All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Simulation capability for quota utilization events to test notification workflows
- Configurable monitoring for SageMaker and Connect services
- Optional Spoke notification stack for localized alerts
- Support for AWS GCR Regions
- Link to quota limit increase request in email/Slack notifications
- Custom quota threshold value input option
- In ORG/HYBRID mode, Resetting SSM parameters to NOP now triggers:
- Deletion of stack instances
- Clearing of event bus permissions
- In HYBRID mode, deployment now proceeds with valid entries from either the OU ID list or the Account ID list, rather than requiring both to be valid
- Made SNS notifications human readable
- Add batching to getQuotasWithUtilizationMetrics function
- Refactor _putMonitoredQuotas function to use batch writes
- Changed the memory allocation for the QMListManager Lambda function to 256 MB
- Added better error handling for CloudWatch ValidationErrors, with attempt to identify problematic quotas
- Update path-to-regexp to address CVE-2024-45296
- Update micromatch to address CVE-2024-4067
- Update fast-xml-parser to address CVE-2024-41818
- Update dependency to address CVE-2024-4068
- Added batching to get getMetricData calls to avoid limits
- Added quotaCode to metric Ids to avoid duplicate Ids.
- First of month schedule for quotaListManager Lambda function changed to every 30 days
- Add rate limiting delay between listServiceQuota API calls
- Add page size to Service Quotas API calls
- Made reporting of OK Messages optional
- Added percentage marker on Service Quota notifications
- Added manual resource cleanup after sqs message consumption
- Scoped permissions down for Stackset operations
- Error in saving notifications to summary table
- Update dependencies to address CVE-2023-45133
- Service Quotas spoke template parameters exposed in the hub template too
- Lambda run times upgraded to Node.js18
- Dependency updates
- Dependency updates addressing CVE-2023-26920
- Support for monitoring resources with Service Catalog AppRegistry
- Customer Managed Keys for the resources in hub stacks
- Bugs resulting in dynamoDb tables not being populated
- Support for monitoring all usage reporting quotas from all services supported by Service Quotas
- Ability to mute selected notifications
- Support for GovCloud regions
- Ability to select regions for stackset instances
- Check if Trusted Advisor is available before deploying the corresponding stacks
- Allow customization to Stack Set deployments configuration
- Use AWS Managed keys for the resources in the templates to help reduce the cost of deployment.
- Support for AWS CDK v2
- Support for AWS SDK v3
- Support for AWS Lambda runtime Node.js v16
- Support for CloudWatch quotas usage monitoring using Service Quotas
- Support for DynamoDB quotas usage monitoring using Service Quotas
- Support for EC2 quotas usage monitoring using Service Quotas
- Support for ECR quotas usage monitoring using Service Quotas
- Support for Firehose quotas usage monitoring using Service Quotas
- Support for AWS Organizations wide usage monitoring using CloudFormation StackSets
- Hub stack to support Organization deployment scenarios
- Hub-no-ou stack to support non-Organization deployment scenarios
- Pre-requisite stack to deploy in management account to fulfill pre-requisites for AWS Organizations
- Trusted Advisor spoke template to provision resources for quota-usage monitoring using Trusted Advisor
- Service Quotas spoke template to provision resources for quota-usage monitoring using Service Quotas
- Utility Lambda layer for generic solution utils
- Updated error handling in service-quotas-check microservice, raising the error for
listServiceQuotas
API exceptions
- Unit tests for service-quotas-check module
- Added cfn_nag suppress rules for Lambda VPC deployment and Reserved Concurrency
- Removed moment dependency in favor of using native javascript date objects
- Removed check-ids fH7LL0l7J9 and aW9HH0l8J6, no longer supported by Trusted Advisor
- Removed global CDK install - now installs locally for build process
- Updated CDK from v1.64.0 to v1.101.0
- Modified the solution to utilize cdk solution constructs.
- UUID Dependency changes
- SQS KMS key
- Typo in primary template
- service limit check - ELB Application Load Balancers 'EM8b3yLRTr'
- service limit check - ELB Network Load Balancers '8wIqYSt25K'
- service limit check - EBS Throughput Optimized HDD (st1) Volume Storage 'wH7DD0l3J9'
- service limit check - EBS Cold HDD (sc1) Volume Storage 'gH5CC0e3J9'
- upgraded lambda runtime to nodejs 12.x
- added support for EC2 vCPU limit