release/v1.3.2

awslabs · Mar 3, 2023 · 899cb4f · 899cb4f
1 parent 1ec8828
commit 899cb4f
Show file tree

Hide file tree

Showing 23 changed files with 51 additions and 38 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.2] - 2023-03-02
+
+### Changed
+
+- enhancement(securityhub): enable nist 800-53 rev5 standard
+- fix(network): allow -1:-1 port range in NACL config
+- fix(validation): fix OU validation
+- fix: conflicting logical id for org lookup in createIpamSsmRole
+
+### Configuration Changes
+
+- chore: update best practices config to use nist 800-53 security hub standard
+
 ## [1.3.1] - 2023-02-28
 
 ### Added

diff --git a/source/package.json b/source/package.json
@@ -1,6 +1,6 @@
 {
   "name": "landing-zone-accelerator-on-aws",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "Landing Zone Accelerator on AWS",
   "license": "Apache-2.0",
   "author": {

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/accounts-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/accounts-stack.test.ts.snap
@@ -983,7 +983,7 @@ exports[`AccountsStack us-east-1 Construct(AccountsStack):  Snapshot Test 1`] =
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-AccountsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -1195,7 +1195,7 @@ exports[`AccountsStack us-west-2 Construct(AccountsStackUsWest2):  Snapshot Test
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-AccountsStack-111111111111-us-west-2/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/.../packages/@aws-accelerator/accelerator/test/__snapshots__/applications-stack.test.ts.snap b/.../packages/@aws-accelerator/accelerator/test/__snapshots__/applications-stack.test.ts.snap
@@ -526,7 +526,7 @@ exports[`ApplicationsStack Construct(ApplicationsStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-CustomizationsStack-444444444444-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/bootstrap-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/bootstrap-stack.test.ts.snap
@@ -797,7 +797,7 @@ exports[`BootstrapStack Construct(BootstrapStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-BootstrapStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...ackages/@aws-accelerator/accelerator/test/__snapshots__/customizations-stack.test.ts.snap b/...ackages/@aws-accelerator/accelerator/test/__snapshots__/customizations-stack.test.ts.snap
@@ -455,7 +455,7 @@ exports[`CustomizationsStack Construct(CustomizationsStack):  Snapshot Test 1`]
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-CustomizationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -999,7 +999,7 @@ exports[`CustomizationsStack Construct(CustomizationsStack):  Snapshot Test 2`]
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-CustomizationsStack-444444444444-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/finalize-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/finalize-stack.test.ts.snap
@@ -151,7 +151,7 @@ exports[`FinalizeStack Construct(FinalizeStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-FinalizeStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/key-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/key-stack.test.ts.snap
@@ -475,7 +475,7 @@ exports[`KeyStack Construct(KeyStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-KeyStack-222222222222-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/logging-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/logging-stack.test.ts.snap
@@ -3083,7 +3083,7 @@ exports[`LoggingStack Construct(LoggingStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-LoggingStack-333333333333-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -6235,7 +6235,7 @@ exports[`LoggingStackOuTargets Construct(LoggingStackOuTargets):  Snapshot Test
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-LoggingStack-333333333333-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...s-accelerator/accelerator/test/__snapshots__/network-associations-gwlb-stack.test.ts.snap b/...s-accelerator/accelerator/test/__snapshots__/network-associations-gwlb-stack.test.ts.snap
@@ -719,7 +719,7 @@ exports[`NetworkAssociationsGwlbStack Construct(NetworkAssociationsGwlbStack):
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkAssociationsGwlbStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...s/@aws-accelerator/accelerator/test/__snapshots__/network-associations-stack.test.ts.snap b/...s/@aws-accelerator/accelerator/test/__snapshots__/network-associations-stack.test.ts.snap
@@ -2130,7 +2130,7 @@ exports[`NetworkAssociationsStack Construct(NetworkAssociationsStack):  Snapshot
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkAssociationsStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/.../packages/@aws-accelerator/accelerator/test/__snapshots__/network-prep-stack.test.ts.snap b/.../packages/@aws-accelerator/accelerator/test/__snapshots__/network-prep-stack.test.ts.snap
@@ -1376,7 +1376,7 @@ drop http $HOME_NET any -> $EXTERNAL_NET any (http.host; content:"example.com";
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkPrepStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...ckages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-dns-stack.test.ts.snap b/...ckages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-dns-stack.test.ts.snap
@@ -442,7 +442,7 @@ exports[`NetworkVpcDnsStack Construct(NetworkVpcDnsStack):  Snapshot Test 1`] =
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkVpcDnsStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/.../@aws-accelerator/accelerator/test/__snapshots__/network-vpc-endpoints-stack.test.ts.snap b/.../@aws-accelerator/accelerator/test/__snapshots__/network-vpc-endpoints-stack.test.ts.snap
@@ -939,7 +939,7 @@ exports[`NetworkVpcEndpointsStack Construct(NetworkVpcEndpointsStack):  Snapshot
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkVpcEndpointsStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...e/packages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-stack.test.ts.snap b/...e/packages/@aws-accelerator/accelerator/test/__snapshots__/network-vpc-stack.test.ts.snap
@@ -2919,7 +2919,7 @@ exports[`NetworkVpcStack Construct(NetworkVpcStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-NetworkVpcStack-555555555555-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...ce/packages/@aws-accelerator/accelerator/test/__snapshots__/operations-stack.test.ts.snap b/...ce/packages/@aws-accelerator/accelerator/test/__snapshots__/operations-stack.test.ts.snap
@@ -872,7 +872,7 @@ exports[`OperationsStack Construct(OperationsStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-OperationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -1959,7 +1959,7 @@ exports[`delegatedAdminStack Construct(OperationsStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-OperationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...packages/@aws-accelerator/accelerator/test/__snapshots__/organizations-stack.test.ts.snap b/...packages/@aws-accelerator/accelerator/test/__snapshots__/organizations-stack.test.ts.snap
@@ -2819,7 +2819,7 @@ exports[`MultiOuOrganizationsStack Construct(OrganizationsStack):  Snapshot Test
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -5431,7 +5431,7 @@ exports[`OrganizationsStack Construct(OrganizationsStack):  Snapshot Test 1`] =
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -8282,7 +8282,7 @@ exports[`delegatedAdminStack Construct(OrganizationsStack):  Snapshot Test 1`] =
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-OrganizationsStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/pipeline-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/pipeline-stack.test.ts.snap
@@ -2080,7 +2080,7 @@ exports[`PipelineStack Construct(PipelineStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/PipelineStack/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/prepare-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/prepare-stack.test.ts.snap
@@ -4367,7 +4367,7 @@ exports[`PrepareStack Construct(PrepareStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-PrepareStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...ackages/@aws-accelerator/accelerator/test/__snapshots__/security-audit-stack.test.ts.snap b/...ackages/@aws-accelerator/accelerator/test/__snapshots__/security-audit-stack.test.ts.snap
@@ -2737,7 +2737,7 @@ def script_handler(events, context):
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityAuditStack-222222222222-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -5122,7 +5122,7 @@ def script_handler(events, context):
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityAuditStack-222222222222-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/...ges/@aws-accelerator/accelerator/test/__snapshots__/security-resources-stack.test.ts.snap b/...ges/@aws-accelerator/accelerator/test/__snapshots__/security-resources-stack.test.ts.snap
@@ -3860,7 +3860,7 @@ exports[`SecurityResourcesStack Construct(SecurityResourcesStack):  Snapshot Tes
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityResourcesStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -7146,7 +7146,7 @@ exports[`delegatedAdminStack Construct(SecurityResourcesStack):  Snapshot Test 1
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityResourcesStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/accelerator/test/__snapshots__/security-stack.test.ts.snap b/source/packages/@aws-accelerator/accelerator/test/__snapshots__/security-stack.test.ts.snap
@@ -1211,7 +1211,7 @@ exports[`SecurityStack Construct(SecurityStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -2262,7 +2262,7 @@ exports[`delegatedAdminStack Construct(SecurityStack):  Snapshot Test 1`] = `
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-SecurityStack-111111111111-us-east-1/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },

diff --git a/source/packages/@aws-accelerator/installer/test/__snapshots__/installer.test.ts.snap b/source/packages/@aws-accelerator/installer/test/__snapshots__/installer.test.ts.snap
@@ -209,7 +209,7 @@ exports[`InstallerStack Stack(installer):  Snapshot Test 1`] = `
     "RepositoryBranchName": {
       "AllowedPattern": ".+",
       "ConstraintDescription": "The repository branch name must not be empty",
-      "Default": "release/v1.3.1",
+      "Default": "release/v1.3.2",
       "Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
       "Type": "String",
     },
@@ -2088,7 +2088,7 @@ phases:
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-Test-InstallerStack/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -2765,7 +2765,7 @@ exports[`InstallerStack Stack(installer):  Snapshot Test 2`] = `
     "RepositoryBranchName": {
       "AllowedPattern": ".+",
       "ConstraintDescription": "The repository branch name must not be empty",
-      "Default": "release/v1.3.1",
+      "Default": "release/v1.3.2",
       "Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
       "Type": "String",
     },
@@ -4634,7 +4634,7 @@ phases:
       "Properties": {
         "Name": "/accelerator/AWSAccelerator-Test-InstallerStack/version",
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -5343,7 +5343,7 @@ exports[`InstallerStack Stack(installer):  Snapshot Test 3`] = `
     "RepositoryBranchName": {
       "AllowedPattern": ".+",
       "ConstraintDescription": "The repository branch name must not be empty",
-      "Default": "release/v1.3.1",
+      "Default": "release/v1.3.2",
       "Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
       "Type": "String",
     },
@@ -7346,7 +7346,7 @@ phases:
           ],
         },
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },
@@ -8098,7 +8098,7 @@ exports[`InstallerStack Stack(installer):  Snapshot Test 4`] = `
     "RepositoryBranchName": {
       "AllowedPattern": ".+",
       "ConstraintDescription": "The repository branch name must not be empty",
-      "Default": "release/v1.3.1",
+      "Default": "release/v1.3.2",
       "Description": "The name of the git branch to use for installation. To determine the branch name, navigate to the Landing Zone Accelerator GitHub branches page and choose the release branch you would like to deploy. Release branch names will align with the semantic versioning of our GitHub releases. New release branches will be available as the open source project is updated with new features.",
       "Type": "String",
     },
@@ -10091,7 +10091,7 @@ phases:
           ],
         },
         "Type": "String",
-        "Value": "1.3.1",
+        "Value": "1.3.2",
       },
       "Type": "AWS::SSM::Parameter",
     },