iam-general-policies: add cloudforms, cloudforms_ami

• 2.4.0 -- 2023-03-31
  • iam-general-policies: add policies from INF.service.cloudforms.tf
    • cloudforms
    • cloudforms_ami

• This will lead to a change in the distributed INF.service.cloudforms.tf, as well as an upgrade/import operation each account

iam-general-policies: add ipr_vpc_endpoints to enable S3 interface endpoints

• 2.2.7 -- 2023-01-03
  • iam-general-policies
    • add ipr_vpc_endpoints to enable S3 interface endpoints

iam-general-policies: add ipr_vpc_endpoints to enable S3 interface endpoints

• 1.16.6 -- 2023-01-03
  • iam-general-policies
    • add ipr_vpc_endpoints to enable S3 interface endpoints

config: change AWSConfigRole to AWS_ConfigRole

• 2.2.6 -- 2022-11-21
  • config
    • replaced role AWSConfigRole with AWS_ConfigRole (deprecation 2021-04-01)

config: fix region variable

• 1.16.5 -- 2022-11-02
  • config
    • fix region variables

s3-access-logs: disable acl

• 1.16.4 -- 2022-11-01
  • s3-access-logs
    • disable acl

s3-flow-logs: backport from tf-upgrade changes for bucket encryption to sse-s3

• 1.16.3 -- 2022-11-01
  • s3-flow-logs
    • change encryption to AES256 from aws:kms (no default for log delivery)
    • update policy according to docs: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html

add flags for new feature for default vpc

• 2.2.5 -- 2022-10-31
  • vpc-remove-defaults
    • add enable_network_address_usage_metrics = false due to new feature, not existing in govcloud
    • link

s3-flow-logs: change encryption to AES256

• 2.2.4 -- 2022-10-28
  • s3-flow-logs
    • change encryption to AES256 from aws:kms (no default for log delivery)
    • update policy according to docs: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html

ldap-ou-create: remove bocApplicationData from attributes

• 2.2.3 -- 2022-08-02
  • ldap-ou-create
    • remove bocApplicationData from attributes