Releases: codeforamerica/tofu-modules-aws-logging
2.1.1
2.1.0
2.0.0
2.0.0 (2025-02-28)
This release includes new features and fixes to meet NIST SP 800-53 Rev. 5
controls in Security Hub. These changes introduce breaking modifications to the
location of certain resources. If you are upgrading from a previous version, you
will need to update your state file to reflect the new locations.
Warning
It is highly recommended to back up your state file before making any changes
to it. This will allow you to restore the state in the event of an error.
To create a local backup of your state file, use the command tofu state pull > local-state.json. In the event of an issue, you can restore the state
with tofu state push -force local-state.json.
If this module is currently located at module.logging, you can update the
state file with the following commands:
tofu state mv module.logging.aws_s3_bucket.logs module.logging.module.s3.aws_s3_bucket.main
tofu state mv module.logging.aws_s3_bucket_ownership_controls.example module.logging.module.s3.aws_s3_bucket_ownership_controls.main
tofu state mv module.logging.aws_s3_bucket_policy.logs module.logging.module.s3.aws_s3_bucket_policy.main
tofu state mv module.logging.aws_s3_bucket_public_access_block.good_example "module.logging.module.s3.aws_s3_bucket_public_access_block.main[0]"
tofu state mv module.logging.aws_s3_bucket_server_side_encryption_configuration.logs module.logging.module.s3.aws_s3_bucket_server_side_encryption_configuration.main
tofu state mv module.logging.aws_s3_bucket_versioning.logs module.logging.module.s3.aws_s3_bucket_versioning.mainThe complete list of resources, relative to this module, and their new locations
can be found in the table below:
| Old Resource Name | New Resource Name |
|---|---|
aws_s3_bucket.logs |
module.s3.aws_s3_bucket.main |
aws_s3_bucket_ownership_controls.example |
module.s3.aws_s3_bucket_ownership_controls.main |
aws_s3_bucket_policy.logs |
module.s3.aws_s3_bucket_policy.main |
aws_s3_bucket_public_access_block.good_example |
module.s3.aws_s3_bucket_public_access_block.main[0] |
aws_s3_bucket_server_side_encryption_configuration.logs |
module.s3.aws_s3_bucket_server_side_encryption_configuration.main |
aws_s3_bucket_versioning.logs |
module.s3.aws_s3_bucket_versioning.main |
Feat
Fix
- Updated bucket policy to actually require SSL.