Skip to content

Release v1.5.4

Compare
Choose a tag to compare
@github-actions github-actions released this 06 Oct 00:37
82b13af

Notes

  • This release was REPLACED by v1.5.4-a due to an issue, customers should upgrade to v1.5.4-a instead

ENHANCEMENTS

  • Add GuardDuty Kubernetes protection support (#1058)
  • Add GuardDuty frequency customization support (#1057)

FIXES

  • Address new IAM role trust policy behavior (#1066)
  • Upgrade CDK to v1.174.0 to address Node.js 12 deprecation (#1066)
  • Update EC2-INSTANCE-PROFILE-PERMISSIONS config rule to reduce CI generation noise (#1065)
  • Add jitter to state machine back-off retry code to reduce retry failures (#1050)
  • Decrease Lambda concurrency limit to 10 based on new customer limits (#1062)
  • Fix issue with ALB forwarder when no HOSTS defined (#1019)

DOCUMENTATION

ADD-ONS

  • OpenSearch SIEM enhancements including Node.js 12 deprecation updates (#1056)

CONFIG FILE CHANGES

  • Updates for Control Tower v3.0 (MANDATORY for Control Tower customers)
    • only deploy CloudWatch Alarms & Metrics in Management account (#1027)
  • GuardDuty enhancements (OPTIONAL)
    • "guardduty-frequency": "FIFTEEN_MINUTES" or "ONE_HOUR" or "SIX_HOURS" (#1057)
    • "guardduty-eks": true and "guardduty-eks-excl-regions": [], (#1058)
  • Remove duplicate line from SCP files (#1067)