s3-config-org: update key policy, sns permissions to allow s3 -> sns -> sqs

• 2.5.3 -- 2024-02-09
  • s3-config-org
    • update key policy, sns permissions to allow s3 -> sns -> sqs

s3-config-org: add enable_s3_sns, enable_s3_sqs, for bucket notifications

• 2.5.2 -- 2024-02-07
  • s3-config-org
    • add enable_s3_sns, enable_s3_sqs, for bucket notifications

config: flag for enable_rules, change s3 bucket, create s3 bucket

• 2.5.1 -- 2024-01-30
  • config
    • add enable_rules (to turn them off for the move to org config rules)
    • add s3_bucket to use a different s3 bucket (for the move to org config rules)
    • add create_s3_bucket

s3-config-org: add org-based s3 bucket and key to centralize snapshots

• 2.5.0 -- 2024-01-02
  • s3-config-org
    • create for org-based s3 bucket and kms key for centralized config locations (within aws organization)

iam-general-policies: add kms:ListGrants to KMS keys

• 2.4.14 -- 2023-11-09
  • iam-general-policies
    • add kms:ListGrants to KMS keys

iam-general-policies: add cloudforms_kms_key_arns to be added at run-time

• 2.4.13 -- 2023-11-08
  • iam-general-policies
    • add cloudforms_kms_key_arns to be added at run-time

iam-general-policies: updates for ip address restriction

• 2.4.12 -- 2023-11-03
  • iam-general-policies
    • add 10/8 and 172.16/12 to the allowed VPC cidr blocks and remove it from from the base cid (only public IPs)
    • add network-prod s3 interface endpoints

iam-general-policies: add 10/8 and 172.16/12 to the allowed cidr blocks to fix problems with calling api from our vpcs, and from other vpcs in our network

• 2.4.11 -- 2023-11-02
  • iam-general-policies
    • add 10/8 and 172.16/12 to the allowed cidr blocks to fix problems with calling api from our vpcs, and from other
      vpcs in our network

config: add bucket_key_enabled, use_kms_encryption

• 2.4.10 -- 2023-10-11
  • config, added
    • bucket_key_enabled: default false
    • use_kms_encryptioon: default true

update ldap.e to ldap2.e

• 2.4.9 -- 2023-10-06
  • ldap-ou-create
    • update ldap.e to ldap2.e