Bug fixes
- Guardrails will now exclude upserting VPC resources that are shared from other accounts and only upsert resources that belong to the owner account.
- In the previous version, we believed we had resolved an issue with Internet Gateways not being upserted into the CMDB while processing real-time
CreateDefaultVpc
events. However, we overlooked an edge case in the fix. We have now addressed this issue, ensuring that Internet Gateways will be reliably discovered and upserted into the Guardrails CMDB. We recommend updating theaws-vpc-core
mod to version 5.17.1 or higher to enable Guardrails to correctly process real-time CreateDefaultVpc events for Internet Gateways. - Guardrails failed to filter out real-time events for resource types if their parent resource types' CMDB policy was set to
Enforce: Disabled
. This is now fixed.