diff --git a/CHANGELOG.md b/CHANGELOG.md index 18dbdc3..6cb83a4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,11 +3,13 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [3.1.2] - 2023-04-20 +- Updated object ownership configuration on the S3 buckets. +- Security patching` -## [3.1.1] - 2023-04-03 +## [3.1.1] - 2023-04-3 ### Added -- Added package-lock.json files to lambda functions. - +- Added package-lock.json files to all lambda packages. ## [3.1.0] - 2023-02-28 ### Added - AppRegistry integration diff --git a/deployment/media2cloud-core-stack.yaml b/deployment/media2cloud-core-stack.yaml index 4b7e792..bd7296a 100644 --- a/deployment/media2cloud-core-stack.yaml +++ b/deployment/media2cloud-core-stack.yaml @@ -103,12 +103,14 @@ Resources: UpdateReplacePolicy: Retain Properties: BucketName: !Sub ${ResourcePrefix}-${AWS::AccountId}-${AWS::Region}-logs + OwnershipControls: + Rules: + - ObjectOwnership: ObjectWriter BucketEncryption: ServerSideEncryptionConfiguration: - ServerSideEncryptionByDefault: SSEAlgorithm: AES256 - AccessControl: LogDeliveryWrite LifecycleConfiguration: Rules: - @@ -167,6 +169,9 @@ Resources: AccelerateConfiguration: AccelerationStatus: Enabled AccessControl: LogDeliveryWrite + OwnershipControls: + Rules: + - ObjectOwnership: ObjectWriter LoggingConfiguration: DestinationBucketName: !Ref LogsBucket LogFilePrefix: access_logs_ingest_bucket/ @@ -265,6 +270,9 @@ Resources: AccelerateConfiguration: AccelerationStatus: Enabled AccessControl: LogDeliveryWrite + OwnershipControls: + Rules: + - ObjectOwnership: ObjectWriter LoggingConfiguration: DestinationBucketName: !Ref LogsBucket LogFilePrefix: access_logs_proxy_bucket/ @@ -351,6 +359,9 @@ Resources: AccelerateConfiguration: AccelerationStatus: Enabled AccessControl: LogDeliveryWrite + OwnershipControls: + Rules: + - ObjectOwnership: ObjectWriter LoggingConfiguration: DestinationBucketName: !Ref LogsBucket LogFilePrefix: access_logs_web_bucket/ diff --git a/source/custom-resources/package-lock.json b/source/custom-resources/package-lock.json index 7dd04fd..29688ce 100644 --- a/source/custom-resources/package-lock.json +++ b/source/custom-resources/package-lock.json @@ -192,8 +192,7 @@ "sax": "1.2.1", "url": "0.10.3", "util": "^0.12.4", - "uuid": "8.0.0", - "xml2js": "0.4.19" + "uuid": "8.0.0" }, "engines": { "node": ">= 10.0.0" @@ -652,15 +651,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/xml2js": { - "version": "0.4.19", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz", - "integrity": "sha512-esZnJZJOiJR9wWKMyuvSE1y6Dq5LCuJanqhxslH2bxM6duahNZ+HMpCLhBQGZkbX6xRf8x1Y2eJlgt2q3qo49Q==", - "dependencies": { - "sax": ">=0.6.0", - "xmlbuilder": "~9.0.1" - } - }, "node_modules/xmlbuilder": { "version": "9.0.7", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.7.tgz", @@ -821,8 +811,7 @@ "sax": "1.2.1", "url": "0.10.3", "util": "^0.12.4", - "uuid": "8.0.0", - "xml2js": "0.4.19" + "uuid": "8.0.0" } }, "aws-xray-sdk": { @@ -1159,15 +1148,6 @@ "is-typed-array": "^1.1.10" } }, - "xml2js": { - "version": "0.4.19", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz", - "integrity": "sha512-esZnJZJOiJR9wWKMyuvSE1y6Dq5LCuJanqhxslH2bxM6duahNZ+HMpCLhBQGZkbX6xRf8x1Y2eJlgt2q3qo49Q==", - "requires": { - "sax": ">=0.6.0", - "xmlbuilder": "~9.0.1" - } - }, "xmlbuilder": { "version": "9.0.7", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.7.tgz", diff --git a/source/layers/core-lib/package-lock.json b/source/layers/core-lib/package-lock.json index 5401fce..7b3a347 100644 --- a/source/layers/core-lib/package-lock.json +++ b/source/layers/core-lib/package-lock.json @@ -89,8 +89,7 @@ "sax": "1.2.1", "url": "0.10.3", "util": "^0.12.4", - "uuid": "8.0.0", - "xml2js": "0.4.19" + "uuid": "8.0.0" }, "engines": { "node": ">= 10.0.0" @@ -599,16 +598,6 @@ "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==" }, - "node_modules/xml2js": { - "version": "0.4.19", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz", - "integrity": "sha512-esZnJZJOiJR9wWKMyuvSE1y6Dq5LCuJanqhxslH2bxM6duahNZ+HMpCLhBQGZkbX6xRf8x1Y2eJlgt2q3qo49Q==", - "peer": true, - "dependencies": { - "sax": ">=0.6.0", - "xmlbuilder": "~9.0.1" - } - }, "node_modules/xmlbuilder": { "version": "9.0.7", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.7.tgz", @@ -670,8 +659,7 @@ "sax": "1.2.1", "url": "0.10.3", "util": "^0.12.4", - "uuid": "8.0.0", - "xml2js": "0.4.19" + "uuid": "8.0.0" } }, "aws4": { @@ -1040,16 +1028,6 @@ "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==" }, - "xml2js": { - "version": "0.4.19", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz", - "integrity": "sha512-esZnJZJOiJR9wWKMyuvSE1y6Dq5LCuJanqhxslH2bxM6duahNZ+HMpCLhBQGZkbX6xRf8x1Y2eJlgt2q3qo49Q==", - "peer": true, - "requires": { - "sax": ">=0.6.0", - "xmlbuilder": "~9.0.1" - } - }, "xmlbuilder": { "version": "9.0.7", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.7.tgz", diff --git a/source/layers/image-process-lib/package-lock.json b/source/layers/image-process-lib/package-lock.json index 45b1243..9ec2f59 100644 --- a/source/layers/image-process-lib/package-lock.json +++ b/source/layers/image-process-lib/package-lock.json @@ -1459,8 +1459,7 @@ "resolved": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.4.tgz", "integrity": "sha512-bjnliEOmGv3y1aMEfREMBJ9tfL3WR0i0CKPj61DnSLaoxWR3nLrsQrEbCId/8rF4NyRF0cCqisSVXyQYWM+mCQ==", "dependencies": { - "xml-parse-from-string": "^1.0.0", - "xml2js": "^0.4.5" + "xml-parse-from-string": "^1.0.0" } }, "node_modules/parse-headers": { @@ -2038,18 +2037,6 @@ "resolved": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz", "integrity": "sha512-ErcKwJTF54uRzzNMXq2X5sMIy88zJvfN2DmdoQvy7PAFJ+tPRU6ydWuOKNMyfmOjdyBQTFREi60s0Y0SyI0G0g==" }, - "node_modules/xml2js": { - "version": "0.4.23", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz", - "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==", - "dependencies": { - "sax": ">=0.6.0", - "xmlbuilder": "~11.0.0" - }, - "engines": { - "node": ">=4.0.0" - } - }, "node_modules/xmlbuilder": { "version": "11.0.1", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", @@ -3143,8 +3130,7 @@ "resolved": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.4.tgz", "integrity": "sha512-bjnliEOmGv3y1aMEfREMBJ9tfL3WR0i0CKPj61DnSLaoxWR3nLrsQrEbCId/8rF4NyRF0cCqisSVXyQYWM+mCQ==", "requires": { - "xml-parse-from-string": "^1.0.0", - "xml2js": "^0.4.5" + "xml-parse-from-string": "^1.0.0" } }, "parse-headers": { @@ -3569,15 +3555,6 @@ "resolved": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz", "integrity": "sha512-ErcKwJTF54uRzzNMXq2X5sMIy88zJvfN2DmdoQvy7PAFJ+tPRU6ydWuOKNMyfmOjdyBQTFREi60s0Y0SyI0G0g==" }, - "xml2js": { - "version": "0.4.23", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz", - "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==", - "requires": { - "sax": ">=0.6.0", - "xmlbuilder": "~11.0.0" - } - }, "xmlbuilder": { "version": "11.0.1", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", diff --git a/source/layers/mediainfo/package-lock.json b/source/layers/mediainfo/package-lock.json index 0740eee..d03da95 100644 --- a/source/layers/mediainfo/package-lock.json +++ b/source/layers/mediainfo/package-lock.json @@ -8,9 +8,7 @@ "name": "mediainfo", "version": "2.0.0", "license": "ISC", - "dependencies": { - "xml2js": "^0.4.19" - }, + "dependencies": {}, "devDependencies": {} }, "node_modules/sax": { @@ -18,18 +16,6 @@ "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz", "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==" }, - "node_modules/xml2js": { - "version": "0.4.23", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz", - "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==", - "dependencies": { - "sax": ">=0.6.0", - "xmlbuilder": "~11.0.0" - }, - "engines": { - "node": ">=4.0.0" - } - }, "node_modules/xmlbuilder": { "version": "11.0.1", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", @@ -45,15 +31,6 @@ "resolved": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz", "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==" }, - "xml2js": { - "version": "0.4.23", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz", - "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==", - "requires": { - "sax": ">=0.6.0", - "xmlbuilder": "~11.0.0" - } - }, "xmlbuilder": { "version": "11.0.1", "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz", diff --git a/source/layers/mediainfo/package.json b/source/layers/mediainfo/package.json index ac2b45f..5d4209a 100644 --- a/source/layers/mediainfo/package.json +++ b/source/layers/mediainfo/package.json @@ -6,9 +6,7 @@ "private": true, "author": "aws-specialist-sa-emea", "license": "ISC", - "dependencies": { - "xml2js": "^0.4.19" - }, + "dependencies": {}, "scripts": { "pretest": "npm install", "test": "jest --coverage --coverageDirectory=../../test/coverage-reports/jest/layers/mediainfo/",