You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
### v0.83.0
2
2
###### Features
3
-
- Add rule [E3045](https://github.com/aws-cloudformation/cfn-python-lint/blob/main/docs/rules.md#E3045) to validate `AccessControl`s are specified when using `AccessControl` (pull #[2905](https://github.com/aws-cloudformation/cfn-lint/pull/2905))
4
-
- Add rule [W3045](https://github.com/aws-cloudformation/cfn-python-lint/blob/main/docs/rules.md#W3045) to alert on usage of legacy capability `AccessControl` (pull #[2905](https://github.com/aws-cloudformation/cfn-lint/pull/2905))
3
+
- Add rule [E3045](https://github.com/aws-cloudformation/cfn-python-lint/blob/main/docs/rules.md#E3045) to validate `AccessControl`s are specified when using `AccessControl` (pull #[2906](https://github.com/aws-cloudformation/cfn-lint/pull/2906))
4
+
- Add rule [W3045](https://github.com/aws-cloudformation/cfn-python-lint/blob/main/docs/rules.md#W3045) to alert on usage of legacy capability `AccessControl` (pull #[2906](https://github.com/aws-cloudformation/cfn-lint/pull/2906))
5
5
###### CloudFormation Specifications
6
6
- Update CloudFormation specs to `145.0.0` (pull #[2909](https://github.com/aws-cloudformation/cfn-lint/pull/2909))
@@ -135,6 +135,7 @@ The following **157** rules are applied by this linter:
135
135
|[E3042<aname="E3042"></a>](../src/cfnlint/rules/resources/ecs/TaskDefinitionEssentialContainer.py)| Check at least one essential container is specified | Check that every TaskDefinition specifies at least one essential container ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinitions.html#cfn-ecs-taskdefinition-containerdefinition-essential)|`properties`,`ecs`,`task`,`container`,`fargate`|
136
136
|[E3043<aname="E3043"></a>](../src/cfnlint/rules/resources/cloudformation/NestedStackParameters.py)| Validate parameters for in a nested stack | Evalute if parameters for a nested stack are specified and if parameters are specified for a nested stack that aren't required. ||[Source](https://github.com/awslabs/cfn-python-lint)|`resources`,`cloudformation`|
137
137
|[E3044<aname="E3044"></a>](../src/cfnlint/rules/resources/ecs/FargateDeploymentSchedulingStrategy.py)| Check Fargate service scheduling strategy | Check that Fargate service scheduling strategy is REPLICA ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html#cfn-ecs-service-schedulingstrategy)|`properties`,`ecs`,`service`,`container`,`fargate`|
138
+
|[E3045<aname="E3045"></a>](../src/cfnlint/rules/resources/s3/AccessControlOwnership.py)| Validate AccessControl are set with OwnershipControls | When using AccessControl other than private you must also configure OwnershipControls. The default is bucket owner enforced which disables ACLs. ||[Source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html)|`resources`,`s3`|
138
139
|[E3050<aname="E3050"></a>](../src/cfnlint/rules/resources/iam/RefWithPath.py)| Check if REFing to a IAM resource with path set | Some resources don't support looking up the IAM resource by name. This check validates when a REF is being used and the Path is not '/' ||[Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html)|`properties`,`iam`|
139
140
|[E3502<aname="E3502"></a>](../src/cfnlint/rules/resources/properties/JsonSize.py)| Check if a JSON Object is within size limits | Validate properties that are JSON values so that their length is within the limits ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cloudformation-limits.html)|`resources`,`limits`,`json`|
140
141
|[E3503<aname="E3503"></a>](../src/cfnlint/rules/resources/certificatemanager/DomainValidationOptions.py)| ValidationDomain is superdomain of DomainName | In ValidationDomainOptions, the ValidationDomain must be a superdomain of the DomainName being validated ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-certificatemanager-certificate-domainvalidationoption.html#cfn-certificatemanager-certificate-domainvalidationoption-validationdomain)|`certificate`,`certificatemanager`,`domainvalidationoptions`,`validationdomain`|
@@ -201,6 +202,7 @@ The following **157** rules are applied by this linter:
201
202
|[W3010<aname="W3010"></a>](../src/cfnlint/rules/resources/properties/AvailabilityZone.py)| Availability Zone Parameters should not be hardcoded | Check if an Availability Zone property is hardcoded. ||[Source](https://github.com/aws-cloudformation/cfn-python-lint)|`parameters`,`availabilityzone`|
202
203
|[W3011<aname="W3011"></a>](../src/cfnlint/rules/resources/BothUpdateReplacePolicyDeletionPolicyNeeded.py)| Check resources with UpdateReplacePolicy/DeletionPolicy have both | Both UpdateReplacePolicy and DeletionPolicy are needed to protect resources from deletion ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html)|`resources`,`updatereplacepolicy`,`deletionpolicy`|
203
204
|[W3037*<aname="W3037*"></a>](../src/cfnlint/rules/resources/iam/Permissions.py)| Check IAM Permission configuration | Check for valid IAM Permissions ||[Source](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html)|`properties`,`iam`,`permissions`|
205
+
|[W3045<aname="W3045"></a>](../src/cfnlint/rules/resources/s3/AccessControlObsolete.py)| Controlling access to an S3 bucket should be done with bucket policies | Nearly all access control configurations can be more successfully achieved with bucket policies. Consider using bucket policies instead of access control. ||[Source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html)|`resources`,`s3`|
|[W4002<aname="W4002"></a>](../src/cfnlint/rules/resources/NoEcho.py)| Check for NoEcho References | Check if there is a NoEcho enabled parameter referenced within a resources Metadata section ||[Source](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html#parameters-section-structure-properties)|`resources`,`NoEcho`|
206
208
|[W6001<aname="W6001"></a>](../src/cfnlint/rules/outputs/ImportValue.py)| Check Outputs using ImportValue | Check if the Output value is set using ImportValue, so creating an Output of an Output ||[Source](https://github.com/aws-cloudformation/cfn-python-lint)|`outputs`,`importvalue`|
0 commit comments