Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.1.1] - 2024-11

Changed

Library updates to address Regular Expression Denial of Service (ReDoS) in cross-spawn

[1.1.0] - 2024-10

Changed

Replacing CodeCommit with S3 bucket as source code respository for network firewall configurations.

[1.0.8] - 2024-09

Changed

Library updates to address path-to-regexp outputs backtracking regular expressions
Library updates to address AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Library updates to address micromatch: vulnerable to Regular Expression Denial of Service

[1.0.7] - 2024-08

Changed

Library updates to address axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

[1.0.6] - 2024-07

Changed

Bump up minor versions of dependencies
Library updates to address braces: fails to limit the number of characters it can handle

[1.0.5] - 2024-05

Changed

Rename the solution to Centralized Network Inspection on AWS
Bump up minor versions of dependencies

[1.0.4] - 2023-11-10

Changed

Update NodeJS environment for CodeBuild from NodeJS16 to NodeJS18.

[1.0.3] - 2023-10-27

Changed

Library updates to address Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
Library updates to address xml2js vulnerable to improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

[1.0.2] - 2022-12-19

Changed

Name change to Firewall Automation for Network Traffic on AWS
Upgrade to CDK v2
Fix NPM security warnings
Fix SonarQube bugs and increase unit test coverage

[1.0.1] - 2021-04-10

Changed

Updated default branch name to 'main'. Change branch settings in your existing AWS CodeCommit repository.

[1.0.0] - 2021-02-24

Added

New solution AWS Network Firewall Deployment Automations for AWS Transit Gateway, initial version