Change Log

Table of Contents

Introduction

All notable changes to this project will be documented in this file.

2021-12-16

Added

Config Management Account solution

Changed

In Common Prerequisites solution:
- Removed TAG_KEY/TAG_VALUE as environment variables and only kept them as Custom Resource Properties, since CloudWatch event is no longer needed in this solution.
- Removed pManagementAccountId from multiple templates, and instead used as needed AWS::AccountId.

Fixed

Nothing Fixed

2021-12-10

Added

Common Prerequisites solution
Deployment Methods documentation
Staging Script - stage_solution.sh

Changed

Nothing Changed

Fixed

Nothing Fixed

2021-11-22

Added

EC2 Default EBS Encryption solution

Changed

Nothing Changed

2021-11-20

Added

S3 Block Account Public Access solution

Changed

Nothing Changed

2021-11-19

Added

Added .flake8, poetry.lock, pyproject.toml, and .markdownlint.json to define coding standards that we will require and use when building future solutions. Contributors should use the standards defined within these files before submitting pull requests. Existing solutions will get refactored to these standards in future updates.
Added S3 BucketKeyEnabled to the solutions that create S3 objects (e.g. CloudTrail, GuardDuty, and Macie)

Changed

Removed the AWS Config Aggregator account solution since AWS Control Tower deploys an account aggregator within the Audit account.
Modified the directory structure to support multiple internal packages (e.g. 1 for each solution). The folder structure also allows for tests (integration, unit, etc.). See Real Python Application with Internal Packages
Renamed folders and files with snake_case to align with PEP8 Package and Module Names
Modified links within README.md files to align with the updated folders and file names
Updated the README.md files to provide consistency and improved formatting.
Renamed parameter and template files to sra-<solution_name>...
Updated default values for parameters for resource names with sra- prefix to help with protecting resources deployed

2021-09-02

Added

Nothing Added

Changed

Removed all code and references to AWS Landing Zone as it is currently in Long-term Support and will not receive any additional features.

Fixed

Nothing Fixed

2021-09-01

Added

AWS IAM Access Analyzer solution
Organization AWS Config Aggregator solution
Common Register Delegated Administrator solution

Changed

Nothing Changed

Fixed

Nothing Fixed