You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
elb_target_group - allow UDP and TCP_UDP protocols; permit only HTTP/HTTPS health checks using response codes and paths
iam - make name a required field.
iam_cert - make name a required field.
iam_policy - The iam_policy module has been migrated from boto to boto3.
iam_policy - make iam_name a required field.
iam_role - Add support for managing the maximum session duration
iam_role - Add support for removing the related instance profile when we delete the role
iam_role, iam_user and iam_group - the managed_policy option has been renamed to managed_policies (with an alias added)
iam_role, iam_user and iam_group - the purge_policy option has been renamed to purge_policies (with an alias added)
lambda - add a tracing_mode parameter to set the TracingConfig for AWS X-Ray. Also allow updating Lambda runtime.
purefa_volume - Change I(qos) parameter to I(bw_iops), but retain I(qos) as an alias for backwards compatibility (ansible/ansible#61577).
redshift - Add AWSRetry calls for errors outside our control
route53 - the module now has diff support.
sns_topic - Add backoff when we get Topic NotFound exceptions while listing the subscriptions.
sqs_queue - Add support for tagging, KMS and FIFO queues
sqs_queue - updated to use boto3 instead of boto
Deprecated Features
cloudformation - The template_format option had no effect since Ansible 2.3 and will be removed after 2022-06-01
data_pipeline - The version option had no effect and will be removed after 2022-06-01
ec2_eip - The wait_timeout option had no effect and will be removed after 2022-06-01
ec2_key - The wait_timeout option had no effect and will be removed after 2022-06-01
ec2_key - The wait option had no effect and will be removed after 2022-06-01
ec2_lc - The associate_public_ip_address option had no effect and will be removed after 2022-06-01
elb_network_lb - The current default value of the state option has been deprecated and will change from absent to present after 2022-06-01
iam_managed_policy - The fail_on_delete option had no effect and will be removed after 2022-06-01
iam_policy - The policy_document will be removed after 2022-06-01. To maintain the existing behavior use the policy_json option and read the file with the lookup plugin.
iam_policy - The default value of skip_duplicates will change after 2022-06-01 from true to false.
iam_role - The default value of the purge_policies has been deprecated and will change from true to false after 2022-06-01
s3_lifecycle - The requester_pays option had no effect and will be removed after 2022-06-01
s3_sync - The retries option had no effect and will be removed after 2022-06-01
Bugfixes
security issue - Convert CLI provided passwords to text initially, to prevent unsafe context being lost when converting from bytes->text during post processing of PlayContext. This prevents CLI provided passwords from being incorrectly templated (CVE-2019-14856)
security issue - Update AnsibleUnsafeText and AnsibleUnsafeBytes to maintain unsafe context by overriding .encode and .decode. This prevents future issues with to_text, to_bytes, or to_native removing the unsafe wrapper when converting between string types (CVE-2019-14856)
azure_rm_dnsrecordset_info - no longer returns empty azure_dnsrecordset facts when called as _info module.
azure_rm_resourcegroup_info - no longer returns azure_resourcegroups facts when called as _info module.
azure_rm_storageaccount_info - no longer returns empty azure_storageaccounts facts when called as _info module.
azure_rm_virtualmachineimage_info - no longer returns empty azure_vmimages facts when called as _info module.
azure_rm_virtualmachinescaleset_info - fix wrongly empty result, or ansible_facts result, when called as _info module.
azure_rm_virtualnetwork_info - no longer returns empty azure_virtualnetworks facts when called as _info module.
cloudfront_distribution - Always add field_level_encryption_id to cache behaviour to match AWS requirements
cloudwatchlogs_log_group - Fix a KeyError when updating a log group that does not have a retention period (ansible/ansible#47945)
cloudwatchlogs_log_group_info - remove limitation of max 50 results
ec2_asg - Ensure wait is honored during replace operations
ec2_launch_template - Update output to include latest_version and default_version, matching the documentation
ec2_transit_gateway - Use AWSRetry before ClientError is handled when describing transit gateways
ec2_transit_gateway - fixed issue where auto_attach set to yes was not being honored (ansible/ansible#61907)
edgeos_config - fix issue where module would silently filter out encrypted passwords
fixed issue with sns_topic's delivery_policy option resulting in changed always being true
lineinfile - properly handle inserting a line when backrefs are enabled and the line already exists in the file (ansible/ansible#63756)
route53 - improve handling of octal encoded characters
win_credential - Fix issue that errors when trying to add a name with wildcards.
New Modules
aws_acm - Upload and delete certificates in the AWS Certificate Manager service
aws_acm_info - Retrieve certificate information from AWS Certificate Manager service
aws_api_gateway - Manage AWS API Gateway APIs
aws_application_scaling_policy - Manage Application Auto Scaling Scaling Policies