v2.6.1

v2.6.1 (2024-08-02)

Fix

• fix: change the input save keyboard prompt to Alt+Enter (for windows) (#63) (9dddddf)

v2.6.0

v2.6.0 (2024-07-18)

Feature

• feat: add --show-diff to deploy command (#62) (ed39eed)

v2.5.0

v2.5.0 (2024-07-17)

Ci

• ci: fix github actions lint workflow (5780ce9)

• ci: migrate github actions to python 3.9 (3cdf876)

Feature

• feat: improve set-parameter and set-secret commands (#61) (da74b79)

v2.4.1

v2.4.1 (2023-09-06)

Ci

• ci: add pypi publish github action step (5a638b8)

Fix

• fix: Correct session import on output_stack.py (#59)

Co-authored-by: plinio.menarin <[email protected]> (75ad28a)

v2.4.0

v2.4.0 (2023-09-06)

Ci

• ci: split release workflow (b9ab2f8)

• ci: remove github actions permissions section (9105c32)

Feature

• feat: add semantic release (d5f282e)

Release 2.3.0

[2.3.0] - 2023-09-05

Changed

• Update yaml tag tags.output_stack.OutputStackTag to work with custom aws region. issue-54

Release 2.2.0

[2.2.0] - 2023-08-21

Nonfunctional

• Update Poetry to version 1.5.1. issue-52
• Fix SonarCloud Code Smells.

Release 2.1.0

[2.1.0] - 2022-05-23

Added

• Add Tier property in the SSM parameter section. issue-27
• Add support for AWS Encription SDK. issue-28

Changed

• Add Schema Validation for the SSM Parameters and Secrets Manager. issue-42

Nonfunctional

• Migrate the project structure to use Poetry. issue-34

Migrate KMS API to AWS Encryption SDK

The AWS Encryption SDK is a client-side encryption library designed to make it easy for everyone to encrypt and decrypt data using industry standards and best practices. It enables you to focus on the core functionality of your application, rather than on how to best encrypt and decrypt your data. The AWS Encryption SDK is provided free of charge under the Apache 2.0 license.

Full documentation: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html

Using AWS Encryption enables AWS Secrets CLI to encrypt data with more than 4KB.

Migration process

1. Decrypt all SSM parameters and Secrets manager:

aws-secrets decrypt -e dev.yaml --output dev.yaml --profile myprofile --region eu-west-1

2. Update YAML configuration to add the encryption_sdk with aws_encryption_sdk value.

kms:
  arn: KMS_KEY_ARN
encryption_sdk: 'aws_encryption_sdk'
parameters:
  - name: myparametername
    value: "MySecretValueHere"
    type: SecureString
secrets:
  - name: mysecretname
    value: "MySecretValueHere"

Currently, the default value is boto3

3. Re-encrypt the YAML configuration file

aws-secrets encrypt -e dev.yaml --profile myprofile --region eu-west-1

Release 2.0.3

[2.0.3] - 2021-09-14

Fixed

• Fix !file resolver, the path is not being resolved correctly based on the config directory. issue-40

Release 2.0.2

[2.0.2] - 2021-09-14

Fixed

• Fix aws-secrets commands, secrets file is not being loaded when the CLI is executed in a different folder. issue-38