changed

Support for Cosign signatures has been removed from this release. The checksums.txt.keyless.sig and checksums.txt.pem will not be included in the release.
These files are not used in normal use cases, so in most cases this will not affect you, but if you are affected, you can use Artifact Attestations instead.

Breaking Changes

• Bump github.com/terraform-linters/tflint-plugin-sdk from 0.22.0 to 0.23.1 by @​dependabot[bot] in #​966
  • Requires TFLint v0.46+

Enhancements

• Update AWS provider/module and generated content by @​github-actions[bot] in #​954
• Update AWS provider/module and generated content by @​github-actions[bot] in #​959
• Update Lambda runtime deprecation dates by @​Copilot in #​969
• Add missing ElastiCache node type: cache.r6gd.large by @​Copilot in #​971
• Fix typos in AWS RDS DB instance types by @​Copilot in #​972
• Add missing AWS S3 bucket naming restrictions by @​Copilot in #​976

Chores

• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.251.2 to 1.253.0 in the aws-sdk group by @​dependabot[bot] in #​952
• Bump github.com/hashicorp/terraform-json from 0.26.0 to 0.27.2 by @​dependabot[bot] in #​953
• Bump the aws-sdk group with 7 updates by @​dependabot[bot] in #​956
• Bump the aws-sdk group with 2 updates by @​dependabot[bot] in #​957
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.66 to 2.0.0-beta.67 by @​dependabot[bot] in #​958
• Bump github.com/aws/aws-sdk-go-v2/service/rds from 1.108.0 to 1.108.2 in the aws-sdk group by @​dependabot[bot] in #​960
• Bump golang.org/x/net from 0.44.0 to 0.46.0 by @​dependabot[bot] in #​961
• Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @​dependabot[bot] in #​962
• Bump the aws-sdk group with 7 updates by @​dependabot[bot] in #​963
• Bump the aws-sdk group with 7 updates by @​dependabot[bot] in #​965
• Drop support for Cosign signatures by @​wata727 in #​968
• Add documentation to AWS MQ engine type validation rules by @​Copilot in #​974
• Reorder S3 bucket ACL enum values for consistency by @​Copilot in #​975

New Contributors

• @​Copilot made their first contribution in #​969

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.43.0...v0.44.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.43.0 @[renovate[bot]](https://github.com/apps/renovate) (#38)

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842).

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.42.0 -> 0.43.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.43.0

Compare Source

What's Changed

Breaking Changes

• Remove aws_ecs_account_setting_default_invalid_name rule by @​wata727 in #​949

Enhancements

• Update AWS provider/module and generated content by @​github-actions[bot] in #​921
• Update AWS provider/module and generated content by @​github-actions[bot] in #​948

Chores

• Bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​927
• Bump the aws-sdk group with 7 updates by @​dependabot[bot] in #​928
• Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​931
• Bump github.com/hashicorp/terraform-json from 0.25.0 to 0.26.0 by [@​dependabot](https://redirect...

v1.535.2

chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#30)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#32)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Enable merge queue @goruha (#29)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#28)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#27)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#5)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.40.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.40.0

Compare Source

What's Changed

Enhancements

• feat: warn against data sources with ephemeral alternatives by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
• rules: Update Lambda deprecated runtimes by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870

Chores

• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
• docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
• Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/882
• Bump github.com/hashicorp/terraform-json from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/884

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.39.0...v0.40.0

v0.39.0

Compare Source

What's Changed

Enhancements

• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/840
• Add aws_iam_role_deprecated_policy_attributes rule by @​alexjfisher in https://github.com/terraform-linters/tflint-ruleset-aws/pull/833
• aws_write_only_arguments: recommend write-only arguments where available by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/860
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/855

Bug Fixes

• provider_missing_default_tags: correctly handle unknown values by @​bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/851

Chores

• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/839
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/842
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/841
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/845
• Pin GitHub Action versions by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/846
• Bump actions/setup-go from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/847
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/848
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.62 to 2.0.0-beta.63 by @​dependabot in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/849](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/8...

v1.535.1

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#25)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/iam-policy/aws to v2.0.2 @[renovate[bot]](https://github.com/apps/renovate) (#18)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/iam-policy/aws (source)	module	patch	2.0.1 -> 2.0.2

---

Release Notes

cloudposse/terraform-aws-iam-policy (cloudposse/iam-policy/aws)

v2.0.2

Compare Source

feat: support policy attachments @​nitrocode (#​52)

what

• feat: support policy attachments

why

• It's very convenient to be able to attach managed policies or attach inline policies to roles in a single module
• All cloudposse modules that use IAM roles and policies have to reinvent this technology and support both inline and managed. For a while, cloudposse defaulted to creating managed policies which isnt best practice. Each module is getting updated to support inline as an option. To make this easier, this module can support a toggle and then this module can be adopted into the other modules to make it easier to support both cases.

references

• closes #​21

Update Readme @​Benbentwo (#​46)

what

• Small appearance tweaks to readme

why

• cleanup from interpolation by GitHub

🤖 Automatic Updates

Migrate new test account @​osterman (#​51)

what

• Update .github/settings.yml
• Update .github/chatops.yml files

why

• Re-apply .github/settings.yml from org level to get terratest environment
• Migrate to new test account

References

• DEV-388 Automate clean up of test account in new organization
• DEV-387 Update terratest to work on a shared workflow instead of a dispatch action
• DEV-386 Update terratest to use new testing account with GitHub OIDC

Update .github/settings.yml @​osterman (#​50)

what

• Update .github/settings.yml
• Drop .github/auto-release.yml files

why

• Re-apply .github/settings.yml from org level
• Use organization level auto-release settings

references

• DEV-1242 Add protected tags with Repository Rulesets on GitHub

Update release workflow to allow pull-requests: write @​osterman (#​48)

what

• Update workflow (.github/workflows/release.yaml) to have permission to comment on PR

why

• So we can support commenting on PRs with a link to the release

Update GitHub Workflows to use shared workflows from '.github' repo @​osterman (#​47)

what

• Update workflows (.github/workflows) to use shared workflows from .github repo

why

• Reduce nested levels of reusable workflows

Update GitHub Workflows to Fix ReviewDog TFLint Action @​osterman (#​45)

what

• Update workflows (.github/workflows) to add issue: write permission needed by ReviewDog tflint action

why

• The ReviewDog action will comment with line-level suggestions based on linting failures

Update GitHub workflows @​osterman (#​44)

what

• Update workflows (.github/workflows/settings.yaml)

why

• Support new readme generation workflow.
• Generate banners

Use GitHub Action Workflows from `cloudposse/.github` Repo @​osterman (#​41)

what

• Install latest GitHub Action Workflows

why

• Use shared workflows from cldouposse/.github repository
• Simplify management of workflows from centralized hub of configuration

Add GitHub Settings @​osterman (#​36)

what

• Install a repository config (.github/settings.yaml)

why

• Programmatically manage GitHub repo settings

Update README.md and docs @​cloudpossebot (#​33)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Update Scaffolding @​osterman (#​34)

what

• Reran make readme to rebuild README.md from README.yaml
• Migrate to square badges
• Add scaffolding for repo settings and Mergify

why

• Upstream template changed in the .github repo
• Work better with repository rulesets
• Modernize look & feel

Update README.md and docs @​cloudpossebot (#​32)

what

This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Enable merge queue @goruha (#24)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#23)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#22)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#21)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#20)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#19)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#17)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.535.0

Migrate component from cloudposse/terraform-aws-components

v1.534.0

Migrate component from cloudposse/terraform-aws-components

v1.533.0

Migrate component from cloudposse/terraform-aws-components

v1.532.0

Migrate component from cloudposse/terraform-aws-components