v0.16.0

New actions:

• autoscaling:CancelInstanceRefresh
• autoscaling:DescribeInstanceRefreshes
• autoscaling:StartInstanceRefresh
• appconfig:CreateHostedConfigurationVersion
• appconfig:DeleteHostedConfigurationVersion
• appconfig:GetHostedConfigurationVersion
• appconfig:ListHostedConfigurationVersions
• codecommit:GetCommentReactions
• codecommit:PutCommentReaction

New resource types:

• appconfig:hostedconfigurationversion

Glue resource ARN's now include the Database:

• glue:table
• glue:tableversion
• glue:userdefinedfunction

AWS IoT no longer has iam:role as a valid resource type
role

All changes: v0.15.0...v0.16.0

v0.15.0

Fixed resource selectors:

• ec2:elastic-gpu

New resource selectors:

• elastic-inference:elastic-inference-accelerator

New actions:

• rekognition:GetSegmentDetection
• rekognition:StartSegmentDetection

All changes: v0.13.0...v0.15.0

v0.13.0

Breaking changes:

• Signature of method if() changed

New features:

• 445 new policy conditions, if*(). Example:

  new statement.Ec2()
    .allow()
    .startInstances()
    .ifEncrypted()
    .ifInstanceType(['t3.micro', 't2.micro'])
    .ifAssociatePublicIpAddress(false)
    .ifRequestTag('Owner', 'John');

• Factory for condition operators

  Operator.stringLike(
    Modifier.IF_EXISTS,
    Modifier.FOR_ANY_VALUES
  );

  It can be uses like this:

  new statement.Ec2()
    .allow()
    .startInstances()
    .ifInstanceType('*.micro', Operator.stringLike(Modifier.IF_EXISTS));

All changes: v0.8.0...v0.13.0

v0.10.0

Created by bad automation. Don't use this!

v0.8.0

Breaking changes

• Method withCondition() has been renamed to if()
• Method onResources() has been renamed to on()

New features

Statement providers now have on*() methods for every supported resource type.

Examples:

new statement.S3()
    .allow()
    .allActions()
    .onBucket('bucket-name');

new statement.Ec2()
    .allow()
    .allActions()
    .onInstance('i-0df90bf362ba1d5ac');

new statement.Logs()
    .allow()
    .allActions()
    .onLogGroup('some-log-group')
    .onLogStream('some-log-group', 'some-log-stream');

All changes: be58977

v0.7.0

New services

codeartifact 🚀

New actions

• iot:ListNamedShadowsForThing

New conditions available for

• imagebuilder:CreateInfrastructureConfiguration
• imagebuilder:UpdateInfrastructureConfiguration
• rds:CreateDBProxy

New resource types available for

• rds:AddTagsToResource
• rds:ListTagsForResource
• rds:RemoveTagsFromResource

All changes: 105a1a8

v0.6.0

Changes

• Updates description for sts:GetServiceBearerToken
• Changes resource types for
  • transfer:ListUsers
  • transfer:TestIdentityProvider
  • transfer:UpdateUser

All changes: 28fb654

v0.5.0

New actions

• compute-optimizer:DescribeRecommendationExportJobs
• compute-optimizer:ExportAutoScalingGroupRecommendations
• compute-optimizer:ExportEC2InstanceRecommendations
• servicediscovery:ListTagsForResource
• servicediscovery:TagResource
• servicediscovery:UntagResource
• sts:GetServiceBearerToken
• wafv2:DeleteFirewallManagerRuleGroups
• wafv2:DeletePermissionPolicy
• wafv2:GetPermissionPolicy
• wafv2:PutPermissionPolicy

Changes

• Some actions of servicediscovery have additional conditions and/or resource types available

All changes: ab6f097