add tag to subnet, fix up vpc endpoints route53

• 2.8.2 -- 2023-04-18
  • subnets:
    • add boc:vpc:subnet_label
  • route53-zone-association/lambda-role
    • add ssm permissions
  • route53-zone-association/terraform-role
    • add ssm permissions
  • vpc-interface-endpoint
    • add additional information to ssm parameter
    • cleanup zone creation based on endpoint service definition (some are missing a zone)

subnet: enable availability_zones

• 2.8.1 -- 2023-04-10
  • subnets:
    • enable availability_zones, to be able to select less than the full set of available zones (say, for do2-gov, where we had 2 but now they have
      3 zones).
    • fix up the cidr math
    • this drops a new variables.subnets.tf for the examples, to include the optional availability_zones
    • as we are nearing completion with updating all of the vpc code to TF 1.x, this should not be a problem, and it really only applies in do2-gov

enbable tgw tagging

• 2.6.2 -- 2023-03-20
  • tag-shared-vpc-resources
    • enable tgw tagging by default, which works now

add share-resources, fix flowlogs s3 arn

• 2.6.0 -- 2023-02-24

  • share-resources: new submodule

• 2.6.1 -- 2023-02-24

  • flowlogs
    • remove iam_role_arn for s3 log destinations to avoid this error:
      Error: creating Flow Log (vpc-0f791ea1e2bb46924): InvalidParameter: DeliverLogsPermissionArn is not applicable for s3 delivery

fix flowlogs s3 arn

• 1.6.10 -- 2023-02-24
  • flowlogs
    • remove iam_role_arn for s3 log destinations to avoid this error:
      Error: creating Flow Log (vpc-0f791ea1e2bb46924): InvalidParameter: DeliverLogsPermissionArn is not applicable for s3 delivery

-tflowlogs: add enable_kinesis_stream variable

• 2.4.8 -- 2023-01-18
  • flowlogs
    • add enable_kinesis_stream flag

update nacls to create attachment nacl

• 2.4.7 -- 2022-12-30
  • nacls
    • split out attachment subnets, if present
    • create attachment nacl, add entries in all, out all

update vpc attachment peer to fix up tags

• 2.4.6 -- 2022-12-16
  • vpc-transit-gateway-association/self
    • update tags to a common format
    • add var.tags
    • detect if running in network account, and only add ec2_tags if not

add route propagation to vpn route table

• 2.4.5 -- 2022-12-07
  • vpc-transit-gateway-association/self
    • add route propagation for vpc into VPN route table
    • if vpn_route_prefix_list_name == null, do not create vpn route or route propagation

subnets: add offset

• 2.4.4 -- 2022-11-04
  • subnets
    • add offset, enabled, availability_zone