cfn-lint

CloudFormation Specifications

• Update CloudFormation specs to 49.0.0 (pull #2178)
• Expand StatefulResources to include AWS::OpenSearchService::Domain (pull #2179)
• Add AWS::EKS::Cluster.ClusterSecurityGroupId to GetAtt list of AWS::EC2::SecurityGroup.NameOrGroupId (pull #2177)

CloudFormation Specifications

• Update CloudFormation specs to 48.0.0 (pull #2170)
• Add AWS::OpenSearchService::Domain to be in the list for EnableVersionUpgrade (pull #2174)

Features

• Update aws-sam-translator to 1.40.0 (pull #2165)

CloudFormation Specifications

• Update CloudFormation specs to 47.0.0 (pull #2164)

Fixes

• Switching logging level for samtranslator to CRITICAL (pull #2168)

Features

• Adds support for outputting results in SARIF (pull #2126)

CloudFormation Specifications

• Update CloudFormation specs to 46.0.0 (pull #2158)

CloudFormation Specifications

• Update CloudFormation specs to 45.0.0 (pull #2153)
• Add AWS::DynamoDB::GlobalTable to AWS::Lambda::EventSourceMapping.EventSourceArn (pull #2151)
• Expand stateful resource types to include AWS::SecretsManager::Secret (pull #2154)

Fixes

• Add InstanceRefresh to allowed values for SuspendProcesses in rule E3016 (pull #2160)
• Strip conditions completely from CodePipeline definitions in rule E2541 (pull #2152)

Features

• Add exceptions to rule E3031 (pull #2143)

CloudFormation Specifications

• Update CloudFormation specs to 44.0.0 (pull #2124)
• Update AllowedValues for AWS::CloudTrail::Trail.DataResourceType (pull #2134)

Fixes

• Add support for Fn::If inside rule E1024 (pull #2140)
• Update aws-sam-translator to 1.39.0 (pull #2129)

CloudFormation Specifications

• Update CloudFormation specs to 41.2.0 (pull #2119)

Fixes

• Update Serverless/ManagedPolicies.json and create automation to keep it up to date going forward (pull #2116)

Features

• Update default configuration on rule E3012 to no be strict (pull #2103)
• Add rule E3043 to validate nested stack parameters (pull #2074)

CloudFormation Specifications

• Update CloudFormation specs to 41.0.0 (pull #2111)
• Add AWS::KMS::ReplicaKey as a Ref/GetAtt for AWS::KMS::Alias.TargetKeyId (pull #2110)

CloudFormation Specifications

• Update resource specs to 40.1.0 (pull #2105)
• AWS::ElasticLoadBalancingV2::LoadBalancer.LoadBalancerAttribute AllowedValues expansion (pull #2101)

Fixes

• Fix rule message string formatting for E3013 (pull #2099)

Features

• Update aws-sam-translator to 1.38.0 (pull #2082)
• Signal the end of life for Python 3.5 (pull #2052)
• Allow configuration of top level sections in rule E1001 (pull #2090)

CloudFormation Specifications

• Update resource specs to 39.8.0 (pull #2087)
• Add StringMax to AWS::SNS::Topic.TopicName, AWS::IAM::Role.Name, AWS::SNS::Topic.TopicName, AWS::Lambda::Function properties Handler, Description, FunctionName, and AWS::Lambda::LayerVersion properties LayerName (pull #2089)

Fixes

• Update RetentionPeriodHours for AWS::Kinesis::Stream to 8760 (pull #2071)
• Expand expanding likely_stateful_resource_types to include AWS::DynamoDB::GlobalTable (pull #2079)

Features

• End support for Python 3.4 (pull #2048)
• New rule I3013 to validate retention period settings on applicable resources (pull #2054)

CloudFormation Specifications

• Update resource specs to 39.3.0 (pull #2047)

Fixes

• Update ManagedPolicies.json to include AWSLambda_FullAccess and AWSLambda_ReadOnlyAccess (pull #2062)
• Fix a warning in setuptools with description-file needed to be description_file (pull #2051)
• Update the schema.json for .cfnlintrc files to have the correct format for custom_rules (pull #2055)
• Update rule E1029 to not look at TemplatyBody since it can be a nested template (pull #2057)
• Update rule E3012 to think of a list as json (pull #2067)

Features

• A new sub class to make working with Fn::Sub easier (pull #2003)

CloudFormation Specifications

• Update resource specs to 39.1.0 (pull #2044)

Fixes

• Fix an issue with networkx package nesting in the graph function (pull #2035)
• Update rule E1029 to only alert when the value found is a parameter or a resource (pull #2031)

Features

• Update rule E2507 to validate resource configuration in an IAM policy (pull #2023)
• Update aws-sam-translator to 1.36.0 (pull #2027)

CloudFormation Specifications

• Update resource specs to 37.1.0 (pull #2012)
• Update Lambda EOL for dotnetcore2.1 (pull #2015)
• UPdate Lambda EOL for nodejs10.x and ruby2.5 (pull #2033)

Fixes

• Fix an issue with rule E7003 when a Fn::Transform was in a mapping (pull #2017)
• Fix an issue when finding duplicate keys where the 2nd error wasn't to the key (pull #2011)

CloudFormation Specifications

• Update resource specs to 36.0.0 (pull #2001)
• Add Boston, Miami, Houston as local zones (pull #2002)

Fixes

• Update the key regex for rule E7003 (pull #2006)

CloudFormation Specifications

• Update resource specs to 35.2.0 (pull #1998)

CloudFormation Specifications

• Update resource specs to 35.0.0 (pull #1986)
• Patch in Glue resources into us-gov-west-1 (pull #1993)

Fixes

• Require pyyaml to be at least 5.4 for versions of Python that support it (pull #1992)
• Update aws-sam-translator dependency to be at least 1.35.0 (pull #1991)
• Update rule W1001 to not validate Globals when looking at Refs and GetAtts (pull #1989)

CloudFormation Specifications

• Update resource specs to 33.0.0 (pull #1981)
• Remove AWS::AmazonMQ::Broker.EngineVersion AllowedValues from manual upkeep based on amount of change (pull #1975)

Fixes

• Update rule E3502 to convert strings into json before checking the size of the json (pull #1982)
• Update rule E2504 to check for Iops when type is io1 or io2 (pull #1978)

CloudFormation Specifications

• Update resource specs to 32.0.0 (pull #1962)
• Add AWS::Kinesis::StreamConsumer as a REF for AWS::Lambda::EventSourceMapping.EventSourceArn (pull #1961)

Fixes

• Update EOL dates for AWS::Lambda::Function.Runtime used by rule E2531 (pull #1965)

CloudFormation Specifications

• Add regex pattern for AWS::CloudWatch::Alarm.MetricDataQuery Id (pull #1948)

Fixes

• Update update IAM policies to not fail on changing upstream IAM policies (pull #1954)
• Switch RegexDict to only string match based on if the type is Module (pull #1956)