Releases: tecracer-chef/train-awsssm
v0.3.1
Add file_via_connection
Adds the ability to retrieve and write files. Also updated dependencies.
Bugfix for large EC2 instance numbers
This release fixes issues with accounts having many EC2 instances.
Previously, the EC2 describe code used to map IPs/DNS Names to Instance IDs was not using any paging and relied on all instances being returned at once. Paging is now added to this functionality.
Add Windows/InSpec Support
It is now possible to use this transport with Windows instances as well. By changing some return value handling, the transport can also handle InSpec scans now.
Usage examples:
inspec exec https://github.com/dev-sec/linux-baseline/archive/2.5.0.tar.gz -t awsssm://i-0123456789abcd
inspec exec https://github.com/dev-sec/windows-baseline/archive/2.1.6.tar.gz -t awsssm://i-123456789abcde
The transport also checks if the instance is up and registered with SSM. It tries to resolve the Instance ID from IP or a given hostname. You need to provide valid AWS credentials as usual (AWS CLI profile, instance role, environment variables etc).
Please note, that by principle the execution takes a long while as every check is individually started on the target machine. Experimental runtime for the Windows benchmark was 27 minutes and for the Linux benchmark only 2 minutes.
Add instance ID support
- add support for passing plain instance IDs for connections
- add better documentation
- add development tooling