cfn-lint

CloudFormation Specifications

• Update resource specs to 36.0.0 (pull #2001)
• Add Boston, Miami, Houston as local zones (pull #2002)

Fixes

• Update the key regex for rule E7003 (pull #2006)

CloudFormation Specifications

• Update resource specs to 35.2.0 (pull #1998)

CloudFormation Specifications

• Update resource specs to 35.0.0 (pull #1986)
• Patch in Glue resources into us-gov-west-1 (pull #1993)

Fixes

• Require pyyaml to be at least 5.4 for versions of Python that support it (pull #1992)
• Update aws-sam-translator dependency to be at least 1.35.0 (pull #1991)
• Update rule W1001 to not validate Globals when looking at Refs and GetAtts (pull #1989)

CloudFormation Specifications

• Update resource specs to 33.0.0 (pull #1981)
• Remove AWS::AmazonMQ::Broker.EngineVersion AllowedValues from manual upkeep based on amount of change (pull #1975)

Fixes

• Update rule E3502 to convert strings into json before checking the size of the json (pull #1982)
• Update rule E2504 to check for Iops when type is io1 or io2 (pull #1978)

CloudFormation Specifications

• Update resource specs to 32.0.0 (pull #1962)
• Add AWS::Kinesis::StreamConsumer as a REF for AWS::Lambda::EventSourceMapping.EventSourceArn (pull #1961)

Fixes

• Update EOL dates for AWS::Lambda::Function.Runtime used by rule E2531 (pull #1965)

CloudFormation Specifications

• Add regex pattern for AWS::CloudWatch::Alarm.MetricDataQuery Id (pull #1948)

Fixes

• Update update IAM policies to not fail on changing upstream IAM policies (pull #1954)
• Switch RegexDict to only string match based on if the type is Module (pull #1956)

Features

• Allow writing of custom rules in plain text (pull #1702)

CloudFormation Specifications

• Update resource specs to 31.1.0 (pull #1942)

CloudFormation Specifications

• Update resource specs to 31.0.0 (pull #1939)
• Only flag rule I3042 when the ARN is inside a Fn::Sub (pull #1928)

CloudFormation Specifications

• Update resource specs to 30.1.0 (pull #1936)
• Add Analytics to AWS::CDK::Metadata (pull #1937)
• Patch in Outputs into Attributes for AWS::ServiceCatalog::CloudFormationProvisionedProduct (pull #1934)

Features

• Add rule I3042 to check for hardcoded partitions, account IDs, and regions in an ARN (pull #1805)
• Allow for merging of list configurations using --merge-configs (pull #1915)

CloudFormation Specifications

• Update resource specs to 30.0.0 (pull #1911)
• Add Kinesis Data Firehose to permitted SNS subscription protocols (pull #1924)
• Changed DMS endpoint engine name for DocumentDB to docdb (pull #1920)

Fixes

• Update rule E2532 to add ResultSelector field to Task, Parallel & Map in step functions (pull #1912)
• Update rule E1017 to add Fn::Select to allowed value in index field of Fn::Select (pull #1922)

CloudFormation Specifications

• Update resource specs to 28.1.0 (pull #1905)

Fixes

• Update aws-sam-translator to 1.34.0 (pull #1910)
• Return two errors when finding duplicates in the decode phase (pull #1900)

CloudFormation Specifications

• Get value constraints from AWS CloudFormation registry types (pull #1867)
• Update resource specs to 28.0.0 (pull #1899)

CloudFormation Specifications

• Update resource specs to 27.0.0 (pull #1892)

Fixes

• Fix an issue with rule E3037 when certain types aren't serializable and forcing them to strings (pull #1887)

CloudFormation Specifications

• Update resource specs to 26.0.0 (pull #1884)

Fixes

• Fix an issue when directives are checked and resources aren't a dict (pull #1877)

CloudFormation Specifications

• Update resource specs to 25.0.0 (pull #1873)

Features

• Add support for AWS::SSO::PermissionSet InlinePolicy to E2507 (pull #1864)

CloudFormation Specifications

• Update resource specs to 24.0.0 (pull #1863)
• Update AWS::DataBrew::Recipe.Action Parameters Type to Map (pull #1871)

Fixes

• Fix an issue when we parse a json string in E2507 and used the parsed json to append to the location (pull #1864)

CloudFormation Specifications

• Update spec files as of 2021.01.08 (pull #1846)
• Update AWS::Lambda::Function.MemorySize to new service limits (pull #1858)

Fixes

• Replace ContentUri to a s3 path when doing a SAM transform (pull #1853)
• Add RouteSelectionExpression to exludes on rule E1029 (pull #1852)
• Remove newlines from parseable format messages (pull #1854)

CloudFormation Specifications

• Expand Allowed Values for AWS::AmazonMQ::Broker.EngineVersion (pull #1841)
• Update spec files as of 2020.12.30 (pull #1831)
• Update AWS::Lambda::EventSourceMapping.EventSourceArn to allow StreamARN and ConsumerARN (pull #1850)

Fixes

• Reinitialize E3022 on every template (pull #1848)
• Update rule E3008 to allow for lists in getatt allowed values (pull #1850)

Fixes

• Reinitialize the limits in rule E3021 (pull #1834)
• Add registry_schemas to be supported in the .cfnlintrc (pull #1836)

Features

• Cache all rules to speed up reloading rules when scanning multiple templates (pull #1789)

CloudFormation Specifications

• Update FSx Storage Capacity to a minimum of 32 (pull ##1827)
• Update spec files as of 2012.12.14 (pull #1821)

Fixes

• Loosen version requirements for python package six (pull #1825)

Features

• Add support to validate private types from the CloudFormation Registry (pull #1732)

CloudFormation Specifications

• Update allowed values for AWS::DocDB::DBCluster.EngineVersion (pull #1810)
• Updated specs as of 2020.12.3 (pull #1804)

Fixes

• Fix an issue with RegexDict to return the longest matched value (pull #1815)
• Fix rule E3008 to not fail when using AWS::ServiceCatalog::CloudFormationProvisionedProduct Outputs (pull #1809)
• Loosen version constraints on importlib_resources (pull #1808)

Features

• Add support for modules (pull #1800 and pull #1801)
• Colored Output and Pretty Formatting (pull #1742)

CloudFormation Specifications

• Update CloudFormation specs to 21.0.0 (pull #1799)

Fixes

• Patch AWS::EC2::CarrierGateway for Tags (pull #1790)
• Make sure types are strings before assuming they are (pull #1791)
• Add all for certain availability zone items (pull #1798)

Features

• Remove rules W2509, E2004, E2505, E2510 and move logic to rules E3030, E3031, and E3008 (pull #1750)
• Remove rule E2530 and move logic to W2030 and E3030 (pull #1749)
• Remove rule E3028 and move logic to E3018 (pull #1769)
• Remove rule E3029 and move logic to E3018 (pull #1770)
• Remove rule E3024 and move logic to E3018 (pull #1771)
• Update rule E3002 to error when a singular function is used when a list is needed (pull #1773)
• Update dates for Python 2.7 Lambda runtime support (pull #1777)
• Update rule E2503 to include more attributes for application load balancers and protocols (pull #1783 and pull #1784)

CloudFormation Specifications

• Update CloudFormation specs to 20.3.0 (pull #1781)
• Expand Allowed Values for AWS::AmazonMQ::Broker EngineVersion (pull #1778)

Fixes

• Update rule E2529 to allow for two subscriptions per log group (pull #1767)
• Allow SAM translation for AutoPublishAlias in Globals (pull #1768)
• Allow numbers and booleans when doing a Fn::Sub parameter (pull #1774)

Features

• Add rule E3017 to validate when properties are required based on a value of another property (pull #1746)
• Add rule E3018 to validate when properties are unwanted based on the value of another property (pull #1759)
• Remove rule E3040 and replace with rule E3031 (pull #1754)
• Remove rule E3023 and replace with rule E3017 (pull #1758)

CloudFormation Specifications

• Update CloudFormation specs to 20.0.0 (pull #1760)
• Add allowed values for AWS::Lambda::EventSourceMapping (pull #1748)

Features

• Allow ignoring of E0000 and E0001 (pull #1580)
• Update rule E3005 to include resource based conditions (pull #1738)
• Update template limits to new standards (pull #1747)

CloudFormation Specifications

• Update CloudFormation specs to 19.0.0 (pull #1751)
• Add ap-northeast-2d to the list of approved Availibility Zones (pull #1739)
• Add AllowedValues to AWS::CloudFormation::StackSet.PermissionModel from botocore (pull #1741)

Features

• Expand likely_stateful_resource_types for explicit UpdateReplacePolicy/DeletionPolicy rule I3011 to include AWS::SQS::Queue (pull #1736)

CloudFormation Specifications

• Update CloudFormation specs to 18.7.0 (pull #1734)

Fixes

• Fix an issue with rule E3003 to handle Ref: AWS::Novalue (pull #1720)

CloudFormation Specifications

• Update CloudFormation specs to 18.6.0 (pull #1726)
• Add AllowedValues for AWS::DMS::Endpoint.EngineName (pull #1725)

Fixes

• Fix an issue with rule E2521 and E2520 to handle Ref: AWS::Novalue (pull #1717, #1719)

CloudFormation Specifications

• Update CloudFormation specs to 18.5.0 (pull #1715)
• Get AllowedValues from Botocore during --update-specs (pull #1682)
• Add string length requirements for AWS::Config::ConfigRule.Description (pull #1712)
• Patch AWS::StepFunctions::Activity to include Name and remove Arn (pull #1722)

Fixes

• Fix an issue with rule E3002 to better handle when conditions are used at the root level of a list (pull #1714)
• Update core node libraries to remove Ref: AWS::NoValue from returned properties (pull #1716)

CloudFormation Specifications

• Update CloudFormation specs to 18.4.0 (pull #1707)
• Add ap-northeast-3 to scripts/update_specs_services_from_ssm.py (pull #1703)

Features

• Update rule E2541 to validate that input artifacts are output artifacts from a previous action and that output artifact names are unique in the pipeline (pull #1690)
• New rule E3007 to validate parameter and resource names are unique (pull #1698)

CloudFormation Specifications

• Update CloudFormation specs to 18.3.0 (pull #1697)
• Expand AllowedValues for AWS::AmazonMQ::Broker.EngineVersion and AWS::Glue::Trigger.Condition.State (pull #1680, #1681)

Fixes

• Expand templated_exceptions property types that require package command for rule E3002 and W3002 (pull #1684)
• Pin pyrsistent to 0.16.0 with Python versions less than 3.5 (pull #1693)
• Fix an issue with SSM Spec patching that resulted in resource PropertyTypes not being added to the spec patches (pull #1696)
• Update directives to use the resource name key as the start (pull #1692)

CloudFormation Specifications

• Update CloudFormation specs to 18.1.0 (pull #1671)
• Expand AllowedValues for AWS::CloudFront::Distribution.MinimumProtocolVersion, AWS::Config::ConfigurationRecorder.ResourceTypes, and AWS::Glue::Connection.ConnectionInput.ConnectionType (pull #1661, #1664, #1673)
• Add localzone us-west-2-lax-1b (pull #1670)

Fixes

• Update rule E2503 to include routing.http.desync_mitigation_mode (pull #1660)
• Update excludes for rule E1029 to include ResponseMappingTemplate (pull #1667)
• Update rule E1019 and E1010 to handle resource attributes of type Map (pull #1659)

CloudFormation Specifications

• Update CloudFormation specs to 17.0.0 (pull #1653)
• Fix ElasticMapReduce and ManagedBlockchain InstanceType patching (pull #1654)
• Include a regex pattern to check MetricValue is either a number or starts with $ (pull #1647)
• Add more types to AWS::ApplicationAutoScaling::ScalingPolicy.PredefinedMetricSpecification.PredefinedMetricType (pull #1652)
• Add more values to AWS::Lambda::Function.Runtime (pull #1651 and pull #1649)
• Add more values to AWS::Budgets::Budget.BudgetType (pull #1643)

Fixes

• Update rule E3031 to convert int or float to string before doing an allowed pattern match on it (pull #1647)
• Add exceptions to rule E1029 (pull #1646 and pull #1648)
• Update rule E8003 to look for string based parameters (pull #1640)

CloudFormation Specifications

• Update CloudFormation specs to 16.3.0 (pull #1635)

Fixes

• Update rule E3001 to catch when Resource Type is not a string (pull #1631)
• Update rule E1029 to handle ${} in Step Function State Machines and Definition Substitutions (pull #1628)
• Update rule W4002 to only look at Ref and Sub (pull #1627)

Features

• Add rule W4002 that checks if Metadata references a NoEcho parameter (pull #1613)

CloudFormation Specifications

• Update CloudFormation specs to 16.1.0 (pull #1622)
• Remove AWS::EC2::LaunchTemplate.BlockDeviceMapping from OnlyOne (pull #1617)
• Add more AllowedValues to AWS::Glue::Trigger.Predicate.Logical (pull #1616)
• Add more AllowedValues to AWS::ApplicationAutoScaling::ScalingPolicy.PredefinedMetricSpecification.PredefinedMetricType (pull #1604)
• Add more AllowedValues to AWS::S3::Bucket.TopicConfiguration.Event (pull #1606)
• Add more AllowedValues to AWS::EC2::CapacityReservation.InstancePlatform (pull #1605)
• Fix an issue for applying AllowedValues to AWS::RDS::DBInstance MonitoringInterval and PerformanceInsightsRetentionPeriod (pull #1607)
• Fix an issue for applying Maximum and Minimum to AWS::ElasticLoadBalancingV2::ListenerRule.Priority (pull #1608)

Fixes

• Update rule E3503 to not fail on if ValidationDomain or DomainName aren't present (pull #1620)

Features

• Upgrade SAM Translator to v1.25.0 (pull #1594)

CloudFormation Specifications

• Update CloudFormation specs to 15.3.0 (pull #1600)

Fixes

• Update rule E3401 to not fail on Apex records (pull #1599)

CloudFormation Specifications

• Update CloudFormation specs to 15.1.0 (pull #1593)
• Add additional allowed values for AWS::SecretsManager::SecretTargetAttachment.TargetType (pull #1573)
• Add property types for AvailabilityZone in the AWS::DMS::ReplicationInstance and AWS::EC2::Subnet resources (pull #1585)
• Expand allowed values for AWS::CodeBuild::Project.Environment.Type (pull #1589)

Fixes

• Update rule E2004 to not check AllowedValues when the Type is AWS::SSM::Parameter::Value<String> (pull #1571)
• Update Transform logic to not update DefinitionUri to S3 when not using DefinitionUri originally (pull #1576)

Features

• Upgrade SAM Translator to v1.24.0 (pull #1562)
• Warning messages for Python 3.4 and 2.7 (pull #1337)
• Add --output-file parameter to output the results into a file (pull #1511)
• Remove usage of jsonpointer (pull #1546)
• Add rule E3042 that checks AWS::ECS::TaskDefinition.ContainerDefinition has at least one essential container (pull #1548)

CloudFormation Specifications

• Update CloudFormation specs to 14.4.0 (pull #1555)
• Add allowed patterns and values for properties in AWS::S3::Bucket.InventoryConfiguration (pull #1551)

Fixes

• Update Transform logic to support local files for the state machine defintion (pull #1562)

Features

• Adding Hooks template section to rule E1001 (pull #1543)

Features

• New rule E3041 to check if HostedZoneName is a super domain for Name (pull #1483)
• Update SAM Translator dependency to 1.23.0 (pull #1536)
• Move Template and Runner classes into their own files (pull #1523)

CloudFormation Specifications

• Update CloudFormation specs to 14.3.0 (pull #1538)
• Add instance type allowed values to ElastiCache, Elasticsearch, ElasticMapReduce, ManagedBlockchain, GameLift, and AppStream (pull #1535 and #1541)

Fixes

• Exempting resource types AWS::Serverless transform creates that violated rule W3011 (pull #1529)

Features

• Add support for .cfnlintrc.yaml and .cfnlintrc.yml (pull #1504)
• Add JUnit XML output format (pull #1506)

CloudFormation Specifications

• Update CloudFormation specs to 14.2.0 (pull #1526)
• Update AWS::AutoScaling::LaunchConfiguration SecurityGroups to support GroupID and Names (pull #1505)
• Add min max and allowed values for multiple WAFv2 rate rules Limit rules (pull #1507)

Features

• Add the ability to specify a config file using parameter --config-file (pull #1462)
• Speed up --update-specs to not download files if they haven't updated (pull #1383)

CloudFormation Specifications

• Add region eu-south-1 (pull #1496)
• Add region af-south-1 (pull #1494)
• Update CloudFormation specs to 14.0.0 (pull #1494)
• Add new Config supported types AWS::SecretsManager::Secret and AWS::SNS::Topic (pull #1492)

Fixes

• Update rule E1029 to have an exception for RequestMappingTemplate in AppSync (pull #1488)
• Update rule E1029 to have an exception for ConnectionID in API Gateway (pull #1493)

CloudFormation Specifications

• Update Lambda runtimes to support dotnetcore3.1 (pull #1469)
• Update DMS Engine approved values with multiple items (pull #1472)
• Add description allowed value regex to AWS::EC2::SecurityGroup Ingress/Egress (pull #1476)
• Update CloudFormation specs to 13.0.0 (pull #1480)

Fixes

• Set importlib_resources to 1.4 for all Pythons except 3.4 (pull #1479)

CloudFormation Specifications

• Update CloudFormation specs to 12.3.0 (pull #1464)

Fixes

• Fix an issue when including cfn-lint and needing networkx (pull #1458)

Features

• Add --build-graph parameter to create a graph of dependencies (pull #1411)

CloudFormation Specifications

• Update CloudFormation specs to 12.1.0 (pull #1455)

Fixes

• Add found unknown escape character to start of err problem to determine when to use json parsing (pull #1454)

CloudFormation Specifications

• Update CloudFormation specs to 12.0.0 (pull #1448)

Fixes

• Add region ca-central-1d (pull #1447)

Fixes

• Update exceptions in rule E1029 to include BuildSpec (pull #1444)

Features

• Switch DB Instance Engine check from E3030 to E3040 so the comparison is case insensitive (pull #1441)

CloudFormation Specifications

• Update CloudFormation specs to 11.6.0 (pull #1433)
• Add ruby2.7 to supported list of ruby runtimes (pull #1436)

Fixes

• Update regex in rule E1029 to be more optimal and not hang on large strings (pull #1430)

Features

• Update SAM Translator package to 1.21.0 (pull #1406)
• Update rule E3027 to check that either Day of Month or Day of Week is a question mark (pull #1405)
• New rule E3029 to check AWS::RDS::DBInstance Aurora databases don't have certain properties (pull #1409)
• Build a resource graph for checking circular dependencies (pull #1391)

CloudFormation Specifications

• Update Exclusive and Only One specs to include additional rules around Security Group Rules (pull #1407)
• Update CloudFormation specs to 11.5.0 (pull #1416)
• Patch spec so that TTL is Long on Route53 Change Record Sets (pull #1417)

CloudFormation Specifications

• Update CloudFormation specs to 11.4.0 (pull #1403)

Fixes

• Properly display yaml parse errors when the error was a tab (pull #1402)

Features

• Define an initial Docker file (pull #1361)

CloudFormation Specifications

• Update CloudFormation specs to 11.2.0 (pull #1390)
• Add allowed values for AWS::RDS::DBInstance Engine (pull #1398)

Fixes

• Update rule E3039 to properly filter down attributes before checking values (pull #1392)
• Update rule E1019 to not join GetAtt if they aren't strings (pull #1389)
• Consolidate region and spec information into singular item (pull #1357)

CloudFormation Specifications

• Update CloudFormation specs to 11.1.0 (pull #1380)
• Patch specs from updated SSM and pricing data as of 2020.02.21 (pull #1380)
• Update AWS Config supported types to those active on 2020.02.20 (pull #1378)

Fixes

• Update condition logic to return dict_node instead of the standard dict node (pull #1375)
• Fix --update-specs on Windows to have the appropriate seperator (pull #1371)
• Update the documentation for --update-documentation (pull #1374)

Features

• Add option to disable E1029 using a regex pattern on the variable name (pull #1362)

Fixes

• Update decode node class to pass back an empty list when default is None and the key doesn't exist (pull #1364)

Features

• Add rule E3028 to check that ScalingConfiguration is only specified with Aurora databases (pull #1338)
• Add rule E3039 to check that AttributeDefinitions match KeySchemas (pull #1284)

CloudFormation Specifications

• Add AFTER_7_DAYS to TransitionToIA as accepted value (pull #1352)
• Update CloudFormation specs to 11.0.0 (pull #1355)
• Patch specs from updated SSM and pricing data as of 2020.02.15 (pull #1356)

Features

• Add scripts to build an offline installer (pull #1307)

CloudFormation Specifications

• Update CloudFormation specs to 10.5.0 (pull #1347)
• Patch specs from updated SSM and pricing data as of 2020.02.09 (pull #1348)

Features

• Add Python 3.8 support (pull #1334)
• Add more resources to rule I3011 (pull #1331)

CloudFormation Specifications

• Patch specs from updated SSM service data as of 2020.01.30 (pull #1339)
• Patch more wafv2 resources (pull #1343)

Fixes

• Pin version of jsonpatch for Python 3.4 (pull #1336)

CloudFormation Specifications

• Update CloudFormation specs to 10.4.0 (pull #1330)

Fixes

• Update rule E3026 to better check for condition scenarios and not fail (pull #1327)