Release History
Release notes
v2.0.12(2024-09-19)
Security
- Upgrade depdendencies to mitigate [CVE-2024-45296](https://nvd.nist.gov/vuln/detail/CVE-2024-45296)
v2.0.11(2024-08-01)
Security
- Upgrade `fast-xml-parser` to mitigate [CVE-2024-41818](https://nvd.nist.gov/vuln/detail/CVE-2024-41818)
Changed
- Extended PolicyManager's Log Group retention period to ten years.
v2.0.10(2024-06-19)
Security
- Upgraded `braces` package to mitigate [CVE-2024-4068](https://avd.aquasec.com/nvd/2024/cve-2024-4068/)
Fixed
- Fixed intermittent deployment failure caused by "CopyManifest" custom resource installing latest SDK version.
v2.0.9(2024-01-07)
Changed
- Update NodeJS runtimes to Nodejs18.x for all the lambda functions in the solution.
v2.0.8(2023-10-31)
Changed
- Update lambda timeout for custom resource PreReqManagerCR.
Fixed
- Update node dependencies for security vulnerabilities.
v2.0.7(2023-08-10)
Changed
- Update aws-cdk-lib to force CustomResourceProvider and Provider to update lambda runtime to Nodejs18.x.
v2.0.6(2023-06-27)
Fixed
- Fixed dependabot issues for fast-xml-parser, [CVE-2023-34104](https://nvd.nist.gov/vuln/detail/CVE-2023-34104).
- Fixed deployment issue which was limiting the solution to be deployed in only us-east-1.
v2.0.5(2023-06-05)
Changed
- Update parameter names for consistency
- Refactor to reduce code complexity
- Update client configs to latest sdk version
- Fix broken URLs in README
v2.0.4(2023-04-21)
Changed
- Fix npm json5 vulnerabilites [CVE-2022-46175](https://nvd.nist.gov/vuln/detail/CVE-2022-46175)
- Upgrade AWS CDK dependencies to version 2
- Changed the Object Ownership for logging bucket from 'Object writer' to 'Bucket owner enforced' to mitigate the impact caused by new S3 default settings.
- Updated S3 bucket policy to support access logging.
v2.0.3(2022-12-14)
Changed
- Fix npm got vulnerabilites
- Upgrade to node16
- Update solution name
v2.0.2(2022-05-09)
Changed
- Fix: Enforce encrypted access to config S3 buckets
v2.0.1(2022-04-14)
Changed
- Security patching of dependencies
- Upgrade CDK version
v2.0.0(2021-08-31)
Added
- Support Amazon Route 53 Resolver DNS Firewall security policies
- Support for AWS Firewall Manager compliance reports
- Support for multiple policy stack deployments to manage custom policies
Changed
- Solution re-branding from AWS Centralized WAF & VPC SG Management
- Migrated source code to AWS SDK for JavaScript v3
- Policy manifest file sourced in S3 bucket as compared to packaging with lambda binary earlier, making it easier to customize policy configurations at any time
v1.0.0(2020-09-29)
Added
- Initial version AWS Centralized WAF & VPC SG Management