cfn-lint

CloudFormation Specifications

• Update CloudFormation specs to 162.0.0 (pull #3069)

Fixes

• Raise error if any key in a mapping is null (pull #3073)
• Add getatt support for registry schemas (pull #3061)
• Set Application location when its a string in SAM transform (pull #3060)

CloudFormation Specifications

• Update CloudFormation specs to 160.0.0 (pull #3054)

CloudFormation Specifications

• Update CloudFormation specs to 158.0.0 (pull #3039)

Fixes

• Fix an issue with using SAM and a GetAtt (pull #3042)

Feature

• Update rule E3027 to validate rate periods (pull #3017)
• Add support new language extension foreach capabilities &{parameter} (pull #3033)
• Passthrough metadata into SAM translator (pull #3030)
• Switch to using path and resource names for directives (pull #3035)

CloudFormation Specifications

• Update CloudFormation specs to 156.0.0 (pull #3029)

CloudFormation Specifications

• Update CloudFormation specs to 154.0.0 (pull #3005)
• Add db.serverless to neptune instance classes (pull #3009)

Fixes

• Drop python 3.7 support (pull #3005)

CloudFormation Specifications

• Update CloudFormation specs to 153.0.0 (pull #2986)

Fixes

• Remove rule E2506 which results in false positive (pull #3001)
• Return dict str_node when doing transform (pull #2996)

CloudFormation Specifications

• Update CloudFormation specs to 152.0.0 (pull #2984)
• Add ca-west-1 region (pull #2980)

CloudFormation Specifications

• Update CloudFormation specs to 151.0.0 (pull #2969)

Fixes

• Fix LanguageTransformer to better handle Fn::GetAtt dot notation in Fn::Sub (pull #2974)
• Update rule E2530 and I2530 to support regionality of the SnapStart feature (pull #2973)

CloudFormation Specifications

• Update CloudFormation specs to 150.0.0 (pull #2963)
• Patch in TargetObjectKeyFormat for AWS::S3::Bucket (pull #2966)

Fixes

• Update rule E3013 to ignore dynamic references in CloudFront aliases (pull #2967)

CloudFormation Specifications

• Update CloudFormation specs to 149.0.0 (pull #2951)
• Add KeyID as a target for TargetKeyId (pull #2953)

CloudFormation Specifications

• Update CloudFormation specs to include python3.12 (pull #2947)

CloudFormation Specifications

• Update CloudFormation specs to 148.0.0 (pull #2942)
• Add in LoadBalancerArn to LoadBalancerV2Arn (pull #2936)

CloudFormation Specifications

• Update CloudFormation specs to 146.0.0 (pull #2921)

Fixes

• Update E3036 and E3035 to allow more FNs (pull #2928)
• Update I3037 to have exceptions Command (pull #2927)

Features

• Add rule E3045 to validate AccessControls are specified when using AccessControl (pull #2905)
• Add rule W3045 to alert on usage of legacy capability AccessControl (pull #2905)

CloudFormation Specifications

• Update CloudFormation specs to 145.0.0 (pull #2909)

Fixes

• Update I2530 validates its using Java runtimes greater than 8 (pull #2916)

Fixes

• Update E2530 and I2530 to make sure Runtime is a string before using startswith (pull #2912)

Features

• Add rule W2530 to warn when SnapStart isn't configured correctly (pull #2905)
• Add rule I2530 to warn when SnapStart isn't configured on newer Java runtimes (pull #2905)
• Add rule E2530 to error when SnapStart is configured on an unsupported runtime (pull #2905)

CloudFormation Specifications

• Update CloudFormation specs to 144.0.0 (pull #2898)

CloudFormation Specifications

• Update CloudFormation specs to 143.0.0 (pull #2893)

Fixes

• Update language transformation to pass through empty objects (pull #2899)
• Update rule E1017 to allow Fn::Select to allow Fn::Select (pull #2900)
• Update rule E2532 to support ToleratedFailurePercentage and ItemBatcher to Map (pull #2901)

CloudFormation Specifications

• Update CloudFormation specs to 142.0.0 (pull #2889)

Fixes

• Update rule E2520 to allow for empty lists (pull #2891)

CloudFormation Specifications

• Update CloudFormation specs to 141.0.0 (pull #2879)

Fixes

• Update rule E2532 to include CausePath and ErrorPath key types to Fail state (pull #2884)
• Update rule E2520 to better match exclusive properties (pull #2886)

Fixes

• Revert change #2878 (pull #2882)

CloudFormation Specifications

• Update CloudFormation specs to 140.0.0 (pull #2870)
• Add OriginAccessControlId to OnlyOne (pull #2878)

Fixes

• Allow jsonschema to be from v3.0.0 to v5 (pull #2838)

Fixes

• Update E3031 so all regex checks are run (pull #2873)
• Update E2520 to better skip properties we don't care about (pull #2875)

CloudFormation Specifications

• Update CloudFormation specs to 139.0.0 (pull #2865)

Fixes

• Force regex to be at least 2022 for typing parameter (pull #2867)

CloudFormation Specifications

• Update CloudFormation specs to 138.0.0 (pull #2857)

Fixes

• Fix AWS::LanguageExtensions to have regex escape for string replacement (pull #2862)

CloudFormation Specifications

• Update CloudFormation specs to 136.0.0 (pull #2848)

Fixes

• Added ItemReader key to StateMachine Map state (pull #2850)
• Update rule E2503 to allow network load balancers to use security groups (pull #2850)

CloudFormation Specifications

• Add region il-central-1 (pull #2836)
• Update CloudFormation specs to 135.0.0 (pull #2837)

Fixes

• Allow for RetainExceptOnCreate for DeletionPolicy (pull #2834)
• Fix language extension transform to resolve foreach refs in Sub parameters (pull #2846)
• Fix language extension transform to allow Fn::FindInMap to return arrays (pull #2845)

CloudFormation Specifications

• Fix AWS::Glue::Job.Name to use string min/max instead of number min/max (pull #2831)

CloudFormation Specifications

• Update schema to spec conversions to include include a default string minimum value of 0 if not specified (pull #2824)
• Update CloudFormation specs to 132.0.0 (pull #2824)

Fixes

• Fix AWS::LanguageExtensions to not empty out a hardcoded string Fn::FindInmap that cannot be resolved (pull #2827)

Fixes

• Fix AWS::LanguageExtensions to not fully resolve Fn::FindInMap unless in Fn::ForEach collection (pull #2822)
• Update convert_dict to include Mark instead of tuple for default value (pull #2821)

Fixes

• Fix Conditions logic to not crash on a condition that isn't found (pull #2814)
• Update rule E1011 to better handle Fn::FindInMap with AWS::LanguageExtensions (pull #2814)
• Update rule W2001 to better handle Ref with AWS::LanguageExtensions (pull #2814)

Features

• Add rule E1032 to validate ForEach with transform (pull #2809)

Fixes

• Fix AWS::LanguageExtensions regex for sub removal to handle pseudo parameters (pull #2812)

Features

• Add support for Fn::ForEach when using AWS::LanguageExtensions (pull #2801)

Features

• Add test function to test conditions given a scenario (pull #2801)

CloudFormation Specifications

• Update CloudFormation specs to 131.0.0 (pull #2795)
• Updated DocumentDBEngineVersion AllowedValues (pull #2800)

Features

• Update rule E1018 to flag splitting dynamic references (pull #2786)
• New rule W2533 to validate lambda zip deployment configuration (pull #2682)
• Supporting intrinsic function in DeletionPolicy and UpdateReplacePolicy (pull #2784)

CloudFormation Specifications

• Update CloudFormation specs to 130.0.0 (pull #2783)

Fixes

• Pin jsonschema to be under 4.18 (pull #2792)
• Fix using include_experimental in metadata (pull #2785)
• Fix rule E1024 to better handle conditions (pull #2780)

CloudFormation Specifications

• Update CloudFormation specs to 127.0.0 (pull #2763)

CloudFormation Specifications

• Fix an issue with SSM patching (pull #2765)

CloudFormation Specifications

• Update CloudFormation specs to 126.0.0 (pull #2753)

Fixes

• Fix usage of comments and new lines in custom rules(pull #2757)

CloudFormation Specifications

• Update CloudFormation specs to 124.0.0 (pull #2736)
• Add AWS::KMS::Key to stateful resource list (pull #2751)

Fixes

• Update E3012 documentation changes for more clarity (pull #2747)

CloudFormation Specifications

• Update CloudFormation specs to 121.0.0 (pull #2723)

CloudFormation Specifications

• Update CloudFormation specs to 120.0.0 (pull #2714)

Fixes

• Fix Conditions logic when checking a condition against a region. Now return True and False when the condition has no basis on region (pull #2721)
• Rebuild conditions inside the Template class when doing a Transform (pull #2720)

CloudFormation Specifications

• Update CloudFormation specs to 119.2.0 (pull #2703)

Fixes

• GetAtt can return objects along with FindInMap (pull #2709)

Features

• Add custom operators for regex, gt, lt (pull #2694)

CloudFormation Specifications

• Update CloudFormation specs to 119.1.0 (pull #2698)

CloudFormation Specifications

• Update CloudFormation specs to 119.1.0 (pull #2678)
• Update allowed values for AWS::RDS::DBInstance.PerformanceInsightsRetentionPeriod (pull #2696)

Fixes

• Update rule E3001 to evaluate if a resource with a condition is affected by the region (pull #2691)

Features

• Convert from re to regex (pull #2643)
• Implement IS DEFINED in custom rules (pull #2656)

CloudFormation Specifications

• Update CloudFormation specs to 119.0.0 (pull #2660)
• Patch AWS::S3::Bucket.InventoryConfiguration.OptionalFields to include ChecksumAlgorithm (pull #2666)
• Patch AWS::Cognito::UserPool.UserPollTags to be a map of strings (pull #2671)

Fixes

• Update SAM translation to substitute for a sub in CodeUri (pull #2661)
• Update language extensions to validate if a ref is iterable before assuming it is (pull #2665)
• Update rule E3001 to consider a resource level condition when evaluating if the resource type exists (pull #2668)
• Update rule E3012 to validate if a map is actually a map (pull #2669)

Full Changelog: https://github.com/aws-cloudformation/cfn-lint/compare/v0.76.2...v0.77.0

CloudFormation Specifications

• Update CloudFormation specs to 118.1.0 (pull #2644)

Fixes

• Fix an issue with Conditions when a Fn::Equals has a string that isn't in a Parameters AllowedValues (pull #2649)

Features

• Convert conditions to SymPy (pull #2624)
• Include tests in sdist (pull #2630)

CloudFormation Specifications

• Update CloudFormation specs to 117.0.0 (pull #2642)

Fixes

• Fix SAM templates treated as normal by api (pull #2646)

CloudFormation Specifications

• Update CloudFormation specs to 116.0.0 (pull #2620)
• Add string length for AWS::WAFRegional::RegexPatternSet.RegexPatternStrings and AWS::WAFv2::RegexPatternSet.RegularExpressionList (pull #2637, pull #2639)

Features

• Read the default region from Env Vars (pull #2618)

Fixes

• Update rule W2030 and E3008 to read ValueTypes from us-east-1 when CACHED (pull #2635)

Fixes

• Update rule W2031, E3031, E3030, E3034, and E3033 to read ValueTypes from us-east-1 when CACHED (pull #2628)

CloudFormation Specifications

• Update CloudFormation specs to 114.0.0 (pull #2616)

Fixes

• Fix custom rule inequality comparison (pull #2614)
• Restructure the decode module (pull #2607)

CloudFormation Specifications

• Update CloudFormation specs to 114.0.0 (pull #2601)
• Remove AWS::Logs::LogGroup.RetentionInDays AllowedValues (pull #2604)

Features

• Add rule E3044 to validate the scheduling strategy for Fargate services (pull #2559)

CloudFormation Specifications

• Update CloudFormation specs to 113.0.0 (pull #2591)

Fixes

• Updated condition logic to limit the number of conditions that are processed (pull #2598)

CloudFormation Specifications

• Update CloudFormation specs to 112.0.0 (pull #2580)

Fixes

• Updated rule E2532 by adding ItemProcessor to Map (pull #2577)
• Relax networkx dependency (pull #2584)
• Validate sub string checks are strings before running regex in graph and template (pull #2589)
• Update SAM transform pre-work to include DefinitionBody when DisableExecuteApiEndpoint is specified (pull #2590)

CloudFormation Specifications

• Patch back in TargetRole for AWS::RDS::DBProxyEndpoint (pull #2581)

CloudFormation Specifications

• Update CloudFormation specs to 111.0.0 (pull #2572)
• Add region ap-southeast-4 (pull #2568)
• Remove AWS::RDS::DBCluster MasterUsername and MasterUserPassword from Inclusive (pull #2571)

Fixes

• Update SAM Translator version based on the SAM CLI requirement (pull #2570)