v0.38.0

Major Changes

AWS SDK v2 Migrations

• Migrated SQS & SNS services (#769)
• Migrated Transit Gateway (#773)
• Migrated VPC Lattice (#771)
• Migrated Transit Gateway Attachment (#774)
• Migrated multiple core services (#777):
  • EBS, ECR, ECS Cluster, ECS Service, EFS, EIP, EKS
  • Elastic Beanstalk, ElastiCache, ELB, ELBv2, GuardDuty
• Migrated SES and Security Hub (#776)
• Migrated IAM services (#778)
• Migrated EC2 services (#781, #790, #808)
• Migrated S3 (#779)
• Migrated Network Firewall (#793)
• Migrated Route53 services (#796)
• Migrated Launch Configuration, Launch Template, MSK Cluster, OIDC Provider (#792)
• Migrated Secrets Manager, RDS, and SageMaker (#785)
• Migrated VPC and dependent services (#797)
• Migrated RDS related services (#798)
• Migrated Route53 and Redshift (#799)
• Migrated TGW Route Table (#801)

New Features

• Added support for China region (#766)
• Added EventBridge support (#767, #768)
• Added ElastiCache serverless & Grafana resources (#784)
• Added TGW Peering Attachment resource (#802)
• Added VPC 'cloud-nuke-excluded' tag support (#811)

Bug Fixes

• Fixed IAM user exclude functionality (#764)
• Fixed region inclusion in cloud nuke invocation (#780)
• Fixed ElastiCache crash for single node clusters (#783)
• Added nil pointer checks for VPC nuke (#807, #809)

Other Improvements

• Added pre-commit configuration file (#775)
• Added configuration examples (#788)
• Removed unnecessary EC2 code (#803)

New Contributors

• @yhakbar
• @sc250024

For full details of changes, see: v0.37.2...v0.38.0

v0.37.2

What's Changed

• fix: backup vault nuke failure with recovery point dependancy by @james03160927 in #736
• Remove AMI created from the snapshot when nuking by @james03160927 in #738
• Nuke only interface type ec2 network by @james03160927 in #735
• [fix] skip API GW stage certyficates when ClientCertificateId is ni… by @wakeful in #740
• Implement a new cloud-nuke-after feature protect the resources by @james03160927 in #741
• Legacy checks removal by @denis256 in #742
• enabled exclude-first-seen flag for aws command by @james03160927 in #748
• Refactor Transit Gateway by @james03160927 in #750
• Improve Failure Message for Insufficient Permission by @james03160927 in #756
• Fixing transit gateway nuke failure by @james03160927 in #755
• Fix/transit gateway attachment dependency by @james03160927 in #757
• Support resource EC2 Placement Groups by @flichtenheld in #758
• fix: no name tag resources are listing for nuke with include filter by @james03160927 in #760
• Fix merge conflict issue by @james03160927 in #761
• fix: nuke failure when route53 record NS exists with subdomain by @james03160927 in #759
• Fix config rule nuking by @autero1 in #762
• add aws v2 sdk to support newer resources (#745) by @wakeful in #746

Full Changelog: v0.37.1...v0.37.2

v0.37.1

What's Changed

• Update resource class to macos.m1.medium.gen1 by @denis256 in #737

Full Changelog: v0.37.0...v0.37.1

v0.37.0

What's Changed

• condition to allow multi region list only to us-west-2 by @james03160927 in #671
• concurrent map write issue fix by @james03160927 in #676
• Updated patterns to remove S3 buckets created in Terragrunt tests by @denis256 in #677
• Handle parsing of timestamps in time.DateTime format. Fix #670 by @sbocinec in #678
• Refactor nuking default resources code. by @james03160927 in #673
• Add more Secrets Manager patterns by @autero1 in #679
• Fix unittest by @james03160927 in #682
• Refactor telemetry reporting logic. by @james03160927 in #683
• Refactor Nuke Implementation for EC2 Resources. by @james03160927 in #686
• Implementing nuking for Network Firewall resources by @james03160927 in #688
• Nuke Network Resource Policy by @james03160927 in #690
• Implementation for removing VPC peer connection by @james03160927 in #687
• Handle Global Cluster Nuke Failure by @james03160927 in #691
• Option to not add 'cloud-nuke-first-seen' tag + Refactoring by @james03160927 in #694
• Increase parallelism for circleCi test by @james03160927 in #700
• Feature/nukable permission check for resources by @james03160927 in #696
• checking allowed regions for email-receiving by @james03160927 in #698
• implemented vpc lattice api by @james03160927 in #706
• Updated build flags to produce only requested binaries by @denis256 in #710
• issue panic without any command fix by @james03160927 in #711
• fixed nil pointer issue on EIP resource by @james03160927 in #708
• implement timeout option for resources and updated test cases by @james03160927 in #712
• Fix secretsmanager config file key name in README by @sbocinec in #714
• Change Route53 resources to global resource by @james03160927 in #715
• fix issue nuking route53 by @james03160927 in #709
• Exclude r53 zones by @autero1 in #718
• Implement nuking for Kinesis firehose by @james03160927 in #719
• fix rds parameter default group nuke issue by @james03160927 in #721
• Implement nuking for RDS Proxy. by @james03160927 in #720
• add support for nuking app runner service(s). by @wakeful in #722
• Fixing dhcp nuke failing by @james03160927 in #725
• Increase the resource class from medium to large by @james03160927 in #724
• fix: active ruleset wont able to nuke by @james03160927 in #723
• Detaching the security group from another security group by @james03160927 in #728
• add support for nuking dataSync Task(s) & dataSync Location(s). by @wakeful in #729

New Contributors

• @wakeful made their first contribution in #722

Full Changelog: v0.35.0...v0.37.0

v0.36.0

What's Changed

• condition to allow multi region list only to us-west-2 by @hongil0316 in #671
• concurrent map write issue fix by @hongil0316 in #676
• Updated patterns to remove S3 buckets created in Terragrunt tests by @denis256 in #677
• Handle parsing of timestamps in time.DateTime format. Fix #670 by @sbocinec in #678
• Refactor nuking default resources code. by @hongil0316 in #673
• Add more Secrets Manager patterns by @autero1 in #679
• Fix unittest by @hongil0316 in #682
• Refactor telemetry reporting logic. by @hongil0316 in #683
• Refactor Nuke Implementation for EC2 Resources. by @hongil0316 in #686
• Implementing nuking for Network Firewall resources by @hongil0316 in #688
• Nuke Network Resource Policy by @hongil0316 in #690
• Implementation for removing VPC peer connection by @hongil0316 in #687
• Handle Global Cluster Nuke Failure by @hongil0316 in #691
• Option to not add 'cloud-nuke-first-seen' tag + Refactoring by @hongil0316 in #694
• Increase parallelism for circleCi test by @hongil0316 in #700
• Feature/nukable permission check for resources by @hongil0316 in #696
• checking allowed regions for email-receiving by @hongil0316 in #698

Full Changelog: v0.35.0...v0.36.0

v0.35.0

What's Changed

• Implementing Timeout Feature on S3 by @hongil0316 in #653
• Fixed apple signing by @denis256 in #654
• Move telemetry down in README by @brikis98 in #658
• implementation ec2 internet gateway nuke by @hongil0316 in #656
• Implemented ec2-subnet nuke by @hongil0316 in #655
• Add IGW exclusion to not delete in phxdevops by @arsci in #662
• Implement egress only internet gateway nuke by @hongil0316 in #657
• ec2 endpoint implementation in cloud-nuke by @hongil0316 in #660
• security group implementation by @hongil0316 in #663
• implement network interface nuke by @hongil0316 in #664
• Exclude ec2-subnet resource from phxdevops nuke config by @arsci in #672
• Added winget install instructions to readme by @licon4812 in #668
• implemented network acl nuke by @hongil0316 in #665
• Fix S3 versioned objects deletion by @autero1 in #674

Migration Guide

New resources have been added in this release, please update your config files to support exclusion rules for:

• Internet Gateway
• Egress only Internet Gateway
• EC2 Endpoints
• Security Groups
• Network Interfaces
• Network ACL

v0.34.0

What's Changed

• Refactor UI related codebase by @hongil0316 in #630
• Refactor the code structure of aws directory by @hongil0316 in #629
• Implement a new resource types for IPAM resources by @hongil0316 in #632
• Implement wait logic in transite gateway attachment by @hongil0316 in #633
• Add nukable check + nukable check implementation for transit gateway by @hongil0316 in #635
• Bump Cloud-nuke Circle Golang Version to 1.21 by @hongil0316 in #636
• Update instruction for using cloud-nuke as a library by @hongil0316 in #637
• Check for ownership when nuking transit gateway and show apprporiate error by @hongil0316 in #639
• Implement SES resources types by @hongil0316 in #638
• Release elastic IP address by @hongil0316 in #640
• Stop tasks before nuking ECS cluster by @hongil0316 in #643
• elastic bean stalk application implementation by @hongil0316 in #644
• api-gateway remove the attached client certs by @hongil0316 in #648
• support route53 services by @hongil0316 in #646
• Deleting DB Parameter Groups by @hongil0316 in #647
• Exclude gruntwork-test db parameter groups from nuking by @hongil0316 in #649
• s3 access point support by @hongil0316 in #650
• MSK nuking fix by @autero1 in #652

Migration Guide

New resources have been added in this release, please update your config files to support exclusion rules for:

• MSK Clusters (nuking fixed)
• S3 access points
• DB Parameter Groups
• Route53 services
• API GW Client Certs
• SES resources
• IPAM resources
• Elastic Beanstalk Applications

v0.33.0

What's Changed

• Support backup-vault nuke by @hongil0316 in #488
• don't nuke management vpcs by @ellisonc in #490
• don't nuke deploy runners by @ellisonc in #491
• Bump golang.org/x/net from 0.1.0 to 0.7.0 by @dependabot in #423
• keep network resources around by @ellisonc in #496
• add acm to resourcesInRegion by @robpickerill in #492
• Fix TestListAPIGatewaysV2 test failures by @hongil0316 in #495
• Mocking AWS Calls for Unit Testing for API Gateway by @hongil0316 in #497
• Refactor Config to Capture all FilterRules and Apply to ApiGateway as prototype by @hongil0316 in #499
• [skip ci] Removing former Grunts by @eak12913 in #500
• Refactor EksCluster ResourceType by @hongil0316 in #501
• Refactor ACM resource type by @hongil0316 in #503
• Refactor RDS Cluster ResourceType by @hongil0316 in #502
• Refactor ACMPCA Resource Type by @hongil0316 in #504
• Initialize aws Client in ResourceType by @hongil0316 in #509
• Refactor AMI Resource Type by @hongil0316 in #505
• Refactor ApiGatewayV2 resource type by @hongil0316 in #506
• Refactor auto scaling group resource type by @hongil0316 in #507
• Refactor cloudTrail resourceType by @hongil0316 in #510
• Refactor backupVault resourceType by @hongil0316 in #511
• refactor cloudwatch resource types by @hongil0316 in #512
• Refactor SNSTopic Resource Type by @hongil0316 in #513
• Refactor DynamoDB by @hongil0316 in #515
• Refactor Transit Gateway Resource Types by @hongil0316 in #518
• Refactor SQS Resource Type by @hongil0316 in #517
• Refactor CodeDeploy, ConfigRecorder, ConfigServiceRule resource types by @hongil0316 in #516
• Refactor EC2 Snapshot & EBS Resource Type by @hongil0316 in #514
• refactor sagemaker resource type by @hongil0316 in #519
• refactor redshift resource type by @hongil0316 in #520
• Refactor DBINstnaces Resource Type by @hongil0316 in #521
• refactor securityHub resource type by @hongil0316 in #522
• Refactor oidc resource type by @hongil0316 in #525
• Refactor OpenSearchDomains resource type by @hongil0316 in #524
• refactor secret manager resource type by @hongil0316 in #523
• Refactor db subnet groups by @hongil0316 in #526
• Fix excludeTimeAfter configuration reflecting on all resource types by @hongil0316 in #527
• refactor lambda functions by @hongil0316 in #528
• Refactor launch configuration by @hongil0316 in #529
• refactor launch template by @hongil0316 in #530
• Refactor macie by @hongil0316 in #531
• Refactor nat gateway by @hongil0316 in #536
• refactor IAM Groups by @hongil0316 in #534
• refactor IAM roles and IAM service linked roles by @hongil0316 in #532
• refactor IAM policies by @hongil0316 in #533
• refactor kinesis streams by @hongil0316 in #535
• refactor iam users by @hongil0316 in #537
• refactor elbv2 by @hongil0316 in #540
• refactor guard duty by @hongil0316 in #538
• refactor elb by @hongil0316 in #539
• fix oidc role exclusion by @ellisonc in #542
• Fix unit test errors in RDS subnet group test by @hongil0316 in #543
• Delete unused utils file by @hongil0316 in #544
• refactor EFS by @hongil0316 in #547
• refactor EC2 VPC by @hongil0316 in #548
• refactor ECR by @hongil0316 in #546
• Refactor Eip by @hongil0316 in #545
• refactor elastic cache by @hongil0316 in #541
• Refactor EC2 Dedicated host by @hongil0316 in #549
• Refactor EC2 instance, clusters, and services by @hongil0316 in #550
• refactor EC2 keypair by @hongil0316 in #551
• Refactor s3 resource type by @hongil0316 in #554
• refactor KMS resource type by @hongil0316 in #556
• Delete unused lambda utils file by @hongil0316 in #555
• refactor access analyzer by @hongil0316 in #557
• Update CircleCI config to sign MacOS binaries by @marinalimeira in #559
• Fix EC2 keypair nil pointer issue by @hongil0316 in #558
• Implement GetAndSetIdentifiers on all ResourceTypes + Remove session variable from nuke operation by @hongil0316 in #561
• Implement Init Methods on All Resource Types + Refactor GetAll and ListAll methods by @hongil0316 in #562
• Refactor code for better readability. by @hongil0316 in #564
• Fix nil pointer when first seen tag is nil by @hongil0316 in #565
• dont delete github oidc role by @MoonMoon1919 in #566
• Skip AWS Managed AMIs by @hongil0316 in #569
• Fix nil pointer issue in ECS cluster resource type by @hongil0316 in #567
• Update README for configuration usage by @hongil0316 in #571
• Implement functionality to include/exclude resources by tags by @hongil0316 in #570
• Fix log-level not working properly by @hongil0316 in #568
• Add Amazon Managed Streaming for Apache Kafka by @hongil0316 in #574
• Support tags exclusion filtering on resources by @hongil0316 in #573
• Fix yaml marshal logic for KMS key config by @hongil0316 in #576
• UI improvement + refactoring work for aws-inspect and aws commands by @hongil0316 in #577
• Inclusion Rule for ACM resource types in PhxDevops Account by @hongil0316 in #580
• Filter out default subnet group due to error by @hongil0316 in #582
• Implement newer_than filter for aws nuke command by @hongil0316 in #581
• Fix multiple cloudwatch composite alarm nuking by @hongil0316 in #585
• Refactor Rendering logic in ui file + consistent UI for confirmation … by @hongil0316 in #583
• Fix s3 config file key name in README by @sbocinec in #587
• Refactor code to pass around context for potential features (e.g., ti… by @hongil0316 in #588
• Delete unused files by @hongil0316 in #589
• Remove RemediationConfiguration before deleting config rules by @hongil0316 in #590
• Fix dependency violation errors when deleting EC2 VPC resource types by @hongil0316 in #591
• Exclude gruntwork.in ACM from nuking by @hongil0316 in #5...

v0.32.1-test-signing-binaries

Testing changes from #559

v0.32.0

What's Changed

• Implement nukeAllRdsDbSubnetGroups to delete all RDS subnet groups by @hongil0316 in #472
• Fix errors in config_test by @hongil0316 in #481
• add sns filter by name and time by @robpickerill in #482
• Add ACM Support by @robpickerill in #466
• Add codedeploy by @robpickerill in #469
• fix(aws): always session from externalcreds by @dixneuf19 in #464

New Contributors

• @robpickerill made their first contribution in #482
• @dixneuf19 made their first contribution in #464

Full Changelog: v0.31.2...v0.32.0

Migration Guide

• New resources have been added in this release, please update your config files to support exclusion rules for Code Deploy, ACM, SNS, and RDS Subnet Groups