v0.11.0

0.11.0 (Sept 6, 2024)

LAYERS:

arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension:20
arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension-arm64:8

FEATURES:

• Add optional header X-Vault-Token-Options to revoke token when set to revoke (#149)

IMPROVEMENTS:

• update go-retryablehttp (#144)
• Exclude distributed tracing headers from cache key (#145)

BUGS:

• Strip Monotonic Clock to prevent Lambda suspension from miscalculating TTL. Fixes #113. (#150)

v0.10.3

0.10.3 (May 1, 2024)

LAYERS:

arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension:19
arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension-arm64:7

Dependency Updates:

• Bump dependencies (#135):
  • golang.org/x/crypto to v0.22.0
  • golang.org/x/net to v0.24.0
  • golang.org/x/sys to v0.19.0
• Bump dependencies (#134):
  • go to 1.22.2
  • vault api to v1.12.2

v0.10.2

0.10.2 (February 6, 2024)

LAYERS:

arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension:18
arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension-arm64:6

IMPROVEMENTS:

• Bumped versions for the following dependencies with security vulnerabilities:
  • golang.org/x/crypto v0.18.0
  • golang.org/x/net v0.20.0
  • golang.org/x/sys v0.16.0
  • golang.org/x/text v0.14.0
• Bumped dependencies:
  • github.com/aws/aws-sdk-go v1.50.12
  • github.com/stretchr/testify v1.8.4
  • github.com/hashicorp/vault/api v1.11.0
  • github.com/hashicorp/vault/sdk v0.10.2

v0.10.1

0.10.1 (July 10, 2023)

LAYERS:

arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension:17
arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension-arm64:5

IMPROVEMENTS:

• quick-start: Update Postgres version to 14.7
• Add debug logs during initialization step

v0.10.0

LAYERS:

arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension:16
arn:aws:lambda:<AWS_REGION>:634166935893:layer:vault-lambda-extension-arm64:4

IMPROVEMENTS:

• Requests from the extension to Vault now set the User-Agent field accordingly.
• Introduced a VAULT_RUN_MODE environment variable to allow user to run in proxy mode, file mode, or both.
  • The default value is 'default', which runs in both proxy and file mode.
• Vault Lambda Extension version dynamically injected at build time.

v0.9.0

0.9.0 (February 23, 2023)

IMPROVEMENTS:

• Building with Go 1.19.6
• Bumped versions for the following dependencies with security vulnerabilities:
  • github.com/hashicorp/vault/api v1.9.0
  • github.com/hashicorp/vault/sdk v0.8.1
  • golang.org/x/net v0.7.0
  • golang.org/x/sys v0.5.0
  • golang.org/x/text v0.7.0

v0.8.0

0.8.0 (August 22, 2022)

FEATURES:

• VAULT_ASSUMED_ROLE_ARN can be used to specify a role for your lambda function to assume. [GH-69]

v0.7.0

0.7.0 (April 26, 2022)

CHANGES:

• Static function code can now reliably read secrets written to disk, because extension registration now occurs after writing files. [GH-61]
• arm64 architecture now supported [GH-67]

v0.6.0

changelog

v0.5.0

changelog