cfn-lint

CloudFormation Specifications

• Update CloudFormation specs to 107.0.0 (pull #2546)

Features

• Support Fn::FindInMap enhancements when template is declared with AWS::LanguageExtensions (pull #2512)

CloudFormation Specifications

• Update CloudFormation specs to 106.0.0 (pull #2546)

Fixes

• Update rule E1030 to include Fn::FindInMap when using Fn::Length (pull #2547)
• Update rule E3002 to allow a Fn::GetAtt for an object (pull #2548)
• Update rule E2532 to include current task properties (pull #2549)

CloudFormation Specifications

• Update CloudFormation specs to 105.0.0 (pull #2530)

Fixes

• Use a clean copy of the cli_value each time when merging config to avoid leaking config from one template to another (pull #2536)

Features

• Update rule W1001 to support Fn::Sub (pull #2525)

CloudFormation Specifications

• Update CloudFormation specs to 102.0.0 (pull #2523)

Fixes

• Update Template function get_valid_getatts to better return None when a property type doesn't exist (pull #2527)

Features

• Update rule E2015 to support the AllowedValues and AllowedPattern attributes for CommaDelimitedList parameters (pull #2521)

CloudFormation Specifications

• Update CloudFormation specs to 101.0.0 (pull #2517)
• Update get_valid_getatts to account for changes in the CloudFormation spec (pull #2520)

Fixes

• Don't validate rule I3042 when using SAM (pull #2513)

CloudFormation Specifications

• Update CloudFormation specs to 100.0.0 (pull #2493)

Fixes

• Update rule E1011 to merge key validation into one method (pull #2502)

CloudFormation Specifications

• Add ap-south-2 region (pull #2503)

Fixes

• Rebuild the graph after doing the transform (pull #2502)

Features

• Add more info into the graph including outputs and parameters(pull #2452)

CloudFormation Specifications

• Update CloudFormation specs to 99.0.0 (pull #2486)
• Add eu-south-2 region (pull #2490)

Fixes

• Make sure regex patterns with \w are validating against ASCII (pull #2487)

Features

CloudFormation Specifications

• Add support for region eu-central-2 (pull #2478)
• Update CloudFormation specs to 97.0.0 (pull #2475)

Features

• Reduce storage on disk by reducing regional specs to only have differences from us-east-1 spec (pull #2457)

CloudFormation Specifications

• Update CloudFormation specs to 96.0.0 (pull #2461)

Fixes

• Fix an issue with junit/pretty formatter/core process to get all rules even on parse failure (pull #2462)
• Fix an issue when use stdin to pass a template and cfn-lint with parameters giving E0000 (pull #2470)

Features

• Add support for Python 3.11 (pull #2463)

Fixes

• Fix an issue with --list-rules failing (pull #2466)

Features

• Add rule W8003 to check if Fn::Equals will always be true or false (pull #2426)
• Allow you to configure how exit codes work (pull #2436)

CloudFormation Specifications

• Update CloudFormation specs to 95.0.0 (pull #2440)
• Remove check for string size of Lambda::Function.Code.Zipfile (pull #2447)

Fixes

• Update rule E3012 to validate bad functions (pull #2441)
• Update rule E3016 to make checks less restrictive (pull #2453)

CloudFormation Specifications

• Updated string max value to Lambda::Function.Code.Zipfile to 4MB (pull #2444)

Features

• Update decode of yaml/json to report on all duplicates (pull #2428)

CloudFormation Specifications

• Patch in db.serverless into AWS::RDS::DBInstance.DBInstanceClass (pull #2430)
• Added string max value to Lambda::Function.Code.Zipfile (pull #2431)

Fixes

• Don't replace location for resource AWS::Serverless::Application in SAM transform when its a string (pull #2425)

CloudFormation Specifications

• Patch in db.serverless into AWS::RDS::DBInstance.DBInstanceClass (pull #2424)
• Update CloudFormation specs to 94.0.0 (pull #2420)

Features

• Ability to override location of the finding (pull #2410)

CloudFormation Specifications

• Patch in DBClusterResourceId for as an Attribute of AWS::RDS::DBCluster (pull #2407)
• Update CloudFormation specs to 93.0.0 (pull #2409)
• Update AllowedPatternRegex for AWS::CloudWatch::Alarm.MetricDataQuery.Id (pull #2414
• Add GetAtt to AWS::KMS::ReplicaKey.Arn for KmsKey.Arn (pull #2417)

Features

• Support child rules allowing rules to add another rule in their match responses (pull #2393)

CloudFormation Specifications

• Update CloudFormation specs to 92.0.0 (pull #2399)

CloudFormation Specifications

• Update CloudFormation specs to 91.0.0 (pull #2392)

Fixes

• Update E8003, E1018, E1019 to allow Fn::ToJsonString inside Equals, Split, and Sub (pull #2397)
• Update I3013 to allow https and s3 (pull #2394)

Features

• Update E3002 to provide a suggestion if the wrong value is close to a correct value (pull #2387)

CloudFormation Specifications

• Update CloudFormation specs to 90.0.0 (pull #2376)
• Add in allowed values for oracle cdb engine types to AWS::RDS::DBInstance.Engine (pull #2381)
• Add in allowd value PredictiveScaling to AWS::AutoScaling::ScalingPolicy.PolicyType (pull #2378)

Fixes

• Update W3002 to validate values aren't already S3 paths (pull #2382)
• Update I3013 to not regex check if a function (pull #2386)

CloudFormation Specifications

• Update CloudFormation specs to 89.0.0 (pull #2366)
• Add support for custom RDS Engine types on resource type AWS::RDS::DBInstance (pull #2370)
• Remove extra spacing in specs reducing overall size (pull #2371)
• Update AllowedValues for RetentionInDays on resource type AWS::Logs::LogGroup (pull #2372)

Features

• Add --force option on --update-specs so cache isn't used (pull #2334)
• Add support for Python 3.10 (pull #2365)

CloudFormation Specifications

• Update CloudFormation specs to 88.0.0 (pull #2361)

Fixes

• Add in mypy testing and do a bunch of cleanup based on the results (pull #2328)
• Update rule I1022 to not suggest Fn::Sub on complext Fn::Joins (pull #2364)

Fixes

• Make me-central-1 ExtendedSpecs a module (pull #2359)

Features

• Update jsonschema to be able to use version 3.0 and 4.0 (pull #2336)
• Remove support for python 3.6 and add python 3.9 (pull #2347)

CloudFormation Specifications

• Update CloudFormation specs to 87.0.0 (pull #2353)
• Add support for region me-central-1 (pull #2351)

Fixes

• Disable the SAM validation checks when transforming a template (pull #2350)

CloudFormation Specifications

• Patch in attributes for AWS::RDS::DBCluster (pull #2344)

CloudFormation Specifications

• Update CloudFormation specs to 86.0.0 (pull #2335)

Features

• support for AWS::LanguageExtensions transform features including DeletionPolicy, UpdateReplacePolicy, Fn::Length and Fn::ToJsonString docs (pull #2339)
• Add rule E1030 to validate Fn::Length is configured correctly (pull #2339)
• Add rule E1031 to validate Fn::Length is configured correctly (pull #2339)

Features

• Create new API to allow for easier integration of using cfn-lint as a library docs (pull #2285)

CloudFormation Specifications

• Update CloudFormation specs to 85.0.0 (pull #2324)
• Update Lambda deprecation dates (pull #2327)

Fixes

• Fix an issue with RulesCollection in which configurations would carry over between templates (pull #2331)
• Add used rules into RulesCollection so we can print all the used rules in JUnit and Pretty formatting (pull #2330)
• Update error message on E3002 (pull #2059)
• Update error description on E1020 (pull #2329)

CloudFormation Specifications

• Update CloudFormation specs to 83.0.0 (pull #2316)

Fixes

• Update rule I3100 have proper path to resource (pull #2309)
• Update rule E2503 by removing AllowedValues for AWS::ElasticLoadBalancingV2::LoadBalancer.LoadBalancerAttribute (pull #2184)
• Update rule E3002 to include <CommaDelimitedList in SSM parameters (pull #2320)
• Update rule I3013 to not flag on Aurora instances (pull #2317)

CloudFormation Specifications

• Update CloudFormation specs to 81.1.0 (pull #2308)

CloudFormation Specifications

• Update CloudFormation specs to 81.0.0 (pull #2306)
• Add AWS::EC2::KeyPair as a Ref for the value type KeyPair (pull #2305)

CloudFormation Specifications

• Update CloudFormation specs to 78.1.0 (pull #2292)

Fixes

• Add utf-8 encoding to all open calls (pull #2298)

CloudFormation Specifications

• Update CloudFormation specs to 76.0.0 (pull #2282)

Fixes

• Suppress PendingDeprecationWarning for pydot in the pygraphviz package (pull #2289)
• Update descriptiosn on rule E1021, E1015, E1016, E1020, and E1017 (pull #2284)
• Update rule E3033 to ignore dynamic references for string length (pull #2281)

Features

• New rule I3100 to validate new generation instance types are used (pull #2267)

CloudFormation Specifications

• Update CloudFormation specs to 73.1.0 (pull #2275)
• Add AWS::OpenSearchService::Domain.AccessPolicies to IAM rules (pull #2269)

Fixes

• Reduce the calculated scenarios used when conditions match and one condition has many variants (pull #2277)
• Update SARIF output to point to the general "Rules" documentation when a rule doesn't specify a source_url (pull #2276)

CloudFormation Specifications

• Update CloudFormation specs to 72.0.0 (pull #2272)

Fixes

• Don't allow regex expressions that result in a warning (pull #2272)

Features

• Move null checks from the parsing engine into rules (pull #2242)
• Add rule E4002 to validate metadata config (pull #2242)
• Update rule E2001 to error on null values (pull #2242)
• Update rule E3012 to validate for null values in properties (pull #2242)

CloudFormation Specifications

• Update CloudFormation specs to 69.0.0 (pull #2261)

CloudFormation Specifications

• Update CloudFormation specs to 66.1.0 (pull #2255)

Fixes

• Lambda runtime deprecation updates (python3.6) (pull #2252)
• Update rule E3002 to consider a list as valid JSON (pull #2253)

Features

• Update aws-sam-translator to 1.45.0 (pull #2245)
• Remove dependency on six (pull #2204)
• New rule E3504 to validate resources with AWS::Backup::BackupPlan. The property DeleteAfterDays cannot be less than 90 days from MoveToColdStorageAfterDays (pull #2230)

CloudFormation Specifications

• Update CloudFormation specs to 66.0.0 (pull #2245)

CloudFormation Specifications

• Update CloudFormation specs to 61.0.0 (pull #2232)

Fixes

• Update SAM Transform pre work to add ImageUri when using Image as PackageType in AWS::Serverless::Function (pull #2236)

CloudFormation Specifications

• Update CloudFormation specs to 59.0.0 (pull #2225)
• Remove allowed values for AWS::Config::ConfigurationRecorder.ResourceTypes (pull #2231)

Fixes

• Wrap creating a YAML map with try/except and create lint error on failure (pull #2226)

CloudFormation Specifications

• Update CloudFormation specs to 58.0.0 (pull #2217)

Fixes

• W2506: Avoid false positives when using a Ref against a resource (pull #2210)
• E3502: Blank out functions in JSON size check to prevent false positives (pull #2222)

CloudFormation Specifications

• Update CloudFormation specs to 56.0.0 (pull #2207)

Features

• Update rule E3020 to validate that TTL isn't added for Alias records (pull #2195)
• Remove imports to pathlib2 with deprecation of Python 2.7, 3.4, and 3.5 (pull #2205)
• Improvements to json parsing code (pull #2199)

CloudFormation Specifications

• Update CloudFormation specs to 54.0.0 (pull #2202)

Fixes

• Fix an issue checking values of false in custom rules (pull #2208)

Features

• EOL of Python 2.7, 3.4, and 3.5 support (pull #2195)

CloudFormation Specifications

• Update CloudFormation specs to 53.0.0 (pull #2196)
• Fix an issue with rule E2001 to allow string parameter constraints for all AWS specific types (pull #2193)

CloudFormation Specifications

• Update CloudFormation specs to 52.0.0 (pull #2188)
• Add region ap-southeast-3 (pull #2192)

Features

• Update aws-sam-translator to 1.42.0 (pull #2183)

CloudFormation Specifications

• Update CloudFormation specs to 50.0.0 (pull #2180)

CloudFormation Specifications

• Update CloudFormation specs to 49.0.0 (pull #2178)
• Expand StatefulResources to include AWS::OpenSearchService::Domain (pull #2179)
• Add AWS::EKS::Cluster.ClusterSecurityGroupId to GetAtt list of AWS::EC2::SecurityGroup.NameOrGroupId (pull #2177)

CloudFormation Specifications

• Update CloudFormation specs to 48.0.0 (pull #2170)
• Add AWS::OpenSearchService::Domain to be in the list for EnableVersionUpgrade (pull #2174)

Features

• Update aws-sam-translator to 1.40.0 (pull #2165)

CloudFormation Specifications

• Update CloudFormation specs to 47.0.0 (pull #2164)

Fixes

• Switching logging level for samtranslator to CRITICAL (pull #2168)

Features

• Adds support for outputting results in SARIF (pull #2126)

CloudFormation Specifications

• Update CloudFormation specs to 46.0.0 (pull #2158)

CloudFormation Specifications

• Update CloudFormation specs to 45.0.0 (pull #2153)
• Add AWS::DynamoDB::GlobalTable to AWS::Lambda::EventSourceMapping.EventSourceArn (pull #2151)
• Expand stateful resource types to include AWS::SecretsManager::Secret (pull #2154)

Fixes

• Add InstanceRefresh to allowed values for SuspendProcesses in rule E3016 (pull #2160)
• Strip conditions completely from CodePipeline definitions in rule E2541 (pull #2152)

Features

• Add exceptions to rule E3031 (pull #2143)

CloudFormation Specifications

• Update CloudFormation specs to 44.0.0 (pull #2124)
• Update AllowedValues for AWS::CloudTrail::Trail.DataResourceType (pull #2134)

Fixes

• Add support for Fn::If inside rule E1024 (pull #2140)
• Update aws-sam-translator to 1.39.0 (pull #2129)

CloudFormation Specifications

• Update CloudFormation specs to 41.2.0 (pull #2119)

Fixes

• Update Serverless/ManagedPolicies.json and create automation to keep it up to date going forward (pull #2116)

Features

• Update default configuration on rule E3012 to no be strict (pull #2103)
• Add rule E3043 to validate nested stack parameters (pull #2074)

CloudFormation Specifications

• Update CloudFormation specs to 41.0.0 (pull #2111)
• Add AWS::KMS::ReplicaKey as a Ref/GetAtt for AWS::KMS::Alias.TargetKeyId (pull #2110)

CloudFormation Specifications

• Update resource specs to 40.1.0 (pull #2105)
• AWS::ElasticLoadBalancingV2::LoadBalancer.LoadBalancerAttribute AllowedValues expansion (pull #2101)

Fixes

• Fix rule message string formatting for E3013 (pull #2099)

Features

• Update aws-sam-translator to 1.38.0 (pull #2082)
• Signal the end of life for Python 3.5 (pull #2052)
• Allow configuration of top level sections in rule E1001 (pull #2090)

CloudFormation Specifications

• Update resource specs to 39.8.0 (pull #2087)
• Add StringMax to AWS::SNS::Topic.TopicName, AWS::IAM::Role.Name, AWS::SNS::Topic.TopicName, AWS::Lambda::Function properties Handler, Description, FunctionName, and AWS::Lambda::LayerVersion properties LayerName (pull #2089)

Fixes

• Update RetentionPeriodHours for AWS::Kinesis::Stream to 8760 (pull #2071)
• Expand expanding likely_stateful_resource_types to include AWS::DynamoDB::GlobalTable (pull #2079)