Skip to content

Releases: tecracer-chef/train-awsssm

v0.3.1

27 Jan 20:04
Compare
Choose a tag to compare
Fix workflow

Add file_via_connection

06 Jul 18:12
2c46874
Compare
Choose a tag to compare
Pre-release

Adds the ability to retrieve and write files. Also updated dependencies.

Bugfix for large EC2 instance numbers

03 Dec 15:43
df40e5d
Compare
Choose a tag to compare
Pre-release

This release fixes issues with accounts having many EC2 instances.

Previously, the EC2 describe code used to map IPs/DNS Names to Instance IDs was not using any paging and relied on all instances being returned at once. Paging is now added to this functionality.

Add Windows/InSpec Support

30 Oct 17:11
2a20a9d
Compare
Choose a tag to compare
Pre-release

It is now possible to use this transport with Windows instances as well. By changing some return value handling, the transport can also handle InSpec scans now.

Usage examples:

inspec exec https://github.com/dev-sec/linux-baseline/archive/2.5.0.tar.gz -t awsssm://i-0123456789abcd

inspec exec https://github.com/dev-sec/windows-baseline/archive/2.1.6.tar.gz -t awsssm://i-123456789abcde

The transport also checks if the instance is up and registered with SSM. It tries to resolve the Instance ID from IP or a given hostname. You need to provide valid AWS credentials as usual (AWS CLI profile, instance role, environment variables etc).

Please note, that by principle the execution takes a long while as every check is individually started on the target machine. Experimental runtime for the Windows benchmark was 27 minutes and for the Linux benchmark only 2 minutes.

Add instance ID support

30 Oct 13:25
db08dbc
Compare
Choose a tag to compare
Pre-release
  • add support for passing plain instance IDs for connections
  • add better documentation
  • add development tooling