What's new?

• New tables added
  • aws_cost_by_region_monthly (#2310) (Thanks @razbne for the contribution!)

Enhancements

• Added error, is_public, resource_owner_account and resource_type optional quals for aws_accessanalyzer_finding table. (#2331) (Thanks @dbermuehler for the contribution!)
• Updated the aws_s3_object table to use the HeadObject API to retrieve object metadata. (#2312) (Thanks @JonMerlevede for the contribution!)

Bug fixes

• Fixed the aws_s3_bucket table to correctly return data by ignoring the not found error in getBucketTagging and getBucketWebsite hydrate functions. (#2335)

Enhancements

• Added multi_region and multi_region_configuration columns to aws_kms_key table. (#2338) (Thanks @pdecat for the contribution!)

Bug fixes

• Fixed the comparison operator (<= or >=) for number and date filter in aws_inspector2_finding table. (#2332) (Thanks @dbermuehler for the contribution!)

What's new?

• New tables added
  • aws_shield_attack (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_attack_statistic (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_drt_access (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_emergency_contact (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_protection (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_protection_group (#2315) (Thanks @dbermuehler for the contribution!)
  • aws_shield_subscription (#2315) (Thanks @dbermuehler for the contribution!)

Enhancements

• Added epss_score column to aws_inspector2_finding table. (#2321) (Thanks @dbermuehler for the contribution!)

Bug fixes

• Fixed the aws_ssm_document_permission table to correctly return nil whenever InvalidDocument error is returned by the API. (#2326)
• Fixed error handling for aws_iam_user and aws_s3_bucket tables. (#2324) (Thanks @danielgrittner for the contribution!)
• Updated SQL queries to exclude removed table columns. (#2328)

Bug fixes

• Added verification_token column toaws_ses_domain_identity table which was accidentally removed in v1.0.0.

There are no significant changes in this plugin version; it has been released to align with Steampipe's v1.0.0 release. This plugin adheres to semantic versioning, ensuring backward compatibility within each major version.

Breaking changes

• The following tables have had deprecated columns removed: (#2323)
  • aws_accessanalyzer_analyzer:
    • findings (replaced by aws_accessanalyzer_finding table)
  • aws_ecr_repository:
    • image_details (replaced by aws_ecr_image table)
    • image_scanning_findings (replaced by aws_ecr_image_scan_finding table)
  • aws_ecrpublic_repository:
    • image_details (replaced by aws_ecr_image table)
  • aws_glue_job:
    • allocated_capacity (replaced by max_capacity column)
  • aws_securityhub_finding:
    • workflow_state (replaced by workflow_status column)
  • aws_ses_email_identity:
    • verification_token
  • aws_ssm_document:
    • account_ids (replaced by aws_ssm_document_permission table)
    • account_sharing_info_list (replaced by aws_ssm_document_permission table)
  • aws_vpc_security_group_rule:
    • cidr_ip (replaced by cidr_ipv4 column)
    • group_name
    • owner_id (replaced by group_owner_id column)
    • pair_group_id (replaced by referenced_group_id column)
    • pair_group_name
    • pair_peering_status (replaced by referenced_peering_status column)
    • pair_user_id (replaced by referenced_user_id column)
    • pair_vpc_id (replaced by referenced_vpc_id column)
    • pair_vpc_peering_connection_id (replaced by referenced_vpc_peering_connection_id column)
    • vpc_id

Enhancements

• Added stream_mode_details column to aws_kinesis_stream table. (#2320) (Thanks @kaushikkishore for the contribution!)

Bug fixes

• Fixed the GetConfig of the aws_servicequotas_service_quota table to correctly return data instead of an error by adding region as a required qual. (#2314)

Enhancements

• Added the event_region column to the aws_health_event table. (#2293)
• Added the location_type column to the aws_ec2_instance_type table. (#2294)

Bug fixes

• Removed unnecessary hydration of the instance_type column in aws_ec2_instance_type table. (#2294)
• Fixed an issue where credentials from import foreign schema were lost after restarting session in the Posgres FDW extensions of the plugin. (#2275)

What's new?

• New tables added
  • aws_app_runner_service (#2279)
  • aws_ec2_load_balancer_listener_rule (#2272)
  • aws_lightsail_bucket (#2258)
  • aws_memorydb_cluster (#2268)
  • aws_securityhub_enabled_product_subscription (#2281)
  • aws_timestreamwrite_database (#2269)
  • aws_timestreamwrite_table (#2269)

Enhancements

• Updated the aws_ec2_ami table to correctly return disabled AMIs on passing disabled value to the state optional qual (where state = 'disabled'). (#2277)

Dependencies

• Recompiled plugin with Go version 1.22. (#2283)
• Recompiled plugin with steampipe-plugin-sdk v5.10.4 that fixes logging in the plugin export tool. (#2286)

Enhancements

• Added location_type column as an optional qual to the aws_ec2_instance_availability table and 6 new columns to the aws_ec2_instance_type table. (#2078)
• Updated docs for aws_appautoscaling_policy and aws_appautoscaling_target tables to add information on required quals. (#2247)
• Added the type column as an optional qual to the aws_auditmanager_control table. (#2254)

Bug fixes

• Fixed the GetConfig definition of the aws_auditmanager_control table to correctly return data instead of an error. (#2254)
• Fixed the aws_kms_key_rotation table to correctly return nil whenever an AccessDeniedException error is returned by the API. (#2253)

Enhancements

• Updated IAM parliament permissions to the latest. (#2239)

Bug fixes

• Fixed the caching issue in 29 tables to correctly return data by adding the missing CacheMatch: query_cache.CacheMatchExact property. (#2232)
• Fixed the user_data column of aws_ec2_instance table to remove invalid UTF-8 characters. (#2240)

What's new?

• New tables added
  • aws_rds_db_recommendation (#2238)

Bug fixes

• Fixed the caching issue in aws_organizations_account table. (#2236)
• Fixed typo (missing comma) in an example query of aws_health_affected_entity table doc. (#2237) (Thanks @tieum for the contribution!)

Enhancements

• Added 16 new columns to the aws_lambda_version table. (#2229)

Bug fixes

• Fixed the export tool of the plugin to return a non-zero error code instead of 0 whenever an error occurred. (#79)

Bug fixes

• Reverted the Export CLI behaviour to return <nil> for null values instead of empty. (#77)

What's new

• New tables added
  • aws_codestar_notification_rule (#2217)

Enhancements

• Added 9 new columns to the aws_elasticache_cluster table. (#2224)

Bug fixes

• Fixed the aws_s3_object table not returning any rows due to panic error. (#2221)
• Fixed no rows being returned from the aws_organizations_account table if an unqualified query is run before one with parent_id specified.
• Fixed data type for configuration_endpoint column in aws_elasticache_cluster table to be json. (#2214)

What's new?

• New tables added
  • aws_route53_vpc_association_authorization (#2199) (Thanks @jramosf for the contribution!)

Enhancements

• Updated aws_s3_bucket, aws_s3_bucket_intelligent_tiering_configuration, aws_s3_object and aws_s3_object_version tables to use HeadBucket API instead of GetBucketLocation to fetch the region that the bucket resides in. (#2082) (Thanks @pdecat for the contribution!)
• Added column create_time to aws_ec2_key_pair table. (#2196) (Thanks @kasadaamos for the contribution!)
• Added instance_type column as an optional qual to the aws_ec2_instance_type table. (#2200)

Bug fixes

• Fixed the akas column in aws_health_affected_entity table to correctly return data instead of an error by handling events that do not have any ARN. (#2189)
• Fixed cname and endpoint_url columns of aws_elastic_beanstalk_environment table to correctly return data instead of null. (#2201)
• Fixed the aws_api_gatewayv2_* tables to correctly return data instead of an error by excluding support for the new il-central-1 region. (#2190)

Enhancements

• The Plugin and the Steampipe Anywhere binaries are now built with the netgo package for both the Linux and Darwin systems. (#219) (#2180)

Bug fixes

• Fixed the aws_ebs_snapshot table to correctly return data instead of an empty row. (#2185)

Dependencies

• Recompiled plugin with github.com/hashicorp/go-getter v1.7.4. (#2178)

What's new?

• New tables added
  • aws_iot_thing_group (#1998)
  • aws_iot_thing_type (#1999)
  • aws_kms_key_rotation (#2174)

Enhancements

• Added the version flag to the plugin's Export tool. (#65)

Bug fixes

• Fixed the broken Postgres 14, Postgres 15 and SQLite x86_64 binaries for Darwin operating systems.
• Fixed intermittent FDW crashes when certain postgres errors resulted in a signal 16 being raised. (#455)

Bug fixes

• Fixed the runtime error in the v0.136.0 version of the plugin’s Postgres FDW extension.

What's new?

• New tables added
  • aws_iot_fleet_metric (#2000)

Enhancements

• The account_id column has now been assigned as a connection key column across all the tables which facilitates more precise and efficient querying across multiple AWS accounts. (#2133)

Bug fixes

• Fixed the getDirectoryServiceSnapshotLimit and getDirectoryServiceEventTopics hydrate calls in the aws_directory_service_directory table to correctly return nil for the unsupported ADConnector services instead of an error. (#2170)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.10.0 that adds support for connection key columns. (#2133)
• Recompiled plugin with aws-sdk-go v1.26.1. (#2163)

What's new?

• New tables added
  • aws_accessanalyzer_finding (#2142)

Enhancements

• Added snapshot_block_public_access_state column to aws_ec2_regional_settings table. (#2077)

Bug fixes

• Fixed the getDirectoryServiceSnapshotLimit and getDirectoryServiceEventTopics hydrate calls in the aws_directory_service_directory table to correctly return nil for unsupported SharedMicrosoftAD services instead of an error. (#2156)
• Fixed the plugin's Postgres FDW Extension crash issue.

What's new?

• New tables added
  • aws_backup_job (#2145) (Thanks @rogerioacp for the contribution!)
  • aws_elastic_beanstalk_application_version (#2150)
  • aws_rds_db_engine_version (#2098)
  • aws_s3_object_version (#2070)
  • aws_servicequotas_service (#2070)

Enhancements

• The plugin level logs have been updated to maintain consistency: Trace logs have been elevated to Debug, Info logs elevated to Error where needed, and unnecessary Debug logs removed to streamline and optimize logging. (#2131)

Bug fixes

• Fixed the aws_vpc_eip table to return an Access Denied error instead of an Invalid Memory Address or Nil Pointer Dereference error when a Service Control Policy is applied to an account for a specific region. (#2136)
• Fixed the aws_s3_bucket terraform script to prevent the AccessControlListNotSupported: The bucket does not allow ACLs error during the PutBucketAcl terraform call. (#2080) (Thanks @pdecat for the contribution!)
• Fixed an issue where querying regional tables while using AWS profiles with cross-account role credentials results in the correct error being reported instead of zero rows. (#2137)
• Fixed pagination in the aws_ebs_snapshot table to make fewer API calls when the limit parameter is passed to the query. (#2088)

What's new?

• New tables added
  • aws_acmpca_certificate_authority (#2125)
  • aws_dms_endpoint (#1992)
  • aws_dms_replication_task (#2110)
  • aws_docdb_cluster_snapshot (#2123)
  • aws_transfer_user (#2089) (Thanks @jramosf for the contribution!)

Enhancements

• Added auto_minor_version_upgrade column to aws_rds_db_cluster table. (#2109)
• Added open_zfs_configuration column to aws_fsx_file_system table. (#2113)
• Added logging_configuration column to aws_networkfirewall_firewall table. (#2115)
• Added lf_tags column to aws_glue_catalog_table table. (#2128)

Bug fixes

• Fixed the query in the aws_s3_bucket table doc to correctly filter out buckets without the application tag. (#2093)
• Fixed the aws_cloudtrail_lookup_event input param to pass correctly end_time as an optional qual. (#2102)
• Fixed the arn column of the aws_elastic_beanstalk_environment table to correctly return data instead of null. (#2105)
• Fixed the template_body_json column of the aws_cloudformation_stack table to correctly return data by adding a new transform function formatJsonBody, replacing the UnmarshalYAML transform function. (#1959)
• Fixed the next_execution_time column of aws_ssm_maintenance_window table to be of String datatype instead of TIMESTAMP. (#2116)
• Renamed the client_log_options column to connection_log_options in aws_ec2_client_vpn_endpoint table to correctly return data instead of null. (#2122)

What's new?

• New tables added
  • aws_ecr_registry_scanning_configuration (#2084)

Bug fixes

• Fixed the InvalidParameterCombination error when querying the aws_rds_db_instance table. (#2085)
• Fixed aws_rds_db_instance_metric_write_iops_daily table to correctly display WriteIOPS instead of ReadIOPS. (#2079)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.9.0 that fixes critical caching issues. (#2067)

What's new?

• New tables added
  • aws_api_gateway_method (#1995)
  • aws_dms_certificate (#1985)
  • aws_emr_security_configuration (#1984)
  • aws_iot_thing (#1997)
  • aws_organizations_organizational_unit (#2063)
  • aws_ssmincidents_response_plan (#1885)
  • aws_trusted_advisor_check_summary (#1978)

Bug fixes

• Fixed aws_sfn_state_machine_execution_history table to handle pagination and ignore errors for expired executions history. (#1934) (Thanks @pdecat for the contribution!)
• Fixed the aws_health_affected_entity table to correctly return data instead of an interface conversion error. (#2072)

Enhancements

• Optimized aws_cloudwatch_log_stream table's query performance by adding descending, log_group_name, log_stream_name_prefix and order_by new optional key qual columns. (#1951)
• Optimized aws_ssm_inventory table's query performance by adding new optional key qual columns such as filter_key, filter_value, network_attribute_key, network_attribute_value, etc. (#1980)

Bug fixes

• Fixed aws_cloudwatch_log_group table key column to be globally unique by filtering the results by region. (#1976)
• Removed duplicate memoizing of getCommonColumns function from aws_s3_multi_region_access_point and aws_ec2_launch_template tables.(#2065)
• Fixed error for column type_name in table aws_ssm_inventory_entry. (#1980)
• Added the missing rate-limiter tags for aws_s3_bucket table's GetBucketLocation hydrate function to optimize query performance. (#2066)

What's new?

• New tables added
  • aws_servicecatalog_provisioned_product (#1917)

Enhancements

• Added deletion_protection_enabled column to aws_dynamodb_table table. (#2049)

Bug fixes

• Fixed default page size in aws_organizations_account table. (#2058)
• Fixed processor_features column in aws_rds_db_instance not returning data when default value is set. (#2028)
• Temporarily removed aws_organizations_organizational_unit table due to LTREE column issue. (#2058)

What's new?

• New tables added
  • aws_cloudtrail_lookup_event (#2047)
  • aws_organizations_organizational_unit (#1677)
  • aws_organizations_root (#1677)
  • aws_sns_subscription (#2046)

Note : Table aws_sns_topic_subscription will be changing behaviours in a future release to return results from ListSubscriptionsByTopic instead of ListSubscriptions.

What's new?

• New tables added
  • aws_appsync_graphql_api (#2027)
  • aws_mq_broker (#2020)

Enhancements

• Added storage_throughput column to aws_rds_db_instance table. (#2010) (Thanks @toddwh50 for the contribution!)
• Added layers column to aws_lambda_function table. (#2008) (Thanks @icaliskanoglu for the contribution!)
• Added tags column to aws_backup_recovery_point and aws_backup_vault tables. (#2033)

Bug fixes

• Custom HTTP client should allow buildable settings through env var options such as AWS_CA_BUNDLE. (#2044)
• Fixed MaxItems in aws_iam_policy and aws_iam_policy_attachment tables to use 1000 instead of 100 to avoid unnecessary API calls. (#2025) (#2026)

Enhancements

• Updated the plugin to use a shared, optimized HTTP client that enhances DNS management and reduces connection floods for more stable and efficient queries. (#2036)

Enhancements

• Updated the .goreleaser file to build the netgo package only for Darwin systems. (#2029)

What's new?

• The plugin can now be downloaded and used with the Steampipe CLI, as a Postgres FDW, as a SQLite extension and as a standalone exporter.
• The table docs have been updated to provide corresponding example queries for Postgres FDW and SQLite extension.
• Docs license updated to match Steampipe CC BY-NC-ND license.

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.8.0 that includes plugin server enacapsulation for in-process and GRPC usage, adding Steampipe Plugin SDK version to _ctx column, and fixing connection and potential divide-by-zero bugs. (#2011)

What's new?

• New tables added
  • aws_lambda_event_source_mapping (#1874) (Thanks @nickman for the contribution!)

Enhancements

• Added the resource_record_set_limit column to aws_route53_zone table. (#1969) (Thanks @keyolk for the contribution!)

What's new?

• New tables added
  • aws_fms_policy (#1851)
  • aws_fms_app_list (#1851)
  • aws_transfer_server (#1909) (Thanks @jramosf for the contribution!)

Enhancements

• Added the features column to aws_guardduty_detector table. (#1958)

Bug fixes

• Fixed the description of the name column in aws_organizations_account table. (#1947) (Thanks @badideasforsale for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.6.3 which addresses the issue of expired credentials being intermittently retained in the connection cache. (#1956)

Enhancements

• Improved documentation and descriptions for the aws_iam_role table. (#1940)
• Replaced uses of rand.Seed with latest rand.NewSource. (#1933)

Bug fixes

• Removed custom plugin level retryer which was unnecessary as the plugin already uses the AWS SDK retryer. (#1932)
• The plugin now retries errors with the error code UnknownError. These are often thrown by services like SNS when performing a large number of requests. (#1932)

Bug fixes

• Fixed the source_account_id column of aws_securityhub_finding table to correctly return data instead of null. (#1927) (Thanks @gabrielsoltz for the contribution!)
• Fixed the members column of aws_rds_db_cluster table to correctly return data instead of null. (#1926)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.6.2 which prevents nil pointer reference errors for implicit hydrate configs. (#1930)

Dependencies

• Upgraded to steampipe-plugin-sdk v5.6.1 with support for rate limiters. (#1905)
• Recompiled plugin with Go version 1.21. (#1905)

Enhancements

• Updated the Makefile to build the netgo package only for Darwin systems. (#1918)
• Added the configuration_settings column to aws_elastic_beanstalk_environment table. (#1916)

Bug fixes

• Fixed the table aws_dynamodb_backup to return nil instead of an error when backup does not exist. (#1914)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.5.2 which improves logging for connection config updates. (#1921)

Bug fixes

• Fixed the data type of capacity_reservation_specification column of aws_ec2_instance table to be of JSON type instead of STRING. (#1903)

What's new?

• New tables added
  • aws_workspaces_directory (#1884)

Enhancements

• Added an example query in the aws_ec2_instance table doc for fetching subnet details of instances. (#1883) (Thanks @Pankaj-SinghR for the contribution!)

Bug fixes

• Fixed the data type of the sms_configuration_failure column in the aws_cognito_user_pool table to be of STRING type instead of JSON. (#1890) (Thanks @KTamas for the contribution!)
• Fixed typo in the listQueryRegionsForConnection function in the multi_region.go file. (#1887) (Thanks @pdecat for the contribution!)

Dependencies

• Recompiled plugin with golang.org/x/net v0.7.0. (#1864)

What's new?

• New tables added
  • aws_cognito_identity_pool (#1876) (Thanks @pdecat for the contribution!)

Enhancements

• Added the engine_type and endpoints columns to aws_elasticsearch_domain table. (#1858) (Thanks @pdecat for the contribution!)

What's new?

• New tables added
  • aws_cognito_identity_provider (#1854) (Thanks @pdecat for the contribution!)
  • aws_cognito_user_pool (#1854) (Thanks @pdecat for the contribution!)

Enhancements

• Updated the Makefile to build plugin in STEAMPIPE_INSTALL_DIR if set. (#1857) (Thanks @pdecat for the contribution!)
• Added column offering_class to aws_pricing_product table (#1863) (Thanks @rasta-rocket for the contribution!)

Bug fixes

• Fixed the aws_ec2_network_load_balancer table doc to remove the incorrect security group association example. (#1869) (Thanks @ tinder-tder for the contribution!)
• Fixed aws_rds_db_cluster, aws_rds_db_cluster_snapshot, aws_rds_db_instance, aws_rds_db_snapshot tables to correctly filter out the DocDB and Neptune resources. (#1868)

What's new?

• New tables added
  • aws_neptune_db_cluster_snapshot (#1866)

What's new?

• New tables added
  • aws_directory_service_log_subscription (#1852)

Enhancements

• Added the fifo_throughput_limit and deduplication_scope columns to the aws_sqs_queue table. (#1859) (Thanks @pdecat for the contribution!)
• Added the description column to the aws_api_gatewayv2_api table. (#1856) (Thanks @pdecat for the contribution!)

Breaking changes

• Fixed the aws_rds_db_* tables to list out AWS RDS resources excluding the AWS DocDB ones. Please use aws_docdb_* tables instead. (#1768)

What's new?

• New tables added
  • aws_directory_service_certificate (#1836)
  • aws_vpc_nat_gateway_metric_bytes_out_to_destination (#1842)

Bug fixes

• Fixed the optional quals of the aws_inspector2_finding table to correctly return data instead of an empty row. (#1847)
• Fixed typo in the aws_vpc_nat_gateway table doc. (#1848) (Thanks @pdecat for the contribution!)

What's new?

• New tables added
  • aws_backup_report_plan (#1839)
  • aws_cloudformation_stack_set (#1826)

What's new?

• New tables added
  • aws_appstream_fleet (#1838)

Enhancements

• Added the event_topics and snapshot_limit columns to the aws_directory_service_directory table. (#1833)

Bug fixes

• Fixed the aws_dlm_lifecycle_policy table to correctly return results instead of an error. (#1834)

Bug fixes

• Fixed the certificate and certificate_chain columns of the aws_acm_certificate table to correctly return data instead of returning an error. (#1827)

What's new?

• New tables added
  • aws_iam_open_id_connect_provider (#1798) (Thanks @LalitLab for the contribution!)

Bug fixes

• Fixed the aws_route53_record table to remove the need of passing zone_id in the where clause, to avoid cross-account access denied errors. (#1799)

What's new?

• New tables added
  • aws_appautoscaling_policy (#1798) (Thanks @jramosf for the contribution!)
  • aws_identitystore_group_membership (#1782)
  • aws_s3_bucket_intelligent_tiering_configuration (#1790)

Enhancements

• Added documentation on how to configure the plugin credentials when Steampipe is running on AWS ECS. Please refer AssumeRole Credentials (in ECS) for more information. (#1800) (Thanks @Wade9320 for the contribution!)
• Added column user_data to aws_ec2_launch_template_version table. (#1792)
• Added column managed_actions to aws_elastic_beanstalk_environment table. (#1620)

Bug fixes

• Fixed aws_acm_certificate table to return certificates of all types of key algorithms instead of only the default RSA_2048 algorithm. (#1797)

What's new?

• New tables added
  • aws_ec2_managed_prefix_list_entry (#1781)
  • aws_organizations_policy_target (#1783)
  • aws_route53_resolver_query_log_config (#1780)

Enhancements

• Added column image_uri to aws_ecr_image table. (#1785)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.5.0 which significantly reduces API calls and boosts query performance, resulting in faster data retrieval. (#1775)

What's new?

• New tables added
  • aws_api_gateway_domain_name (#1665)
  • aws_route53_query_log (#1770)

Bug fixes

• Fixed the ListConfig of aws_cloudformation_stack_resource table to correctly return results instead of an empty row. (#1771)

Bug fixes

• Fixed the associated_resources column of aws_wafv2_web_acl table to also return associated CloudFront distributions. (#1763)
• Fixed the syntax error in the example query of the aws_inspector2_finding table. (#1764)

What's new?

• New tables added
  • aws_docdb_cluster_instance (#1755)
  • aws_service_discovery_instance (#1741)
  • aws_ssm_inventory_entry (#1743)
  • aws_sts_caller_identity (#1746)

Bug fixes

• Fixed aws_inspector2_* tables to correctly return data for all supported regions instead of only the us-east-1 region. (#1758)
• Fixed the associated_resources column in the aws_wafv2_web_acl table to include the associated resources of API Gateway, App Sync, and Cognito User Pool, in addition to the previously returned Application Load Balancer resource type. (#1754)
• Fixed the aws_wafv2_web_acl table to return the missing CloudFront level web ACLs. (#1752)

What's new?

• New tables added
  • aws_cloudwatch_metric_data_point (#1655)
  • aws_cloudwatch_metric_statistic_data_point (#1649)
  • aws_inspector2_coverage (#1657) (Thanks @jaredreisinger-drizly for the contribution!!)
  • aws_inspector2_coverage_statistics (#1657) (Thanks @jaredreisinger-drizly for the contribution!!)
  • aws_inspector2_finding (#1657) (Thanks @jaredreisinger-drizly for the contribution!!)
  • aws_inspector2_member (#1657) (Thanks @jaredreisinger-drizly for the contribution!!)
  • aws_rds_db_instance_automated_backup (#1721)

Enhancements

• Added an example query in aws_iam_role table doc. (#1745)

What's new?

• New tables added
  • aws_ec2_client_vpn_endpoint (#1722)
  • aws_ec2_launch_template_version (#1725)
  • aws_service_discovery_namespace (#1735)
  • aws_service_discovery_service (#1739)
  • aws_servicecatalog_product (#1638)
  • aws_ssm_managed_instance_patch_state (#1732)
  • aws_wellarchitected_answer (#1699)
  • aws_wellarchitected_check_detail (#1700)
  • aws_wellarchitected_check_summary (#1700)
  • aws_wellarchitected_consolidated_report (#1704)
  • aws_wellarchitected_lens_review_improvement (#1695)
  • aws_wellarchitected_lens_review_report (#1697)
  • aws_wellarchitected_lens_share (#1698)
  • aws_wellarchitected_share_invitation (#1692)

Bug fixes

• Fixed the source_account_id optional qual column definition in aws_security_hub_finding table. (#1737) (Thanks @gabrielsoltz for the contribution!)
• Fixed the example query in the doc for the aws_ssoadmin_account_assignment table. (#1734)

What's new?

• New tables added
  • aws_config_retention_configuration (#1718)

Enhancements

• Added column repository_scanning_configuration to aws_ecr_repository table. (#1719)
• Added column source_account_id to aws_securityhub_finding table. (#1703) (Thanks @gabrielsoltz for the contribution!)

Bug fixes

• Fixed aws_ecr_image_scan_finding table to return an empty row instead of an error when image scanning is in progress. (#1728) (Thanks @aminvielledebatAtBedrock for the contribution!)
• Fixed the GetConfig of the aws_ssm_document table to use arn instead of name as a key column to avoid failures in querying multiple regions with the same document name. (#1720)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.4.1 which fixes increased plugin initialization time due to multiple connections causing the schema to be loaded repeatedly. (#1685)

What's new?

• New tables added
  • aws_wellarchitected_lens (#1689)
  • aws_wellarchitected_notification (#1693)
  • aws_wellarchitected_workload_share (#1690)

Enhancements

• Added maintenance_options, licenses, placement_affinity, placement_group_id, placement_host_id, placement_host_resource_group_arn, placement_partition_number, and spot_instance_request_id columns to aws_ec2_instance table. (#1709)
• Added workspace column to aws_wellarchitected_milestone table.
• Removed hydrate requirement for milestone_number column in aws_wellarchitected_lens_review table.

What's new?

• New tables added
  • aws_s3_object (#1623)
  • aws_wellarchitected_lens_review (#1694)
  • aws_wellarchitected_milestone (#1696)

What's new?

• New tables added
  • aws_ssoadmin_account_assignment (#1673) (Thanks @janslow for the contribution!)
  • aws_athena_query_execution (#1666) (Thanks @rinzool for the contribution!)
  • aws_athena_workgroup (#1666) (Thanks @rinzool for the contribution!)

Bug fixes

• Fixed typos in the ListConfig of aws_sfn_state_machine_* tables. (#1686) (Thanks @pdecat for the contribution!)
• Fixed the data type of tags column of aws_securitylake_data_lake and aws_simspaceweaver_simulation tables to be of JSON type instead of STRING. (#1683)
• Fixed the aws_organizations_policy table to correctly return all the organization policies instead of duplicate data. (#1681)

What's new?

• New tables added
  • aws_codedeploy_deployment_config (#1662)
  • aws_organizations_policy (#1641)
  • aws_s3_multi_region_access_point (#1486)
  • aws_ssm_document_permission (#1670)
  • aws_vpc_eip_address_transfer (#1521)
  • aws_wafregional_rule_group (#1661)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.3.0 which includes fixes for query cache pending item mechanism and aggregator connections not working for dynamic tables. (#1676)

What's new?

• New tables added
  • aws_appstream_image (#1663)
  • aws_codedeploy_deployment_group (#1658)
  • aws_cost_by_tag (#1536)
  • aws_networkfirewall_firewall (#1630)
  • aws_wafregional_web_acl (#1660)

Bug fixes

• Fixed the aws_health_affected_entity table to correctly return results instead of an error. (#1659)

What's new?

• New tables added
  • aws_cloudformation_stack_resource (#1634)

Enhancements

• Added columns dkim_attributes and identity_mail_from_domain_attributes to aws_ses_domain_identity table. (#1640)

Bug fixes

• Fixed aws_cloudfront_response_headers_policy table to remove duplicate results. (#1642

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.2.0 which includes fixes for query cache pending item mechanism and aggregator connections not working for dynamic tables. (#1609)

What's new?

• New tables added
  • aws_codebuild_build (#1608)
  • aws_emr_block_public_access_configuration (#1602)
  • aws_servicecatalog_portfolio (#1636)

Bug fixes

• Fixed the aws_cloudfront_function table to correctly return data instead of an error when a name is passed in the where clause. (#1628)
• Fixed the aws_guardduty_ipset table to correctly return all the IPsets instead of a panic interface conversion error. (#1627)
• Fixed the API limits of the aws_glue_security_configuration table to correctly return data instead of an error. (#1626)

What's new?

• New tables added
  • aws_ec2_launch_template (#1543)

Enhancements

• Added column data_protection and data_protection_policy to aws_cloudwatch_log_group table. (#1483)
• Added column website_configuration to aws_s3_bucket table. (#1618)
• Added column object_ownership_controls to aws_s3_bucket table. (#1548)
• Added column launch_template_data to aws_ec2_instance table. (#1553)
• Added column tracing_config to aws_lambda_function table. (#1601)
• Updated Parliament IAM permissions to the latest. (#1599)

Bug fixes

• Fixed the title column in aws_api_gatewayv2_route table to correctly return data instead of null. (#1568)
• Fixed the tags_src column in aws_cloudformation_stack table to correctly return raw tag data instead of a formatted one. (#1568)
• Fixed the architectures, file_system_configs and snap_start columns in aws_lambda_function table to correctly return data instead of null. (#1619)
• Fixed aws_ec2_managed_prefix_list table to return an empty row instead of an error in unsupported me-south-1 region. (#1577)
• Fixed the aws_eventbridge_rule table to return rules for all the event bridges instead of only default event bridges. (#1590) (Thanks @brentmitchell25 for the fix!!)

What's new?

• Added default_region config arg, which allows you to set your preferred (closest) region to optimize API calls to global resources. (#1559)

Enhancements

• EC2 Role & SSO credentials are now used until they expire, reducing throttling & reloading. (#1559)
• Optimized API calls to use the default region, reducing latency for common APIs. (#1559)
• Optimized caching to reduce race conditions & extend timeouts (e.g. credentials). (#1559)
• Optimized per-region API calls to regions supported by the service only. (#1559)
• Optimized API client management to one per account, instead of one per region. (#1559)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v5.2.0-rc.7 which includes additional cache function wrappers and matrix function improvements. (#1559)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.12 which fixes the query caching functionality. (#1578)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.11 which fixes the issue of non-caching of all the columns of the queried table. (#1557)

What's new?

• New tables added
  • aws_api_gatewayv2_route (#1544)
  • aws_health_affected_entity (#1525)

Enhancements

• Added column access_log_settings to aws_api_gatewayv2_stage table. (#1546)

Bug fixes

• Fixed the aws_ec2_ami table to only return images owned by the AWS account. (#1535)
• Fixed the aws_ec2_ami_shared table to return images from any AWS account (images owned by the AWS account or shared by other accounts) when either an owner_id or an image_id or both the parameters are passed in the where clause. (#1535)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.9 which fixes hydrate function caching for aggregator connections. (#1540)

What's new?

• New tables added
  • aws_glue_data_quality_ruleset (#1513)

Bug fixes

• Fixed aws_s3_access_point table to return access points from all the configured regions instead of only us-east-1. (#1522)
• Fixed the aws_ebs_snapshot table to return snapshots from different AWS accounts when an owner_alias or an owner_id or a snapshot_id is passed in the where clause. (#1530)

What's new?

• New tables added
  • aws_cloudtrail_channel (#1517)
  • aws_cloudtrail_import (#1515)
  • aws_securitylake_data_lake (#1520)

Bug fixes

• Fixed the aws_api_gatewayv2_* tables to return an empty row for unsupported region ap-southeast-3 instead of an error. (#1527)

What's new?

• New tables added
  • aws_cloudtrail_query (#1437)
  • aws_drs_job (#1492)
  • aws_drs_recovery_instance (#1493)
  • aws_drs_recovery_snapshot (#1494)
  • aws_mgn_application (#1499)
  • aws_oam_link (#1498)
  • aws_oam_sink (#1495)
  • aws_simspaceweaver_simulation (#1501)

Enhancements

• Added column addon_configuration to aws_eks_addon_version table. (#1514)
• Added column standards_managed_by to aws_securityhub_standards_subscription table. (#1511)
• Added column launch_configuration to aws_drs_source_server table. (#1496)
• Added column protection to aws_ecs_task table. (#1500)

Bug fixes

• Fixed the insight_selectors column in aws_cloudtrail_trail table to correctly return data instead of nil. (#1512)
• Fixed the tags and tags_src column in aws_dynamodb_table table to correctly handle the ResourceNotFoundException error and return nil when an invalid arn is passed in the where clause. (#1518)

What's new?

• New tables added
  • aws_cloudtrail_event_data_store (#1433)
  • aws_drs_source_server (#1465)
  • aws_pipes_pipe (#1487)
  • aws_vpc_verified_access_endpoint (#1491)
  • aws_vpc_verified_access_group (#1485)
  • aws_vpc_verified_access_instance (#1484)
  • aws_vpc_verified_access_trust_provider (#1482)

Enhancements

• Added column platform_family to aws_ecs_service table. (#1490)

Breaking changes

• The aws_cloudwatch_metric table rows now contain a CloudWatch metric each, instead of a dimension name/value pair. Dimensions for each metric can be found in the dimensions column and to filter on specific dimensions, you can pass dimensions through the dimensions_filter key column. Please see aws_cloudwatch_metric Examples for query examples using the new columns.
• Renamed column name to metric_name in the aws_cloudwatch_metric table.

What's new?

• New tables added
  • aws_backup_legal_hold (#1464)
  • aws_dax_parameter (#1434)
  • aws_securitylake_subscriber (#1463)

Enhancements

• Added evaluation_modes column to the aws_config_rule table. (#1476)
• Added snap_start column to the aws_lambda_function table. (#1477)
• Added capacity_allocations column to the aws_ec2_capacity_reservation table. (#1428)
• Added imds_support column to aws_ec2_ami and aws_ec2_ami_shared tables. (#1430)

What's new?

• New tables added
  • aws_dax_parameter_group (#1426)

Bug fixes

• Fixed the aws_rds_db_proxy table table to return empty rows for unsupported regions instead of an error. (#1427)

What's new?

• New tables added
  • aws_cloudsearch_domain (#1413)
  • aws_eks_fargate_profile (#1409)
  • aws_health_event (#1167)
  • aws_kms_alias (#1405)
  • aws_rds_db_proxy (#1414)

Bug fixes

• Fixed the ServiceNotFoundException error in the aws_ecs_task table to return an empty row when an invalid value is passed in the service_name filter. (#1418)
• Fixed the ResourceNotFoundException in the aws_cloudwatch_log_metric_filter table to return an empty row when an invalid value is passed in the log_group_name filter. (#1420)

Bug fixes

• Fixed the plugin to use environment variables like AWS_REGION, AWS_DEFAULT_REGION etc., when no regions are specified in the aws.spc file. (#1411)

Dependencies

• Recompiled plugin with aws-sdk-go v1.44.141 and aws-sdk-go-v2/service/route53 v1.24.0 to update service endpoints.

Enhancements

• Improved default region checking for global and region limited services. (#1397)

What's new?

• New tables added
  • aws_ec2_spot_price (#1378) (Thanks to @aminvielledebatAtBedrock for the new table!)
  • aws_iam_service_specific_credential (#1390)
  • aws_pricing_product (#1369) (Thanks to @aminvielledebatAtBedrock for another new table!)
  • aws_resource_explorer_index (#1396)
  • aws_resource_explorer_search (#1396)
  • aws_resource_explorer_supported_resource_type (#1396)

Bug fixes

• Fixed queries failing for aws_s3_access_point table when an invalid bucket name is specified. (#1395)

Enhancements

• Added workflow_status column to the aws_securityhub_finding table. (#1377) (Thanks @gabrielsoltz for the contribution!)

Bug fixes

• Fixed the aws_api_gatewayv2_* tables to correctly return results instead of an error by skipping the unsupported me-central-1 region. (#1388)
• Fixed the billing_mode column in aws_dynamodb_table to correctly return results instead of an error. (#1387)

Deprecated

• Deprecated the workflow_state column in the aws_securityhub_finding table per AWS documentation. We recommend updating any workflows and queries to use workflow_status instead of workflow_state. (#1377)

Bug fixes

• Fixed the typo in the example query of aws_efs_file_system table document to use ValueInStandard instead of ValueInIA. (#1381) (Thanks @pdecat for the contribution!)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.8 which increases the default open file limit. (#1382)

Enhancements

• Added set_identifier as an optional list key column in aws_route53_record table. (#1375)
• Updated 30+ tables to use AWS SDK Go v2. (#1361) (#1371)

Bug fixes

• Fixed paging in aws_route53_record table to ensure all records are returned. (#1375)
• Fixed invalid pointer usage causing duplicate values in attribute_name column for aws_pricing_service_attribute table. (#1372) (Thanks to @aminvielledebatAtBedrock for the fix!)
• Fixed example queries in aws_ebs_volume table document. (#1368)

What's new?

• New tables added
  • aws_ecr_image_scan_finding (#1315) (Thanks to @aminvielledebatAtBedrock for the new table!)
  • aws_lightsail_instance (#1359)

Enhancements

• Added owner_type column to the aws_ssm_document table to allow filtering on SSM documents by AWS account type. (#1337)
• Updated 80+ tables to use AWS SDK Go v2. (#1337) (#1357)

Bug fixes

• Fixed status column type from JSON to string in aws_ssm_association table. (#1337)
• Removed unsupported TAGS dimension note in aws_cost_usage table doc. (#1362)

Deprecated

• Deprecated image_details and image_scanning_findings columns in aws_ecr_repository table to avoid throttling issues. Please use the aws_ecr_image and aws_ecr_image_scan_finding tables instead. (#1198)

Bug fixes

• Fixed unsupported region check in aws_dlm_lifecycle_policy table to allow queries for valid regions.
• Fixed paging in aws_route53_record table to return all records correctly. (#1356)

Enhancements

• Updated 70+ tables to use AWS SDK Go v2. (#1324)
• Added managed_actions column to aws_elastic_beanstalk_environment table. (#996)
• Added the following columns to the aws_ec2_instance table:
  • ami_launch_index
  • architecture
  • boot_mode
  • capacity_reservation_id
  • capacity_reservation_specification
  • client_token
  • ena_support
  • enclave_options
  • hibernation_options
  • platform
  • platform_details
  • private_dns_name_options
  • state_transition_reason
  • tpm_support
  • usage_operation
  • usage_operation_update_time

Bug fixes

• Removed duplicate values in inline_policies column in aws_iam_role and aws_iam_user tables. (#1346)
• Fixed queries failing for the aws_acm_certificate table when querying the title column. (#1351)
• Fixed empty check for regions config arg incorrectly failing when at least 1 other config arg is set. (#1349)
• Fixed queries that specify service_name for the aws_ecs_task table returning no rows if an unqualified query was run first. (#1338)

What's new?

• New tables added
  • aws_account_alternate_contact (#1310)
  • aws_account_contact (#1310)
  • aws_msk_cluster (#1291)
  • aws_msk_serverless_cluster (#1291)

Enhancements

• Updated index doc Configuring AWS Credentials section to use consistent profile and account names. (#1209) (Thanks to @michael-ullrich-1010 for the contribution!)
• Improved plugin error message when the regions config argument is set to an invalid value [].

Bug fixes

• aws_macie2_classification_job table now checks for supported regions.

What's new?

• New tables added
  • aws_appconfig_application (#1253)
  • aws_codeartifact_domain (#1184)
  • aws_codeartifact_repository (#1268)
  • aws_codedeploy_app (#1295)
  • aws_redshiftserverless_namespace (#1305)
  • aws_redshiftserverless_workgroup (#1304)

Enhancements

• Added access_key_last_used_date, access_key_last_used_region columns and access_key_last_used_service to aws_iam_access_key table. (#1281)
• Added vpc_endpoint_connections column to aws_vpc_endpoint_service table. (#1104)
• Updated the following tables to use AWS SDK Go v2:
  • aws_vpc_route_table

Bug fixes

• aws_dynamodb_table_export table queries no longer fail when passing in arn get key column.
• aws_ec2_transit_gateway, aws_ec2_transit_gateway_route, aws_ec2_transit_gateway_route_table, and aws_ec2_transit_gateway_vpc_attachment tables should not error in me-central-1 region. (#1282)
• aws_vpc_eip table now handles EIPs in EC2-Classic properly. (#1308)
• aws_wafregional_rule table now properly checks for supported regions. (#1306)

Deprecated

• Deprecated verification_token column in aws_ses_email_identity table since there is no verification token for email identities. This column will be removed in a future version.

What's new?

• New tables added
  • aws_cloudwatch_log_subscription_filter (#1243)
  • aws_dax_subnet_group (#1298)
  • aws_docdb_cluster (#1019)
  • aws_globalaccelerator_accelerator (#1091) (Thanks to @nmische for the contribution!)
  • aws_globalaccelerator_endpoint_group (#1091)
  • aws_globalaccelerator_listener (#1091)

Enhancements

• Added column code to aws_lambda_function table. (#1293)
• Updated the title column of aws_kms_key table to first use the key alias if available, else fall back to the key ID. (#1246)

Bug fixes

• Fixed the url_config column in aws_lambda_function table to return null instead of an access denied exception errors for US Government cloud regions. (#1285)
• Fixed the sns_topic_arn column in aws_backup_vault table to correctly return a value instead of null. (#1280)
• Fixed all the tables of CodeBuild and Serverless Application Repository services to return empty rows instead of an error for unsupported regions. (#1289)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.7 which fixes incorrect cache hits in multi-region queries which use the region column in the where clause. (#387)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.5 which includes connection cache TTL fixes.

What's new?

• New tables added
  • aws_ecr_image (#1200)

Enhancements

• Added column disable_execute_api_endpoint to aws_api_gatewayv2_api table. (#1242)
• Updated the following tables to use AWS SDK Go v2: (#1219)
  • aws_cost_by_account_daily
  • aws_cost_by_account_monthly
  • aws_cost_by_record_type_daily
  • aws_cost_by_record_type_monthly
  • aws_cost_by_service_daily
  • aws_cost_by_service_monthly
  • aws_cost_by_service_usage_type_daily
  • aws_cost_by_service_usage_type_monthly
  • aws_cost_forecast_daily
  • aws_cost_forecast_monthly
  • aws_cost_usage
  • aws_ec2_application_load_balancer
  • aws_ec2_autoscaling_group
  • aws_ec2_capacity_reservation
  • aws_ec2_classic_load_balancer
  • aws_ec2_gateway_load_balancer
  • aws_ec2_key_pair
  • aws_s3_access_point
  • aws_s3_account_settings
  • aws_vpc
  • aws_vpc_customer_gateway
  • aws_vpc_dhcp_options
  • aws_vpc_eip
  • aws_vpc_endpoint
  • aws_vpc_flow_log
  • aws_vpc_nat_gateway
  • aws_vpc_network_acl
  • aws_vpc_peering_connection
  • aws_vpc_route_table
  • aws_vpc_security_group
  • aws_vpc_subnet
  • aws_vpc_vpn_connection
  • aws_vpc_vpn_gateway
• Updated the query headers in the aws_api_gatewayv2_api table documentation.

Bug fixes

• Queries will no longer fail if the regions config arg is set to ["*"] when AWS releases a new region that is not included in the plugin's region list. (#1267)
• Queries will no longer fail if the regions config arg includes a wildcarded item, e.g., ["test-*"], that matches on no valid regions. (#1276)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.4 which fixes the query timeout issues during dashboard execution and compliance checks. (#1264)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.2 which fixes the stalling of dashboard queries and compliance checks. (#1259)

Bug fixes

• Fixed the plugin credential caching issue wherein the sessions which had an error were also cached. (#1255)

Dependencies

• Recompiled plugin with steampipe-plugin-sdk v4.1.1 which includes several caching and memory management improvements. (#1252)
• Recompiled plugin with Go version 1.19. (#1250)

What's new?

• New tables added
  • aws_dynamodb_table_export (#1218)
  • aws_eks_node_group (#1236)
  • aws_emr_instance (#1225)
  • aws_emr_instance_fleet (#1226)

Enhancements

• Added column cluster_arn to aws_ecs_container_instance table. (#1239)
• Added column streaming_destination to aws_dynamodb_table table. (#1227)
• Added column vault_notification_config to aws_glacier_vault table. (#1231)
• Added column file_system_configs to aws_lambda_function table. (#1224)

Bug fixes

• List queries for the aws_emr_instance_group table no longer fail if there are any instance groups in clusters that use instance fleets. (#1228)

Enhancements

• Added column subnet_id to aws_ec2_network_interface table. (#1216)

Bug fixes

• Fixed the aws_eventbridge_rule table to also list rules for non-default EventBridge buses. (#1214)
• Fixed the aws_rds_db_cluster table to also list MySQL and PostgreSQL engine type clusters. (#1213)

What's new?

• New tables added
  • aws_ses_domain_identity (#1206) (Thanks to @janritter for the contribution!)

Enhancements

• Re-enabled name and type optional list key columns in aws_route53_record table. (#1190)
• Updated the following tables to use AWS SDK Go v2: (#1186)
  • aws_acm_certificate
  • aws_api_gateway_api_authorizer
  • aws_api_gateway_api_key
  • aws_api_gateway_rest_api
  • aws_api_gateway_stage
  • aws_api_gateway_usage_plan
  • aws_api_gatewayv2_api
  • aws_api_gatewayv2_domain_name
  • aws_api_gatewayv2_integration
  • aws_api_gatewayv2_stage
  • aws_dynamodb_backup
  • aws_iam_access_advisor
  • aws_iam_access_key
  • aws_iam_account_password_policy
  • aws_iam_account_summary
  • aws_iam_credential_report
  • aws_iam_group
  • aws_iam_policy
  • aws_iam_policy_attachment
  • aws_iam_policy_simulator
  • aws_iam_role
  • aws_iam_saml_provider
  • aws_iam_server_certificate
  • aws_iam_user
  • aws_iam_virtual_mfa_device
  • aws_s3_bucket
  • aws_sns_topic

Bug fixes

• aws_backup_vault table now returns no rows instead of an error when querying a vault that does not exist. (#1163)
• aws_neptune_db_cluster table now only lists Neptune DB clusters. (#1204)
• aws_rds_db_cluster table now only lists RDS Aurora DB clusters. (#1204)

What's new?

• New tables added
  • aws_networkfirewall_firewall_policy (#1171)

Enhancements

• Added the following new columns to aws_sns_topic table: (#1176)
  • application_failure_feedback_role_arn
  • application_success_feedback_role_arn
  • application_success_feedback_sample_rate
  • firehose_failure_feedback_role_arn
  • firehose_success_feedback_role_arn
  • firehose_success_feedback_sample_rate
  • http_failure_feedback_role_arn
  • http_success_feedback_role_arn
  • http_success_feedback_sample_rate
  • lambda_failure_feedback_role_arn
  • lambda_success_feedback_role_arn
  • lambda_success_feedback_sample_rate
  • sqs_failure_feedback_role_arn
  • sqs_success_feedback_role_arn
  • sqs_success_feedback_sample_rate
• Added support for us-iso and us-isob regions. (#1168)

Bug fixes

• Fixed the typo in column name to use health_check_target instead of heath_check_target in aws_ec2_classic_load_balancer table. (#1179)
• Fixed the settings column in the aws_ecs_cluster table to correctly return data instead of null. (#1175)

What's new?

• New tables added
  • aws_waf_rule_group (#1160)
  • aws_waf_web_acl (#1151)

Enhancements

• Added column associated_resources to aws_wafv2_web_acl table. (#1158)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v3.3.2. (#1150)
• Recompiled plugin with aws-sdk-go v1.44.49. (#1142)
• Added timestamps to example queries in aws_cloudtrail_trail_event, aws_cloudwatch_log_event and aws_vpc_flow_log_event table documents. (#1136)
• Added column url_config to aws_lambda_alias and aws_lambda_function tables. (#1146)

Bug fixes

• Fixed inconsistent table names in the aws_ebs_volume_metric_write_ops, aws_ebs_volume_metric_write_ops_hourly and aws_vpc_flow_log tables. (#1149)

What's new?

• New tables added
  • aws_cloudfront_response_headers_policy (#1128)
  • aws_iam_saml_provider (#1125)
  • aws_pricing_service_attribute (#1137) (#1141)

Enhancements

• Added column certificate to aws_rds_db_instance table. (#1126)

Bug fixes

• Fixed the aws_backup_framework table to return an empty row for the unsupported ap-northeast-3 region instead of returning an error. (#1131)

What's new?

• New tables added
  • aws_amplify_app (#1112)
  • aws_cloudfront_function (#1120)
  • aws_glue_connection (#1102)
  • aws_glue_data_catalog_encryption_settings (#1114)
  • aws_glue_job (#1118)
  • aws_glue_security_configuration (#1106)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v3.3.1. (#1129)
• Added information about STS and IAM API limitations with aws-vault temporary credentials in the docs/index.md file.
• Added column vpcs to aws_route53_zone table. (#1085)
• Added column vpc_endpoint_service_permissions to aws_vpc_endpoint_service table. (#1121)

Bug fixes

• Fixed the No such host issue in audit manager tables. (#1122)
• Fixed the MaxResults parameter issue in list API for aws_eks_identity_provider_config table. (#1119)
• Fixed the Unsupported region issue in aws_media_store_container table. (#1117)
• Fixed the BdRequestException issue in the aws_guardduty_member table. (#1116)

What's new?

• New tables added
  • aws_backup_framework (#1099)
  • aws_elasticache_reserved_cache_node (#1092)
• Added s3_force_path_style config argument to allow S3 path-style addressing. (#1082) (Thanks to @srgg for the contribution!)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v3.3.0. (#1108)

What's new?

• New tables added
  • aws_rds_reserved_db_instance (#1087)

Enhancements

• Added column pending_maintenance_actions to aws_rds_db_cluster and aws_rds_db_instance tables. (#1083)
• Updated the .gitignore file to include all VS Code user settings. (#1078)

Bug fixes

• Fixed the snapshot_create_time column in aws_redshift_snapshot table to be of timestamp data type instead of string. (#1071)

What's new?

• New tables added
  • aws_elasticache_redis_metric_engine_cpu_utilization_daily (#1063)
  • aws_glue_dev_endpoint (#1057)
  • aws_ssm_inventory (#1054)

Enhancements

• Updated aws_route53_record table to temporarily disable name and type list key quals in order to fix duplicate rows issue. (#972)

Bug fixes

• Fixed aws_elasticsearch_domain, aws_opensearch_domain, and aws_s3_bucket tables to not panic when ignoring errors. (#1064)

What's new?

• Added endpoint_url config arg to provide users the ability to set a custom endpoint URL when making requests to AWS services. For more information, please see AWS plugin configuration. (#1053) (Thanks to @srgg for the contribution!)

What's new?

• New tables added
  • aws_route53_traffic_policy_instance (#1047)

Enhancements

• Added column administrator_account to aws_securityhub_hub table. (#1046)

Bug fixes

• Fixed the is_logging column of aws_cloudtrail_trail table to return true instead of null for shadow trails when the source trail has logging enabled. (#986)

What's new?

• New tables added
  • aws_route53_health_check (#1045)

Bug fixes

• Fixed the inline_policies column in aws_iam_role, aws_iam_group and aws_iam_user tables to correctly return results instead of an error. (#1048)

What's new?

• Added ignore_error_codes config arg to provide users the ability to set a list of additional AWS error codes to ignore while running queries. For instance, to ignore some common access denied errors, which is helpful when running with limited permissions, set the argument ignore_error_codes = ["AccessDenied", "AccessDeniedException"]. For more information, please see AWS plugin configuration (#992)
• New tables added
  • aws_config_aggregate_authorization (#1025)
  • aws_dlm_lifecycle_policy (#1016)
  • aws_guardduty_filter (#1029)
  • aws_guardduty_member (#1028)
  • aws_guardduty_publishing_destination (#1030)
  • aws_inspector_assessment_run (#1036)
  • aws_inspector_exclusion (#1038)
  • aws_inspector_finding (#1040)
  • aws_ram_resource_association (#1009)
  • aws_ram_principal_association (#1009)
  • aws_securityhub_action_target (#1012)
  • aws_securityhub_finding (#1017)
  • aws_securityhub_finding_aggregator (#1031)
  • aws_securityhub_insight (#1011)
  • aws_securityhub_member (#1022)
  • aws_securityhub_standards_control (#1010)

Enhancements

• Added column shared_directories to aws_directory_service_directory table. (#1024)
• Added column vpc_id to aws_ec2_network_interface table. (#990)
• Added column master_account to aws_guardduty_detector table. (#1023)
• Added column architectures to aws_lambda_function table. (#991)
• Updated all tables to use IgnoreConfig instead of ShouldIgnoreError in GetConfig function. (#992)

Bug fixes

• Fixed the handling for unsupported regions in aws_inspector_assessment_target and aws_inspector_assessment_template tables. (#1039

What's new?

• New tables added
  • aws_glue_catalog_table (#963)
  • aws_opensearch_domain (#984)
  • aws_pinpoint_app (#968)
  • aws_route53_traffic_policy (#983)
  • aws_sagemaker_app (#977)
  • aws_ses_email_identity (#978)

Enhancements

• Improved the example descriptions in aws_iam_credential_report table document.

Bug fixes

• Fixed aws_cloudtrail_trail_event, aws_cloudwatch_log_event, and aws_vpc_flow_log_event tables not returning correct results for consecutive queries when using the filter list key column. (#981)

What's new?

• New tables added
  • aws_neptune_db_cluster (#966)
  • aws_sagemaker_domain (#974)

Enhancements

• Added the environment_variables column to aws_lambda_function and aws_lambda_version tables. (#973)
• Updated the aws_organizations_account table's id column description and document for account ID clarifications. (#975)
• Removed the use of chalk package in aws_iam_credential_report table for dashboard compatibility.

Bug fixes

• Updated the column name from date-created to date_created in the aws_elastic_beanstalk_environment table (#965)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v3.1.0 and Go version 1.18. (#953)
• Added support for native Linux ARM and Mac M1 builds. (#958)
• Added column package_type to aws_lambda_function table. (#956)

What's new?

• New tables added
  • aws_cost_by_record_type_daily (#950)
  • aws_cost_by_record_type_monthly (#950)
  • aws_wafregional_rule (#931)
• Added optional config arguments max_error_retry_attempts and min_error_retry_delay to allow customization of the error retry timings. For more information please see AWS plugin configuration. (#914)

Enhancements

• Added column event_notification_configuration to aws_s3_bucket table. (#946)
• Added column login_profile to aws_iam_user table. (#947)

Enhancements

• Added image_scanning_findings column to aws_ecr_repository table (#937)

• New tables added
  • aws_networkfirewall_rule_group (#944)

Enhancements

• Added table_class column to aws_dynamodb_table table (#936)
• Added additional optional key quals ('!=') to aws_cost_by_service_daily, aws_cost_by_service_monthly, aws_cost_by_service_usage_type_daily and aws_cost_by_service_usage_type_monthly tables and context cancellation to aws_cost_forecast_daily and aws_cost_forecast_monthly tables (#917)

Bug fixes

• Fixed aws_s3_bucket queries failing for buckets created in the EU (eu-west-1) region through the CLI or API (#927)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v2.1.1 (#933)

Enhancements

• Added column standards_status_reason_code to aws_securityhub_standards_subscription table (#930)

Bug fixes

• Fixed the aws_ebs_snapshot table to correctly handle InvalidParameterValue error (#919)

Enhancements

• Added sqs_managed_sse_enabled column to aws_sqs_queue table (#922)
• Added additional optional key quals to aws_cost_by_service_daily, aws_cost_by_service_monthly, aws_cost_by_service_usage_type_daily and aws_cost_by_service_usage_type_monthly tables (#912)

Bug fixes

• Fixed the title column of aws_vpc_security_group_rule table to correctly evaluate if a security group rule is either ingress or egress (#924)

What's new?

• New tables added
  • aws_servicequotas_service_quota_change_request (#889)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v2.0.3 (#901)

Bug fixes

• Fixed pagination issues in aws_ecs_service table (#908)
• Fixed the aws_iam_access_advisor table to handle the errors when steampipe is running on multi-account connections by using an aggregator connection in the configuration file (#905)

What's new?

• New tables added
  • aws_cloudwatch_metric (#880)

Enhancements

• Added context cancellation handling to the following tables (#896)

  • aws_auditmanager_control
  • aws_auditmanager_framework
  • aws_backup_recovery_point
  • aws_backup_vault
  • aws_cloudfront_cache_policy
  • aws_cloudtrail_trail
  • aws_cloudtrail_trail_event
  • aws_cloudwatch_log_event
  • aws_cloudwatch_log_resource_policy
  • aws_ec2_reserved_instance
  • aws_guardduty_finding
  • aws_iam_action
  • aws_kinesis_video_stream
  • aws_lambda_alias
  • aws_lambda_function
  • aws_serverlessapplicationrepository_application
  • aws_ssm_patch_baseline
  • aws_vpc_security_group_rule

• Updated default max records parameter value and lower limit for the following tables (#896)

  • aws_api_gateway_api_authorizer
  • aws_api_gatewayv2_stage
  • aws_config_conformance_pack
  • aws_directory_service_directory
  • aws_ecs_container_instance
  • aws_ecs_service

Bug fixes

• Fixed the aws_codecommit_repository table to correctly list out all the repositories (#894)

What's new?

• New tables added
  • aws_glue_crawler (#882)
  • aws_servicequotas_default_service_quota (#887)
  • aws_servicequotas_service_quota (#884)

Enhancements

• Added additional optional key quals, filter support, and context cancellation handling to Redshift, Route 53, S3, SageMaker, Secrets Manager, Security Hub, Serverless Application Repository, Step Functions, SNS, SSM, SSO, VPC, WAF and Well-Architected tables (#873)

Bug fixes

• Fixed the aws_dax_cluster table to skip unsupported regions (#869)
• Fixed the aws_wellarchitected_workload table to skip unsupported regions (#859)
• Fixed the aws_vpc_security_group_rule table to set the pair_group_name column to nil for cross-account referenced security group rules instead of returning an error (#875)
• Updated the column type of created_date and last_modified columns to TIMESTAMP in all Lambda tables (#871)

Enhancements

• Added additional optional key quals, filter support, and context cancellation handling to FSx, Glacier, GuardDuty, IAM, Identity Store, Inspector, Kinesis, KMS, Lambda, ElastiCache, Macie and RDS tables (#856)
• Added the following columns to the aws_vpc_security_group_rule table (#860)
  • cidr_ipv4
  • description
  • group_owner_id
  • is_egress
  • referenced_group_id
  • referenced_peering_status
  • referenced_user_id
  • referenced_vpc_id
  • referenced_vpc_peering_connection_id
  • security_group_rule_id
• Added assignment_status column to aws_iam_virtual_mfa_device table (#856)
• Recompiled plugin with steampipe-plugin-sdk v1.8.3 (#865)

Bug fixes

• Fixed the aws_workspaces_workspace table to skip the unsupported regions (#862)

Deprecated

• The following columns of aws_vpc_security_group_rule table have been deprecated to stay consistent with the API response data. These columns will be removed in the next major version. We recommend updating any scripts or workflows that use these deprecated columns to use the equivalent new columns in the table instead.
  • cidr_ip (replaced by cidr_ipv4)
  • group_name
  • owner_id (replaced by group_owner_id)
  • pair_group_id (replaced by referenced_group_id)
  • pair_group_name
  • pair_peering_status (replaced by referenced_peering_status)
  • pair_user_id (replaced by referenced_user_id)
  • pair_vpc_id (replaced by referenced_vpc_id)
  • pair_vpc_peering_connection_id (replaced by referenced_vpc_peering_connection_id)
  • vpc_id

Enhancements

• Recompiled plugin with aws-sdk-go-v1.42.25 (#851)
• Added additional optional key quals, filter support, and context cancellation handling to ACM, API Gateway, EBS, EC2, ECR, ECS, EFS, EKS, Elastic Beanstalk, ElastiCache, Elasticsearch, EMR, EventBridge and RDS tables (#850)

What's new?

• New tables added
  • aws_iam_policy_attachment (#824)

Enhancements

• Updated default max records parameter value and lower limit for Access Analyzer, ACM, API Gateway, Application Auto Scaling, Audit manager, Backup, Cloud Control, CloudFormation, CloudFront, CloudWatch, CodePipeline, Config, DAX, DMS and DynamoDB tables (#829)

Bug fixes

• Fixed the aws_workspaces_workspace table to return an empty row for unsupported regions instead of throwing an error (#835)
• Querying the aws_ebs_snapshot table will now correctly return snapshot(s) details instead of an empty row (#842)
• The image_owner_alias column of aws_ec2_ami_shared table will now correctly display the AWS account alias (for example, amazon, self) or the AWS account ID of the AMI owner (#841)
• The image_owner_alias column of aws_ec2_ami table is now set to self by default (#841)

Bug fixes

• Fixed default max records parameter value and lower limit for aws_cloudwatch_alarm table

Bug fixes

• Queries no longer fail when using a wildcard in the region config argument due to the release of ap-southeast-3 region

What's new?

• New tables added
  • aws_ec2_managed_prefix_list (#813)
  • aws_vpc_peering_connection (#814)

Enhancements

• Added column prefix_list_id to aws_vpc_security_group_rule table (#801)
• Added column compliance_by_config_rule to aws_config_rule table (#817)
• Added column project_visibility to aws_codebuild_project table (821)
• Added additional optional key quals, filter support, and context cancellation handling to Access Analyzer, ACM, API Gateway, Application Auto Scaling, Audit manager, Backup, Cloud Control, CloudFormation, CloudFront, CloudWatch, CodeBuild, CodeCommit, CodePipeline, Config, DAX, Directory Service, DMS, DynamoDB and EBS tables (754)
• Added an example query for listing SQL server instances with SSL disabled in the aws_rds_db_instance table document (#806)
• README.md and docs/index.md files now have updated Slack channel links

Bug fixes

• Fixed the string field contains invalid UTF-8 error in the aws_ec2_instance table (#812)

What's new?

• New tables added
  • aws_elasticache_redis_metric_cache_hits_hourly (#753)
  • aws_elasticache_redis_metric_curr_connections_hourly (#753)
  • aws_elasticache_redis_metric_engine_cpu_utilization_hourly (#753)
  • aws_elasticache_redis_metric_get_type_cmds_hourly (#753)
  • aws_elasticache_redis_metric_list_based_cmds_hourly (#753)
  • aws_elasticache_redis_metric_new_connections_hourly (#753)
  • aws_serverlessapplicationrepository_application (#751)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v1.8.2 (#741)
• Added filter example queries in aws_cloudwatch_log_event table (#748)
• Added few more example queries in aws_iam_role table (#685)

Bug fixes

• aws_ec2_application_load_balancer table will no longer return ValidationError in get call (#792)
• aws_dax_cluster table will no longer return an error when we try to query for unsupported regions (#787)
• aws_lambda_alias table will now need name, function_name and region to perform get call (#781)

What's new?

• New tables added
  • aws_cloudwatch_log_resource_policy (#747)
  • aws_media_store_container (#749)

Enhancements

• Updated: Add policy_std column to the aws_ecrpublic_repository table (#778)
• Updated: Add policy_std column to the aws_ecr_repository table (#780)
• Updated: Add columns policy and policy_std to the aws_lambda_alias table (#774)
• Updated: Add columns policy and policy_std to the aws_lambda_version table (#776)
• Updated: Add columns policy and policy_std to the aws_secretsmanager_secret table (#745)

Bug fixes

• Fixed: aws_kinesis_firehose_delivery_stream table now includes better error handling (#769)
• Fixed: Remove duplicate data from the aws_backup_plan table (#767)
• Fixed: aws_ecrpublic_repository table will now return an empty row instead of an error when we try to query for any region other than us-east-1 (#770)

Bug fixes

• Fixed: Queries will no longer panic when encountering an error due to invalid references in the ShouldRetry function (#763)

What's new?

• New tables added
  • aws_eventbridge_bus (#737)
  • aws_lambda_layer (#740)
  • aws_lambda_layer_version (#743)

Enhancements

• Updated: Add policy_std column to aws_backup_vault table (#746)
• Updated: Increase the golangci-lint workflow timeout to 10 mins (#750)

Bug fixes

• Fixed: Queries will no longer hang if no credentials are provided or an invalid profile is specified (#713)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v1.7.3 (#741)

Bug fixes

• Updated data type of the column platform_version from int to string in aws_ssm_managed_instance table (#732)

What's new?

• New tables added
  • aws_ecs_task (#715)
  • aws_sfn_state_machine (#714)
  • aws_sfn_state_machine_execution (#724)
  • aws_sfn_state_machine_execution_history (#728)

Enhancements

• Updated: Recompiled plugin with steampipe-plugin-sdk v1.7.1 (#729)

What's new?

• New tables added
  • aws_backup_protected_resource (#704)
  • aws_backup_recovery_point (#705)
  • aws_fsx_file_system (#693)
  • aws_identitystore_user (#675)

Enhancements

• Updated: Recompiled plugin with steampipe-plugin-sdk v1.7.0 (#695)

Bug fixes

• Queries for global tables, e.g., aws_iam_user, will no longer return an error if no regions are specified for a connection (#690)
• Fixed the ecs_service table to correctly return the tags instead of returning null (#710)

What's new?

• New tables added
  • aws_ssoadmin_managed_policy_attachment (#664)
  • aws_workspaces_workspace (#681)

Bug fixes

• Fixed: Increase number of retries from 3->8 for Cloud Control service sessions to better handle throttling
• Fixed: Examples for aws_cloudcontrol_resource table are now correct

What's new?

• New tables added
  • aws_cloudcontrol_resource (#680)
  • aws_ssoadmin_permission_set (#659)

Enhancements

• Updated: Parliament IAM permissions to the latest (#676)
• Updated: Add additional optional key quals, filter support, and context cancellation handling to aws_ec2_instance, aws_iam_policy, aws_rds_db_cluster_snapshot tables (#638)
• Recompiled plugin with steampipe-plugin-sdk v1.6.2

What's new?

• New tables added
  • aws_identitystore_group (#663)

Bug fixes

• Add pagination to list and list tags functions in several tables (#660)

What's new?

• New tables added
  • aws_organizations_account (#650)
  • aws_ssoadmin_instance (#658)

Bug fixes

• When the macie service is not enabled in a particular region, aws_macie2_classification_job table will now return nil instead of error (#661)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v1.5.1 (#653)

What's new?

• New tables added
  • aws_ec2_transit_gateway_route (#637)

Enhancements

• Added customized exponential back-off retry logic to optimize retry mechanism (#635)

Bug fixes

• Fixed: Implemented pagination in aws_config_rule and aws_config_conformance_pack table (#646)
• Fixed: Improved documentations (#639)

What's new?

• New tables added
  • aws_ec2_capacity_reservation (#619)
  • aws_ec2_reserved_instance (#612)
  • aws_lambda_function_metric_duration_daily (#624)
  • aws_lambda_function_metric_errors_daily (#625)
  • aws_lambda_function_metric_invocations_daily (#627)
  • aws_tagging_resource (#628)

What's new?

• New tables added
  • aws_directory_service_directory (#572)
  • aws_ec2_application_load_balancer_metric_request_count_daily (#605)
  • aws_ec2_network_load_balancer_metric_net_flow_count (#527)
  • aws_ec2_application_load_balancer_metric_request_count (#527)
  • aws_ec2_network_load_balancer_metric_net_flow_count_daily (#604)
  • aws_rds_db_event_subscription (#609)
  • aws_redshift_cluster_metric_cpu_utilization_daily (#606)
  • aws_securityhub_standards_subscription (#286)

Enhancements

• Updated: Global services like IAM, S3, Route 53, etc. will now connect to us-gov-west-1 and cn-northwest-1 when creating service connections in GovCloud and China respectively (#613)
• Updated: Add column scheduled_actions to aws_redshift_cluster table (#523)
• Updated: Add column log_publishing_options to aws_elasticsearch_domain table (#593)
• Updated: Add column instance_lifecycle to aws_ec2_instance table (#617)

Bug fixes

• Fixed: aws_ec2_ssl_policy table will no longer generate duplicate values with multi-region setup (#594)
• Fixed: If no regions are set in the config file, the region will now correctly be determined from the AWS_DEFAULT_REGION or AWS_REGION environment variables if set (#598)

What's new?

• New tables added
  • aws_eks_identity_provider_config (#571)

Bug fixes

• Fixed: arn column data now contain the correct regions in regional resource tables (#590)
• Fixed: Querying columns dnssec_key_signing_keys and dnssec_status in aws_route53_zone table for private hosted zones no longer causes errors (#589)

What's new?

• New tables added
  • aws_emr_cluster_metric_is_idle (#570)

Bug fixes

• Fixed: aws_cloudtrail_trail table is now smarter when hydrating data for shadow trails (global and organization) (#578)
• Fixed: Route tables with IPv6 routes no longer cause queries to fail in the aws_vpc_route table (#581)

What's new?

• New tables added
  • aws_cloudtrail_trail_event (#564)
  • aws_cloudwatch_log_event (#564)
  • aws_ecs_cluster_metric_cpu_utilization (#563)
  • aws_ecs_cluster_metric_cpu_utilization_daily (#563)
  • aws_ecs_cluster_metric_cpu_utilization_hourly (#563)
  • aws_emr_instance_group (#562)
  • aws_vpc_flow_log_event (#564)

Bug fixes

• Fixed: aws_ec2_instance table should not panic when hydrating state_transition_time column if there is no state transition reason (#574)

What's new?

• New tables added
  • aws_codecommit_repository (#515)
  • aws_ecs_service (#555)

Enhancements

• Updated: Add column arn in aws_vpc_nat_gateway table (#540)
• Updated: Add multi-account connection information and examples to index doc (#565)
• Updated: Improve error message when connection config regions are not valid (#558)
• Updated: Cleanup region selection in connection creation code for table modules (#566)
• Recompiled plugin with steampipe-plugin-sdk v1.4.1

Bug fixes

• Fixed: Connection creation is now retried when receiving reset by peer errors (#557)
• Fixed: Fix plugin sometimes incorrectly selecting the wrong region from connection config (#561)
• Fixed: Hydration now works for created_at, name, title, updated_at, and version columns in aws_codepipeline_pipeline table (#537)
• Fixed: Several column descriptions in aws_ecs_task_definition table (#541)

What's new?

• New tables added
  • aws_auditmanager_evidence (#450)
  • aws_config_rule (#417)
  • aws_dynamodb_metric_account_provisioned_read_capacity_util (#518)
  • aws_dynamodb_metric_account_provisioned_write_capacity_util (#518)

Enhancements

• Updated: Add wildcard support when defining regions in plugin connection configuration (#530)
• Updated: Improve docs/index.md with expanded credential options and examples (#535)

Bug fixes

• Fixed: Fix various failing integration tests (#534)
• Fixed: Removed invalid key column definitions in various tables

What's new?

• New tables added
  • aws_codebuild_source_credential (#511)
  • aws_macie2_classification_job (#479)

Enhancements

• Updated: Rename column file_system_arn to arn in aws_efs_file_system table (#494)
• Updated: Rename column table_arn to arn in aws_dynamodb_table table (#495)
• Updated: Improve error message in aws_iam_credential_report table when no credential report exists (#510)
• Updated: Remove use of deprecated function ItemFromKey from aws_redshift_cluster table (#514)

What's new?

• New tables added
  • aws_auditmanager_evidence_folder (#435)
  • aws_backup_selection (#501)
  • aws_codepipeline_pipeline (#498)
  • aws_route53_domain (#360)

Bug fixes

• Fixed: Typo in description for common cloudwatch_metric timestamp column (#505)

What's new?

• New tables added
  • aws_ec2_ssl_policy (#362)
  • aws_eks_addon_version (#482)
  • aws_guardduty_finding (#488)
  • aws_ssm_managed_instance_compliance (#484)
  • aws_vpc_vpn_connection (#486)

Enhancements

• Updated: Add column arn to aws_api_gateway_stage table (#447)
• Updated: Add column arn to aws_ec2_classic_load_balancer table (#475)
• Updated: Add column event_subscriptions to aws_inspector_assessment_template table (#467)
• Updated: Add column logging_configuration to aws_wafv2_web_acl table (#470)
• Updated: Add columns dnssec_key_signing_keys and dnssec_status to aws_route53_zone table (#439)

Bug fixes

• Fixed: Cache key in ElasticsearchService function and update various cache keys to be more consistent (#500)
• Fixed: Tags hydrate call should not fail in aws_sagemaker_notebook_instance table (#372)

What's new?

• New tables added
  • aws_ec2_ami_shared (#456)
  • aws_ec2_regional_settings (#403)
  • aws_eks_addon (#478)
  • aws_sagemaker_endpoint_configuration (#477)

Enhancements

• Updated: Shadow trails are now included in aws_cloudtrail_trail table query results (#441)
• Updated: Add columns replication_group_id, snapshot_retention_limit, and snapshot_window to aws_elasticache_cluster table (#458)
• Updated: Add columns dead_letter_config_target_arn and reserved_concurrent_executions to aws_lambda_function table (#474)
• Updated: Rename column alarm_arn to arn in aws_cloudwatch_alarm table (#489)
• Recompiled plugin with steampipe-plugin-sdk v0.2.10

Bug fixes

• Fixed: GetCommonColumns function should only get STS caller identity once per account instead of per region (#490)

What's new?

• New tables added
  • aws_auditmanager_assessment (#430)
  • aws_auditmanager_control (#425)
  • aws_auditmanager_framework (#415)
  • aws_cloudfront_cache_policy (#431)
  • aws_cloudfront_origin_access_identity (#427)
  • aws_cloudfront_origin_request_policy (#432)

Enhancements

• Updated: Add column arn to aws_redshift_cluster table (#462)
• Updated: Add column arn to aws_vpc_network_acl table (#457)
• Updated: Add column object_lock_configuration to aws_s3_bucket table (#464)
• Updated: Add column state_transition_time to aws_ec2_instance table (#344)
• Updated: Bump urllib3 in /scripts/generate_parliament_iam_permissions (#471)
• Updated: Getting tags for clusters in 'creating' state should not error in aws_elasticache_cluster table (#454)
• Updated: Rename column replication_instance_arn to arn in aws_dms_replication_instance table (#455)

Bug fixes

• Fixed: Rename table_ aws_elasticsearch_domain.go to table_aws_elasticsearch_domain.go

What's new?

• Updated plugin license to Apache 2.0 per turbot/steampipe#488
• New tables added
  • aws_api_gatewayv2_integration (#346)
  • aws_cloudfront_distribution (#388)
  • aws_cost_by_account_daily (#437)
  • aws_cost_by_account_monthly (#437)
  • aws_cost_by_service_daily (#437)
  • aws_cost_by_service_monthly (#437)
  • aws_cost_by_service_usage_type_daily (#437)
  • aws_cost_by_service_usage_type_monthly (#437)
  • aws_cost_forecast_daily (#437)
  • aws_cost_forecast_monthly (#437)
  • aws_cost_usage (#437)
  • aws_ebs_volume_metric_read_ops (#437)
  • aws_ebs_volume_metric_read_ops_daily (#437)
  • aws_ebs_volume_metric_read_ops_hourly (#437)
  • aws_ebs_volume_metric_write_ops (#437)
  • aws_ebs_volume_metric_write_ops_daily (#437)
  • aws_ebs_volume_metric_write_ops_hourly (#437)
  • aws_ec2_instance_metric_cpu_utilization (#437)
  • aws_ec2_instance_metric_cpu_utilization_daily (#437)
  • aws_ec2_instance_metric_cpu_utilization_hourly (#437)
  • aws_efs_mount_target (#426)
  • aws_kinesisanalyticsv2_application (#358)
  • aws_rds_db_instance_metric_connections (#437)
  • aws_rds_db_instance_metric_connections_daily (#437)
  • aws_rds_db_instance_metric_connections_hourly (#437)
  • aws_rds_db_instance_metric_cpu_utilization (#437)
  • aws_rds_db_instance_metric_cpu_utilization_daily (#437)
  • aws_rds_db_instance_metric_cpu_utilization_hourly (#437)
  • aws_rds_db_instance_metric_read_iops (#437)
  • aws_rds_db_instance_metric_read_iops_daily (#437)
  • aws_rds_db_instance_metric_read_iops_hourly (#437)
  • aws_rds_db_instance_metric_write_iops (#437)
  • aws_rds_db_instance_metric_write_iops_daily (#437)
  • aws_rds_db_instance_metric_write_iops_hourly (#437)
  • aws_sagemaker_training_job (#384)
  • aws_ssm_managed_instance (#436)
  • aws_waf_rate_based_rule (#289)
  • aws_wafv2_rule_group (#281)

Enhancements

• Updated: Base64 data in the user_data column is now decoded in the aws_ec2_instance and aws_ec2_launch_configuration tables (#363)
• Updated: Add arn column to aws_account table (#418)
• Updated: Add arn column to aws_guardduty_detector table (#408)
• Updated: Add arn column to aws_ssm_association table (#404)

What's new?

• New tables added
  • aws_glue_catalog_database (#337)

Enhancements

• Updated: Add arn column to aws_ebs_snapshot table (#405)
• Updated: Add arn column to aws_vpc_eip table (#407)
• Updated: Improve availability zone count example in aws_lambda_function table doc (#413)

Bug fixes

• Fixed: Getting key rotation status for external keys should not error in aws_kms_key table (#398)

What's new?

• New tables added
  • aws_dms_replication_instance (#357)
  • aws_ecs_container_instance (#340)
  • aws_sagemaker_model (#371)
  • aws_waf_rule (#287)
  • aws_wafv2_ip_set (#255)
  • aws_wafv2_regex_pattern_set (#276)

Enhancements

• Updated: README.md and docs/index.md now contain links to our Slack community (#411)
• Updated: Add logging_status column to aws_redshift_cluster table (#350)
• Updated: Add missing columns available in the hydrate data to aws_ssm_association table (#356)
• Updated: Bump lodash from 4.17.20 to 4.17.21 in /aws-test (#389)

Bug fixes

• Fixed: Querying the aws_iam_account_password_policy table should not error if no password policy exists (#382)

What's new?

• New tables added
  • aws_accessanalyzer_analyzer (#341)
  • aws_appautoscaling_target (#353)
  • aws_wafv2_web_acl (#245)

Enhancements

• Updated: Add arn column to aws_config_configuration_recorder table (#380)
• Updated: Add arn column to aws_ebs_volume table (#368)
• Updated: Add arn column to aws_ec2_instance table (#367)
• Updated: Add arn column to aws_vpc_security_group table (#377)
• Updated: Add arn column to aws_vpc table (#378)
• Updated: Add automatic_backups column to aws_efs_file_system table (#351)

Bug fixes

• Fixed: Handling of pending subscriptions in aws_sns_topic_subscription table (#349)

What's new?

• New tables added
  • aws_dax_cluster (#328)
  • aws_ecrpublic_repository (#336)
  • aws_s3_access_point (#318)

Enhancements

• Updated: Parliament IAM permissions for Parliament v1.4.0 (#216)

Bug fixes

• Fixed: The aws_guardduty_threat_intel_set table should not throw an rpc error while trying to list threat intel sets (#343)

What's new?

• New tables added
  • aws_codebuild_project (#319)
  • aws_elasticsearch_domain (#327)
  • aws_sagemaker_notebook_instance (#324)
  • aws_secretsmanager_secret (#330)

Bug fixes

• Fixed: Replace hardcoded ARN references in aws_ec2_instance_type, aws_iam_policy, and aws_s3_bucket tables (#331)

What's new?

• New tables added
  • aws_elasticache_subnet_group (#247)
  • aws_guardduty_detector (#251)
  • aws_guardduty_ipset (#259)
  • aws_guardduty_threat_intel_set (#271)
  • aws_inspector_assessment_template (#248)
  • aws_redshift_snapshot (#238)

Enhancements

• Updated: Add arn column to aws_s3_bucket table (#313)

Bug fixes

• Fixed: Query example in aws_iam_server_certificate table docs (#309)

What's new?

• New tables added
  • aws_inspector_assessment_target (#234)

Enhancements

• Updated: Add metadata_options column to aws_ec2_instance table (#306)

What's new?

• New tables added
  • aws_backup_plan (#164)
  • aws_backup_vault (#163)
  • aws_elastic_beanstalk_application (#187)
  • aws_iam_server_certificate (#293)
  • aws_redshift_event_subscription (#230)
  • aws_securityhub_product (#207)
  • aws_wellarchitected_workload (#223)

Enhancements

• Updated: Add certificate_transparency_logging_preference, imported_at, renewal_eligibility, and type columns to aws_acm_certificate table (#299)
• Recompiled plugin with steampipe-plugin-sdk v0.2.7

Bug fixes

• Fixed: Rename column instance_profile_arn to instance_profile_arns and update data to be a list of ARNs (strings) in aws_iam_role table (#291)
• Fixed: Release dates in CHANGELOG no longer project versions out in the year 20201 (#284)

Bug fixes

• Fixed: Table definitions & examples link now points to the correct location (#282)

What's new?

• New tables added
  • aws_cloudwatch_alarm (#197)
  • aws_ecr_repository (#139)
  • aws_ecs_task_definition (#173)
  • aws_efs_access_point (#174)
  • aws_elastic_beanstalk_environment (#178)
  • aws_elasticache_replication_group (#246)
  • aws_glacier_vault (#165)
  • aws_kinesis_consumer (#222)
  • aws_redshift_subnet_group (#220)
  • aws_securityhub_hub (#166)

Enhancements

• Updated: Add canary_settings and method_settings columns to aws_api_gateway_stage table (#273)
• Updated: Add query_logging_configs column to aws_route53_zone table (#264)
• Updated: Example queries for aws_s3_bucket table to be more consistent with standards (#268)

Bug fixes

• Fixed: Remove unnecessary engine and region compatibility check when describing instances in the aws_rds_db_instance table (#263)
• Fixed: The aws_vpc table should ignore InvalidVpcID.NotFound errors (#270)

What's new?

• New tables added
  • aws_config_conformance_pack (#170)
  • aws_ecs_cluster (#140)
  • aws_efs_file_system (#144)
  • aws_elasticache_parameter_group (#176)
  • aws_emr_cluster (#152)
  • aws_kinesis_video_stream (#182)
  • aws_route53_resolver_endpoint (#137)
  • aws_route53_resolver_rule (#148)

Enhancements

• Updated: Add flow_log_status column to aws_vpc_flow_log table (#233)
• Updated: Add launch_time column to aws_ec2_instance table (#227)
• Recompiled plugin with steampipe-plugin-sdk v0.2.6

What's new?

• New tables added
  • aws_cloudtrail_trail (#34)
  • aws_eks_cluster (#131)
  • aws_elasticache_cluster (#130)
  • aws_eventbridge_rule (#135)
  • aws_kinesis_stream (#125)
  • aws_redshift_cluster (#204)
  • aws_ssm_association (#114)
  • aws_ssm_document (#110)

Enhancements

• Recompiled plugin with steampipe-plugin-sdk v0.2.4

Bug fixes

• Fixed: Various examples for aws_iam_access_advisor, aws_iam_policy_simulator, and aws_route53_record tables (#186)
• Fixed: Multi-region queries now work properly for the aws_lambda_version table (#192)
• Fixed: aws_availability_zone and aws_ec2_instance_availability tables now check region opt-in status to avoid AuthFailure errors (#168)
• Fixed: region column in aws_region table now shows the correct region instead of global (#133)

What's new?

• New tables added
  • aws_cloudwatch_log_stream
  • aws_config_configuration_recorder
  • aws_iam_virtual_mfa_device
  • aws_ssm_maintenance_window
  • aws_ssm_patch_baseline

Bug fixes

• Removed use of deprecated ItemFromKey function from all tables

What's new?

• Plugin now supports authentication through AWS SSO.
• New tables added
  • aws_ec2_gateway_load_balancer
  • aws_vpc_flow_log

Enhancements

• Updated: Added tags_src and tags columns to aws_iam_policy table.

Bug fixes

• Recompiled plugin with latest steampipe-plugin-sdk to resolve issue:
  • Fix tables failing with error similar to Error: pq: rpc error: code = Internal desc = get hydrate function getS3Bucket failed with panic interface conversion: interface {} is nil, not *s3.Bucket(#89).

Bug fixes

• Recompiled plugin with latest steampipe-plugin-sdk to resolve SDK issues:
  • Fix error for missing required quals #40.
  • Queries fail with error socket: too many open files #190

Bug fixes

• Ensure aws_account and aws_region table work when regions argument is specified in connection config (#70)

What's new?

• Added support for connection configuration. You may specify aws profiles, credentials, and regions for each connection in a configuration file. You can have multiple aws connections, each configured for a different aws account.
• Added multi-region support. A single connection can query multiple AWS regions, via the regions connection argument.

Enhancements

• Updated: Updated tag_list columns to tags_src for below RDS service tables.

  • aws_rds_db_cluster
  • aws_rds_db_cluster_parameter_group
  • aws_rds_db_cluster_snapshot
  • aws_rds_db_instance
  • aws_rds_db_option_group
  • aws_rds_db_parameter_group
  • aws_rds_db_snapshot
  • aws_rds_db_subnet_group

• Updated: added inline_policies_std column to aws_iam_group, aws_iam_role and aws_iam_user table with canoncialized inline policies.

What's new?

• New tables added to plugin

  • aws_iam_access_advisor (#42)
  • aws_route53_record (#43)
  • aws_route53_zone (#43)

Enhancements

• Updated: aws_iam_credential_report table to have password_status column (#48)

What's new?

• New tables added to plugin(#40)

  • aws_iam_account_password_policy
  • aws_iam_account_summary
  • aws_iam_action
  • aws_iam_credential_report
  • aws_iam_policy_simulator

Enhancements

• Updated: aws_ssm_parameter table to have value, arn, selector and source_result fields (#22)

• Updated: aws_iam_user table to have mfa_enabled and mfa_devices columns (#28) ​

Bug fixes

• Fixed: Now bucket_policy_is_public column for aws_s3_bucket will display the correct status of bucket policy (#36)

Notes

• The lifecycle_rules column of the table aws_s3_bucket has been updated to return an array of lifecycle rules instead of a object with key Rules holding lifecycle rules (#29)

What's new? ​

• Added: aws_ssm_parameter table ​
• Updated: aws_ec2_autoscaling_group to have policies field which contains the details of scaling policy.
• Updated: aws_ec2_instance table. Added instance_status field which includes status checks, scheduled events and instance state information. ​

Bug fixes ​

• Fixed: aws_s3_bucket table to list buckets even if the region is not set.