Skip to content

[Automated Update][terraform-aws-control-tower] v0.8.7 release #2662

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Automated Update][terraform-aws-control-tower] v0.8.7 release #2662

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions ...ws-control-tower/control-tower-account-factory/control-tower-account-factory.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Control Tower" version="0.8.6" lastModifiedVersion="0.7.3"/>
<VersionBadge repoTitle="Control Tower" version="0.8.7" lastModifiedVersion="0.7.3"/>

# Control Tower Account Factory

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/landingzone/control-tower-account-factory" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/landingzone/control-tower-account-factory" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases/tag/v0.7.3" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

Expand Down Expand Up @@ -89,7 +89,7 @@ This is usually accompanied by this module returning outputs that look like the

Unfortunately, this is an unrecoverable error from an AWS Provider perspective, as the provider has no insight into the fact that Service Catalog is in a bad state when it fails in this fashion, and retries will not help.

The easiest way to recover from this error is to make a small update to one of the variables that are passed into this module. For example, if you are integrating with this module via the [../control-tower-multi-account-factory](https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-multi-account-factory) module, you could change the value of something in the relevant file in the directory referenced by the `account_requests_folder`, then revert your change.
The easiest way to recover from this error is to make a small update to one of the variables that are passed into this module. For example, if you are integrating with this module via the [../control-tower-multi-account-factory](https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-multi-account-factory) module, you could change the value of something in the relevant file in the directory referenced by the `account_requests_folder`, then revert your change.

e.g.

Expand Down Expand Up @@ -122,7 +122,7 @@ This workaround should only be done to correct up to five Service Catalog provis

module "control_tower_account_factory" {

source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-factory?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-factory?ref=v0.8.7"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -233,7 +233,7 @@ module "control_tower_account_factory" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-factory?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-factory?ref=v0.8.7"
}

inputs = {
Expand Down Expand Up @@ -590,11 +590,11 @@ The URL of the AWS SSO login page for this account
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-factory/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-factory/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-factory/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-factory/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-factory/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-factory/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "618835bedb02a6eaee651c86670b8164"
"hash": "270aea399a3a87df6fc9e446c5021d1f"
}
##DOCS-SOURCER-END -->
16 changes: 8 additions & 8 deletions ...-aws-control-tower/control-tower-account-tagger/control-tower-account-tagger.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Control Tower" version="0.8.6" lastModifiedVersion="0.8.1"/>
<VersionBadge repoTitle="Control Tower" version="0.8.7" lastModifiedVersion="0.8.1"/>

# Control Tower Account Tagger

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/landingzone/control-tower-account-tagger" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/landingzone/control-tower-account-tagger" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases/tag/v0.8.1" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

Expand Down Expand Up @@ -62,7 +62,7 @@ This module assume that the account is managed by AWS Control Tower and has two

module "control_tower_account_tagger" {

source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-tagger?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-tagger?ref=v0.8.7"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -103,7 +103,7 @@ module "control_tower_account_tagger" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-tagger?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-account-tagger?ref=v0.8.7"
}

inputs = {
Expand Down Expand Up @@ -143,11 +143,11 @@ inputs = {
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-tagger/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-tagger/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-account-tagger/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-tagger/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-tagger/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-account-tagger/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "d727ff929cc0c5068e3fc28d44a257cc"
"hash": "43f79df5283c60e957eb74ea2c1b375f"
}
##DOCS-SOURCER-END -->
24 changes: 15 additions & 9 deletions ...-tower/control-tower-app-account-baseline/control-tower-app-account-baseline.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,18 +9,24 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Control Tower" version="0.8.6" lastModifiedVersion="0.7.2"/>
<VersionBadge repoTitle="Control Tower" version="0.8.7" lastModifiedVersion="0.8.7"/>

# Account Baseline App with Control Tower Integration

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/landingzone/control-tower-app-account-baseline" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/landingzone/control-tower-app-account-baseline" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases/tag/v0.7.2" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases/tag/v0.8.7" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

A CIS compliant security baseline for AWS Landing Zone for configuring the app and logs accounts (dev, stage, prod, and
other similar child accounts), as part of a Control Tower integration. This module fills in features NOT supported by
Control Tower, including setting up Amazon Guard Duty, Macie, IAM roles, IAM password policy, and more.

## Interactions with `AWS-GR_CONFIG_CHANGE_PROHIBITED`

If you are receiving errors that you do not have permissions to edit AWS Config rules while making modifications while consuming this module, you might need to assume the `AWSControlTowerExecution` role to bypass the SCP restriction, as the control has an exception for the `AWSControlTowerExecution` role, which is assumed when baselining AWS accounts.

Once you assume the `AWSControlTowerExecution` role, you should be able to complete the update to this module, and future updates aren't likely to be blocked by the SCP (unless you make different changes to AWS Config). If you are still having issues, please reach out to Gruntwork support.

## Sample Usage

<Tabs>
Expand All @@ -34,7 +40,7 @@ Control Tower, including setting up Amazon Guard Duty, Macie, IAM roles, IAM pas

module "control_tower_app_account_baseline" {

source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-app-account-baseline?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-app-account-baseline?ref=v0.8.7"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -688,7 +694,7 @@ module "control_tower_app_account_baseline" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-app-account-baseline?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-app-account-baseline?ref=v0.8.7"
}

inputs = {
Expand Down Expand Up @@ -2897,11 +2903,11 @@ A map of ARNs of the service linked roles created from <a href="#service_linked_
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-app-account-baseline/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-app-account-baseline/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-app-account-baseline/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-app-account-baseline/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-app-account-baseline/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-app-account-baseline/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "5dc9e1105402b173b9ae89ea12600fb6"
"hash": "dc14da087d2230c86bd71aec80633e24"
}
##DOCS-SOURCER-END -->
16 changes: 8 additions & 8 deletions ...es/terraform-aws-control-tower/control-tower-controls/control-tower-controls.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Control Tower" version="0.8.6" lastModifiedVersion="0.7.6"/>
<VersionBadge repoTitle="Control Tower" version="0.8.7" lastModifiedVersion="0.7.6"/>

# Control Tower Controls

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/landingzone/control-tower-controls" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/landingzone/control-tower-controls" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases/tag/v0.7.6" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

Expand All @@ -36,7 +36,7 @@ For a full list of preventive, detective and proactive controls, see the [AWS Co

module "control_tower_controls" {

source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-controls?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-controls?ref=v0.8.7"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -72,7 +72,7 @@ module "control_tower_controls" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-controls?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-controls?ref=v0.8.7"
}

inputs = {
Expand Down Expand Up @@ -107,11 +107,11 @@ inputs = {
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-controls/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-controls/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-controls/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-controls/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-controls/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-controls/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "ac705f82212b294fec03530f8dc7549e"
"hash": "fe1111b1a41ca7c158af54facbd68c29"
}
##DOCS-SOURCER-END -->
16 changes: 8 additions & 8 deletions ...-aws-control-tower/control-tower-execution-role/control-tower-execution-role.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Control Tower" version="0.8.6" />
<VersionBadge repoTitle="Control Tower" version="0.8.7" />

# Control Tower Execution Role

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/landingzone/control-tower-execution-role" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/landingzone/control-tower-execution-role" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-control-tower/releases?q=control-tower-execution-role" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

Expand All @@ -36,7 +36,7 @@ https://docs.aws.amazon.com/controltower/latest/userguide/enroll-account.html

module "control_tower_execution_role" {

source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-execution-role?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-execution-role?ref=v0.8.7"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand All @@ -62,7 +62,7 @@ module "control_tower_execution_role" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-execution-role?ref=v0.8.6"
source = "git::[email protected]:gruntwork-io/terraform-aws-control-tower.git//modules/landingzone/control-tower-execution-role?ref=v0.8.7"
}

inputs = {
Expand Down Expand Up @@ -119,11 +119,11 @@ The ARN of the Control Tower Execution Role
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-execution-role/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-execution-role/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.6/modules/control-tower-execution-role/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-execution-role/readme.md",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-execution-role/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-control-tower/tree/v0.8.7/modules/control-tower-execution-role/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "a71889b1c24c2f57ec64a3de097df285"
"hash": "613de4c1f626b331c5671c41d8f5b1cc"
}
##DOCS-SOURCER-END -->
Loading