Merge branch 'main' into aws_return_empty_list

CHANGELOG.rst

@@ -5,6 +5,47 @@ community.aws Release Notes
 .. contents:: Topics
 
 
+v1.4.0
+======
+
+Minor Changes
+-------------
+
+- aws_kms - add support for setting the deletion window using `pending_window` (PendingWindowInDays) (https://github.com/ansible-collections/community.aws/pull/200).
+- aws_kms_info - Add ``key_id`` and ``alias`` parameters to support fetching a single key (https://github.com/ansible-collections/community.aws/pull/200).
+- dynamodb_ttl - use ``botocore_at_least`` helper for checking the available botocore version (https://github.com/ansible-collections/community.aws/pull/280).
+- ec2_instance - add automatic retries on all paginated queries for temporary errors (https://github.com/ansible-collections/community.aws/pull/373).
+- ec2_instance - migrate to shared implementation of get_ec2_security_group_ids_from_names. The module will now return an error if the subnet provided isn't in the requested VPC. (https://github.com/ansible-collections/community.aws/pull/214)
+- ec2_instance_info - added ``minimum_uptime`` option with alias ``uptime`` for filtering instances that have only been online for certain duration of time in minutes (https://github.com/ansible-collections/community.aws/pull/356).
+- ec2_launch_template - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/326).
+- ec2_vpc_peer - use ``botocore_at_least`` helper for checking the available botocore version (https://github.com/ansible-collections/community.aws/pull/280).
+- ecs_task - use ``botocore_at_least`` helper for checking the available botocore version (https://github.com/ansible-collections/community.aws/pull/280).
+- route53 - migrated from boto to boto3 (https://github.com/ansible-collections/community.aws/pull/405).
+- various community.aws modules - cleanup error handling to use ``is_boto3_error_code`` and ``is_boto3_error_message`` helpers (https://github.com/ansible-collections/community.aws/pull/268).
+- various community.aws modules - cleanup of Python imports (https://github.com/ansible-collections/community.aws/pull/360).
+- various community.aws modules - improve consistency of handling Boto3 exceptions (https://github.com/ansible-collections/community.aws/pull/268).
+- various community.aws modules - migrate exception error message handling from fail_json to fail_json_aws (https://github.com/ansible-collections/community.aws/pull/361).
+
+Deprecated Features
+-------------------
+
+- ec2_eip - formally deprecate the ``instance_id`` alias for ``device_id`` (https://github.com/ansible-collections/community.aws/pull/349).
+- ec2_vpc_endpoint - deprecate the policy_file option and recommend using policy with a lookup (https://github.com/ansible-collections/community.aws/pull/366).
+
+Bugfixes
+--------
+
+- aws_kms - fixes issue where module execution fails without the kms:GetKeyRotationStatus permission. (https://github.com/ansible-collections/community.aws/pull/200).
+- aws_kms_info - ensure that searching by tag works when tag only exists on some CMKs (https://github.com/ansible-collections/community.aws/issues/276).
+- aws_s3_cors - fix element type for rules parameter. (https://github.com/ansible-collections/community.aws/pull/408).
+- aws_ssm - fix the generation of CURL URL used to download Ansible Python file from S3 bucket by ```_get_url()``` due to due to non-assignment of aws region in the URL and not using V4 signature as specified for AWS S3 signature URL by ```_get_boto_client()``` in (https://github.com/ansible-collections/community.aws/pull/352).
+- aws_ssm - fixed ``UnicodeEncodeError`` error when using unicode file names (https://github.com/ansible-collections/community.aws/pull/295).
+- ec2_eip - fix eip association by instance id & private ip address due to case-sensitivity of the ``PrivateIpAddress`` parameter (https://github.com/ansible-collections/community.aws/pull/328).
+- ec2_vpc_endpoint - ensure ``changed`` is correctly set when deleting an endpoint (https://github.com/ansible-collections/community.aws/pull/362).
+- ec2_vpc_endpoint - fix exception when attempting to delete an endpoint which has already been deleted (https://github.com/ansible-collections/community.aws/pull/362).
+- ecs_task - use `required_if` to enforce mandatory parameters based on specified operation (https://github.com/ansible-collections/community.aws/pull/402).
+- elb_application_lb - during the removal of an instance, the associated listeners are also removed.
+
 v1.3.0
 ======
 

changelogs/changelog.yaml

@@ -802,3 +802,80 @@ releases:
       name: s3_metrics_configuration
       namespace: ''
     release_date: '2020-12-10'
+  1.4.0:
+    changes:
+      bugfixes:
+      - aws_kms - fixes issue where module execution fails without the kms:GetKeyRotationStatus
+        permission. (https://github.com/ansible-collections/community.aws/pull/200).
+      - aws_kms_info - ensure that searching by tag works when tag only exists on
+        some CMKs (https://github.com/ansible-collections/community.aws/issues/276).
+      - aws_s3_cors - fix element type for rules parameter. (https://github.com/ansible-collections/community.aws/pull/408).
+      - aws_ssm - fix the generation of CURL URL used to download Ansible Python file
+        from S3 bucket by ```_get_url()``` due to due to non-assignment of aws region
+        in the URL and not using V4 signature as specified for AWS S3 signature URL
+        by ```_get_boto_client()``` in (https://github.com/ansible-collections/community.aws/pull/352).
+      - aws_ssm - fixed ``UnicodeEncodeError`` error when using unicode file names
+        (https://github.com/ansible-collections/community.aws/pull/295).
+      - ec2_eip - fix eip association by instance id & private ip address due to case-sensitivity
+        of the ``PrivateIpAddress`` parameter (https://github.com/ansible-collections/community.aws/pull/328).
+      - ec2_vpc_endpoint - ensure ``changed`` is correctly set when deleting an endpoint
+        (https://github.com/ansible-collections/community.aws/pull/362).
+      - ec2_vpc_endpoint - fix exception when attempting to delete an endpoint which
+        has already been deleted (https://github.com/ansible-collections/community.aws/pull/362).
+      - ecs_task - use `required_if` to enforce mandatory parameters based on specified
+        operation (https://github.com/ansible-collections/community.aws/pull/402).
+      - elb_application_lb - during the removal of an instance, the associated listeners
+        are also removed.
+      deprecated_features:
+      - ec2_eip - formally deprecate the ``instance_id`` alias for ``device_id`` (https://github.com/ansible-collections/community.aws/pull/349).
+      - ec2_vpc_endpoint - deprecate the policy_file option and recommend using policy
+        with a lookup (https://github.com/ansible-collections/community.aws/pull/366).
+      minor_changes:
+      - aws_kms - add support for setting the deletion window using `pending_window`
+        (PendingWindowInDays) (https://github.com/ansible-collections/community.aws/pull/200).
+      - aws_kms_info - Add ``key_id`` and ``alias`` parameters to support fetching
+        a single key (https://github.com/ansible-collections/community.aws/pull/200).
+      - dynamodb_ttl - use ``botocore_at_least`` helper for checking the available
+        botocore version (https://github.com/ansible-collections/community.aws/pull/280).
+      - ec2_instance - add automatic retries on all paginated queries for temporary
+        errors (https://github.com/ansible-collections/community.aws/pull/373).
+      - ec2_instance - migrate to shared implementation of get_ec2_security_group_ids_from_names.
+        The module will now return an error if the subnet provided isn't in the requested
+        VPC. (https://github.com/ansible-collections/community.aws/pull/214)
+      - ec2_instance_info - added ``minimum_uptime`` option with alias ``uptime``
+        for filtering instances that have only been online for certain duration of
+        time in minutes (https://github.com/ansible-collections/community.aws/pull/356).
+      - ec2_launch_template - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/326).
+      - ec2_vpc_peer - use ``botocore_at_least`` helper for checking the available
+        botocore version (https://github.com/ansible-collections/community.aws/pull/280).
+      - ecs_task - use ``botocore_at_least`` helper for checking the available botocore
+        version (https://github.com/ansible-collections/community.aws/pull/280).
+      - route53 - migrated from boto to boto3 (https://github.com/ansible-collections/community.aws/pull/405).
+      - various community.aws modules - cleanup error handling to use ``is_boto3_error_code``
+        and ``is_boto3_error_message`` helpers (https://github.com/ansible-collections/community.aws/pull/268).
+      - various community.aws modules - cleanup of Python imports (https://github.com/ansible-collections/community.aws/pull/360).
+      - various community.aws modules - improve consistency of handling Boto3 exceptions
+        (https://github.com/ansible-collections/community.aws/pull/268).
+      - various community.aws modules - migrate exception error message handling from
+        fail_json to fail_json_aws (https://github.com/ansible-collections/community.aws/pull/361).
+    fragments:
+    - 200-aws_kms-deletion.yaml
+    - 214-get_ec2_security_group_ids_from_names.yml
+    - 268-is_boto3_error.yml
+    - 280-cleanup-botocore_at_least.yml
+    - 295-connection-aws_ssm.yml
+    - 326-launch_template_retry.yml
+    - 328-fix-ec2_eip-instance-id-private-ip-address.yml
+    - 349-ec2_eip-deprecate-instance_id.yml
+    - 350_elb_application_lb_purges_listeners.yaml
+    - 352-fix-aws-region-and-v4-signature-for-s3-boto-client.yml
+    - 356_add_minimum_uptime_parameter.yaml
+    - 360-imports-cleanup.yml
+    - 361-fail_json_aws.yml
+    - 362-ec2_vpc_endpoint-deletion-changed.yml
+    - 366-ec2_vpc_endpoint-policy_file.yml
+    - 373-ec2_instance-retry-pagination.yml
+    - 402-ecs_task-mandatory_params.yml
+    - 404-fix-dict-element-for-rule-param-in-aws-s3-cors.yml
+    - 405-route53-boto3.yml
+    release_date: '2021-02-16'

changelogs/fragments/322-ec2_launch_template-add-metadata_options.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- ec2_launch_template - added ``metadata_options`` parameter to support changing the IMDS configuration for instances (https://github.com/ansible-collections/community.aws/pull/322).

changelogs/fragments/396-lambda_alias.yml

@@ -0,0 +1,4 @@
+minor_changes:
+- lambda_alias - use common helper functions to create AWS connections (https://github.com/ansible-collections/community.aws/pull/396).
+- lambda_alias - use common helper functions to perform snake_case to CamelCase conversions (https://github.com/ansible-collections/community.aws/pull/396).
+- lambda_alias - add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/396).

changelogs/fragments/398-ec2-vpc-nacl-add-ipv6.yaml

@@ -0,0 +1,2 @@
+minor_changes:
+  - ec2_vpc_nacl - add support for IPv6 (https://github.com/ansible-collections/community.aws/pull/398).

changelogs/fragments/406-route53-state-get.yml

@@ -0,0 +1,2 @@
+bugfixes:
+- route53 - fix when using ``state=get`` on private DNS zones and add tests to cover this scenario (https://github.com/ansible-collections/community.aws/pull/424).

changelogs/fragments/419-iam_saml_federation-results.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- iam_saml_federation - module now returns the state of the provider when no changes are made (https://github.com/ansible-collections/community.aws/pull/419).

changelogs/fragments/421-ec2_vpc_egress_igw-retry.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- ec2_vpc_egress_igw - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/421).

changelogs/fragments/422-aws_region_info-retry.yml

@@ -0,0 +1,2 @@
+minor_changes:
+- aws_region_info - Add retries on common AWS failures (https://github.com/ansible-collections/community.aws/pull/422).

changelogs/fragments/427-ec2_vpc_nat_gateway-stability.yml

@@ -0,0 +1,3 @@
+minor_changes:
+- ec2_vpc_nat_gateway - use pagination on describe calls to ensure all results are fetched (https://github.com/ansible-collections/community.aws/pull/427).
+- ec2_vpc_nat_gateway - add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/427).

changelogs/fragments/442-ec2_vpc_route_table-stability.yml

@@ -0,0 +1,4 @@
+minor_changes:
+- ec2_vpc_route_table_info - migrate to boto3 (https://github.com/ansible-collections/community.aws/pull/442).
+- ec2_vpc_route_table - add AWSRetry decorators to improve reliability (https://github.com/ansible-collections/community.aws/pull/442).
+- ec2_vpc_route_table - add boto3 pagination for some searches (https://github.com/ansible-collections/community.aws/pull/442).

changelogs/fragments/446-ec2_vpc_nat_gateway_info_stability.yml

@@ -0,0 +1,2 @@
+minor_changes:
+ - ec2_vpc_nat_gateway_info - solve RequestLimitExceeded error by adding retry decorator (https://github.com/ansible-collections/community.aws/pull/446) 

changelogs/fragments/454-sns_topic_fix_sms_endpoint_canonicalization.yaml

@@ -0,0 +1,2 @@
+bugfixes:
+  - sns_topic - Add ``+`` to allowable characters in SMS endpoints (https://github.com/ansible-collections/community.aws/pull/454).

changelogs/fragments/460-add-support-for-vpc-endpoint-type.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - ec2_vpc_endpoint - Added support for specifying ``vpc_endpoint_type`` (https://github.com/ansible-collections/community.aws/pull/460).

changelogs/fragments/470-ec2_metric_alarm-unit-optional.yml

@@ -0,0 +1,3 @@
+minor_changes:
+  - ec2_metric_alarm - Made ``unit`` parameter optional (https://github.com/ansible-collections/community.aws/pull/470).
+  - ec2_metric_alarm - Added support for check mode (https://github.com/ansible-collections/community.aws/pull/470).

changelogs/fragments/471-no_log.yml

@@ -0,0 +1,2 @@
+security_fixes:
+- aws_secret - flag the ``secret`` parameter as containing sensitive data which shouldn't be logged (https://github.com/ansible-collections/community.aws/pull/471).

changelogs/fragments/475-no_log-missing.yml

@@ -0,0 +1,4 @@
+security_fixes:
+- "aws_direct_connect_virtual_interface - mark the ``authentication_key`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."
+- "sts_assume_role - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."
+- "sts_session_token - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."

docs/community.aws.aws_config_recorder_module.rst

@@ -365,8 +365,8 @@ Examples
         state: present
         role_arn: 'arn:aws:iam::123456789012:role/AwsConfigRecorder'
         recording_group:
-            all_supported: true
-            include_global_types: true
+          all_supported: true
+          include_global_types: true