Skip to content

Commit 89ff393

Browse files
ikp4successikp4success
authored
Release v2.1.4
Release v2.1.4
1 parent a5d8b4d commit 89ff393

35 files changed

+3432
-7498
lines changed

‎CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8+
## [2.1.4] - 2025-09-29
9+
10+
### Security
11+
12+
- Removed deprecated NPM package "fs" has been identified as potentially vulnerable to package takeover
13+
- Updated brace-expansion to >=1.1.12 to mitigate [CVE-2025-5889](https://nvd.nist.gov/vuln/detail/CVE-2025-5889)
14+
815
## [2.1.3] - 2025-04-24
916

1017
### Changed

‎NOTICE.txt‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -625,6 +625,19 @@ fast-uri under the BSD-3-Clause license
625625
@babel/plugin-syntax-class-static-block under the MIT license.
626626
@babel/plugin-syntax-import-attributes under the MIT license.
627627
@babel/plugin-syntax-private-property-in-object under the MIT license.
628+
@jridgewell/remapping under the MIT license.
629+
@aws-sdk/nested-clients under the Apache-2.0 license.
630+
@babel/helper-globals under the MIT license.
631+
@ungap/structured-clone under the ISC license.
632+
@aws/lambda-invoke-store under the ISC license.
633+
word-wrap under the MIT license.
634+
baseline-browser-mapping under the MIT license.
635+
neo-async under the MIT license.
636+
wordwrap under the MIT license.
637+
minimist under the MIT license.
638+
handlebars under the MIT license.
639+
uglify-js under the BSD-2-Clause license.
640+
628641

629642
********************
630643
OPEN SOURCE LICENSES

‎README.md‎

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,3 @@
1-
⚠️🚨⚠️ __Important: The Automations for [AWS Firewall Manager solution](https://aws.amazon.com/solutions/implementations/automations-for-aws-firewall-manager/) will retire in November 2025. Deployments (via CloudFormation or GitHub) will remain operational, but customers will assume responsibility for maintenance and API-related updates post retirement. Customers can explore using the latest deployment, multi-account management, and compliance features in [AWS Firewall Manager](https://aws.amazon.com/firewall-manager/) for management and enforcement of firewall rules.__ ⚠️🚨⚠️
2-
3-
41
# Automations for AWS Firewall Manager
52

63
|-----------------------------------------|

‎deployment/add-license-header.sh‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,14 @@
11
#!/bin/bash
2-
for i in $(find $1 -type d \( -name node_modules \) -prune -false -o -name '*.ts');
2+
echo "Starting license header addition for directory: $1"
3+
files_found=$(find $1 -type d \( -name node_modules \) -prune -o -name '*.ts' -print)
4+
echo "Found $(echo "$files_found" | wc -l) TypeScript files"
5+
for i in $files_found;
36
do
47
if ! grep -q Copyright $i
58
then
6-
echo $i
9+
echo "Adding license header to: $i"
710
cat license-header $i >$i.new && mv $i.new $i
811
fi
912
done
13+
echo "License header addition completed"
1014

‎deployment/aws-fms-automations.template‎

Lines changed: 72 additions & 50 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"Description": "(SO0134) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager. Version v2.1.3",
2+
"Description": "(SO0134) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager. Version v2.1.4",
33
"AWSTemplateFormatVersion": "2010-09-09",
44
"Metadata": {
55
"AWS::CloudFormation::Interface": {
@@ -58,130 +58,148 @@
5858
"Solution": {
5959
"SolutionId": "SO0134",
6060
"SolutionName": "automations-for-aws-firewall-manager",
61-
"SolutionVersion": "v2.1.3",
61+
"SolutionVersion": "v2.1.4",
6262
"UserAgentPrefix": "AwsSolution"
6363
}
6464
},
6565
"LatestNodeRuntimeMap": {
6666
"af-south-1": {
67-
"value": "nodejs20.x"
67+
"value": "nodejs22.x"
6868
},
6969
"ap-east-1": {
70-
"value": "nodejs20.x"
70+
"value": "nodejs22.x"
71+
},
72+
"ap-east-2": {
73+
"value": "nodejs22.x"
7174
},
7275
"ap-northeast-1": {
73-
"value": "nodejs20.x"
76+
"value": "nodejs22.x"
7477
},
7578
"ap-northeast-2": {
76-
"value": "nodejs20.x"
79+
"value": "nodejs22.x"
7780
},
7881
"ap-northeast-3": {
79-
"value": "nodejs20.x"
82+
"value": "nodejs22.x"
8083
},
8184
"ap-south-1": {
82-
"value": "nodejs20.x"
85+
"value": "nodejs22.x"
8386
},
8487
"ap-south-2": {
85-
"value": "nodejs20.x"
88+
"value": "nodejs22.x"
8689
},
8790
"ap-southeast-1": {
88-
"value": "nodejs20.x"
91+
"value": "nodejs22.x"
8992
},
9093
"ap-southeast-2": {
91-
"value": "nodejs20.x"
94+
"value": "nodejs22.x"
9295
},
9396
"ap-southeast-3": {
94-
"value": "nodejs20.x"
97+
"value": "nodejs22.x"
9598
},
9699
"ap-southeast-4": {
97-
"value": "nodejs20.x"
100+
"value": "nodejs22.x"
98101
},
99102
"ap-southeast-5": {
100-
"value": "nodejs20.x"
103+
"value": "nodejs22.x"
104+
},
105+
"ap-southeast-6": {
106+
"value": "nodejs22.x"
101107
},
102108
"ap-southeast-7": {
103-
"value": "nodejs20.x"
109+
"value": "nodejs22.x"
104110
},
105111
"ca-central-1": {
106-
"value": "nodejs20.x"
112+
"value": "nodejs22.x"
107113
},
108114
"ca-west-1": {
109-
"value": "nodejs20.x"
115+
"value": "nodejs22.x"
110116
},
111117
"cn-north-1": {
112-
"value": "nodejs20.x"
118+
"value": "nodejs22.x"
113119
},
114120
"cn-northwest-1": {
115-
"value": "nodejs20.x"
121+
"value": "nodejs22.x"
116122
},
117123
"eu-central-1": {
118-
"value": "nodejs20.x"
124+
"value": "nodejs22.x"
119125
},
120126
"eu-central-2": {
121-
"value": "nodejs20.x"
127+
"value": "nodejs22.x"
122128
},
123129
"eu-isoe-west-1": {
124-
"value": "nodejs18.x"
130+
"value": "nodejs22.x"
125131
},
126132
"eu-north-1": {
127-
"value": "nodejs20.x"
133+
"value": "nodejs22.x"
128134
},
129135
"eu-south-1": {
130-
"value": "nodejs20.x"
136+
"value": "nodejs22.x"
131137
},
132138
"eu-south-2": {
133-
"value": "nodejs20.x"
139+
"value": "nodejs22.x"
134140
},
135141
"eu-west-1": {
136-
"value": "nodejs20.x"
142+
"value": "nodejs22.x"
137143
},
138144
"eu-west-2": {
139-
"value": "nodejs20.x"
145+
"value": "nodejs22.x"
140146
},
141147
"eu-west-3": {
142-
"value": "nodejs20.x"
148+
"value": "nodejs22.x"
149+
},
150+
"eusc-de-east-1": {
151+
"value": "nodejs22.x"
143152
},
144153
"il-central-1": {
145-
"value": "nodejs20.x"
154+
"value": "nodejs22.x"
146155
},
147156
"me-central-1": {
148-
"value": "nodejs20.x"
157+
"value": "nodejs22.x"
149158
},
150159
"me-south-1": {
151-
"value": "nodejs20.x"
160+
"value": "nodejs22.x"
152161
},
153162
"mx-central-1": {
154-
"value": "nodejs20.x"
163+
"value": "nodejs22.x"
155164
},
156165
"sa-east-1": {
157-
"value": "nodejs20.x"
166+
"value": "nodejs22.x"
158167
},
159168
"us-east-1": {
160-
"value": "nodejs20.x"
169+
"value": "nodejs22.x"
161170
},
162171
"us-east-2": {
163-
"value": "nodejs20.x"
172+
"value": "nodejs22.x"
164173
},
165174
"us-gov-east-1": {
166-
"value": "nodejs20.x"
175+
"value": "nodejs22.x"
167176
},
168177
"us-gov-west-1": {
169-
"value": "nodejs20.x"
178+
"value": "nodejs22.x"
170179
},
171180
"us-iso-east-1": {
172-
"value": "nodejs18.x"
181+
"value": "nodejs22.x"
173182
},
174183
"us-iso-west-1": {
175-
"value": "nodejs18.x"
184+
"value": "nodejs22.x"
176185
},
177186
"us-isob-east-1": {
178187
"value": "nodejs18.x"
179188
},
189+
"us-isob-west-1": {
190+
"value": "nodejs18.x"
191+
},
192+
"us-isof-east-1": {
193+
"value": "nodejs22.x"
194+
},
195+
"us-isof-south-1": {
196+
"value": "nodejs22.x"
197+
},
180198
"us-west-1": {
181-
"value": "nodejs20.x"
199+
"value": "nodejs22.x"
182200
},
183201
"us-west-2": {
184-
"value": "nodejs20.x"
202+
"value": "nodejs22.x"
185203
}
186204
}
187205
},
@@ -204,15 +222,15 @@
204222
],
205223
"Content": {
206224
"S3Bucket": {
207-
"Fn::Sub": "solutions-${AWS::Region}"
225+
"Fn::Sub": "639493421477-solutions-${AWS::Region}"
208226
},
209-
"S3Key": "automations-for-aws-firewall-manager/v2.1.3/asset37ddc85bd79d0dc79c7021b40a147ee8701cfc96d02aa9f73cbe50921d780e1f.zip"
227+
"S3Key": "automations-for-aws-firewall-manager/v2.1.4/asset73430bf435f80582ef823e1a354a71f75af61d65fd58950fa4e07c7a2345183f.zip"
210228
},
211229
"LayerName": "AFM-UtilsLayer"
212230
},
213231
"Metadata": {
214232
"aws:cdk:path": "CommonResourceStack/AFM-UtilsLayer/AFM-UtilsLayer-Layer/Resource",
215-
"aws:asset:path": "asset.37ddc85bd79d0dc79c7021b40a147ee8701cfc96d02aa9f73cbe50921d780e1f.zip",
233+
"aws:asset:path": "asset.73430bf435f80582ef823e1a354a71f75af61d65fd58950fa4e07c7a2345183f.zip",
216234
"aws:asset:is-bundled": false,
217235
"aws:asset:property": "Content"
218236
}
@@ -256,9 +274,9 @@
256274
"Properties": {
257275
"Code": {
258276
"S3Bucket": {
259-
"Fn::Sub": "solutions-${AWS::Region}"
277+
"Fn::Sub": "639493421477-solutions-${AWS::Region}"
260278
},
261-
"S3Key": "automations-for-aws-firewall-manager/v2.1.3/asset096fe45058dc918c0d5c37508ed7c373643fc8c62c3ef0522c269e1a02d48335.zip"
279+
"S3Key": "automations-for-aws-firewall-manager/v2.1.4/assetfd6b60252b2925ecc957b656ae6c38aba060a2745573fdbfb0bb98fba83f7375.zip"
262280
},
263281
"Description": {
264282
"Fn::Join": [
@@ -460,9 +478,9 @@
460478
"Properties": {
461479
"Code": {
462480
"S3Bucket": {
463-
"Fn::Sub": "solutions-${AWS::Region}"
481+
"Fn::Sub": "639493421477-solutions-${AWS::Region}"
464482
},
465-
"S3Key": "automations-for-aws-firewall-manager/v2.1.3/assetbdc104ed9cab1b5b6421713c8155f0b753380595356f710400609664d3635eca.zip"
483+
"S3Key": "automations-for-aws-firewall-manager/v2.1.4/assetbdc104ed9cab1b5b6421713c8155f0b753380595356f710400609664d3635eca.zip"
466484
},
467485
"Description": "AWS CDK resource provider framework - onEvent (CommonResourceStack/HelperProvider)",
468486
"Environment": {
@@ -476,6 +494,10 @@
476494
}
477495
},
478496
"Handler": "framework.onEvent",
497+
"LoggingConfig": {
498+
"ApplicationLogLevel": "FATAL",
499+
"LogFormat": "JSON"
500+
},
479501
"Role": {
480502
"Fn::GetAtt": [
481503
"HelperProviderframeworkonEventServiceRole1962DD43",
@@ -640,7 +662,7 @@
640662
]
641663
}
642664
},
643-
"TemplateURL": "https://solutions-reference.s3.amazonaws.com/automations-for-aws-firewall-manager/v2.1.3/aws-fms-compliance.template"
665+
"TemplateURL": "https://639493421477-solutions-reference.s3.amazonaws.com/automations-for-aws-firewall-manager/v2.1.4/aws-fms-compliance.template"
644666
},
645667
"UpdateReplacePolicy": "Delete",
646668
"DeletionPolicy": "Delete",
@@ -669,7 +691,7 @@
669691
"Ref": "EmailAddress"
670692
}
671693
},
672-
"TemplateURL": "https://solutions-reference.s3.amazonaws.com/automations-for-aws-firewall-manager/v2.1.3/aws-fms-policy.template"
694+
"TemplateURL": "https://639493421477-solutions-reference.s3.amazonaws.com/automations-for-aws-firewall-manager/v2.1.4/aws-fms-policy.template"
673695
},
674696
"UpdateReplacePolicy": "Delete",
675697
"DeletionPolicy": "Delete",

‎deployment/aws-fms-compliance.template‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"Description": "(SO0134-cr) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager compliance reporter resources. Version v2.1.3",
2+
"Description": "(SO0134-cr) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager compliance reporter resources. Version v2.1.4",
33
"AWSTemplateFormatVersion": "2010-09-09",
44
"Metadata": {
55
"AWS::CloudFormation::Interface": {
@@ -34,7 +34,7 @@
3434
},
3535
"Solution": {
3636
"SolutionId": "SO0134",
37-
"SolutionVersion": "v2.1.3",
37+
"SolutionVersion": "v2.1.4",
3838
"UserAgentPrefix": "AwsSolution"
3939
},
4040
"Compliance": {
@@ -51,15 +51,15 @@
5151
],
5252
"Content": {
5353
"S3Bucket": {
54-
"Fn::Sub": "solutions-${AWS::Region}"
54+
"Fn::Sub": "639493421477-solutions-${AWS::Region}"
5555
},
56-
"S3Key": "automations-for-aws-firewall-manager/v2.1.3/asset37ddc85bd79d0dc79c7021b40a147ee8701cfc96d02aa9f73cbe50921d780e1f.zip"
56+
"S3Key": "automations-for-aws-firewall-manager/v2.1.4/asset73430bf435f80582ef823e1a354a71f75af61d65fd58950fa4e07c7a2345183f.zip"
5757
},
5858
"LayerName": "AFM-UtilsLayer"
5959
},
6060
"Metadata": {
6161
"aws:cdk:path": "CommonResourceStack/ComplianceGeneratorStack/AFM-UtilsLayer/AFM-UtilsLayer-Layer/Resource",
62-
"aws:asset:path": "asset.37ddc85bd79d0dc79c7021b40a147ee8701cfc96d02aa9f73cbe50921d780e1f.zip",
62+
"aws:asset:path": "asset.73430bf435f80582ef823e1a354a71f75af61d65fd58950fa4e07c7a2345183f.zip",
6363
"aws:asset:is-bundled": false,
6464
"aws:asset:property": "Content"
6565
}
@@ -498,9 +498,9 @@
498498
"Properties": {
499499
"Code": {
500500
"S3Bucket": {
501-
"Fn::Sub": "solutions-${AWS::Region}"
501+
"Fn::Sub": "639493421477-solutions-${AWS::Region}"
502502
},
503-
"S3Key": "automations-for-aws-firewall-manager/v2.1.3/assetd3199e8ab55dde6fb3368f14bab0b2b4fcdeaef6e62d9a8e71dbc87911e7d9c5.zip"
503+
"S3Key": "automations-for-aws-firewall-manager/v2.1.4/assete698ead589889678580e62e4d6036c895831f4f6ea82941c9491e69063a1e4c1.zip"
504504
},
505505
"DeadLetterConfig": {
506506
"TargetArn": {
@@ -784,7 +784,7 @@
784784
"CDKMetadata": {
785785
"Type": "AWS::CDK::Metadata",
786786
"Properties": {
787-
"Analytics": "v2:deflate64:H4sIAAAAAAAA/1WQzW7DIBCEnyV3sq0TqUqPTaWe+uPaVa/RGm8jYhu7LCSKEO9egR3ZvTDzMbMI2EC2e4RshRdey7pZt6oC/05sqS4tykY8/+gcDXZkyUR4w2FQ+ijwwgffYlfVCP4Vr2S+ybDqdSz94xenpZ2Cpc/JdIpjJQjeHpCZLMNTFMFb8HsnG7J7ZBKjjUOTGyXvWyWv8/bIQbBm8F/9oGTMRpPWeWCJpatYGjXcLrbkIPiXwX86chSz0aR1PmyBQSjswBd9m+pJ5+KtQ2fSlsEXbqq5lkIQ6e2lxWP84IK4d0am/MPZwdkgdF8TnPjunO1gcw8PqxMrtTZOW9URFKP+AfmC05TTAQAA"
787+
"Analytics": "v2:deflate64:H4sIAAAAAAAA/1WQzW7DIBCEnyV3sk2cQ3NtKvXUH9eueo3WeBsR2+CykChCvHuF7cjuhZmPmUVABtn2ETYrvPJa1s26VRWEd2JHdelQNuL5R+dosSNHNsEb9r3SJ4FXPoYWu6pGCK94I/tNlpXRqfSPX7yWbgqWPifbKU6VKHh3RGZyDE9JBO8gHLxsyB2QSYw2DU1ulNy0St7m7ZGjYM0QvkyvZMpGM6zzwBJLX7G0qr9fbMlR8C9D+PTkKWWjGdb5sAVGobCDUJh2qA86F+8dupB2DKHwU823FKMY3l46PKUPLoiNt3LIP7zrvYtCm5rgzA+X7R6yDexXZ1Zqbb12qiMoRv0D/MgLh9MBAAA="
788788
},
789789
"Metadata": {
790790
"aws:cdk:path": "CommonResourceStack/ComplianceGeneratorStack/CDKMetadata/Default"

‎deployment/aws-fms-demo.template‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"Description": "(SO0134D) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager demo resources. Version v2.1.3",
2+
"Description": "(SO0134D) - The AWS CloudFormation template for deployment of the automations-for-aws-firewall-manager demo resources. Version v2.1.4",
33
"AWSTemplateFormatVersion": "2010-09-09",
44
"Resources": {
55
"testcloudfronts3S3LoggingBucket90D239DD": {
@@ -966,7 +966,7 @@
966966
"CDKMetadata": {
967967
"Type": "AWS::CDK::Metadata",
968968
"Properties": {
969-
"Analytics": "v2:deflate64:H4sIAAAAAAAA/3VRy27CQAz8Fu6b5RGpglspLYhLGxHEtdo4pjWEXbT2glCUf682oaSXnmY8tkZje6Lr8XSmxwNz5QTKY1JRoetcDByVufJnzamuXwIcUdRib++sg8xVBLde7upGQeVCuffOiq6XwYKQs3HqwV+JxVMR2uLD0xfZOQAyr0u0QtJ6LqLLMrr8N/HXplEIE13vzhA7u2yhslBUBHkobBe9ZxsXBLemqLDXe23O7IDMb+i2EcnbOovwbmRlBK/mpjJPFyPYG6+toLf4GOiS3Ku5iIHvE1pROULwJLeVd+HcZvgrNI3aILvgARuVzvRo8Byfw65qN+UEnGXxAYSH7dce50441f3Zti5PG2VdifrAw8t4qicj/TQ4MFHigxU6od50+APRh/AlBgIAAA=="
969+
"Analytics": "v2:deflate64:H4sIAAAAAAAA/3VRQW7CQAx8C/fNAsmh9FaaFsSljQjiWm0c0xrCLlp7QSjK36sklHDpacZjazS2Y13H0yc9GZkLR1AeoooKXedi4KDMhb9qTnT9GuCAotKdvbEeMlcRXAe5rxsFlQvlzjsrul4EC0LOtlN3/kYsnorQFZ+evsnOAZB5VaIVks4zbV0Wrct/E482jUKIdb09QdvZZqnKQlER5KGwffSBrV0Q3JiiwkEftDmzAzJ/obtGS95XWQsfRpZG8GKuKvN0NoKD8coKeov3gT7JrZqLGPg5ohWVIwRPcl16F05dhkehadQa2QUP2KjkWU9GL+1z2FXdphyBsyw+gPC4+9r93BEnejjbxuVJo6wrUe95fJ7OdDzRs9GeiSIfrNAR9brHX/a7kCoGAgAA"
970970
},
971971
"Metadata": {
972972
"aws:cdk:path": "DemoStack/CDKMetadata/Default"

0 commit comments

Comments
 (0)