Skip to content

Latest commit

 

History

History
967 lines (763 loc) · 89.5 KB

CHANGELOG.rst

File metadata and controls

967 lines (763 loc) · 89.5 KB
Raw

amazon.aws Release Notes

Topics

v5.3.0

Release Summary

This release brings some minor changes, bugfixes, and deprecated features.

Minor Changes

Deprecated Features

  • support for passing both profile and security tokens through a mix of environment variables and parameters has been deprecated and support will be removed in release 6.0.0. After release 6.0.0 it will only be possible to pass either a profile or security tokens, regardless of mechanism used to pass them. To explicitly block a parameter coming from an environment variable pass an empty string as the parameter value. Support for passing profile and security tokens together was originally deprecated in release 1.2.0, however only partially implemented in release 5.0.0 (ansible-collections#1355).

Bugfixes

  • cloudtrail - support to disabling encryption using kms_key_id (ansible-collections#1384).
  • ec2_key - fix issue when trying to update existing key pair with the same key material (ansible-collections#1383).
  • module_utils/elbv2 - fix change detection by adding default values for Scope and SessionTimeout parameters in authenticate-oidc rules (ansible-collections#1270).
  • module_utils/elbv2 - respect UseExistingClientSecret parameter in authenticate-oidc rules (ansible-collections#1270).
  • revert breaking change introduced in 5.2.0 when passing credentials through a mix of environment variables and parameters (ansible-collections#1353).
  • s3_bucket - empty bucket policy was throwing a JSONDecodeError - deal with it gracefully instead (ansible-collections#1368)

v5.2.0

Release Summary

A minor release containing bugfixes for the ec2_eni_info module and the aws_rds inventory plugin, as well as improvements to the rds_instance module.

Minor Changes

  • amazon.aws collection - refacterization of code to use argument specification fallback when falling back to environment variables for security credentials and AWS connection details (ansible-collections#1174).
  • rds_instance - Split up the integration test-suite in a series of smaller tests (ansible-collections#1185).
  • rds_instance - add support for gp3 storage type (ansible-collections#1266).

Bugfixes

v5.1.0

Release Summary

This release brings some minor changes, bugfixes, security fixes and deprecated features.

Minor Changes

  • amazon.aws collection - The aws_access_key parameter has been renamed to access_key, access_key was previously an alias for this parameter and aws_access_key remains as an alias. This change should have no observable effect for users outside the module/plugin documentation. (ansible-collections#1172).
  • amazon.aws collection - The aws_secret_key parameter has been renamed to secret_key, secret_key was previously an alias for this parameter and aws_secret_key remains as an alias. This change should have no observable effect for users outside the module/plugin documentation. (ansible-collections#1172).
  • amazon.aws collection - The security_token parameter has been renamed to session_token, security_token was previously an alias for this parameter and security_token remains as an alias. This change should have no observable effect for users outside the module/plugin documentation. (ansible-collections#1172).
  • aws_account_attribute lookup plugin - use missing_required_lib for more consistent error message when boto3/botocore is not available (ansible-collections#1152).
  • aws_ec2 inventory - minor linting fixes (ansible-collections#1181).
  • aws_ec2 inventory plugin - use missing_required_lib for more consistent error message when boto3/botocore is not available (ansible-collections#1152).
  • aws_rds inventory plugin - use missing_required_lib for more consistent error message when boto3/botocore is not available (ansible-collections#1152).
  • aws_secret lookup plugin - use missing_required_lib for more consistent error message when boto3/botocore is not available (ansible-collections#1152).
  • aws_ssm lookup plugin - use missing_required_lib for more consistent error message when boto3/botocore is not available (ansible-collections#1152).
  • ec2_instance - minor fix for launching an instance in specified AZ when vpc_subnet_id is not provided (ansible-collections#1150).
  • ec2_instance - refacter tower_callback code to handle parameter validation as part of the argument specification (ansible-collections#1199).
  • ec2_instance - the instance_role parameter has been renamed to iam_instance_profile to better reflect what it is, instance_role remains as an alias (ansible-collections#1151).
  • ec2_instance - the tower_callback parameter has been renamed to aap_callback, tower_callback remains as an alias. This change should have no observable effect for users outside the module documentation (ansible-collections#1199).
  • s3_object_info - minor linting fixes (ansible-collections#1181).

Deprecated Features

  • amazon.aws collection - Support for the EC2_ACCESS_KEY environment variable has been deprecated and will be removed in a release after 2024-12-01. Please use the access_key parameter or AWS_ACCESS_KEY_ID environment variable instead (ansible-collections#1172).
  • amazon.aws collection - Support for the EC2_REGION environment variable has been deprecated and will be removed in a release after 2024-12-01. Please use the region parameter or AWS_REGION environment variable instead (ansible-collections#1172).
  • amazon.aws collection - Support for the EC2_SECRET_KEY environment variable has been deprecated and will be removed in a release after 2024-12-01. Please use the secret_key parameter or AWS_SECRET_ACCESS_KEY environment variable instead (ansible-collections#1172).
  • amazon.aws collection - Support for the EC2_SECURITY_TOKEN environment variable has been deprecated and will be removed in a release after 2024-12-01. Please use the session_token parameter or AWS_SESSION_TOKEN environment variable instead (ansible-collections#1172).
  • amazon.aws collection - Support for the EC2_URL and S3_URL environment variables has been deprecated and will be removed in a release after 2024-12-01. Please use the endpoint_url parameter or AWS_ENDPOINT_URL environment variable instead (ansible-collections#1172).
  • amazon.aws collection - The access_token alias for the session_token parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the session_token name instead (ansible-collections#1172).
  • amazon.aws collection - The access_token alias for the session_token parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the session_token name instead (ansible-collections#1172).
  • amazon.aws collection - The aws_security_token alias for the session_token parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the session_token name instead (ansible-collections#1172).
  • amazon.aws collection - The ec2_access_key alias for the access_key parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the access_key name instead (ansible-collections#1172).
  • amazon.aws collection - The ec2_region alias for the region parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the region name instead (ansible-collections#1172).
  • amazon.aws collection - The ec2_secret_key alias for the secret_key parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the secret_key name instead (ansible-collections#1172).
  • amazon.aws collection - The security_token alias for the session_token parameter has been deprecated and will be removed in a release after 2024-12-01. Please use the session_token name instead (ansible-collections#1172).
  • ec2_security_group - support for passing nested lists to cidr_ip and cidr_ipv6 has been deprecated. Nested lists can be passed through the flatten filter instead cidr_ip: '{{ my_cidrs | flatten }}' (ansible-collections#1213).
  • module_utils.url - ansible_collections.amazon.aws.module_utils.urls is believed to be unused and has been deprecated and will be removed in release 7.0.0.

Security Fixes

  • ec2_instance - fixes leak of password into logs when using tower_callback.windows=True and tower_callback.set_password (ansible-collections#1199).

Bugfixes

  • ec2_instance - fixes Invalid type for parameter TagSpecifications, value None error when tags aren't specified (ansible-collections#1148).
  • module_utils.transformations - ensure that map_complex_type still returns transformed items if items exists that are not in the type_map (ansible-collections#1163).

v5.0.2

Bugfixes

v5.0.1

Bugfixes

v5.0.0

Release Summary

In this release we promoted many community modules to Red Hat supported status. Those modules have been moved from the commuity.aws to amazon.aws collection. This release also brings some new features, bugfixes, breaking changes and deprecated features. The amazon.aws collection has dropped support for botocore<1.21.0 and boto3<1.18.0. Support for ansible-core<2.11 has also been dropped.

Major Changes

  • autoscaling_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.autoscaling_group.
  • autoscaling_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.autoscaling_group_info.
  • cloudtrail - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudtrail.
  • cloudwatch_metric_alarm - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatch_metric_alarm.
  • cloudwatchevent_rule - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchevent_rule.
  • cloudwatchlogs_log_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group.
  • cloudwatchlogs_log_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group_info.
  • cloudwatchlogs_log_group_metric_filter - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.cloudwatchlogs_log_group_metric_filter.
  • ec2_eip - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_eip.
  • ec2_eip_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_eip_info.
  • elb_application_lb - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.elb_application_lb.
  • elb_application_lb_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.elb_application_lb_info.
  • execute_lambda - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.execute_lambda.
  • iam_policy - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_policy.
  • iam_policy_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_policy_info.
  • iam_user - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_user.
  • iam_user_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.iam_user_info.
  • kms_key - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.kms_key.
  • kms_key_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.kms_key_info.
  • lambda - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda.
  • lambda_alias - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_alias.
  • lambda_event - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_event.
  • lambda_execute - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_execute.
  • lambda_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_info.
  • lambda_policy - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.lambda_policy.
  • rds_cluster - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster.
  • rds_cluster_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster_info.
  • rds_cluster_snapshot - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_cluster_snapshot.
  • rds_instance - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance.
  • rds_instance_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance_info.
  • rds_instance_snapshot - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_instance_snapshot.
  • rds_option_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_option_group.
  • rds_option_group_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_option_group_info.
  • rds_param_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_param_group.
  • rds_snapshot_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_snapshot_info.
  • rds_subnet_group - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.rds_subnet_group.
  • route53 - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53.
  • route53_health_check - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_health_check.
  • route53_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_info.
  • route53_zone - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.route53_zone.

Minor Changes

Breaking Changes / Porting Guide

  • amazon.aws collection - Support for ansible-core < 2.11 has been dropped (ansible-collections#1087).
  • amazon.aws collection - The amazon.aws collection has dropped support for botocore<1.21.0 and boto3<1.18.0. Most modules will continue to work with older versions of the AWS SDK, however compatibility with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (ansible-collections#934).
  • doc_fragments - remove minimum collection requirements from doc_fragments/aws.py and allow pulling those from doc_fragments/aws_boto3.py instead (ansible-collections#985).
  • ec2_ami - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_ami - the parameter aliases DeviceName, VirtualName and NoDevice were previously deprecated and have been removed, please use device_name, virtual_name and no_device instead (ansible-collections#913).
  • ec2_eni_info - the mutual exclusivity of the eni_id and filters parameters is now enforced, previously filters would be ignored if eni_id was set (ansible-collections#954).
  • ec2_instance - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_key - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_vol - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_vpc_dhcp_option_info - the parameter aliases DhcpOptionIds and DryRun were previously deprecated and have been removed, please use dhcp_options_ids and no_device instead (ansible-collections#913).
  • ec2_vpc_endpoint - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_vpc_net - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • ec2_vpc_route_table - the default value for purge_tags has been changed from False to True (ansible-collections#916).
  • s3_bucket - the previously deprecated alias S3_URL for the s3_url parameter has been removed. Playbooks shuold be updated to use s3_url (ansible-collections#908).
  • s3_object - the previously deprecated alias S3_URL for the s3_url parameter has been removed. Playbooks should be updated to use s3_url (ansible-collections#908).

Deprecated Features

Bugfixes

New Modules

  • cloudtrail_info - Gather information about trails in AWS Cloud Trail.
  • cloudwatch_metric_alarm_info - Gather information about the alarms for the specified metric
  • s3_object_info - Gather information about objects in S3

v4.4.0

Release Summary

The amazon.aws 4.4.0 release includes a number of security and minor bug fixes.

Minor Changes

  • ec2_instance - refacter tower_callback code to handle parameter validation as part of the argument specification (ansible-collections#1199).
  • ec2_instance - the tower_callback parameter has been renamed to aap_callback, tower_callback remains as an alias. This change should have no observable effect for users outside the module documentation (ansible-collections#1199).

Security Fixes

  • ec2_instance - fixes leak of password into logs when using tower_callback.windows=True and tower_callback.set_password (ansible-collections#1199).

v4.3.0

Release Summary

The amazon.aws 4.3.0 release includes a number of minor bug fixes and improvements. Following the release of amazon.aws 5.0.0, backports to the 4.x series will be limited to security issues and bugfixes.

Minor Changes

Bugfixes

  • ec2_metadata_facts - fix 'NoneType' object is not callable exception when using Ansible 2.13+ (ansible-collections#942).
  • module_utils/cloud - Fix ValueError: ansible_collections.amazon.aws.plugins.module_utils.core.__spec__ is None error on Ansible 2.9 (ansible-collections#1083).

v4.2.0

Minor Changes

Deprecated Features

  • module_utils.cloud - removal of the CloudRetry.backoff has been delayed until release 6.0.0. It is recommended to update custom modules to use jittered_backoff or exponential_backoff instead (ansible-collections#951).

v4.1.0

Minor Changes

Deprecated Features

Bugfixes

v4.0.0

Major Changes

  • amazon.aws collection - The amazon.aws collection has dropped support for botocore<1.20.0 and boto3<1.17.0. Most modules will continue to work with older versions of the AWS SDK, however compatibility with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (ansible-collections#574).

Minor Changes

Breaking Changes / Porting Guide

  • Tags beginning with aws: will not be removed when purging tags, these tags are reserved by Amazon and may not be updated or deleted (ansible-collections#817).
  • amazon.aws collection - the profile parameter is now mutually exclusive with the aws_access_key, aws_secret_key and security_token parameters (ansible-collections#834).
  • aws_az_info - the module alias aws_az_facts was deprecated in Ansible 2.9 and has now been removed (ansible-collections#832).
  • aws_s3 - the default value for ensure overwrite has been changed to different instead of always so that the module is idempotent by default (ansible-collections#811).
  • aws_ssm - on_denied and on_missing now both default to error, for consistency with both aws_secret and the base Lookup class (ansible-collections#617).
  • ec2 - The ec2 module has been removed in release 4.0.0 and replaced by the ec2_instance module (ansible-collections#630).
  • ec2_vpc_igw_info - The default value for convert_tags has been changed to True (ansible-collections#835).
  • elb_classic_lb - the ec2_elb fact has been removed (ansible-collections#827).
  • module_utils - Support for the original AWS SDK aka boto has been removed, including all relevant helper functions. All modules should now use the boto3/botocore AWS SDK (ansible-collections#630)

Deprecated Features

  • aws_s3 - The S3_URL alias for the s3_url option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_ami - The DeviceName alias for the device_name option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_ami - The NoDevice alias for the no_device option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_ami - The VirtualName alias for the virtual_name option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_ami - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#846).
  • ec2_instance - The default value for `instance_type` has been deprecated, in the future release you must set an instance_type or a launch_template (ansible-collections#587).
  • ec2_instance - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#849).
  • ec2_key - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#846).
  • ec2_vol - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#846).
  • ec2_vpc_dhcp_option_info - The DhcpOptionIds alias for the dhcp_option_ids option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_vpc_dhcp_option_info - The DryRun alias for the dry_run option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • ec2_vpc_endpoint - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#846).
  • ec2_vpc_net - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#848).
  • ec2_vpc_route_table - the current default value of False for purge_tags has been deprecated and will be updated in release 5.0.0 to True (ansible-collections#846).
  • s3_bucket - The S3_URL alias for the s3_url option has been deprecated and will be removed in release 5.0.0 (ansible-collections/community.aws#795).
  • s3_object - Support for creation and deletion of S3 buckets has been deprecated. Please use the amazon.aws.s3_bucket module to create and delete buckets (ansible-collections#869).

Removed Features (previously deprecated)

  • cloudformation - the template_format option has been removed. It has been ignored by the module since Ansible 2.3 (ansible-collections#833).
  • ec2_key - the wait_timeout option had no effect, was deprecated in release 1.0.0, and has now been removed (ansible-collections#830).
  • ec2_key - the wait option had no effect, was deprecated in release 1.0.0, and has now been removed (ansible-collections#830).
  • ec2_tag - the previously deprecated state list has been removed. To list tags on an EC2 resource the ec2_tag_info module can be used (ansible-collections#829).
  • ec2_vol - the previously deprecated state list has been removed. To list volumes the ec2_vol_info module can be used (ansible-collections#828).
  • module_utils.batch - the class ansible_collections.amazon.aws.plugins.module_utils.batch.AWSConnection has been removed. Please use AnsibleAWSModule.client() instead (ansible-collections#831).

Bugfixes

  • ec2_group - fix uncaught exception when running with --diff and --check to create a new security group (ansible-collections#440).
  • ec2_instance - Add a condition to handle default `instance_type` value for fix breaking on instance creation with launch template (ansible-collections#587).
  • ec2_instance - raise an error when missing permission to stop instance when state is set to rebooted` (ansible-collections#671).
  • ec2_vpc_igw - use gateway_id rather than filters to paginate if possible to fix 'NoneType' object is not subscriptable error (ansible-collections#766).
  • ec2_vpc_net - fix a bug where CIDR configuration would be updated in check mode (ansible/ansible#62678).
  • ec2_vpc_net - fix a bug where the module would get stuck if DNS options were updated in check mode (ansible/ansible#62677).
  • elb_classic_lb - modify the return value of _format_listeners method to resolve a failure creating https listeners (ansible-collections#860).

v3.5.1

Release Summary

3.5.1 is a security bugfix release.

Minor Changes

  • ec2_instance - refacter tower_callback code to handle parameter validation as part of the argument specification (ansible-collections#1199).
  • ec2_instance - the tower_callback parameter has been renamed to aap_callback, tower_callback remains as an alias. This change should have no observable effect for users outside the module documentation (ansible-collections#1199).

Security Fixes

  • ec2_instance - fixes leak of password into logs when using tower_callback.windows=True and tower_callback.set_password (ansible-collections#1199).

v3.5.0

Release Summary

Following the release of amazon.aws 5.0.0, 3.5.0 is a bugfix release and the final planned release for the 3.x series.

Minor Changes

  • ec2_security_group - set type as list for rules->group_name as it can accept both str and list (ansible-collections#971).

Bugfixes

  • ec2_metadata_facts - fix 'NoneType' object is not callable exception when using Ansible 2.13+ (ansible-collections#942).

v3.4.0

Minor Changes

Bugfixes

v3.3.1

v3.3.0

Minor Changes

  • aws_ec2 inventory - Allow for literal strings in hostname that don't match filter parameters in ec2 describe-instances (ansible-collections#826).
  • aws_ssm - Add support for endpoint parameter (ansible-collections#837).
  • module.utils.rds - add retry_codes to get_rds_method_attribute return data to use in call_method and add unit tests (ansible-collections#776).
  • module.utils.rds - refactor to utilize get_rds_method_attribute return data (ansible-collections#776).
  • module_utils - add new aliases aws_session_token and session_token to the security_token parameter to be more in-line with the boto SDK (ansible-collections#631).
  • module_utils.rds - Add support and unit tests for addition/removal of IAM roles to/from a db instance in module_utils.rds with waiters (ansible-collections#714).

Bugfixes

v3.2.0

Minor Changes

Bugfixes

  • aws_ec2 inventory - use the iam_role_arn configuration parameter to assume the role before trying to call DescribeRegions if the regions configuration is not set and AWS credentials provided without enough privilege to perform the DescribeRegions action. (ansible-collections#566).
  • ec2_vol - changing a volume from a type that does not support IOPS (like standard) to a type that does (like gp3) fails (ansible-collections#626).
  • ec2_vpc_igw - fix 'NoneType' object is not subscriptable error (ansible-collections#691).
  • ec2_vpc_igw - use paginator for describe internet gateways and add retry to fix NoneType object is not subscriptable error (ansible-collections#695).
  • ec2_vpc_net - In check mode, ensure the module does not change the configuration. Handle case when Amazon-provided ipv6 block is enabled, then disabled, then enabled again. Do not disable IPv6 CIDR association (using Amazon pool) if ipv6_cidr property is not present in the task. If the VPC already exists and ipv6_cidr property, retain the current config (ansible-collections#631).

v3.1.1

Minor Changes

  • bump the release version of the amazon.aws collection from 3.1.0 to 3.1.1 because of a bug that occurred while uploading to Galaxy.

v3.1.0

Minor Changes

Deprecated Features

  • ec2_instance - The default value for `instance_type` has been deprecated, in the future release you must set an instance_type or a launch_template (ansible-collections#587).

Bugfixes

  • Various modules and plugins - use vendored version of distutils.version instead of the deprecated Python standard library distutils (ansible-collections#599).
  • aws_acm - No longer raising ResourceNotFound exception while retrieving ACM certificates.
  • aws_s3 - fix exception raised when using module to copy from source to destination and key is missing from source (ansible-collections#602).
  • ec2_instance - Add a condition to handle default `instance_type` value for fix breaking on instance creation with launch template (ansible-collections#587).
  • ec2_key - add support for ED25519 key type (ansible-collections#572).
  • ec2_vol - Sets the Iops value in req_obj even if the iops value has not changed, to allow modifying volume types that require passing an iops value to boto. (ansible-collections#606)
  • elb_classic_lb - handle security_group_ids when providing security_group_names and fix broken tasks in integration test (ansible-collections#592).
  • s3_bucket - Enable the management of bucket-level ACLs (ansible-collections#573).

v3.0.0

Major Changes

  • amazon.aws collection - The amazon.aws collection has dropped support for botocore<1.19.0 and boto3<1.16.0. Most modules will continue to work with older versions of the AWS SDK, however compatibility with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (ansible-collections#574).

Minor Changes

Breaking Changes / Porting Guide

  • aws_caller_facts - Remove deprecated aws_caller_facts alias. Please use aws_caller_info instead.
  • cloudformation_facts - Remove deprecated cloudformation_facts alias. Please use cloudformation_info instead.
  • ec2_ami_facts - Remove deprecated ec2_ami_facts alias. Please use ec2_ami_info instead.
  • ec2_eni_facts - Remove deprecated ec2_eni_facts alias. Please use ec2_eni_info instead.
  • ec2_group_facts - Remove deprecated ec2_group_facts alias. Please use ec2_group_info instead.
  • ec2_instance_facts - Remove deprecated ec2_instance_facts alias. Please use ec2_instance_info instead.
  • ec2_snapshot_facts - Remove deprecated ec2_snapshot_facts alias. Please use ec2_snapshot_info instead.
  • ec2_vol_facts - Remove deprecated ec2_vol_facts alias. Please use ec2_vol_info instead.
  • ec2_vpc_dhcp_option_facts - Remove deprecated ec2_vpc_dhcp_option_facts alias. Please use ec2_vpc_dhcp_option_info instead.
  • ec2_vpc_endpoint_facts - Remove deprecated ec2_vpc_endpoint_facts alias. Please use ec2_vpc_endpoint_info instead.
  • ec2_vpc_igw_facts - Remove deprecated ec2_vpc_igw_facts alias. Please use ec2_vpc_igw_info instead.
  • ec2_vpc_nat_gateway_facts - Remove deprecated ec2_vpc_nat_gateway_facts alias. Please use ec2_vpc_nat_gateway_info instead.
  • ec2_vpc_net_facts - Remove deprecated ec2_vpc_net_facts alias. Please use ec2_vpc_net_info instead.
  • ec2_vpc_route_table_facts - Remove deprecated ec2_vpc_route_table_facts alias. Please use ec2_vpc_route_table_info instead.
  • ec2_vpc_subnet_facts - Remove deprecated ec2_vpc_subnet_facts alias. Please use ec2_vpc_subnet_info instead.

Deprecated Features

  • module_utils - support for the original AWS SDK boto has been deprecated in favour of the boto3/botocore SDK. All boto based modules have either been deprecated or migrated to botocore, and the remaining support code in module_utils will be removed in release 4.0.0 of the amazon.aws collection. Any modules outside of the amazon.aws and community.aws collections based on the boto library will need to be migrated to the boto3/botocore libraries (ansible-collections#575).

v2.2.0

Minor Changes

Bugfixes

  • aws_ec2 inventory - use the iam_role_arn configuration parameter to assume the role before trying to call DescribeRegions if the regions configuration is not set and AWS credentials provided without enough privilege to perform the DescribeRegions action. (ansible-collections#566).
  • ec2_vol - Sets the Iops value in req_obj even if the iops value has not changed, to allow modifying volume types that require passing an iops value to boto. (ansible-collections#606)
  • ec2_vol - changing a volume from a type that does not support IOPS (like standard) to a type that does (like gp3) fails (ansible-collections#626).
  • ec2_vpc_igw - fix 'NoneType' object is not subscriptable error (ansible-collections#691).
  • ec2_vpc_igw - use paginator for describe internet gateways and add retry to fix NoneType object is not subscriptable error (ansible-collections#695).
  • elb_classic_lb - handle security_group_ids when providing security_group_names and fix broken tasks in integration test (ansible-collections#592).

v2.1.0

Minor Changes

Deprecated Features

  • ec2_classic_lb - setting of the ec2_elb fact has been deprecated and will be removed in release 4.0.0 of the collection. The module now returns elb which can be accessed using the register keyword (ansible-collections#552).

Bugfixes

v2.0.0

Major Changes

  • amazon.aws collection - Due to the AWS SDKs announcing the end of support for Python less than 3.6 (https://boto3.amazonaws.com/v1/documentation/api/1.17.64/guide/migrationpy3.html) this collection now requires Python 3.6+ (ansible-collections#298).
  • amazon.aws collection - The amazon.aws collection has dropped support for botocore<1.18.0 and boto3<1.15.0. Most modules will continue to work with older versions of the AWS SDK, however compatibility with older versions of the SDK is not guaranteed and will not be tested. When using older versions of the SDK a warning will be emitted by Ansible (ansible-collections#502).
  • ec2_instance - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_instance.
  • ec2_instance_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_instance_info.
  • ec2_vpc_endpoint - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_endpoint.
  • ec2_vpc_endpoint_facts - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_endpoint_info.
  • ec2_vpc_endpoint_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_endpoint_info.
  • ec2_vpc_endpoint_service_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_endpoint_service_info.
  • ec2_vpc_igw - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_igw.
  • ec2_vpc_igw_facts - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_igw_facts.
  • ec2_vpc_igw_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_igw_info.
  • ec2_vpc_nat_gateway - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_nat_gateway.
  • ec2_vpc_nat_gateway_facts - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_nat_gateway_info.
  • ec2_vpc_nat_gateway_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_nat_gateway_info.
  • ec2_vpc_route_table - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_route_table.
  • ec2_vpc_route_table_facts - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_route_table_facts.
  • ec2_vpc_route_table_info - The module has been migrated from the community.aws collection. Playbooks using the Fully Qualified Collection Name for this module should be updated to use amazon.aws.ec2_vpc_route_table_info.

Minor Changes

Breaking Changes / Porting Guide

  • ec2_instance - instance wait for state behaviour has changed. If plays require the old behavior of waiting for the instance monitoring status to become OK when launching a new instance, the action will need to specify state: started (ansible-collections#481).
  • ec2_snapshot - support for waiting indefinitely has been dropped, new default is 10 minutes (ansible-collections#356).
  • ec2_vol_info - return attachment_set is now a list of attachments with Multi-Attach support on disk. (ansible-collections#362).
  • ec2_vpc_dhcp_option - The module has been refactored to use boto3. Keys and value types returned by the module are now consistent, which is a change from the previous behaviour. A purge_tags option has been added, which defaults to True. (ansible-collections#252)
  • ec2_vpc_dhcp_option_info - Now preserves case for tag keys in return value. (ansible-collections#252)
  • module_utils.core - The boto3 switch has been removed from the region parameter (ansible-collections#287).
  • module_utils/compat - vendored copy of ipaddress removed (ansible-collections#461).
  • module_utils/core - updated the scrub_none_parameters function so that descend_into_lists is set to True by default (ansible-collections#297).

Deprecated Features

  • ec2 - the boto based ec2 module has been deprecated in favour of the boto3 based ec2_instance module. The ec2 module will be removed in release 4.0.0 (ansible-collections#424).
  • ec2_vpc_dhcp_option - The new_config return key has been deprecated and will be removed in a future release. It will be replaced by dhcp_config. Both values are returned in the interim. (ansible-collections#252)

Bugfixes

  • aws_s3 - Fix upload permission when an S3 bucket ACL policy requires a particular canned ACL (ansible-collections#318)
  • ec2_ami - Fix ami issue when creating an ami with no_device parameter (ansible-collections#386)
  • ec2_instance - ec2_instance was waiting on EC2 instance monitoring status to be OK when launching a new instance. This could cause a play to wait multiple minutes for AWS's monitoring to complete status checks (ansible-collections#481).
  • ec2_snapshot - Fix snapshot issue when capturing a snapshot of a volume without tags (ansible-collections#383)
  • ec2_vol - Fixes changed status when modify_volume is used, but no new disk is being attached. The module incorrectly reported that no change had occurred even when disks had been modified (iops, throughput, type, etc.). (ansible-collections#482).
  • ec2_vol - fix iops setting and enforce iops/throughput parameters usage (ansible-collections#334)
  • inventory - include_filters won't be ignored anymore if filters is not set (ansible-collections#457).
  • s3_bucket - Fix error handling when attempting to set a feature that is not implemented (ansible-collections#391).
  • s3_bucket - Gracefully handle NotImplemented exceptions when fetching encryption settings (ansible-collections#390).

New Modules

  • ec2_spot_instance - request, stop, reboot or cancel spot instance
  • ec2_spot_instance_info - Gather information about ec2 spot instance requests

v1.5.0

Minor Changes

Bugfixes

v1.4.1

Minor Changes

  • module_utils - the ipaddress module utility has been vendored into this collection. This eliminates the collection dependency on ansible.netcommon (which had removed the library in its 2.0 release). The ipaddress library is provided for internal use in this collection only. (ansible-collections#273)-

v1.4.0

Minor Changes

  • aws_ec2 - Add hostname options concatenation
  • aws_ec2 inventory plugin - avoid a superfluous import of ansible.utils.display.Display (ansible-collections#226).
  • aws_ec2 module - Replace inverse aws instance-state-name filters !terminated, !shutting-down in favor of postive filters pending, running, stopping, stopped. Issue 235. (ansible-collections#237)
  • aws_secret - add bypath functionality (ansible-collections#192).
  • ec2_key - add AWSRetry decorator to automatically retry on common temporary failures (ansible-collections#213).
  • ec2_vol - Add support for gp3 volumes and support for modifying existing volumes (ansible-collections#55).
  • module_utils/elbv2 - add logic to compare_rules to suit Values list nested within dicts unique to each field type. Fixes issue (ansible-collections#187)
  • various AWS plugins and module_utils - Cleanup unused imports (ansible-collections#217).

Bugfixes

  • ec2_vol - a creation or update now returns a structure with an up to date list of tags (ansible-collections#241).

v1.3.0

Minor Changes

Bugfixes

v1.2.1

Minor Changes

  • ec2_eni - Add support for tagging.
  • ec2_eni - Port ec2_eni module to boto3 and add an integration test suite.
  • ec2_eni_info - Add retries on transient AWS failures.
  • ec2_eni_info - Add support for providing an ENI ID.

v1.2.0

Minor Changes

  • ec2 module_utils - Update ec2_connect (boto2) behaviour so that ec2_url overrides region.
  • module_utils.core - Support passing arbitrary extra keys to fail_json_aws, matching capabilities of fail_json.

Deprecated Features

  • All AWS Modules - aws_access_key, aws_secret_key and security_token will be made mutually exclusive with profile after 2022-06-01.

Bugfixes

  • ec2 module_utils - Ensure boto3 verify parameter isn't overridden by setting a profile (ansible-collections#129)
  • s3_bucket - Ceph compatibility: treat error code NoSuchTagSetError used by Ceph synonymously to NoSuchTagSet used by AWS

v1.1.0

Major Changes

  • ec2 module_utils - The AWSRetry decorator no longer catches NotFound exceptions by default. NotFound exceptions need to be explicitly added using catch_extra_error_codes. Some AWS modules may see an increase in transient failures due to AWS''s eventual consistency model.

Minor Changes

  • Add aws_security_token, aws_endpoint_url and endpoint_url aliases to improve AWS module parameter naming consistency.
  • Add support for aws_ca_bundle to boto3 based AWS modules
  • Add support for configuring boto3 profiles using AWS_PROFILE and AWS_DEFAULT_PROFILE
  • Added check_mode support to aws_az_info
  • Added check_mode support to ec2_eni_info
  • Added check_mode support to ec2_snapshot_info
  • ansible_dict_to_boto3_filter_list - convert integers and bools to strings before using them in filters.
  • aws_direct_connect_virtual_interface - add direct_connect_gateway_id parameter. This field is only applicable in private VIF cases (public=False) and is mutually exclusive to virtual_gateway_id.
  • cloudformation - Return change_set_id in the cloudformation output if a change set was created.
  • ec2 - deprecate allowing both group and group_id - currently we ignore group_id if both are passed.
  • ec2_ami_info - allow integer and bool values for filtering images (ansible/ansible#43570).
  • ec2_asg - Add support for Max Instance Lifetime
  • ec2_asg - Add the ability to use mixed_instance_policy in launch template driven autoscaling groups
  • ec2_asg - Migrated to AnsibleAWSModule
  • ec2_placement_group - make name a required field.
  • ec2_vol_info - Code cleanup and use of the AWSRetry decorator to improve stability
  • ec2_vpc_net - Enable IPv6 CIDR assignment

Breaking Changes / Porting Guide

  • aws_s3 - can now delete versioned buckets even when they are not empty - set mode to delete to delete a versioned bucket and everything in it.

Deprecated Features

  • cloudformation - The template_format option had no effect since Ansible 2.3 and will be removed after 2022-06-01
  • cloudformation - the template_format option has been deprecated and will be removed in a later release. It has been ignored by the module since Ansible 2.3.
  • data_pipeline - The version option had no effect and will be removed in after 2022-06-01
  • ec2 - in a later release, the group and group_id options will become mutually exclusive. Currently group_id is ignored if you pass both.
  • ec2_ami - The no_device alias NoDevice has been deprecated and will be removed after 2022-06-01
  • ec2_ami - The virtual_name alias VirtualName has been deprecated and will be removed after 2022-06-01
  • ec2_eip - The wait_timeout option had no effect and will be removed after 2022-06-01
  • ec2_key - The wait_timeout option had no effect and will be removed after 2022-06-01
  • ec2_key - The wait option had no effect and will be removed after 2022-06-01
  • ec2_key - the wait_timeout option has been deprecated and will be removed in a later release. It has had no effect since Ansible 2.5.
  • ec2_key - the wait option has been deprecated and will be removed in a later release. It has had no effect since Ansible 2.5.
  • ec2_lc - The associate_public_ip_address option had no effect and will be removed after 2022-06-01
  • ec2_tag - deprecate the list option in favor of ec2_tag_info
  • ec2_tag - support for list as a state has been deprecated and will be removed in a later release. The ec2_tag_info can be used to fetch the tags on an EC2 resource.

Bugfixes

  • aws_ec2 - fix idempotency when managing tags
  • aws_ec2 - fix idempotency when metrics are enable
  • aws_s3 - Delete objects and delete markers so versioned buckets can be removed.
  • aws_s3 - Try to wait for the bucket to exist before setting the access control list.
  • cloudformation_info - Fix a KeyError returning information about the stack(s).
  • ec2_asg - Ensure "wait" is honored during replace operations
  • ec2_launch_template - Update output to include latest_version and default_version, matching the documentation
  • ec2_transit_gateway - Use AWSRetry before ClientError is handled when describing transit gateways
  • ec2_transit_gateway - fixed issue where auto_attach set to yes was not being honored (ansible/ansible#61907)
  • ec2_vol - fix filtering bug
  • s3_bucket - Accept XNotImplemented response to support NetApp StorageGRID.