Release Release v1.5.6-a · aws-samples/aws-secure-environment-accelerator

Notes

v1.5.6-a was released to address an issue with log replication. If you already upgraded to v1.5.6 reach out to your AWS Account Team for instructions on additional steps required while upgrading to v1.5.6-a from v1.5.6
Customers MUST use Landing Zone Accelerator on AWS (LZA) for new deployments
Existing customers MUST upgrade to v1.5.6 or higher to avoid impacts by 2023-06-01
- Upgrade testing for future releases will only be for upgrades from v1.5.6 or higher
- AWS CDK version 1 will reach its end-of-support, and will no longer receive updates or releases
- ASEA is currently in maintenance with no new features or enhancements planned. It's expected that a future Release will help customers upgrade from ASEA to LZA.
- End of support is expected in Q2 2024. Upgrades from ASEA to LZA will occur over the next year.
IMPORTANT - In order to implement the VPC flow log fix (#1112) (b5dc19c):

Before update: for every VPC of the configuration, change the “flow-logs” option to “CWL”
Execute the State Machine in Full Apply mode. Wait for successful completion
Change the “flow-logs” option to the original value (“BOTH”) (don’t re-run the state machine)
Follow the general instructions to update ASEA to version 1.5.6
Update the CloudFormation stack
Run the ASEA-InstallerPipeline
When the ASEA-InstallerPipeline completes it will trigger the State Machine. Verify that it completes successfully

Fixes logging bucket replication not being applied.
CDK Rebase (from v1 to v2) (#1117) (6642b61)
Adjust vpc flow log creation logic (#1112) (b5dc19c)
AWS Config rule IAM Password Policy boolean values (#1100) (58208ad)
Update alb ip monitor dns lookup check (#1076) (fe0ed82)
Switch Log archive bucket policy to Org policy (#1051) (696adb8)
Lambda timeout in large customer environments (#1020) (bed0a62)