Skip to content

Releases: codeforamerica/tofu-modules-aws-logging

2.1.1

09 Sep 17:39
7bf6566

Choose a tag to compare

2.1.1 (2025-09-09)

Fix

  • Use region instead of deprecated name for aws_region. (#19)

2.1.0

19 Mar 19:04
3fa7709

Choose a tag to compare

2.1.0 (2025-03-19)

Feat

  • Add automated upgrade path for moved resources. (#17)

Fix

  • Added empty prefix filter to address deprecation warning. (#15)

2.0.0

28 Feb 23:44
ee854e1

Choose a tag to compare

2.0.0 (2025-02-28)

This release includes new features and fixes to meet NIST SP 800-53 Rev. 5
controls in Security Hub. These changes introduce breaking modifications to the
location of certain resources. If you are upgrading from a previous version, you
will need to update your state file to reflect the new locations.

Warning

It is highly recommended to back up your state file before making any changes
to it. This will allow you to restore the state in the event of an error.

To create a local backup of your state file, use the command tofu state pull > local-state.json. In the event of an issue, you can restore the state
with tofu state push -force local-state.json.

If this module is currently located at module.logging, you can update the
state file with the following commands:

tofu state mv module.logging.aws_s3_bucket.logs module.logging.module.s3.aws_s3_bucket.main
tofu state mv module.logging.aws_s3_bucket_ownership_controls.example module.logging.module.s3.aws_s3_bucket_ownership_controls.main
tofu state mv module.logging.aws_s3_bucket_policy.logs module.logging.module.s3.aws_s3_bucket_policy.main
tofu state mv module.logging.aws_s3_bucket_public_access_block.good_example "module.logging.module.s3.aws_s3_bucket_public_access_block.main[0]"
tofu state mv module.logging.aws_s3_bucket_server_side_encryption_configuration.logs module.logging.module.s3.aws_s3_bucket_server_side_encryption_configuration.main
tofu state mv module.logging.aws_s3_bucket_versioning.logs module.logging.module.s3.aws_s3_bucket_versioning.main

The complete list of resources, relative to this module, and their new locations
can be found in the table below:

Old Resource Name New Resource Name
aws_s3_bucket.logs module.s3.aws_s3_bucket.main
aws_s3_bucket_ownership_controls.example module.s3.aws_s3_bucket_ownership_controls.main
aws_s3_bucket_policy.logs module.s3.aws_s3_bucket_policy.main
aws_s3_bucket_public_access_block.good_example module.s3.aws_s3_bucket_public_access_block.main[0]
aws_s3_bucket_server_side_encryption_configuration.logs module.s3.aws_s3_bucket_server_side_encryption_configuration.main
aws_s3_bucket_versioning.logs module.s3.aws_s3_bucket_versioning.main

Feat

  • Updated to use S3 module. (DEV-109) (#13)
  • Added S3 lifecycle configuration.

Fix

  • Updated bucket policy to actually require SSL.

1.2.1

28 Oct 18:20
b7b2edf

Choose a tag to compare

1.2.1 (2024-10-28)

Fix

  • Added missing dash for buckets with a suffix. (#10)
  • Updated bucket resource to allow replacement with create_before_destroy.

1.2.0

28 Oct 17:54
159f86e

Choose a tag to compare

1.2.0 (2024-10-28)

Feat

  • Added option to assign a suffix to the bucket name. (#7)

1.1.0

17 Oct 20:56
269a41c

Choose a tag to compare

1.1.0 (2024-10-17)

Feat

  • Set object ownership to support CloudFront logs. (#4)

1.0.0

11 Oct 19:31
e040fb2

Choose a tag to compare

1.0.0 (2024-10-11)

Feat

  • Initial release. (#1)