- Improved
contains
steps where in some cases 'key' and 'value' dict keys exist, instead of value of key as a key.
- Fixed a problem where mounted resources creating problem on identifying resources that doesn't have
tags
capability. (#107)
- Tested and added support for
terraform
0.12.2 and 0.12.3
- Improved 'contains' and 'regex' matching steps.
- Added basic heredoc support for json strings. (#90)
- Added encryption property for (at rest) aws_emr_security_configuration
- Added exception handlings for terraform executable and converting plan. (#99)
- Added S3 Public Block Access example to examples (#71)
- Fixed an issue where terraform executable does not exist in PATH env variable. (#99)
- Added "-t" argument for passing terraform executable if one doesn't want to keep it in PATH env variable.
- Fixed an issue where
filetype
module could not be found. (#97) - Upgraded python in Docker image from 3.6.8 to 3.7.3
BREAKING BACKWARD COMPATIBILITY for terraform-compliance
since the parameters has changed. This is a MAJOR upgrade and a re-design of the tool.
- This version only supports
terraform
0.12.0 and 0.12.1. - Removed
-t
parameter. - Introduced
-p
parameter where-p
is either ;terraform plan -out=<file>.out
output file orterraform show -json <file.out> > file.json
output for checking the plan (changes)terraform show -json
output for checking the whole state
- Instead of parsing
HCL
,terraform-compliance
is now parsing/processing againstterraform show
output. - Conversion from
terraform
internal plan format to json. - Full support for
terraform
interpolations and modules. - Minor upgrades on dependencies
- Removed many methods/functions that was doing
terraform
's job - Revamped all steps and required helper functions/methods
- Instead of having
untaggable_resources
nowterraform-compliance
auto-detects if a resource hastag
property. - Removed
terraform-validate
usage. - Introduced internal
terraform-compliance
exceptions instead of generic ones. - Started to keep a CHANGELOG for better understanding about what happens in the tool :)