Changelog

Bug fixes

• Server
  • Added support for OpenTofu 1.x (open-source Terraform) integration via Guardrail.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Bug fixes

• Server
  • Added support for OpenTofu v1.8.3 (open source Terraform) container to run Stack [Native] controls.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• GCP > Project > Stack [Native]

Policy Types

• GCP > Project > Stack [Native]
• GCP > Project > Stack [Native] > Modifier
• GCP > Project > Stack [Native] > Secret Variables
• GCP > Project > Stack [Native] > Source
• GCP > Project > Stack [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• Azure > Subscription > Stack [Native]

Policy Types

• Azure > Subscription > Stack [Native]
• Azure > Subscription > Stack [Native] > Modifier
• Azure > Subscription > Stack [Native] > Secret Variables
• Azure > Subscription > Stack [Native] > Source
• Azure > Subscription > Stack [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• Azure > Network > Virtual Network > Stack [Native]

Policy Types

• Azure > Network > Virtual Network > Stack [Native]
• Azure > Network > Virtual Network > Stack [Native] > Modifier
• Azure > Network > Virtual Network > Stack [Native] > Secret Variables
• Azure > Network > Virtual Network > Stack [Native] > Source
• Azure > Network > Virtual Network > Stack [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• AWS > VPC > Stack [Native]
• AWS > VPC > VPC > Stack [Native]

Policy Types

• AWS > VPC > Stack [Native]
• AWS > VPC > Stack [Native] > Modifier
• AWS > VPC > Stack [Native] > Secret Variables
• AWS > VPC > Stack [Native] > Source
• AWS > VPC > Stack [Native] > Variables
• AWS > VPC > VPC > Stack [Native]
• AWS > VPC > VPC > Stack [Native] > Modifier
• AWS > VPC > VPC > Stack [Native] > Secret Variables
• AWS > VPC > VPC > Stack [Native] > Source
• AWS > VPC > VPC > Stack [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• AWS > Account > Stack [Native]
• AWS > Region > Stack [Native]

Policy Types

• AWS > Account > Stack [Native]
• AWS > Account > Stack [Native] > Modifier
• AWS > Account > Stack [Native] > Secret Variables
• AWS > Account > Stack [Native] > Source
• AWS > Account > Stack [Native] > Variables
• AWS > Region > Stack [Native]
• AWS > Region > Stack [Native] > Modifier
• AWS > Region > Stack [Native] > Secret Variables
• AWS > Region > Stack [Native] > Source
• AWS > Region > Stack [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• AWS > S3 > Bucket > Stack [Native]

Policy Types

• AWS > S3 > Bucket [Native]
• AWS > S3 > Bucket [Native] > Modifier
• AWS > S3 > Bucket [Native] > Secret Variables
• AWS > S3 > Bucket [Native] > Source
• AWS > S3 > Bucket [Native] > Variables

What's new?

• Users can now create and manage cloud resources using OpenTofu 1.x (open source Terraform) via Guardrails, fully leveraging all features available in this version. To get started, set the Stack [Native] > * policies.

Control Types

• AWS > IAM > Stack [Native]

Policy Types

• AWS > IAM > Stack [Native]
• AWS > IAM > Stack [Native] > Modifier
• AWS > IAM > Stack [Native] > Secret Variables
• AWS > IAM > Stack [Native] > Source
• AWS > IAM > Stack [Native] > Variables

What's new?

• New tables added
  • aws_config_delivery_channel (#2343)
  • aws_costoptimizationhub_recommendation (#2355)
  • aws_scheduler_schedule (#2359)
  • aws_keyspaces_keyspace (#2271)
  • aws_keyspaces_table (#2271)

Enhancements

• Added instance_type_pattern column as an optional qual to the aws_ec2_instance_type table. (#2301)
• Added image_digest column as an optional qual to the aws_ecr_image_scan_finding table. (#2357)
• Added created_at and updated_at columns as optional quals to the aws_securityhub_finding table. (#2298)
• Added account_password_present column to aws_iam_account_summary table. (#2346)
• Add tags column to aws_backup_plan table. (#2336) (Thanks @pdecat for the contribution!)

Bug fixes

• Fixed the aws_rds_db_instance table to correctly return data instead of an error by ignoring the CertificateNotFound error code. (#2363)

What's new?

• Improved CLI load time for environments with many connection resources.
• Updated Go to v1.23.

Bug fixes

• The real-time Event Handlers would fail to update details for Flow Logs attached to Virtual Networks. This is now fixed.

Bug fixes

• Guardrails would fail to update CMDB for virtual networks when flow logs were created or removed from such resources. This is now fixed.

What's new?

• Added pipelines to run CIS v3.0.0 benchmark. These pipelines can be used to identify Azure resources that are non-compliant with CIS recommendations and also remediate them according to CIS remediation suggestions. For usage information and a full list of pipelines, please see Azure CIS Mod.

What's new?

• Added 109 new 'detect and correct' pipelines to identify Azure resources that are non-compliant with common security and compliance checks. These pipelines can also remediate non-compliant automatically or with approval steps. For usage information and a full list of pipelines, please see Azure Compliance Mod.

Bug fixes

• The AWS > VPC > VPC > Flow Logging control previously attempted to destroy and recreate flow logs with CloudWatch log groups as the destination on successive runs due to an incorrect ARN reference to the log destination. This issue is now fixed, and the control will no longer unnecessarily destroy and recreate flow logs in such cases.

What's new?

• New pipelines added: (#22)
  • encrypt_storage_account
  • set_mysql_flexible_server_parameter
  • set_postgres_flexible_server_configuration
  • set_postgres_flexible_server_require_secure_transport
  • set_sql_server_tde_key
  • update_compute_disk_encryption_with_cmk
  • update_compute_disk
  • update_key_vault_rbac_authorization
  • update_sql_server_public_network_access
  • update_storage_account_blob_public_access

What's new?

• New pipelines added: (#81)
  • generate_iam_credential_report

Bug fixes

• Server
  • Minor internal improvements.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

Bug fixes

• In a previous version, we resolved an issue in the Azure > Compute > Virtual Machine Scale Set > Tags control to ensure tags were updated correctly for Scale Sets launched via the Azure Marketplace. However, the control occasionally failed to update tags for Scale Sets on certain purchase plans. This issue has now been addressed, and the control will update tags correctly and reliably for all types of Scale Sets.

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

Bug fixes

• We have updated internal dependencies for the Terraform Version policy across various stack controls to prevent unnecessary control reruns. You wouldn't notice any difference and things will run more smoothly and reliably than before.

What's new?

• New tables added
  • alicloud_alidns_domain (#473)

Dependencies

• Recompiled plugin with Alicloud SDK v1.63.17. (#456)

Bug fixes

• UI
  • Updated the filter logic on the Reports page for more accurate results.
  • Resolved an issue where resource links in the Permissions section redirected to the profile page instead of the resource page when grouped by resources.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

What's new?

• Users can now define a list of events to filter out while polling for events using the Azure > Turbot > Event Poller. To get started, set the Azure > Turbot > Event Poller > Excluded Events policy.

Policy Types

• Azure > Turbot > Event Poller > Excluded Events

What's new?

• Users can now check and enforce SQS SSE for queue encryption. To get started, configure the AWS > SQS > Queue > Encryption at Rest policy to one of the following values: Check: SQS SSE, Check: SQS SSE or higher, Enforce: SQS SSE or Enforce: SQS SSE or higher.

What's new?

• Check if Kubernetes clusters are approved for use via Guardrails. To get started, set the Kubernetes > Cluster > Approved > * policies.

Control Types

• Kubernetes > Cluster > Approved

Policy Types

• Kubernetes > Cluster > Approved
• Kubernetes > Cluster > Approved > Custom

Bug fixes

• The Azure > App Service > Function App > HTTPS Only control would sometime fail to enable the setting in Azure. This is now fixed.

Bug fixes

• The GCP > Compute Engine > Instance > Serial Port Access and GCP > Compute Engine > Instance > Block Project Wide SSH Keys controls would sometimes go into an error state due to incorrect references to CMDB attributes. This is fixed and the controls will now work as expected.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

Bug fixes

• Guardrails would fail to delete unapproved ingress rules when the Azure > Network > Network Security Group > Ingress Rules > Approved policy was set to Enforce: Delete unapproved. This is now fixed.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

Bug fixes

• Guardrails would sometimes update the createTimestamp for Web Apps and Function Apps incorrectly when processing update events for these resources. We have updated the internal logic to ensure the createTimestamp is now updated correctly and more reliably than before.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

Bug fixes

• Disks created alongside VMs sometimes lacked createdBy details in their metadata. The internal logic has been updated to ensure createdBy details are added more reliably for these disks.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

Bug fixes

• The GCP > IAM > Service Account Key > Active control has been updated to use validAfterTime instead of metadata.createTimestamp to accurately evaluate the age of the resource.

What's new?

• The list of supported regions for various resource types has been refreshed. This update enables Guardrails to discover and manage resources across all supported regions for these resource types in Azure.

What's new?

• Users can now check and delete DB clusters that are not approved for use if they lack encryption at rest. To get started, set the AWS > RDS > DB Cluster > Approved > Encryption at Rest > * policies.

Policy Types

• AWS > RDS > DB Cluster > Approved > Encryption at Rest
• AWS > RDS > DB Cluster > Approved > Encryption at Rest > Customer Managed Key

What's new?

• Users can now check if their account spend is On Target per Budget. To get started, set the AWS > Account > Budget > Enabled policy to Check: Budget > State is On Target.

Bug fixes

• UI
  • Resolved an issue where reports pages could crash if certain information was null

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Bug fixes

• Server
  • Resolved an issue where actor information was not being passed correctly during the process execution, ensuring accurate tracking and processing of actor-related data.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Bug fixes

• The AWS > VPC > Route > CMDB control would go into an error state due to an incorrect use of a function from an internal node package. This is now fixed.

Bug fixes

• Guardrails would sometimes update the createdBy details for storage accounts due to mishandled real-time update events. This issue has been fixed, and createdBy details will now be stored more reliably and consistently than before.
• In a previous version, we inadvertently introduced a bug that prevented the createTimestamp details from being stored in the metadata of new storage accounts upserted in Guardrails CMDB. This issue has now been resolved, and createTimestamp details are now stored correctly and reliably.

What's new?

• New tables added
  • aws_cost_by_region_monthly (#2310) (Thanks @razbne for the contribution!)

Enhancements

• Added error, is_public, resource_owner_account and resource_type optional quals for aws_accessanalyzer_finding table. (#2331) (Thanks @dbermuehler for the contribution!)
• Updated the aws_s3_object table to use the HeadObject API to retrieve object metadata. (#2312) (Thanks @JonMerlevede for the contribution!)

Bug fixes

• Fixed the aws_s3_bucket table to correctly return data by ignoring the not found error in getBucketTagging and getBucketWebsite hydrate functions. (#2335)

Bug fixes

• Fixed minor spelling issues in query help output. (#542)
• Updated error message to inform users to run make dashboard_assets when dashboard assets are not present. (#524)

Bug fixes

• Fixed the issue where the steampipe interactive meta-command .cache clear was not clearing the cache. (#4443)

What's new?

• Added NYDFS 23 benchmark (powerpipe benchmark run aws_compliance.benchmark.nydfs_23). (#844)

What's new?

• Resource's metadata will now also include createdBy details in Guardrails CMDB.

Bug fixes

• The AWS > VPC > VPC > Flow Logging control would sometimes fail to update flow logs if the Max Aggregation Interval in the stack's source policy was updated. This is fixed and the stack control will now update such resources correctly, as expected.

What's new?

• Users can now configure the maximum aggregation interval in the AWS > VPC > VPC > Flow Logging control. To get started, set the AWS > VPC > VPC > Flow Logging > Cloud Watch > Maximum Aggregation Interval policy and/or AWS > VPC > VPC > Flow Logging > S3 > Maximum Aggregation Interval policy.

Policy Types

• AWS > VPC > VPC > Flow Logging > Cloud Watch > Maximum Aggregation Interval
• AWS > VPC > VPC > Flow Logging > S3 > Maximum Aggregation Interval

Enhancements

• Added multi_region and multi_region_configuration columns to aws_kms_key table. (#2338) (Thanks @pdecat for the contribution!)

Bug fixes

• Fixed the comparison operator (<= or >=) for number and date filter in aws_inspector2_finding table. (#2332) (Thanks @dbermuehler for the contribution!)

Bug fixes

• Fixed the trigger_parameters column of the circleci_pipeline table to correctly return data instead of JSON unmarshalling error. (#53)

What's new?

• New tables added
  • gcp_compute_instance_group_manager (#669) (Thanks @pdecat for the contribution!)

Enhancements

• Added labels and tags columns to the gcp_compute_global_forwarding_rule table. (#678) (Thanks @pdecat for the contribution!)
• Added database_installed_version and maintenance_version columns to the gcp_sql_database_instance table. (#677) (Thanks @pdecat for the contribution!)

Bug fixes

• Fixed the gcp_compute_instance_group table to correctly return data for regional instance groups' instances column. (#670) (Thanks @pdecat for the contribution!)
• Fixed the kubernetes_node_pool table to correctly return data instead of an error for node pools with auto-pilot disabled. (#668) (Thanks @multani for the contribution!)

What's new?

• New tables added
  • azure_compute_virtual_machine_size (#841)

Enhancements

• Added firewall_rules column to the azure_postgresql_flexible_server table. (#852)

Resource Types

• Azure > SQL > Managed Instance

Control Types

• Azure > SQL > Managed Instance > Active
• Azure > SQL > Managed Instance > Approved
• Azure > SQL > Managed Instance > CMDB
• Azure > SQL > Managed Instance > Discovery
• Azure > SQL > Managed Instance > Tags

Policy Types

• Azure > SQL > Managed Instance > Active
• Azure > SQL > Managed Instance > Active > Age
• Azure > SQL > Managed Instance > Active > Last Modified
• Azure > SQL > Managed Instance > Approved
• Azure > SQL > Managed Instance > Approved > Custom
• Azure > SQL > Managed Instance > Approved > Regions
• Azure > SQL > Managed Instance > Approved > Usage
• Azure > SQL > Managed Instance > CMDB
• Azure > SQL > Managed Instance > Regions
• Azure > SQL > Managed Instance > Tags
• Azure > SQL > Managed Instance > Tags > Template

Action Types

• Azure > SQL > Managed Instance > Delete
• Azure > SQL > Managed Instance > Router
• Azure > SQL > Managed Instance > Set Tags

Bug fixes

• Controls previously targeting the AWS > IAM > Credential Report resource type have now been updated to target either the AWS > IAM > Root or AWS > IAM > User resource types, depending on the specific control requirements. This adjustment more accurately aligns each control with the relevant resources, enabling more precise and targeted checks.

What's new?

• Added CIS v3.0.0 benchmark (powerpipe benchmark run azure_compliance.benchmark.cis_v300). (#282)

Bug fixes

• Fixed the elb_application_lb_waf_enabled query to correctly flag ELB application load balancers as alarm when the associated WAF is disabled. (#840)
• Fixed the cloudfront_distribution_custom_origins_encryption_in_transit_enabled query to remove duplicate AWS CloudFront distributions from the result. (#829) (Thanks to @sbldevnet for the contribution!)
• Fixed the where clause of the cloudfront_distribution_use_secure_cipher query to correctly check if the CloudFront distributions have insecure cipher protocols. (#827) (Thanks to @sbldevnet for the contribution!)

Bug fixes

• The Azure > Security Center > Security Center > Auto Provisioning control is now deprecated and will now move to an Invalid state if enforcements are applied. This follows the deprecation plan announcement from Azure. The control will be removed in a future mod version.

Control Types

Renamed

• Azure > Security Center > Security Center > Auto Provisioning to Azure > Security Center > Security Center > Auto Provisioning [Deprecated]

Policy Types

Renamed

• Azure > Security Center > Security Center > Auto Provisioning to Azure > Security Center > Security Center > Auto Provisioning [Deprecated]

Action Types

Removed

• Azure > Security Center > Security Center > Update Auto Provisioning

Bug fixes

• trigger run command now exits when the execution is paused. (#962).
• Event jsonl output file deletion is now handled correctly. (#960).

All Pipes workspaces are now running Steampipe v1.0.0.

For more information on this Steampipe release, see the launch post or check out the release notes.

All Pipes workspaces are now running Powerpipe v1.0.0.

For more information on this Powerpipe release, see the launch post or check out the release notes.

With a web UI, point-and-click mod installation, and easy integration with Slack and GitHub, Pipes takes workflows-as-code to the next level.

For more information, see the launch post or check out the docs.

All the components of Turbot's open source suite are now fully integrated into Pipes.

For more information, see the launch post or check out the docs.

Bug Fixes

• Cleaned up documentation and standardized the file naming conventions of *.ppvars.example files across the following 24 mods to ensure alignment with the Powerpipe v1.0.0 release:
  • steampipe-mod-alicloud-compliance
  • steampipe-mod-aws-perimeter
  • steampipe-mod-aws-tags
  • steampipe-mod-aws-thrifty
  • steampipe-mod-aws-top-10
  • steampipe-mod-azure-compliance
  • steampipe-mod-azure-tags
  • steampipe-mod-azure-thrifty
  • steampipe-mod-digitalocean-thrifty
  • steampipe-mod-docker-compliance
  • steampipe-mod-gcp-compliance
  • steampipe-mod-gcp-labels
  • steampipe-mod-gcp-thrifty
  • steampipe-mod-github-compliance
  • steampipe-mod-kubernetes-compliance
  • steampipe-mod-microsoft365-compliance
  • steampipe-mod-net-insights
  • steampipe-mod-oci-compliance
  • steampipe-mod-oci-thrifty
  • steampipe-mod-snowflake-compliance
  • steampipe-mod-terraform-aws-compliance
  • steampipe-mod-terraform-azure-compliance
  • steampipe-mod-terraform-gcp-compliance
  • steampipe-mod-terraform-oci-compliance

Bug fixes

• Added missing checks to the 1.12, 1.16, and 1.22 pipelines in CIS v3.0.0 and v4.0.0. (#3)

Bug fixes

• Fix crashing cases when using --output json. (#594).
• Coerce variables set in interactive console to their declared type. (#595).
• Nested pipelines now correctly pauses parent pipelines. (#955).
• Pipeline with max_concurrency setting is now automatically paused and will successfully resume. (#957).
• form_url is now sanitized.

What's new?

• Added CIS v4.0.0 benchmark (steampipe check benchmark.cis_v400). (#836)
• Added ebs_encryption_by_default_enabled and vpc_security_group_restrict_ingress_cifs_port_all controls to the All Controls benchmark. (#835)

Enhancements

• Added the ebs_encryption_by_default_enabled control to the rbi_cyber_security_annex_i_1_3 benchmark. (#835)
• Set python3.8 as deprecated Lambda runtime in lambda_function_use_latest_runtime control. (#833) (Thanks to @sbldevnet for the contribution!)
• Updated iam_access_analyzer_enabled_without_findings and ssm_document_prohibit_public_access controls to use latest columns and tables from the AWS plugin. (#835)

Bug fixes

• VPC security group rule controls that check for restricted port access now correctly detect rules with ports in a port range instead of only exact port matches. (#835)
• Fixed the 2.2.1 control in CIS v1.5.0, v2.0.0, v3.0.0 benchmarks to check if EBS encryption by default is enabled instead of individual volume encryption settings. (#835)
• Fixed the fedramp_moderate_rev_4_sc_28 benchmark to check if EBS encryption by default is enabled instead of individual volume encryption settings. (#835)

Deprecated

• Deprecated the ec2_ebs_default_encryption_enabled control and query. Please use the ebs_encryption_by_default control and query instead.

What's new?

Control Types

• Kubernetes > CronJob > ServiceNow > Import Set
• Kubernetes > DaemonSet > ServiceNow > Import Set
• Kubernetes > Ingress > ServiceNow > Import Set
• Kubernetes > Job > ServiceNow > Import Set
• Kubernetes > Persistent Volume > ServiceNow > Import Set
• Kubernetes > ReplicationController > ServiceNow > Import Set
• Kubernetes > StatefulSet > ServiceNow > Import Set

Policy Types

• Kubernetes > CronJob > ServiceNow > Import Set
• Kubernetes > CronJob > ServiceNow > Import Set > Archive Columns
• Kubernetes > CronJob > ServiceNow > Import Set > Insert Mode
• Kubernetes > CronJob > ServiceNow > Import Set > Record
• Kubernetes > CronJob > ServiceNow > Import Set > Table Name
• Kubernetes > DaemonSet > ServiceNow > Import Set
• Kubernetes > DaemonSet > ServiceNow > Import Set > Archive Columns
• Kubernetes > DaemonSet > ServiceNow > Import Set > Insert Mode
• Kubernetes > DaemonSet > ServiceNow > Import Set > Record
• Kubernetes > DaemonSet > ServiceNow > Import Set > Table Name
• Kubernetes > Ingress > ServiceNow > Import Set
• Kubernetes > Ingress > ServiceNow > Import Set > Archive Columns
• Kubernetes > Ingress > ServiceNow > Import Set > Insert Mode
• Kubernetes > Ingress > ServiceNow > Import Set > Record
• Kubernetes > Ingress > ServiceNow > Import Set > Table Name
• Kubernetes > Job > ServiceNow > Import Set
• Kubernetes > Job > ServiceNow > Import Set > Archive Columns
• Kubernetes > Job > ServiceNow > Import Set > Insert Mode
• Kubernetes > Job > ServiceNow > Import Set > Record
• Kubernetes > Job > ServiceNow > Import Set > Table Name
• Kubernetes > Persistent Volume > ServiceNow > Import Set
• Kubernetes > Persistent Volume > ServiceNow > Import Set > Archive Columns
• Kubernetes > Persistent Volume > ServiceNow > Import Set > Insert Mode
• Kubernetes > Persistent Volume > ServiceNow > Import Set > Record
• Kubernetes > Persistent Volume > ServiceNow > Import Set > Table Name
• Kubernetes > ReplicationController > ServiceNow > Import Set
• Kubernetes > ReplicationController > ServiceNow > Import Set > Archive Columns
• Kubernetes > ReplicationController > ServiceNow > Import Set > Insert Mode
• Kubernetes > ReplicationController > ServiceNow > Import Set > Record
• Kubernetes > ReplicationController > ServiceNow > Import Set > Table Name
• Kubernetes > StatefulSet > ServiceNow > Import Set
• Kubernetes > StatefulSet > ServiceNow > Import Set > Archive Columns
• Kubernetes > StatefulSet > ServiceNow > Import Set > Insert Mode
• Kubernetes > StatefulSet > ServiceNow > Import Set > Record
• Kubernetes > StatefulSet > ServiceNow > Import Set > Table Name

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• Removed unused node package dependencies for tenant lambda functions.

Bug fixes

• Added verification_token column toaws_ses_domain_identity table which was accidentally removed in v1.0.0.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

What's new?

Policy Types

• GCP > Compute Engine > Disk > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > HTTP Health Check > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > HTTPS Health Check > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Health Check > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Image > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Instance > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Instance Template > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Node Group > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Node template > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Project > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Region Disk > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Region Health Check > ServiceNow > Import Set > Insert Mode
• GCP > Compute Engine > Snapshot > ServiceNow > Import Set > Insert Mode

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

Bug fixes

• In version 5.5.0, we updated internal dependencies to use the latest Azure SDK versions for discovering and managing Security Center resources in Guardrails. However, this caused controls to enter an error state for US Gov cloud subscriptions because the APIs did not work as expected. We have now updated dependencies that are compatible with both commercial and US Gov cloud subscriptions, ensuring that controls in both environments will work as expected.
• The Azure > Security Center > Security Center > CMDB control would go into an error state if it was not able to fetch policy assignment details correctly. This issue has now been fixed.

Bug fixes

• In version 5.8.0, we updated internal dependencies to use the latest Azure SDK versions for discovering and managing Monitor resources in Guardrails. However, this caused controls to enter an error state for US Gov cloud subscriptions because the APIs did not work as expected. We have now updated dependencies that are compatible with both commercial and US Gov cloud subscriptions, ensuring that controls in both environments will work as expected.

Bug fixes

• In version 5.9.0, we updated internal dependencies to use the latest Azure SDK versions for discovering and managing DNS resources in Guardrails. However, this caused controls to enter an error state due to the inadvertent use of incorrect endpoints. This issue has been fixed, and the controls will now work as expected.

Bug fixes

• In version 5.18.0, we updated internal dependencies to use the latest Azure SDK versions for discovering and managing Compute resources in Guardrails. However, this caused controls to enter an error state due to the inadvertent use of incorrect endpoints. This issue has been fixed, and the controls will now work as expected.

Bug fixes

• In version 5.4.0, we updated internal dependencies to use the latest Azure SDK versions for discovering and managing API Management resources in Guardrails. However, this caused controls to enter an error state due to the inadvertent use of incorrect endpoints. This issue has been fixed, and the controls will now work as expected.

What's new?

• Added 84 new 'detect and correct' pipelines to identify AWS resources that are non-compliant with common security and compliance checks. These pipelines can also remediate non-compliant automatically or with approval steps. For usage information and a full list of pipelines, please see AWS Compliance Mod.

What's new?

• Added pipelines to run CIS v3.0.0 and v4.0.0 benchmarks. These pipelines can be used to identify AWS resources that are non-compliant with CIS recommendations and also remediate them according to CIS remediation suggestions. For usage information and a full list of pipelines, please see AWS CIS Mod.

What's new?

• We've updated internal dependencies and now use the new authentication method to discover and manage Automation resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

We're excited to announce the v1.0.0 release of 43 Powerpipe mods!

These mods now require Powerpipe. Steampipe users should check the migration guide.

Whats new

• connection resource to manage credentials. Documentation.
• database property has been added to mod. A database can be a connection reference, connection string, or Pipes workspace to query.

Deprecations

• Deprecated database CLI arg. See Setting the Database for the new syntax to set the database.
• Deprecated POWERPIPE_DATABASE env var. See Setting the Database for the new syntax to set the database.
• Deprecated database workspace profile arg. See Setting the Database for the new syntax to set the database.

Breaking changes

The mod functionality, which was previously deprecated and moved to Powerpipe, has been removed in this version.

• Removed the check, dashboard, mod, and variable commands. (#4413)
• Removed support for running named queries. (#4416)
• Removed the watch and mod-location CLI args from the query command. (#4417)
• Removed the dashboard, dashboard-listen, and dashboard-port CLI args from the service command. (#4418)
• Removed the STEAMPIPE_MOD_LOCATION and STEAMPIPE_INTROSPECTION env vars. (#4419)
• Removed support for deprecated STEAMPIPE_CLOUD_HOST and STEAMPIPE_CLOUD_TOKEN env vars. (#4420)
• Removed the watch, introspection, and mod-location workspace profile args. (#4421)
• Removed the check and dashboard options from workspace profiles. (#4422)
• Removed the dashboard option from global options (default.spc). (#4423)

We're excited to announce the v1.0.0 release of all 76 Flowpipe mods, including 29 Library mods, 6 Standard mods, and 41 Sample mods!

Breaking changes

• Flowpipe v1.0.0 is now required. For a full list of CLI changes, please see the Flowpipe v1.0.0 CHANGELOG.
• In Flowpipe configuration files (.fpc), credential and credential_import resources have been renamed to connection and connection_import respectively.
• Updated the following param types:
  • approvers: list(string) to list(notifier).
  • database: string to connection.steampipe.
  • notifier: string to notifier.
• Updated the following variable types:
  • approvers: list(string) to list(notifier).
  • database: string to connection.steampipe.
  • notifier: string to notifier.
• Renamed cred param to conn and updated its type from string to conn.

What's new?

• connection resource to manage credentials. Documentation.
• connection and notifier types for variables and params. (#871)
• enum validation for variables and params.
• Defined exit codes for various CLI operations. Documentation.

Bug fixes

• Passing pipeline references to nested mods for execution. (#908)
• Do not crash if pipeline reference is set to a string. (#911)

Deprecation

• credential and credential_import are deprecated to be replaced with connection and connection_import.

Bug fixes

• In a previous version, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

We’re excited to announce the v1.0.0 release of 116 Steampipe plugins!

While there are no significant changes in the new plugin versions, this release aligns with Steampipe's v1.0.0 launch. The plugins now adhere to semantic versioning, ensuring backward compatibility within each major version.

Bug fixes

• In v5.3.1, we updated the internal logic for the Import Set controls to convert JSON objects to strings to store them reliably in ServiceNow. However, applying transformation logic to this data proved to be difficult in such cases. We have reverted this behavior, and JSON objects will no longer be transformed via the Import Set control. They will now be synced to ServiceNow in their original format.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Key Vault resources in Guardrails. This release includes breaking changes in the CMDB data for key, and secret. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below:

KeyVault > Vault

Added :

• enableSoftDelete
• publicNetworkAccess
• enableRbacAuthorization

KeyVault > Key

Added :

• hsmPlatform

Removed:

• key.e
• key.n

KeyVault > Secret

Modified :

• ID property does not contain the secret version.

Removed:

• expires
• updated
• created

Bug fixes

• The Azure > Key Vault > Key > CMDB control would go into an error state while fetching key rotation policy details for managed keys. The control will no longer attempt to fetch the key rotation policy details for such keys and will work as expected.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• Added support for PostgresSQL 16.
• Added support for custom hive key.
• Default database engine version changed to 15.7.
• Default cache engine version set to 7.1.
• M4 and R4 instance types removed from the supported database instance list due to deprecation.

What's new?

• Server

  • Introduced Activity Retention feature for Smart Retention control to enhance version and data management.

• UI

  • Support for downloading AWS CloudFormation templates directly from the AWS import page.

Bug fixes

• Server

  • Resolved controls getting stuck when Notify or Ignore keywords were missing in the notification rules.

• UI

  • The + button for adding permissions now correctly applies the appropriate attributes.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

What's new?

• Policy Types:

  • Turbot > Workspace > Retention > Activity Purge Limit.
  • Turbot > Workspace > Retention > Activity Retention.

• Control Types:

  • Add support to Turbot > Smart Retention control to enhance version and data management.

Requirements

• TE: 5.35.4

What's new?

• You can now check if flexible servers have a TLS version setting of 1.2 or higher enabled. To get started, set the Azure > MySQL > Flexible Server > Set Minimum TLS Version policy to Check: TLS 1.2 or higher.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage resources in Guardrails. This release includes breaking changes in the CMDB data for Azure. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below.

Azure > Management Group

Modified :

• The value of type property is updated as type: Microsoft.Management/managementGroups, earlier it was /providers/Microsoft.Management/managementGroups

What's new?

• We've updated internal dependencies and now use the new authentication method to discover and manage SQL Virtual Machine resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage SQL resources in Guardrails. This release includes breaking changes in the CMDB data for server, database, and elasticpool. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below:

Renamed:

• transparentDataEncryption.status to transparentDataEncryption.state
• databaseThreatDetectionPolicy to databaseSecurityAlertPolicy

Added:

Azure SQL > Server

• Added administrators block
• isManagedIdentityInUse
• autoRotationEnabled
• externalGovernanceStatus
• minimalTlsVersion
• privateEndpointConnections
• publicNetworkAccess
• restrictOutboundNetworkAccess
• serverAzureADAdministrator.azureADOnlyAuthentication

Azure SQL > Database

• availabilityZone
• currentBackupStorageRedundancy
• databaseSecurityAlertPolicy. creationTime
• transparentDataEncryption.location
• isInfraEncryptionEnabled
• isLedgerOn
• maintenanceConfigurationId
• requestedBackupStorageRedundancy
• maintenanceConfigurationId

Azure SQL > ElasticPool

• maintenanceConfigurationId

Modified:

• The value of the attribute serverAzureADAdministrator.name has been changed from string (activeDirectory) to string (ActiveDirectory).
• The data type of the attribute databaseThreatDetectionPolicy.disabledAlerts has been changed from string ("") to object ([]).
• The data type of the attribute databaseThreatDetectionPolicy.emailAddresses has been changed from string ("") to object ([]).
• The data type of the attribute databaseThreatDetectionPolicy.emailAccountAdmins has been changed from string (Disabled/Enabled) to boolean (false/true).
• The data type of the attribute disabledAlerts has been changed from string ("") to object ([]).

Removed:

• databaseThreatDetectionPolicy.useServerDefault

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Resource Providers in Guardrails.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Network resources in Guardrails.

Network > NetworkInterface

Added :

• auxiliaryMode
• auxiliarySku
• kind
• disableTcpStateTracking

Network > PrivateDNSZone

Added :

• internalId

Network > VirtualNetworkGateway

Added :

• allowVirtualWanTraffic
• allowRemoteVnetTraffic

Modified :

• activeActive property updated as active

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Monitor resources in Guardrails. This release includes changes in the CMDB data for action groups.

Added:

• tags
• kind

Resource Types

• Azure > Monitor > Metric Alert

Control Types

• Azure > Monitor > Action Group > Tags
• Azure > Monitor > Metric Alert > Active
• Azure > Monitor > Metric Alert > Approved
• Azure > Monitor > Metric Alert > CMDB
• Azure > Monitor > Metric Alert > Discovery
• Azure > Monitor > Metric Alert > Tags

Policy Types

• Azure > Monitor > Action Group > Tags
• Azure > Monitor > Action Group > Tags > Template
• Azure > Monitor > Metric Alert > Active
• Azure > Monitor > Metric Alert > Active > Age
• Azure > Monitor > Metric Alert > Active > Last Modified
• Azure > Monitor > Metric Alert > Approved
• Azure > Monitor > Metric Alert > Approved > Custom
• Azure > Monitor > Metric Alert > Approved > Usage
• Azure > Monitor > Metric Alert > CMDB
• Azure > Monitor > Metric Alert > Tags
• Azure > Monitor > Metric Alert > Tags > Template
• Azure > Monitor > Tags Template [Default]

Action Types

• Azure > Monitor > Action Group > Set Tags
• Azure > Monitor > Metric Alert > Delete
• Azure > Monitor > Metric Alert > Router
• Azure > Monitor > Metric Alert > Set Tags

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Managed Identity resources in Guardrails. This release includes changes in the CMDB data as below.

Removed:

• clientSecretUrl

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Log Analytics resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage IAM resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Firewall resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage CosmosDB resources in Guardrails.

Added:

createMode

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The AWS > Account > Budget > Budget control would enter an error state for US Gov cloud accounts because the budget APIs are not supported for these accounts. We have updated the control to avoid making these API calls and instead rely on the AWS > Account > Budget > State policy being updated periodically, allowing the control to evaluate the outcome correctly.

What's new?

• You can now configure and manage CI Relationships for various Kubernetes resources in ServiceNow. To get started, set their ServiceNow Relationships policies respectively.

Control Types

• Kubernetes > Cluster > ServiceNow > Relationships
• Kubernetes > ConfigMap > ServiceNow > Relationships
• Kubernetes > CronJob > ServiceNow > Relationships
• Kubernetes > DaemonSet > ServiceNow > Relationships
• Kubernetes > Deployment > ServiceNow > Relationships
• Kubernetes > Ingress > ServiceNow > Relationships
• Kubernetes > Job > ServiceNow > Relationships
• Kubernetes > Namespace > ServiceNow > Relationships
• Kubernetes > Node > ServiceNow > Relationships
• Kubernetes > Persistent Volume > ServiceNow > Relationships
• Kubernetes > Pod > ServiceNow > Relationships
• Kubernetes > ReplicaSet > ServiceNow > Relationships
• Kubernetes > ReplicationController > ServiceNow > Relationships
• Kubernetes > Service > ServiceNow > Relationships
• Kubernetes > StatefulSet > ServiceNow > Relationships

Policy Types

• Kubernetes > Cluster > ServiceNow > Relationships
• Kubernetes > Cluster > ServiceNow > Relationships > Template
• Kubernetes > ConfigMap > ServiceNow > Relationships
• Kubernetes > ConfigMap > ServiceNow > Relationships > Template
• Kubernetes > CronJob > ServiceNow > Relationships
• Kubernetes > CronJob > ServiceNow > Relationships > Template
• Kubernetes > DaemonSet > ServiceNow > Relationships
• Kubernetes > DaemonSet > ServiceNow > Relationships > Template
• Kubernetes > Deployment > ServiceNow > Relationships
• Kubernetes > Deployment > ServiceNow > Relationships > Template
• Kubernetes > Ingress > ServiceNow > Relationships
• Kubernetes > Ingress > ServiceNow > Relationships > Template
• Kubernetes > Job > ServiceNow > Relationships
• Kubernetes > Job > ServiceNow > Relationships > Template
• Kubernetes > Namespace > ServiceNow > Relationships
• Kubernetes > Namespace > ServiceNow > Relationships > Template
• Kubernetes > Node > ServiceNow > Relationships
• Kubernetes > Node > ServiceNow > Relationships > Template
• Kubernetes > Persistent Volume > ServiceNow > Relationships
• Kubernetes > Persistent Volume > ServiceNow > Relationships > Template
• Kubernetes > Pod > ServiceNow > Relationships
• Kubernetes > Pod > ServiceNow > Relationships > Template
• Kubernetes > ReplicaSet > ServiceNow > Relationships
• Kubernetes > ReplicaSet > ServiceNow > Relationships > Template
• Kubernetes > ReplicationController > ServiceNow > Relationships
• Kubernetes > ReplicationController > ServiceNow > Relationships > Template
• Kubernetes > Service > ServiceNow > Relationships
• Kubernetes > Service > ServiceNow > Relationships > Template
• Kubernetes > StatefulSet > ServiceNow > Relationships
• Kubernetes > StatefulSet > ServiceNow > Relationships > Template

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Load Balancer resources in Guardrails.

What's new?

• You can now configure and manage CI Relationships for projects in ServiceNow. To get started, set the GCP > Project > ServiceNow > Relationships > * policies.

Control Types

• GCP > Project > ServiceNow > Relationships

Policy Types

• GCP > Project > ServiceNow > Relationships
• GCP > Project > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for subscriptions in ServiceNow. To get started, set the Azure > Subscription > ServiceNow > Relationships > * policies.

Control Types

• Azure > Subscription > ServiceNow > Relationships

Policy Types

• Azure > Subscription > ServiceNow > Relationships
• Azure > Subscription > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for accounts in ServiceNow. To get started, set the AWS > Account > ServiceNow > Relationships > * policies.

Control Types

• AWS > Account > ServiceNow > Relationships

Policy Types

• AWS > Account > ServiceNow > Relationships
• AWS > Account > ServiceNow > Relationships > Template

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage DNS resources in Guardrails. This release includes breaking changes in the CMDB data for security center. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below.

Removed:

• tTL

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Databricks resources in Guardrails.

Added:

• createdBy
• updatedBy
• systemData
• createdDateTime

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Container Registry resources in Guardrails.

Added:

• softDeletePolicy
• azureADAuthenticationAsArmPolicy

What's new?

• You can now configure and manage CI Relationships for various network resources in ServiceNow. To get started, set their ServiceNow Relationships policies respectively.

Control Types

• GCP > Network > Firewall > ServiceNow > Relationships
• GCP > Network > Forwarding Rule > ServiceNow > Relationships
• GCP > Network > Network > ServiceNow > Relationships
• GCP > Network > Route > ServiceNow > Relationships
• GCP > Network > Router > ServiceNow > Relationships
• GCP > Network > Subnetwork > ServiceNow > Relationships
• GCP > Network > Target Pool > ServiceNow > Relationships
• GCP > Network > Target VPN Gateway > ServiceNow > Relationships

Policy Types

• GCP > Network > Firewall > ServiceNow > Relationships
• GCP > Network > Firewall > ServiceNow > Relationships > Template
• GCP > Network > Forwarding Rule > ServiceNow > Relationships
• GCP > Network > Forwarding Rule > ServiceNow > Relationships > Template
• GCP > Network > Network > ServiceNow > Relationships
• GCP > Network > Network > ServiceNow > Relationships > Template
• GCP > Network > Route > ServiceNow > Relationships
• GCP > Network > Route > ServiceNow > Relationships > Template
• GCP > Network > Router > ServiceNow > Relationships
• GCP > Network > Router > ServiceNow > Relationships > Template
• GCP > Network > Subnetwork > ServiceNow > Relationships
• GCP > Network > Subnetwork > ServiceNow > Relationships > Template
• GCP > Network > Target Pool > ServiceNow > Relationships
• GCP > Network > Target Pool > ServiceNow > Relationships > Template
• GCP > Network > Target VPN Gateway > ServiceNow > Relationships
• GCP > Network > Target VPN Gateway > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for various compute engine resources in ServiceNow. To get started, set their ServiceNow Relationships policies respectively.

Control Types

• GCP > Compute Engine > Disk > ServiceNow > Relationships
• GCP > Compute Engine > Image > ServiceNow > Relationships
• GCP > Compute Engine > Instance > ServiceNow > Relationships
• GCP > Compute Engine > Node Group > ServiceNow > Relationships
• GCP > Compute Engine > Node template > ServiceNow > Relationships
• GCP > Compute Engine > Snapshot > ServiceNow > Relationships

Policy Types

• GCP > Compute Engine > Disk > ServiceNow > Relationships
• GCP > Compute Engine > Disk > ServiceNow > Relationships > Template
• GCP > Compute Engine > Image > ServiceNow > Relationships
• GCP > Compute Engine > Image > ServiceNow > Relationships > Template
• GCP > Compute Engine > Instance > ServiceNow > Relationships
• GCP > Compute Engine > Instance > ServiceNow > Relationships > Template
• GCP > Compute Engine > Node Group > ServiceNow > Relationships
• GCP > Compute Engine > Node Group > ServiceNow > Relationships > Template
• GCP > Compute Engine > Node template > ServiceNow > Relationships
• GCP > Compute Engine > Node template > ServiceNow > Relationships > Template
• GCP > Compute Engine > Snapshot > ServiceNow > Relationships
• GCP > Compute Engine > Snapshot > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for various network resources in ServiceNow. To get started, set their ServiceNow Relationships policies respectively.

Control Types

• Azure > Network > Application Security Group > ServiceNow > Import Set
• Azure > Network > Application Security Group > ServiceNow > Relationships
• Azure > Network > Express Route Circuits > ServiceNow > Import Set
• Azure > Network > Network Interface > ServiceNow > Import Set
• Azure > Network > Network Interface > ServiceNow > Relationships
• Azure > Network > Network Security Group > ServiceNow > Relationships
• Azure > Network > Private DNS Zones > ServiceNow > Import Set
• Azure > Network > Private Endpoints > ServiceNow > Import Set
• Azure > Network > Public IP Address > ServiceNow > Import Set
• Azure > Network > Public IP Address > ServiceNow > Relationships
• Azure > Network > Route Table > ServiceNow > Import Set
• Azure > Network > Route Table > ServiceNow > Relationships
• Azure > Network > Subnet > ServiceNow > Import Set
• Azure > Network > Subnet > ServiceNow > Relationships
• Azure > Network > Virtual Network > ServiceNow > Import Set
• Azure > Network > Virtual Network > ServiceNow > Relationships
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set
• Azure > Network > Virtual Network Gateway > ServiceNow > Relationships

Policy Types

• Azure > Network > Application Security Group > ServiceNow > Import Set
• Azure > Network > Application Security Group > ServiceNow > Import Set > Archive Columns
• Azure > Network > Application Security Group > ServiceNow > Import Set > Insert Mode
• Azure > Network > Application Security Group > ServiceNow > Import Set > Record
• Azure > Network > Application Security Group > ServiceNow > Import Set > Table Name
• Azure > Network > Application Security Group > ServiceNow > Relationships
• Azure > Network > Application Security Group > ServiceNow > Relationships > Template
• Azure > Network > Express Route Circuits > ServiceNow > Import Set
• Azure > Network > Express Route Circuits > ServiceNow > Import Set > Archive Columns
• Azure > Network > Express Route Circuits > ServiceNow > Import Set > Insert Mode
• Azure > Network > Express Route Circuits > ServiceNow > Import Set > Record
• Azure > Network > Express Route Circuits > ServiceNow > Import Set > Table Name
• Azure > Network > Network Interface > ServiceNow > Import Set
• Azure > Network > Network Interface > ServiceNow > Import Set > Archive Columns
• Azure > Network > Network Interface > ServiceNow > Import Set > Insert Mode
• Azure > Network > Network Interface > ServiceNow > Import Set > Record
• Azure > Network > Network Interface > ServiceNow > Import Set > Table Name
• Azure > Network > Network Interface > ServiceNow > Relationships
• Azure > Network > Network Interface > ServiceNow > Relationships > Template
• Azure > Network > Network Security Group > ServiceNow > Import Set > Insert Mode
• Azure > Network > Network Security Group > ServiceNow > Relationships
• Azure > Network > Network Security Group > ServiceNow > Relationships > Template
• Azure > Network > Private DNS Zones > ServiceNow > Import Set
• Azure > Network > Private DNS Zones > ServiceNow > Import Set > Archive Columns
• Azure > Network > Private DNS Zones > ServiceNow > Import Set > Insert Mode
• Azure > Network > Private DNS Zones > ServiceNow > Import Set > Record
• Azure > Network > Private DNS Zones > ServiceNow > Import Set > Table Name
• Azure > Network > Private Endpoints > ServiceNow > Import Set
• Azure > Network > Private Endpoints > ServiceNow > Import Set > Archive Columns
• Azure > Network > Private Endpoints > ServiceNow > Import Set > Insert Mode
• Azure > Network > Private Endpoints > ServiceNow > Import Set > Record
• Azure > Network > Private Endpoints > ServiceNow > Import Set > Table Name
• Azure > Network > Public IP Address > ServiceNow > Import Set
• Azure > Network > Public IP Address > ServiceNow > Import Set > Archive Columns
• Azure > Network > Public IP Address > ServiceNow > Import Set > Insert Mode
• Azure > Network > Public IP Address > ServiceNow > Import Set > Record
• Azure > Network > Public IP Address > ServiceNow > Import Set > Table Name
• Azure > Network > Public IP Address > ServiceNow > Relationships
• Azure > Network > Public IP Address > ServiceNow > Relationships > Template
• Azure > Network > Route Table > ServiceNow > Import Set
• Azure > Network > Route Table > ServiceNow > Import Set > Archive Columns
• Azure > Network > Route Table > ServiceNow > Import Set > Insert Mode
• Azure > Network > Route Table > ServiceNow > Import Set > Record
• Azure > Network > Route Table > ServiceNow > Import Set > Table Name
• Azure > Network > Route Table > ServiceNow > Relationships
• Azure > Network > Route Table > ServiceNow > Relationships > Template
• Azure > Network > Subnet > ServiceNow > Import Set
• Azure > Network > Subnet > ServiceNow > Import Set > Archive Columns
• Azure > Network > Subnet > ServiceNow > Import Set > Insert Mode
• Azure > Network > Subnet > ServiceNow > Import Set > Record
• Azure > Network > Subnet > ServiceNow > Import Set > Table Name
• Azure > Network > Subnet > ServiceNow > Relationships
• Azure > Network > Subnet > ServiceNow > Relationships > Template
• Azure > Network > Virtual Network > ServiceNow > Import Set
• Azure > Network > Virtual Network > ServiceNow > Import Set > Archive Columns
• Azure > Network > Virtual Network > ServiceNow > Import Set > Insert Mode
• Azure > Network > Virtual Network > ServiceNow > Import Set > Record
• Azure > Network > Virtual Network > ServiceNow > Import Set > Table Name
• Azure > Network > Virtual Network > ServiceNow > Relationships
• Azure > Network > Virtual Network > ServiceNow > Relationships > Template
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set > Archive Columns
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set > Insert Mode
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set > Record
• Azure > Network > Virtual Network Gateway > ServiceNow > Import Set > Table Name
• Azure > Network > Virtual Network Gateway > ServiceNow > Relationships
• Azure > Network > Virtual Network Gateway > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for various compute resources in ServiceNow. To get started, set their ServiceNow Relationships policies respectively.

Control Types

• Azure > Compute > Availability Set > ServiceNow > Relationships
• Azure > Compute > Disk > ServiceNow > Relationships
• Azure > Compute > Image > ServiceNow > Relationships
• Azure > Compute > Snapshot > ServiceNow > Relationships
• Azure > Compute > Virtual Machine > ServiceNow > Relationships

Policy Types

• Azure > Compute > Availability Set > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Availability Set > ServiceNow > Relationships
• Azure > Compute > Availability Set > ServiceNow > Relationships > Template
• Azure > Compute > Disk > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Disk > ServiceNow > Relationships
• Azure > Compute > Disk > ServiceNow > Relationships > Template
• Azure > Compute > Disk Encryption Set > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Image > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Image > ServiceNow > Relationships
• Azure > Compute > Image > ServiceNow > Relationships > Template
• Azure > Compute > Snapshot > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Snapshot > ServiceNow > Relationships
• Azure > Compute > Snapshot > ServiceNow > Relationships > Template
• Azure > Compute > Ssh Public Key > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Virtual Machine > ServiceNow > Import Set > Insert Mode
• Azure > Compute > Virtual Machine > ServiceNow > Relationships
• Azure > Compute > Virtual Machine > ServiceNow > Relationships > Template
• Azure > Compute > Virtual Machine Scale Set > ServiceNow > Import Set > Insert Mode

What's new?

• You can now configure and manage CI Relationships for global regions, multi-regions, regions and zones in ServiceNow. To get started, set the GCP > Global Region > ServiceNow > Relationships > *, GCP > Multi-Region > ServiceNow > Relationships > *, GCP > Region > ServiceNow > Relationships > * and GCP > Zone > ServiceNow > Relationships > * policies respectively.

Control Types

• GCP > Global Region > ServiceNow > Relationships
• GCP > Multi-Region > ServiceNow > Relationships
• GCP > Region > ServiceNow > Relationships
• GCP > Zone > ServiceNow > Relationships

Policy Types

• GCP > Global Region > ServiceNow > Relationships
• GCP > Global Region > ServiceNow > Relationships > Template
• GCP > Multi-Region > ServiceNow > Relationships
• GCP > Multi-Region > ServiceNow > Relationships > Template
• GCP > Region > ServiceNow > Relationships
• GCP > Region > ServiceNow > Relationships > Template
• GCP > Zone > ServiceNow > Relationships
• GCP > Zone > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for buckets and objects in ServiceNow. To get started, set the GCP > Storage > Bucket > ServiceNow > Relationships > * and GCP > Storage > Object > ServiceNow > Relationships > * policies respectively.

Control Types

• GCP > Storage > Bucket > ServiceNow > Relationships
• GCP > Storage > Object > ServiceNow > Relationships

Policy Types

• GCP > Storage > Bucket > ServiceNow > Relationships
• GCP > Storage > Bucket > ServiceNow > Relationships > Template
• GCP > Storage > Object > ServiceNow > Relationships
• GCP > Storage > Object > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for resource groups in ServiceNow. To get started, set the Azure > Resource Group > ServiceNow > Relationships > * policies.

Control Types

• Azure > Resource Group > ServiceNow > Relationships

Policy Types

• Azure > Resource Group > ServiceNow > Relationships
• Azure > Resource Group > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for containers, file shares, queues and storage accounts in ServiceNow. To get started, set the Azure > Storage > Container > ServiceNow > Relationships > *, Azure > Storage > File Share > ServiceNow > Relationships > *, Azure > Storage > Queue > ServiceNow > Relationships > * and Azure > Storage > Storage Account > ServiceNow > Relationships > * policies respectively.

Control Types

• Azure > Storage > Container > ServiceNow > Relationships
• Azure > Storage > FileShare > ServiceNow > Relationships
• Azure > Storage > Queue > ServiceNow > Relationships
• Azure > Storage > Storage Account > ServiceNow > Relationships

Policy Types

• Azure > Storage > Container > ServiceNow > Import Set > Insert Mode
• Azure > Storage > Container > ServiceNow > Relationships
• Azure > Storage > Container > ServiceNow > Relationships > Template
• Azure > Storage > FileShare > ServiceNow > Import Set > Insert Mode
• Azure > Storage > FileShare > ServiceNow > Relationships
• Azure > Storage > FileShare > ServiceNow > Relationships > Template
• Azure > Storage > Queue > ServiceNow > Import Set > Insert Mode
• Azure > Storage > Queue > ServiceNow > Relationships
• Azure > Storage > Queue > ServiceNow > Relationships > Template
• Azure > Storage > Storage Account > ServiceNow > Import Set > Insert Mode
• Azure > Storage > Storage Account > ServiceNow > Relationships
• Azure > Storage > Storage Account > ServiceNow > Relationships > Template

What's new?

• You can now configure and manage CI Relationships for elastic IPs, internet gateways and NAT gateways in ServiceNow. To get started, set the AWS > VPC > Elastic IP > ServiceNow > Relationships > *, AWS > VPC > Internet Gateway > ServiceNow > Relationships > * and AWS > VPC > NAT Gateway > ServiceNow > Relationships > * policies respectively.

Control Types

• AWS > VPC > Elastic IP > ServiceNow > Relationships
• AWS > VPC > Internet Gateway > ServiceNow
• AWS > VPC > Internet Gateway > ServiceNow > Configuration Item
• AWS > VPC > Internet Gateway > ServiceNow > Relationships
• AWS > VPC > Internet Gateway > ServiceNow > Table
• AWS > VPC > NAT Gateway > ServiceNow
• AWS > VPC > NAT Gateway > ServiceNow > Configuration Item
• AWS > VPC > NAT Gateway > ServiceNow > Relationships
• AWS > VPC > NAT Gateway > ServiceNow > Table

Policy Types

• AWS > VPC > Elastic IP > ServiceNow > Relationships
• AWS > VPC > Elastic IP > ServiceNow > Relationships > Template
• AWS > VPC > Internet Gateway > ServiceNow
• AWS > VPC > Internet Gateway > ServiceNow > Configuration Item
• AWS > VPC > Internet Gateway > ServiceNow > Configuration Item > Record
• AWS > VPC > Internet Gateway > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > Internet Gateway > ServiceNow > Relationships
• AWS > VPC > Internet Gateway > ServiceNow > Relationships > Template
• AWS > VPC > Internet Gateway > ServiceNow > Table
• AWS > VPC > Internet Gateway > ServiceNow > Table > Definition
• AWS > VPC > NAT Gateway > ServiceNow
• AWS > VPC > NAT Gateway > ServiceNow > Configuration Item
• AWS > VPC > NAT Gateway > ServiceNow > Configuration Item > Record
• AWS > VPC > NAT Gateway > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > NAT Gateway > ServiceNow > Relationships
• AWS > VPC > NAT Gateway > ServiceNow > Relationships > Template
• AWS > VPC > NAT Gateway > ServiceNow > Table
• AWS > VPC > NAT Gateway > ServiceNow > Table > Definition

Control Types

• AWS > VPC > Customer Gateway > ServiceNow
• AWS > VPC > Customer Gateway > ServiceNow > Configuration Item
• AWS > VPC > Customer Gateway > ServiceNow > Relationships
• AWS > VPC > Customer Gateway > ServiceNow > Table
• AWS > VPC > Transit Gateway > ServiceNow
• AWS > VPC > Transit Gateway > ServiceNow > Configuration Item
• AWS > VPC > Transit Gateway > ServiceNow > Relationships
• AWS > VPC > Transit Gateway > ServiceNow > Table
• AWS > VPC > VPN Gateway > ServiceNow
• AWS > VPC > VPN Gateway > ServiceNow > Configuration Item
• AWS > VPC > VPN Gateway > ServiceNow > Relationships
• AWS > VPC > VPN Gateway > ServiceNow > Table

Policy Types

• AWS > VPC > Customer Gateway > ServiceNow
• AWS > VPC > Customer Gateway > ServiceNow > Configuration Item
• AWS > VPC > Customer Gateway > ServiceNow > Configuration Item > Record
• AWS > VPC > Customer Gateway > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > Customer Gateway > ServiceNow > Relationships
• AWS > VPC > Customer Gateway > ServiceNow > Relationships > Template
• AWS > VPC > Customer Gateway > ServiceNow > Table
• AWS > VPC > Customer Gateway > ServiceNow > Table > Definition
• AWS > VPC > Transit Gateway > ServiceNow
• AWS > VPC > Transit Gateway > ServiceNow > Configuration Item
• AWS > VPC > Transit Gateway > ServiceNow > Configuration Item > Record
• AWS > VPC > Transit Gateway > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > Transit Gateway > ServiceNow > Relationships
• AWS > VPC > Transit Gateway > ServiceNow > Relationships > Template
• AWS > VPC > Transit Gateway > ServiceNow > Table
• AWS > VPC > Transit Gateway > ServiceNow > Table > Definition
• AWS > VPC > VPN Gateway > ServiceNow
• AWS > VPC > VPN Gateway > ServiceNow > Configuration Item
• AWS > VPC > VPN Gateway > ServiceNow > Configuration Item > Record
• AWS > VPC > VPN Gateway > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > VPN Gateway > ServiceNow > Relationships
• AWS > VPC > VPN Gateway > ServiceNow > Relationships > Template
• AWS > VPC > VPN Gateway > ServiceNow > Table
• AWS > VPC > VPN Gateway > ServiceNow > Table > Definition

What's new?

• You can now configure and manage CI Relationships for AMIs, instances, key pairs, network interfaces, snapshots and volumes in ServiceNow. To get started, set the AWS > EC2 > AMI > ServiceNow > Relationships > *, AWS > EC2 > Instance > ServiceNow > Relationships > *, AWS > EC2 > Key Pair > ServiceNow > Relationships > *, AWS > EC2 > Network Interface > ServiceNow > Relationships > *, AWS > EC2 > Snapshot > ServiceNow > Relationships > * and AWS > EC2 > Volume > ServiceNow > Relationships > * policies respectively.

Control Types

• AWS > EC2 > AMI > ServiceNow
• AWS > EC2 > AMI > ServiceNow > Configuration Item
• AWS > EC2 > AMI > ServiceNow > Relationships
• AWS > EC2 > AMI > ServiceNow > Table
• AWS > EC2 > Instance > ServiceNow > Relationships
• AWS > EC2 > Key Pair > ServiceNow
• AWS > EC2 > Key Pair > ServiceNow > Configuration Item
• AWS > EC2 > Key Pair > ServiceNow > Relationships
• AWS > EC2 > Key Pair > ServiceNow > Table
• AWS > EC2 > Network Interface > ServiceNow
• AWS > EC2 > Network Interface > ServiceNow > Configuration Item
• AWS > EC2 > Network Interface > ServiceNow > Relationships
• AWS > EC2 > Network Interface > ServiceNow > Table
• AWS > EC2 > Snapshot > ServiceNow > Relationships
• AWS > EC2 > Volume > ServiceNow > Relationships

Policy Types

• AWS > EC2 > AMI > ServiceNow
• AWS > EC2 > AMI > ServiceNow > Configuration Item
• AWS > EC2 > AMI > ServiceNow > Configuration Item > Record
• AWS > EC2 > AMI > ServiceNow > Configuration Item > Table Definition
• AWS > EC2 > AMI > ServiceNow > Relationships
• AWS > EC2 > AMI > ServiceNow > Relationships > Template
• AWS > EC2 > AMI > ServiceNow > Table
• AWS > EC2 > AMI > ServiceNow > Table > Definition
• AWS > EC2 > Instance > ServiceNow > Relationships
• AWS > EC2 > Instance > ServiceNow > Relationships > Template
• AWS > EC2 > Key Pair > ServiceNow
• AWS > EC2 > Key Pair > ServiceNow > Configuration Item
• AWS > EC2 > Key Pair > ServiceNow > Configuration Item > Record
• AWS > EC2 > Key Pair > ServiceNow > Configuration Item > Table Definition
• AWS > EC2 > Key Pair > ServiceNow > Relationships
• AWS > EC2 > Key Pair > ServiceNow > Relationships > Template
• AWS > EC2 > Key Pair > ServiceNow > Table
• AWS > EC2 > Key Pair > ServiceNow > Table > Definition
• AWS > EC2 > Network Interface > ServiceNow
• AWS > EC2 > Network Interface > ServiceNow > Configuration Item
• AWS > EC2 > Network Interface > ServiceNow > Configuration Item > Record
• AWS > EC2 > Network Interface > ServiceNow > Configuration Item > Table Definition
• AWS > EC2 > Network Interface > ServiceNow > Relationships
• AWS > EC2 > Network Interface > ServiceNow > Relationships > Template
• AWS > EC2 > Network Interface > ServiceNow > Table
• AWS > EC2 > Network Interface > ServiceNow > Table > Definition
• AWS > EC2 > Snapshot > ServiceNow > Relationships
• AWS > EC2 > Snapshot > ServiceNow > Relationships > Template
• AWS > EC2 > Volume > ServiceNow > Relationships
• AWS > EC2 > Volume > ServiceNow > Relationships > Template

What's new?

Control Types

• GCP > Vertex AI > Endpoint > ServiceNow
• GCP > Vertex AI > Endpoint > ServiceNow > Configuration Item
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set
• GCP > Vertex AI > Endpoint > ServiceNow > Table
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Configuration Item
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Table

Policy Types

• GCP > Vertex AI > Endpoint > ServiceNow
• GCP > Vertex AI > Endpoint > ServiceNow > Configuration Item
• GCP > Vertex AI > Endpoint > ServiceNow > Configuration Item > Record
• GCP > Vertex AI > Endpoint > ServiceNow > Configuration Item > Table Definition
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set > Archive Columns
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set > Insert Mode
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set > Record
• GCP > Vertex AI > Endpoint > ServiceNow > Import Set > Table Name
• GCP > Vertex AI > Endpoint > ServiceNow > Table
• GCP > Vertex AI > Endpoint > ServiceNow > Table > Definition
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Configuration Item
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Configuration Item > Record
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Configuration Item > Table Definition
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set > Archive Columns
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set > Insert Mode
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set > Record
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Import Set > Table Name
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Table
• GCP > Vertex AI > Notebook Runtime Template > ServiceNow > Table > Definition

What's new?

Control Types

• GCP > Dataplex > Lake > ServiceNow
• GCP > Dataplex > Lake > ServiceNow > Configuration Item
• GCP > Dataplex > Lake > ServiceNow > Import Set
• GCP > Dataplex > Lake > ServiceNow > Table
• GCP > Dataplex > Task > ServiceNow
• GCP > Dataplex > Task > ServiceNow > Configuration Item
• GCP > Dataplex > Task > ServiceNow > Import Set
• GCP > Dataplex > Task > ServiceNow > Table
• GCP > Dataplex > Zone > ServiceNow
• GCP > Dataplex > Zone > ServiceNow > Configuration Item
• GCP > Dataplex > Zone > ServiceNow > Import Set
• GCP > Dataplex > Zone > ServiceNow > Table

Policy Types

• GCP > Dataplex > Lake > ServiceNow
• GCP > Dataplex > Lake > ServiceNow > Configuration Item
• GCP > Dataplex > Lake > ServiceNow > Configuration Item > Record
• GCP > Dataplex > Lake > ServiceNow > Configuration Item > Table Definition
• GCP > Dataplex > Lake > ServiceNow > Import Set
• GCP > Dataplex > Lake > ServiceNow > Import Set > Archive Columns
• GCP > Dataplex > Lake > ServiceNow > Import Set > Insert Mode
• GCP > Dataplex > Lake > ServiceNow > Import Set > Record
• GCP > Dataplex > Lake > ServiceNow > Import Set > Table Name
• GCP > Dataplex > Lake > ServiceNow > Table
• GCP > Dataplex > Lake > ServiceNow > Table > Definition
• GCP > Dataplex > Task > ServiceNow
• GCP > Dataplex > Task > ServiceNow > Configuration Item
• GCP > Dataplex > Task > ServiceNow > Configuration Item > Record
• GCP > Dataplex > Task > ServiceNow > Configuration Item > Table Definition
• GCP > Dataplex > Task > ServiceNow > Import Set
• GCP > Dataplex > Task > ServiceNow > Import Set > Archive Columns
• GCP > Dataplex > Task > ServiceNow > Import Set > Insert Mode
• GCP > Dataplex > Task > ServiceNow > Import Set > Record
• GCP > Dataplex > Task > ServiceNow > Import Set > Table Name
• GCP > Dataplex > Task > ServiceNow > Table
• GCP > Dataplex > Task > ServiceNow > Table > Definition
• GCP > Dataplex > Zone > ServiceNow
• GCP > Dataplex > Zone > ServiceNow > Configuration Item
• GCP > Dataplex > Zone > ServiceNow > Configuration Item > Record
• GCP > Dataplex > Zone > ServiceNow > Configuration Item > Table Definition
• GCP > Dataplex > Zone > ServiceNow > Import Set
• GCP > Dataplex > Zone > ServiceNow > Import Set > Archive Columns
• GCP > Dataplex > Zone > ServiceNow > Import Set > Insert Mode
• GCP > Dataplex > Zone > ServiceNow > Import Set > Record
• GCP > Dataplex > Zone > ServiceNow > Import Set > Table Name
• GCP > Dataplex > Zone > ServiceNow > Table
• GCP > Dataplex > Zone > ServiceNow > Table > Definition

What's new?

• You can now configure and manage CI Relationships for flow logs, network ACLs, security groups and security group rules in ServiceNow. To get started, set the AWS > VPC > Flow Log > ServiceNow > Relationships > *, AWS > VPC > Network ACL > ServiceNow > Relationships > *, AWS > VPC > Security Group > ServiceNow > Relationships > * and AWS > VPC > Security Group Rule > ServiceNow > Relationships > * policies respectively.

Control Types

• AWS > VPC > Flow Log > ServiceNow
• AWS > VPC > Flow Log > ServiceNow > Configuration Item
• AWS > VPC > Flow Log > ServiceNow > Relationships
• AWS > VPC > Flow Log > ServiceNow > Table
• AWS > VPC > Network ACL > ServiceNow > Relationships
• AWS > VPC > Security Group > ServiceNow > Relationships
• AWS > VPC > Security Group Rule > ServiceNow
• AWS > VPC > Security Group Rule > ServiceNow > Configuration Item
• AWS > VPC > Security Group Rule > ServiceNow > Relationships
• AWS > VPC > Security Group Rule > ServiceNow > Table

Policy Types

• AWS > VPC > Flow Log > ServiceNow
• AWS > VPC > Flow Log > ServiceNow > Configuration Item
• AWS > VPC > Flow Log > ServiceNow > Configuration Item > Record
• AWS > VPC > Flow Log > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > Flow Log > ServiceNow > Relationships
• AWS > VPC > Flow Log > ServiceNow > Relationships > Template
• AWS > VPC > Flow Log > ServiceNow > Table
• AWS > VPC > Flow Log > ServiceNow > Table > Definition
• AWS > VPC > Network ACL > ServiceNow > Relationships
• AWS > VPC > Network ACL > ServiceNow > Relationships > Template
• AWS > VPC > Security Group > ServiceNow > Relationships
• AWS > VPC > Security Group > ServiceNow > Relationships > Template
• AWS > VPC > Security Group Rule > ServiceNow
• AWS > VPC > Security Group Rule > ServiceNow > Configuration Item
• AWS > VPC > Security Group Rule > ServiceNow > Configuration Item > Record
• AWS > VPC > Security Group Rule > ServiceNow > Configuration Item > Table Definition
• AWS > VPC > Security Group Rule > ServiceNow > Relationships
• AWS > VPC > Security Group Rule > ServiceNow > Relationships > Template
• AWS > VPC > Security Group Rule > ServiceNow > Table
• AWS > VPC > Security Group Rule > ServiceNow > Table > Definition

What's new?

• You can now configure and manage CI Relationships for route tables, subnets and VPCs in ServiceNow. To get started, set the AWS > VPC > Route Table > ServiceNow > Relationships > *, AWS > VPC > Subnet > ServiceNow > Relationships > * and AWS > VPC > VPC > ServiceNow > Relationships > * policies respectively.

Control Types

• AWS > VPC > Route Table > ServiceNow > Relationships
• AWS > VPC > Subnet > ServiceNow > Relationships
• AWS > VPC > VPC > ServiceNow > Relationships

Policy Types

• AWS > VPC > Route Table > ServiceNow > Relationships
• AWS > VPC > Route Table > ServiceNow > Relationships > Template
• AWS > VPC > Subnet > ServiceNow > Relationships
• AWS > VPC > Subnet > ServiceNow > Relationships > Template
• AWS > VPC > VPC > ServiceNow > Relationships
• AWS > VPC > VPC > ServiceNow > Relationships > Template

What's new?

Control Types

• AWS > Account > ServiceNow
• AWS > Account > ServiceNow > Configuration Item
• AWS > Account > ServiceNow > Table
• AWS > Region > ServiceNow
• AWS > Region > ServiceNow > Configuration Item
• AWS > Region > ServiceNow > Relationships
• AWS > Region > ServiceNow > Table

Policy Types

• AWS > Account > ServiceNow
• AWS > Account > ServiceNow > Configuration Item
• AWS > Account > ServiceNow > Configuration Item > Record
• AWS > Account > ServiceNow > Configuration Item > Table Definition
• AWS > Account > ServiceNow > Table
• AWS > Account > ServiceNow > Table > Definition
• AWS > Region > ServiceNow
• AWS > Region > ServiceNow > Configuration Item
• AWS > Region > ServiceNow > Configuration Item > Record
• AWS > Region > ServiceNow > Configuration Item > Table Definition
• AWS > Region > ServiceNow > Relationships
• AWS > Region > ServiceNow > Relationships > Template
• AWS > Region > ServiceNow > Table
• AWS > Region > ServiceNow > Table > Definition

What's new?

• You can now configure and manage CI Relationships for buckets in ServiceNow. To get started, set the AWS > S3 > Bucket > ServiceNow > Relationships > * policies.

Control Types

• AWS > S3 > Bucket > ServiceNow > Relationships

Policy Types

• AWS > S3 > Bucket > ServiceNow > Import Set > Insert Mode
• AWS > S3 > Bucket > ServiceNow > Relationships
• AWS > S3 > Bucket > ServiceNow > Relationships > Template

What's new?

• AWS/Billing/Admin, AWS/Billing/Metadata and AWS/Billing/Operator now also include purchase orders permissions.

Bug fixes

• Server
  • Removed recursive loop detection logic, as this is now managed effectively by Lambda.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Bug fixes

• Fixed the issue where the search path setting was not retained while navigating to a different dashboard. (#325)

What's new?

• Support for AWS Graviton instance with ARM64 architecture.

What's new?

• Added support to process enable and disable real-time events for Dataplex.

Resource Types

• GCP > Dataplex
• GCP > Dataplex > Lake
• GCP > Dataplex > Task
• GCP > Dataplex > Zone

Control Types

• GCP > Dataplex > API Enabled
• GCP > Dataplex > CMDB
• GCP > Dataplex > Discovery
• GCP > Dataplex > Lake > Active
• GCP > Dataplex > Lake > Approved
• GCP > Dataplex > Lake > CMDB
• GCP > Dataplex > Lake > Discovery
• GCP > Dataplex > Lake > Labels
• GCP > Dataplex > Lake > Usage
• GCP > Dataplex > Task > Active
• GCP > Dataplex > Task > Approved
• GCP > Dataplex > Task > CMDB
• GCP > Dataplex > Task > Discovery
• GCP > Dataplex > Task > Labels
• GCP > Dataplex > Task > Usage
• GCP > Dataplex > Zone > Active
• GCP > Dataplex > Zone > Approved
• GCP > Dataplex > Zone > CMDB
• GCP > Dataplex > Zone > Discovery
• GCP > Dataplex > Zone > Labels
• GCP > Dataplex > Zone > Usage

Policy Types

• GCP > Dataplex > API Enabled
• GCP > Dataplex > Approved Regions [Default]
• GCP > Dataplex > CMDB
• GCP > Dataplex > Enabled
• GCP > Dataplex > Labels Template [Default]
• GCP > Dataplex > Lake > Active
• GCP > Dataplex > Lake > Active > Age
• GCP > Dataplex > Lake > Active > Last Modified
• GCP > Dataplex > Lake > Approved
• GCP > Dataplex > Lake > Approved > Custom
• GCP > Dataplex > Lake > Approved > Regions
• GCP > Dataplex > Lake > Approved > Usage
• GCP > Dataplex > Lake > CMDB
• GCP > Dataplex > Lake > Labels
• GCP > Dataplex > Lake > Labels > Template
• GCP > Dataplex > Lake > Regions
• GCP > Dataplex > Lake > Usage
• GCP > Dataplex > Lake > Usage > Limit
• GCP > Dataplex > Permissions
• GCP > Dataplex > Permissions > Levels
• GCP > Dataplex > Permissions > Levels > Modifiers
• GCP > Dataplex > Regions
• GCP > Dataplex > Task > Active
• GCP > Dataplex > Task > Active > Age
• GCP > Dataplex > Task > Active > Last Modified
• GCP > Dataplex > Task > Approved
• GCP > Dataplex > Task > Approved > Custom
• GCP > Dataplex > Task > Approved > Regions
• GCP > Dataplex > Task > Approved > Usage
• GCP > Dataplex > Task > CMDB
• GCP > Dataplex > Task > Labels
• GCP > Dataplex > Task > Labels > Template
• GCP > Dataplex > Task > Regions
• GCP > Dataplex > Task > Usage
• GCP > Dataplex > Task > Usage > Limit
• GCP > Dataplex > Zone > Active
• GCP > Dataplex > Zone > Active > Age
• GCP > Dataplex > Zone > Active > Last Modified
• GCP > Dataplex > Zone > Approved
• GCP > Dataplex > Zone > Approved > Custom
• GCP > Dataplex > Zone > Approved > Regions
• GCP > Dataplex > Zone > Approved > Usage
• GCP > Dataplex > Zone > CMDB
• GCP > Dataplex > Zone > Labels
• GCP > Dataplex > Zone > Labels > Template
• GCP > Dataplex > Zone > Regions
• GCP > Dataplex > Zone > Usage
• GCP > Dataplex > Zone > Usage > Limit
• GCP > Turbot > Event Handlers > Logging > Sink > Compiled Filter > @turbot/gcp-dataplex
• GCP > Turbot > Permissions > Compiled > Levels > @turbot/gcp-dataplex
• GCP > Turbot > Permissions > Compiled > Service Permissions > @turbot/gcp-dataplex

Action Types

• GCP > Dataplex > Lake > Delete
• GCP > Dataplex > Lake > Router
• GCP > Dataplex > Lake > Set Labels
• GCP > Dataplex > Set API Enabled
• GCP > Dataplex > Task > Delete
• GCP > Dataplex > Task > Router
• GCP > Dataplex > Task > Set Labels
• GCP > Dataplex > Zone > Delete
• GCP > Dataplex > Zone > Router
• GCP > Dataplex > Zone > Set Labels

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage compute resources in Guardrails. This release includes breaking changes in the CMDB data for virtual machine. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below

Added:

In Azure > Compute > Disk:

• supportedCapabilities.diskControllerTypes
• diskIopsReadWrite
• lastOwnershipUpdateTime

In Azure > Compute > Virtual Machine:

• resources
• timeCreated
• etag

In Azure > Compute > Virtual Machine Scale Set:

• constrainedMaximumCapacity
• etag
• scaleInPolicy
• timeCreated
• upgradePolicy
• storageProfile. diskControllerType

In Azure > Compute > Snapshot:

• dataAccessAuthMode
• incrementalSnapshotFamilyId

Removed:

In Azure > Compute > Virtual Machine:

• statuses.time

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage App Service resources in Guardrails.

Added:

Azure > App Service > App Service Plan

• elasticScaleEnabled
• numberOfWorkers
• zoneRedundant

Azure > App Service > Function App

• configuration.acrUseManagedIdentityCreds
• configuration.acrUserManagedIdentityID
• configuration.elasticWebAppScaleLimit
• configuration.ipSecurityRestrictionsDefaultAction
• configuration.metadata
• configuration.minTlsCipherSuite
• configuration.scmIpSecurityRestrictionsDefaultAction
• dnsConfiguration
• publicNetworkAccess
• vnetBackupRestoreEnabled
• vnetContentShareEnabled
• vnetImagePullEnabled
• vnetRouteAllEnabled

Azure > App Service > Web App

• configuration.acrUseManagedIdentityCreds
• configuration.acrUserManagedIdentityID
• configuration.elasticWebAppScaleLimit
• configuration.ipSecurityRestrictionsDefaultAction
• configuration.metadata
• configuration.minTlsCipherSuite
• configuration.scmIpSecurityRestrictionsDefaultAction
• dnsConfiguration
• publicNetworkAccess
• vnetBackupRestoreEnabled
• vnetContentShareEnabled
• vnetImagePullEnabled
• vnetRouteAllEnabled

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage API Management resources in Guardrails.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Security Center resources in Guardrails. This release includes breaking changes in the CMDB data for security center. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below

Renamed:

• JitNetworkAccessPolicies to jitNetworkAccessPolicies
• Pricing to pricing
• Locations to locations

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage MySQL resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Front Door Service resources in Guardrails. This release includes breaking changes in the CMDB data for Front Door Service. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below.

Added:

• frontdoorId
• rulesEngines
• extendedProperties
• backendPoolsSettings
• backendPool.privateLinkAlias
• backendPool.privateLinkLocation
• backendPool.privateEndpointStatus
• backendPool.privateLinkResourceId
• backendPool.privateLinkApprovalMessage
• routingRule.rulesEngine
• routingRule.routeConfiguration.odataType
• routingRule.routeConfiguration.cacheConfiguration.cacheDuration
• routingRule.routeConfiguration.cacheConfiguration.queryParameters
• routingRule.webApplicationFirewallPolicyLink

Modified:

• routingRule.backendPool to routingRule.routeConfiguration.backendPool
• routingRule.forwardingProtocol to routingRule.routeConfiguration.forwardingProtocol
• routingRule.customForwardingPath to routingRule.routeConfiguration.customForwardingPath
• routingRule.cacheConfiguration.dynamicCompression to routingRule.routeConfiguration.cacheConfiguration. dynamicCompression
• routingRule.cacheConfiguration.queryParameterStripDirective to routingRule.routeConfiguration.cacheConfiguration. queryParameterStripDirective

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Data Factory resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage AKS resources in Guardrails.

Added:

• networkProfile.podCidrs
• networkProfile.ipFamilies
• networkProfile.outboundType
• networkProfile.serviceCidrs
• networkProfile.networkPolicy
• networkProfile.loadBalancerProfile.backendPoolType
• networkProfile.loadBalancerProfile.countIPv6
• networkProfile.loadBalancerProfile.idleTimeoutInMinutes
• networkProfile.loadBalancerProfile.allocatedOutboundPorts
• agentPoolProfiles.mode
• agentPoolProfiles.osSKU
• agentPoolProfiles.enableFips
• agentPoolProfiles.osDiskType
• agentPoolProfiles.spotMaxPrice
• agentPoolProfiles.scaleDownMode
• agentPoolProfiles.enableUltraSSD
• agentPoolProfiles.kubeletDiskType
• agentPoolProfiles.upgradeSettings.maxSurge
• agentPoolProfiles.nodeImageVersion
• agentPoolProfiles.enableEncryptionAtHost
• agentPoolProfiles.currentOrchestratorVersion

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage SignalR resources in Guardrails.

Added:

• hostNamePrefix
• serverless. connectionTimeoutInSeconds

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Service Bus resources in Guardrails.

Added:

Azure > Service Bus > Namespace

• disableLocalAuth
• status
• zoneRedundant

Azure > Service Bus > Queue

• maxMessageSizeInKilobytes

Azure > Service Bus > Topic

• maxMessageSizeInKilobytes

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Relay resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Recovery Service resources in Guardrails.

Added: Azure > Recovery Service > Vault

• properties.backupStorageVersion
• properties.bcdrSecurityLevel
• properties.publicNetworkAccess
• properties.restoreSettings
• properties.secureScore
• properties.securitySettings

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The AWS > RoboMaker > Robot Application > CMDB, AWS > RoboMaker > Fleet > CMDB and AWS > RoboMaker > Robot > CMDB policies will now be set to Skip by default because the resource types have been deprecated and will be removed in the next major version. Please check end of support for more information.

What's new?

• Track and manage Fargate FIPS Mode for Gov cloud accounts via Guardrails. To get started, set the AWS > ECS > Account Settings > Fargate FIPS Mode policy.
• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Resource Types

• AWS > ECS > Account Settings

Control Types

• AWS > ECS > Account Settings > CMDB
• AWS > ECS > Account Settings > Discovery
• AWS > ECS > Account Settings > Fargate FIPS Mode

Policy Types

• AWS > ECS > Account Settings > CMDB
• AWS > ECS > Account Settings > Fargate FIPS Mode
• AWS > ECS > Account Settings > Regions

Action Types

• AWS > ECS > Account Settings > Router
• AWS > ECS > Account Settings > Update Fargate FIPS Mode

What's new?

• Server

  • Introduced support for multi-architecture images, now compatible with both ARM64 and x86_64.
  • Added a default resource query to the context of calculated policies.
  • Updated several node packages to newer versions for improved functionality and security.
  • Updated Lambda to support recursive loops.

• UI

  • Now you can use the + sign to grant permissions in the context of both the identity and resource.
  • Updated several node packages to newer versions for improved functionality and security.

Bug fixes

• Server

  • Azure Credential Resolver now respects proxy settings, adding full proxy support.

• UI

  • Updated policy pack Terraform to correctly reference turbot_policy_pack.
  • Adjusted the Admin page layout for improved usability.

Requirements

• TEF: 1.59.0
• TED: 1.9.1

Base images

Alpine: 3.17.5 Ubuntu: 22.04.3

Enhancements

• Added an optional param blocks to the post_message pipeline. (#24) (Thanks @johnlayton for the contribution!)

Bug fixes

• resource/turbot_policy_pack_attachment: terraform apply failed to detect existing Policy Pack attachments. (#181)

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Application Insights resources in Guardrails. This release includes changes in the CMDB data as below.

Added:

• flowType
• requestSource

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Application Gateway resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Resource Types

• AWS > Support

Policy Types

• AWS > Support > API Enabled
• AWS > Support > Enabled
• AWS > Support > Permissions
• AWS > Support > Permissions > Levels
• AWS > Support > Permissions > Levels > Modifiers
• AWS > Support > Permissions > Lockdown
• AWS > Support > Permissions > Lockdown > API Boundary
• AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-support
• AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-support
• AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-support

What's new?

• Users can now manage whether AWS/User grant should include support:* permissions. To get started, set the AWS > Account > Permissions > Support Level policy.

Policy Types

• AWS > Account > Permissions > Support Level

Bug fixes

• The AWS > Turbot > IAM stack control did not correctly evaluate user memberships in custom IAM groups when the AWS > Turbot > Permissions > Custom Group Levels [Account] policy was set, and users were granted permissions for those custom IAM groups. This issue has now been fixed.

Bug fixes

• The AWS > EC2 > Volume > CMDB control would sometimes run unnecessarily due to a bad internal GraphQL dependency. This is now fixed.

Bug fixes

• Fixed put_s3_bucket_encryption pipeline to correctly encrypt an S3 bucket without returning an error. (#68) (Thanks @gcasilva for the contribution!)

Bug fixes

• A precheck dependency on the Kubernetes > Cluster > CMDB > Expiration policy was inadvertently added to the Kubernetes > Cluster > CMDB control. This precheck condition has now been removed.

Resource Types

• GCP > Vertex AI
• GCP > Vertex AI > Endpoint
• GCP > Vertex AI > Notebook Runtime Template

Control Types

• GCP > Vertex AI > API Enabled
• GCP > Vertex AI > CMDB
• GCP > Vertex AI > Discovery
• GCP > Vertex AI > Endpoint > Active
• GCP > Vertex AI > Endpoint > Approved
• GCP > Vertex AI > Endpoint > CMDB
• GCP > Vertex AI > Endpoint > Discovery
• GCP > Vertex AI > Endpoint > Labels
• GCP > Vertex AI > Endpoint > Usage
• GCP > Vertex AI > Notebook Runtime Template > Active
• GCP > Vertex AI > Notebook Runtime Template > Approved
• GCP > Vertex AI > Notebook Runtime Template > CMDB
• GCP > Vertex AI > Notebook Runtime Template > Discovery
• GCP > Vertex AI > Notebook Runtime Template > Router
• GCP > Vertex AI > Notebook Runtime Template > Usage

Policy Types

• GCP > Turbot > Event Handlers > Logging > Sink > Compiled Filter > @turbot/gcp-vertexai
• GCP > Turbot > Permissions > Compiled > Levels > @turbot/gcp-vertexai
• GCP > Turbot > Permissions > Compiled > Service Permissions > @turbot/gcp-vertexai
• GCP > Vertex AI > API Enabled
• GCP > Vertex AI > Approved Regions [Default]
• GCP > Vertex AI > CMDB
• GCP > Vertex AI > Enabled
• GCP > Vertex AI > Endpoint > Active
• GCP > Vertex AI > Endpoint > Active > Age
• GCP > Vertex AI > Endpoint > Active > Last Modified
• GCP > Vertex AI > Endpoint > Approved
• GCP > Vertex AI > Endpoint > Approved > Custom
• GCP > Vertex AI > Endpoint > Approved > Regions
• GCP > Vertex AI > Endpoint > Approved > Usage
• GCP > Vertex AI > Endpoint > CMDB
• GCP > Vertex AI > Endpoint > Labels
• GCP > Vertex AI > Endpoint > Labels > Template
• GCP > Vertex AI > Endpoint > Regions
• GCP > Vertex AI > Endpoint > Usage
• GCP > Vertex AI > Endpoint > Usage > Limit
• GCP > Vertex AI > Labels Template [Default]
• GCP > Vertex AI > Notebook Runtime Template > Active
• GCP > Vertex AI > Notebook Runtime Template > Active > Age
• GCP > Vertex AI > Notebook Runtime Template > Active > Last Modified
• GCP > Vertex AI > Notebook Runtime Template > Approved
• GCP > Vertex AI > Notebook Runtime Template > Approved > Custom
• GCP > Vertex AI > Notebook Runtime Template > Approved > Regions
• GCP > Vertex AI > Notebook Runtime Template > Approved > Usage
• GCP > Vertex AI > Notebook Runtime Template > CMDB
• GCP > Vertex AI > Notebook Runtime Template > Regions
• GCP > Vertex AI > Notebook Runtime Template > Usage
• GCP > Vertex AI > Notebook Runtime Template > Usage > Limit
• GCP > Vertex AI > Permissions
• GCP > Vertex AI > Permissions > Levels
• GCP > Vertex AI > Permissions > Levels > Modifiers
• GCP > Vertex AI > Regions

Action Types

• GCP > Vertex AI > Endpoint > Delete
• GCP > Vertex AI > Endpoint > Router
• GCP > Vertex AI > Endpoint > Set Labels
• GCP > Vertex AI > Notebook Runtime Template > Delete
• GCP > Vertex AI > Set API Enabled

What's new?

• Added support to process real-time enable and disable events for Vertex AI API via Service Usage APIs.

What's new?

• New tables added
  • okta_authentication_policy (#139)

Bug fixes

• Fixed the rules column in okta_signon_policy, okta_password_policy, okta_idp_discovery_policy and okta_authentication_policy tables to correctly return data instead of null. (#145)

Dependencies

• Recompiled plugin with Go version 1.22. (#146)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#146)

All Pipes workspaces are now running Steampipe v0.24.0.

For more information on this Steampipe release, see the release notes.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Search Management resources in Guardrails.

Added:

• authOptions
• disableLocalAuth
• encryptionWithCmk
• networkRuleSet
• privateEndpointConnections
• publicNetworkAccess
• semanticSearch
• sharedPrivateLinkResources

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Enhancements

• The Plugin and the Steampipe Anywhere binaries are now built with the netgo package.
• Added the version flag to the plugin's Export tool. (#65)

Bug fixes

• Fixed pagination across all the tables. (#34)

Dependencies

• Recompiled plugin with Go version 1.22. (#43)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#43)

What's new?

• Initial release with support for installing Powerpipe and adding it to $PATH.

What's new?

• Initial release with support for running Powerpipe benchmarks and controls, creating annotations for Infrastructure as Code (IaC) checks, and uploading snapshots to Turbot Pipes.

What's new?

Action Types

• GCP > Storage > Bucket > Set Fine-grained Access Control
• GCP > Storage > Bucket > Set Uniform Access Control

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Synapse Analytics resources in Guardrails.

Added: Azure > Synapse Analytics > Workspace

• azureADOnlyAuthentication
• createManagedPrivateEndpoint
• encryption
• extraProperties
• publicNetworkAccess
• settings
• trustedServiceBypassEnabled
• workspaceUID

Azure > Synapse Analytics > SQL Pool

• storageAccountType

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

Action Types

• Azure > Storage > Storage Account > Set Minimum TLS Version

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage PostgreSQL resources in Guardrails. This release includes breaking changes in the CMDB data for server and flexible server. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below

Added:

• authConfig

• dataEncryption

• standbyAvailabilityZone

• network. delegatedSubnetResourceId

• network. privateDnsZoneArmResourceId

• replicaCapacity

• replicationRole

• systemData

• configurations.documentationLink

• configurations.isConfigPendingRestart

• configurations.isDynamicConfig

• configurations.isReadOnly

• configurations.unit

Modified:

• The data type of the attribute firewallRules has been changed from array ([]) to object ({}).

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Network Watcher resources in Guardrails.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• Fixed an issue where credentials from the imported foreign schema were lost after restarting the session in the Postgres FDW extension of the plugin. (#2275)

Dependencies

• Recompiled plugin with Go version 1.22. (#450)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#450)

What's new?

• New tables added
  • gcp_composer_environment (#649)
  • gcp_dataplex_lake (#642)
  • gcp_dataplex_zone (#642)
  • gcp_dataplex_task (#642)
  • gcp_dataplex_asset (#642)
  • gcp_dataproc_metastore_service (#654)
  • gcp_vpc_access_connector (#647)

Enhancements

• Added connection_info column to the gcp_alloydb_instance table. (#651)

Bug fixes

• Removed the name column from the gcp_bigquery_table table since the API response did not include this field. (#648)

Dependencies

• Recompiled plugin with Go version 1.22. (#635)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#635)

Enhancements

• Added the event_region column to the aws_health_event table. (#2293)
• Added the location_type column to the aws_ec2_instance_type table. (#2294)

Bug fixes

• Removed unnecessary hydration of the instance_type column in aws_ec2_instance_type table. (#2294)
• Fixed an issue where credentials from import foreign schema were lost after restarting session in the Posgres FDW extensions of the plugin. (#2275)

Bug fixes

• Fixed the CLI to correctly display the latest released version when using the steampipe -v command. (#4388)

Bug fixes

• Fixed an issue where Steampipe failed to download the embedded PostgreSQL database and FDW during installation. (#4382)

Deprecations

• This GitHub Action is deprecated and will no longer be maintained. Please use Powerpipe Action Check instead.

Bug fixes

• Fixed secret references for AWS creds in README.

Dependencies

• Bumped @actions/core from v0.10.0 to v0.10.1.
• Bumped @vercel/ncc from v0.38.0 to v0.38.1.
• Bumped actions/setup-node from 3 to 4. (#95)
• Bumped actions/upload-artifact from 3 to 4. (#100)
• Bumped braces from 3.0.2 to 3.0.3. (#109)
• Bumped eslint from 8.52.0 to 8.56.0. (#101)
• Bumped eslint from 8.56.0 to 9.2.0. (#108)
• Bumped github/codeql-action from 2 to 3. (#99)
• Bumped semver from v7.5.4 to v7.6.3.
• Update to node v20 in action and check-dist workflow (#104) (Thanks @francois2metz for the contribution!)

Bug fixes

• trigger introspection output correctly shows param attribute. (#900)

Bug fixes

• The serviceProperties.table.clientRequestId and serviceProperties.table.requestId properties for storage accounts have now been made dynamic to avoid unnecessary notifications in the activity tab.

Bug fixes

• Fixed incorrect references to various Quick Actions.

Whats new

• Added the ability to configure plugin startup timeout. (#4320)
• Installed FDW and embedded Postgres database from GHCR instead of GCP. (#4344)
• Updated query JSON output format to add a columns property containing the column information. This allows us to handle duplicate column names by appending a unique suffix to duplicate column name (#4317)

Existing query JSON format:

$ steampipe query "select account_id, arn from aws_account" --output json
{
 "rows": [
  {
   "account_id": "123456789012",
   "arn": "arn:aws:::123456789012"
  }
 ]
}

New query JSON format(with new columns property):

$ steampipe query "select account_id, arn from aws_account" --output json
{
 "columns": [
  {
   "name": "account_id",
   "data_type": "text"
  },
  {
   "name": "arn",
   "data_type": "text"
  }
 ],
 "rows": [
  {
   "account_id": "123456789012",
   "arn": "arn:aws:::123456789012"
  }
 ]
}

Bug fixes

• Fixed the issue where the plugin manager was incorrectly reporting a shutdown. (#4365)

What's new?

• tags argument in pipeline param and mod variable resources. (#898).
• Updated Docker dependency to v27.1.2.

What's new?

Policy Types

• Kubernetes > Cluster > ServiceNow > Import Set > Insert Mode
• Kubernetes > ConfigMap > ServiceNow > Import Set > Insert Mode
• Kubernetes > Deployment > ServiceNow > Import Set > Insert Mode
• Kubernetes > Namespace > ServiceNow > Import Set > Insert Mode
• Kubernetes > Node > ServiceNow > Import Set > Insert Mode
• Kubernetes > Pod > ServiceNow > Import Set > Insert Mode
• Kubernetes > ReplicaSet > ServiceNow > Import Set > Insert Mode
• Kubernetes > Service > ServiceNow > Import Set > Insert Mode

Bug fixes

• Improved error handling for osquery error events.

Bug fixes

• Query controls for various resource types will now go into an invalid state if we receive an error from the osquery agent.

What's new?

• New tables added
  • azure_key_vault_certificate (#698)
  • azure_web_application_firewall_policy (#834)

Enhancements

• Added time_created column to the azure_compute_virtual_machine table. (#831)
• Added ip_configuration, linked_public_ip_address, nat_gateway and service_public_ip_address columns to the azure_public_ip table. (#836)
• Added 20 new columns to the azure_postgresql_flexible_server table. (#824)

Bug fixes

• Fixed the ip_configurations column of the azure_subnet table to correctly return data instead of null. (#822)
• Fixed the web_application_firewall_configuration column of azure_application_gateway table to correctly return data instead of null. (#835)

Dependencies

• Recompiled plugin with Go version 1.22. (#832)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool.
• Updated the azure_mysql_flexible_server and azure_postgresql_flexible_server tables to use the new Azure ARM Go package. (#820)

What's new?

• New tables added
  • aws_app_runner_service (#2279)
  • aws_ec2_load_balancer_listener_rule (#2272)
  • aws_lightsail_bucket (#2258)
  • aws_memorydb_cluster (#2268)
  • aws_securityhub_enabled_product_subscription (#2281)
  • aws_timestreamwrite_database (#2269)
  • aws_timestreamwrite_table (#2269)

Enhancements

• Updated the aws_ec2_ami table to correctly return disabled AMIs on passing the disabled value to the state optional qual (where state = 'disabled'). (#2277)
• Added 100+ new columns across all tables per AWS Go SDK v2 1.27.0. (#2139)

Dependencies

• Recompiled plugin with Go version 1.22. (#2283)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#2286)

Bug fixes

• source attribute in function step is now evaluated relative to the its mod directory rather than the root mod directory. (#895).

What's new?

• Added Australian Cyber Security Center (ACSC) Essential Eight benchmark (powerpipe benchmark run aws_compliance.benchmark.acsc_essential_eight). (#823)

What's new?

Policy Types

• GCP > Storage > Bucket > ServiceNow > Import Set > Insert Mode
• GCP > Storage > Object > ServiceNow > Import Set > Insert Mode

Control Types

• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set

Policy Types

• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set
• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set > Archive Columns
• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set > Insert Mode
• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set > Record
• GCP > Kubernetes Engine > Region Cluster > ServiceNow > Import Set > Table Name
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set > Archive Columns
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set > Insert Mode
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set > Record
• GCP > Kubernetes Engine > Region Node Pool > ServiceNow > Import Set > Table Name
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set > Archive Columns
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set > Insert Mode
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set > Record
• GCP > Kubernetes Engine > Zone Cluster > ServiceNow > Import Set > Table Name
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set > Archive Columns
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set > Insert Mode
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set > Record
• GCP > Kubernetes Engine > Zone Node Pool > ServiceNow > Import Set > Table Name

What's new?

Policy Types

• GCP > Global Region > ServiceNow > Import Set > Insert Mode
• GCP > Multi-Region > ServiceNow > Import Set > Insert Mode
• GCP > Project > ServiceNow > Import Set > Insert Mode
• GCP > Region > ServiceNow > Import Set > Insert Mode
• GCP > Zone > ServiceNow > Import Set > Insert Mode

Control Types

• Azure > AKS > Managed Cluster > ServiceNow > Import Set

Policy Types

• Azure > AKS > Managed Cluster > ServiceNow > Import Set
• Azure > AKS > Managed Cluster > ServiceNow > Import Set > Archive Columns
• Azure > AKS > Managed Cluster > ServiceNow > Import Set > Insert Mode
• Azure > AKS > Managed Cluster > ServiceNow > Import Set > Record
• Azure > AKS > Managed Cluster > ServiceNow > Import Set > Table Name

What's new?

Policy Types

• Azure > Subscription > ServiceNow > Import Set > Insert Mode

What's new?

Policy Types

• ServiceNow > Import Set > Insert Mode [Default]

Bug fixes

• Guardrails did not correctly raise the real-time modifyVolume event for EBS Volume Notifications. This issue is now fixed.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

Action Types

• AWS > SWF > Domain > Delete from AWS

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

Bug fixes

• Fixed incorrect references to various Quick Actions.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• Volume's metadata will now also include createdBy details in Guardrails CMDB.
• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• The AWS > EC2 > Volume > Performance Configuration control would sometimes fail to set the expected configuration per AWS > EC2 > Volume > Performance Configuration > * policies and move to an Invalid state if the required data was not available for new volumes in the CMDB. The control will now move to TBD instead and retry after 5 minutes to fetch the required data correctly and set the performance configuration as expected.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• The Approved > Usage policy for resource types will now default to Approved instead of Approved if AWS > {service} > Enabled.

Bug fixes

• Improved descriptions for various resource types to ensure they are clearer and more helpful.
• Fixed incorrect references to various Quick Actions.

What's new?

• Support for Node.js 20 in the Lambda runtime.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.

Bug fixes

• The CMDB control for the service resource type will no longer depend on the API Enabled policy being set to Enforce: Enabled for the service.
• Improved descriptions for various resource types to ensure they are clearer and more helpful.