Release/automate remediation #5
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request introduces significant updates to the AWS remediation module, including enhancements to configuration flexibility, support for scheduled remediation, and compatibility updates for newer AWS provider and Lambda runtime versions. Below is a summary of the most important changes grouped by theme.
Configuration Enhancements
lambda_zip
topath_to_lambda_zip
for clarity and updated references acrossREADME.md
,main.tf
, andvariables.tf
. [1] [2] [3]remediation_options
from a single object to a list of objects, allowing multiple remediation configurations. Updated associated validation rules. [1] [2]remediation_schedule_days
andssn_notification_topic_arn
variables to support scheduled remediation and optional SNS notifications. [1] [2]Scheduling and Event Handling
remediation_schedule_days
. Each schedule triggers remediation for the specified configurations.ssn_notification_topic_arn
is provided. [1] [2]Compatibility Updates
~> 4.0
to~> 5.0
inversions.tf
andexamples/basic/terraform.tf
. [1] [2]nodejs18.x
tonodejs20.x
inmain.tf
.IAM Policy Adjustments
Example Updates
examples/basic/main.tf
to reflect the new variable names, list-basedremediation_options
, and added scheduling configurations.These changes improve the module's flexibility, security, and compatibility, while also introducing new features for automated and scheduled remediation.