v3.18.3

3.18.3 (2024-08-27)

Bug Fixes

• wrong import in Cognito Email Sender lambda function (#786) (f1cfae9)

v3.18.2

3.18.2 (2024-08-22)

Bug Fixes

• add api missing variables (zitadel domain and app key) (#781) (0d92933)
• attach permission to retrieve secrets to API ECS task (#783) (b2d73f8)
• permission to use DynamoDB was not properly set in the ECS task configuration (#784) (ee6c425)
• permission to use KMS was not properly set in the ECS task configuration (#785) (6101829)

v3.18.1

3.18.1 (2024-08-13)

Bug Fixes

• Attach files from fileInputs in a dynamicRow (#776) (b8084a8)

v3.18.0

3.18.0 (2024-08-12)

Features

• add new secrets for Zitadel (#764) (631db20)

Bug Fixes

• remove unused secret (#772) (e812b7d)
• secret arn output name (#771) (eadcb8a)
• Secrets vs variable (#770) (34b4da0)
• set API service to use latest task def (#767) (769eae9)

Miscellaneous Chores

• add alarms for all IdP LB target groups (#773) (cb8768c)
• add AWS CLI prerequisite to README.md (#775) (0001d46)
• prepare zitadel variables for production deployment (#774) (1607916)
• update IdP DMARC security email (#769) (4a7e047)

v3.17.0

3.17.0 (2024-08-08)

Features

• add API CloudWatch alarms (#754) (f7d3e38)
• add HTTP2 IdP target group (#762) (e49bcb6)
• update IdP WAF to block large requests (#756) (4fae4a4)

Bug Fixes

• add label match custom rule (#760) (e8a76c8)
• exclude EC2MetaDataSSRF_Body WAF ACL rule (#759) (4dceba4)
• IdP listener rule for well-known config (#763) (0e0010c)
• switch IdP LB protocol to HTTP1 (#758) (2379e06)

Miscellaneous Chores

• add OpenAPI doc route to WAF (#761) (010fcec)
• added rds_connector_db_password variable to RDS terragrunt.hcl file (#757) (2173fca)
• remove completed import blocks (#755) (2170624)
• rename ECS API task from form-api to forms-api (#766) (391ff5e)
• synced file(s) with cds-snc/site-reliability-engineering (#752) (67e6358)
• upgrade to Release Please v4 (#765) (ae1920e)

v3.16.0

3.16.0 (2024-07-29)

Features

• add API load balancer target group (#736) (7e87c4e)
• add read-only user for RDS connector (#751) (0a3a853)
• deploy API ECS service in Staging (#746) (64cd26d)
• Enable Athena Federated Query for RDS (#745) (133145d)

Bug Fixes

• add API paths to WAF and fix healthcheck (#747) (907c469)
• Athena-DynamoDB connector policy (#741) (dea7b19)
• combine API valid paths with app (#748) (0185313)
• create API certificate validation resource (#744) (b4fb494)
• create dedicated security group for connector (#749) (a883778)
• downgrade local AWS provider (#743) (bb92b87)
• S3 egress from the connector (#750) (4d17823)

v3.15.0

3.15.0 (2024-07-23)

Features

• add API ECS service to the Forms cluster (#734) (62d1753)

Bug Fixes

• block invalid host requests to the IdP (#732) (7ad863d)
• convert LB security rules to standalone (#740) (443fe06)
• terraform script for athena-dynamodb (#738) (0d16981)
• Use a custom policy for the dynamodb-lambda connector (allows access to AuditLog only) (#731) (089f27d)

Miscellaneous Chores

• upgrade to latest Terraform and Terragrunt (#735) (c21f697)
• upgrade to latest Terraform AWS provider (#739) (981e82f)

v3.14.1

3.14.1 (2024-07-18)

Bug Fixes

• alarm module apply when idp not enabled (#728) (e48896e)
• response archiver lambda will ignore confirmation code entries in the DynamoDB Vault table when scanning for items (#730) (dbd7242)

v3.14.0

3.14.0 (2024-07-16)

Features

• add IdP CloudWatch alarms (#720) (f2696eb)
• Enable Amazon Athena to communicate with DynamoDB (#723) (188824d)

Bug Fixes

• Change the Archive Index key projection back to All (#727) (4cdccf5)
• Updates global indexes to only project needed keys (#725) (78ef137)

Miscellaneous Chores

• deps: update all non-major github action dependencies (#721) (aa42dae)
• switch from using GSIs to Scan operations for both the response archiver and the nagware lambda functions (#726) (c09caba)
• synced file(s) with cds-snc/site-reliability-engineering (#722) (605faef)

v3.13.0

3.13.0 (2024-07-05)

Features

• increase the number of form viewer tasks in prod (#717) (0a252de)

Bug Fixes

• scale Staging to multiple ECS tasks (#719) (2e45c8b)