copilot-cli: Release v1.22.0
⚡️ Features and Enhancements
-
Enable setting IAM permissions boundaries for all IAM roles in an application (#3969)
You can now leverage IAM permissions boundaries to comply with your organization’s security requirements and service control policies by passing the
--permissions-boundary
flag with thecopilot app init
command.
See our blog post to learn more! -
Add FIFO (first in, first out) capabilities for SNS topics and SQS queues of Worker Services (#4014, #4018)
For applications when the order of operations and events is critical, or where duplicates can't be tolerated you can now enable
fifo: true
in your manifests.
See our blog post for a walkthrough of connecting SNS FIFO topics to the SQS FIFO queue of a Worker Service.
See the manifest specification for SNS FIFO topics and SQS FIFO queues. -
Configure the CloudFront CDN to terminate TLS (#4017)
Your application can now benefit from terminating TLS at a geographically closer endpoint to the end user for faster TLS handshakes:
cdn: tls_termination: true
See our [blog post](https://aws.github.io/copilot-cli/blogs/release-v122/#cloudfront-tls-termination to learn more!
See the environment manifest for the specification. -
Enable TLS connections between the Application Load Balancer and Fargate tasks (#4021)
If the port of the target container is set to
443
, the target group's protocol and health check protocol is now set toHTTPS
.
See the sample end-to-end encryption manifest specification. -
Add support for Windows Server 2022 (#3968)
You can now specify
windows_server_2022_core
andwindows_server_2022_full
as OS Family options to run Windows 2022 Fargate tasks.
Seeplatform
in the manifest specification. -
Allow disabling HTTP to HTTPS redirection for Load Balanced Web Services (#4003)
You can now set
http.redirect_to_https
asfalse
(by default it's true) for your applications with a domain name.
This field is particularly useful when enabling CloudFront to terminate TLS.
See the manifest specification. -
Display logs for the last stopped task using the new
-p, --previous
flag (#3983)You can now easily view the logs of the last stopped task to help with troubleshooting with
copilot svc logs -p
. -
Filter logs to an individual container with the new
--container
flag (#3985)You can now run
copilot svc logs --container nginx
to filter the logs to an individual container.
🐛 Bug Fixes
- Allow the creation of an internal hosted zone in the
aws-cn
andaws-us-gov
partitions (#3995) - Fix object ownership for pipeline artifacts to be the bucket owner so cross accounts deployments are enabled (#3998)
- Disable writing health check grace period to CloudFormation by setting
http.grace_period: 0s
(#4015)
❤️ Contributions
Thank you, contributors 🥰!