Release v3.2.1

What's Changed since v3.2.0 ❇️

• Improved handling of Azure resource type errors (#49)
• Improved handling of Azure subscription errors (#48)
• Fix invalid Docker deployment scan command (#48)
• Remove reference to invalid AWS profile in AWS ECS deployment (#48)

Full Changelog: v3.2.0...v3.2.1

Release v3.2.0

What's Changed since v3.1.5 ❇️

• 🚨 User action required: Migration from Google’s soon-to-be-deprecated Security Command Center Asset API to Google’s Cloud Asset Inventory API in #26
• Remove GCP stale seeds on each scan in #26
• Reset AWS STS creds between scanning for seeds and cloud assets. This will remedy the recursion errors that some customers have been seeing in their healthcheck logs. in #41
• Combine seeds submission for resource types with multiple versions (ex: AWS API Gateway v1 and API Gateway v2) in #40
• Optional environmental variable AZURE_REFRESH_ALL_REGIONS available to scan all Azure regions and clear out lingering stale seeds in #34
• CI updates in #38
• build(deps-dev): bump cryptography from 41.0.3 to 41.0.4 in #39
• Update docs to reflect recent changes in #42

Full Changelog: v3.1.5...v3.2.0

🚨 🚨 User action required 🚨 🚨

In response to Google’s deprecation of the Security Command Center (SCC) Asset API, the cloud connector will now use the Cloud Asset Inventory (CAI) as its source of truth. Users will need to take enable the Cloud Asset Inventory API and add the Cloud Asset Viewer role to their service account. Details steps for how to do this in one step with the Cloud Connector Configuration CLI can be found in our documentation.

Release v3.1.5

What's Changed since v3.1.4 ❇️

• Enforce AWS account IDs as 12-digit strings
• Remove AWS stale seeds on each scan
• Improve efficiency of AWS cloud asset scanning by reducing number of API calls
• Bump dependencies
• Fixed error on Azure provider setup validation in #18
• Fixed max length validation for GCP org id in #20
• Fixed AWS Tags Plugin tag handling in #21

Full Changelog: v3.1.4...v3.1.5

Release v3.1.4 Beta 1

What's Changed ❇️

• Enforce AWS account IDs as 12-digit strings
• Remove AWS stale seeds on each scan
• Improve efficiency of AWS cloud asset scanning by reducing number of API calls
• Bump dependencies

Full Changelog: v3.1.4...v3.1.4b1

Release v3.1.4

What's Changed ❇️

• Fixed error on Azure provider setup validation in #18
• Fixed max length validation for GCP org id in #20
• Fixed AWS Tags Plugin tag handling in #21

Full Changelog: v3.1.3...v3.1.4

Release v3.1.3

What's Changed ❇️

• Clear seeds and cloud assets after submitting in #17
• Enabled AWS Route53 base domain scanning in #16

Potentially Breaking Changes ❌

• Updated Dockerfile to use CMD instead of ENTRYPOINT in #15

Full Changelog: v3.1.2...v3.1.3

Release v3.1.2

What's Changed ❇️

• Improved error handling and retry logic
• Improved logging (Added timestamp)

Full Changelog: v3.1.1...v3.1.2

Release v3.1.1 Beta 1

What's Changed ❇️

• Improved error handling for Azure scanning
• Update kubernetes command in documentation

Full Changelog: v3.1.1...v3.1.1b1

Release v3.1.1

What's Changed ❇️

• Added Plugins
  • Added AWS Tags Plugin
• Updated Kubernetes chart
• Fixed issue with installing for Poetry 1.4.0
• Fixed issue with saving AWS temporary credentials
• Updated AWS documentation
• Updated AWS Stackset Role
• Upgraded miscellaneous dependencies

Full Changelog: v3.1.0...v3.1.1

Release v3.1.0 Beta 3

What's Changed ❇️

• Fixed bug with AWS Account IDs starting with 0
• Reworked docs
• Bumped AWS Terraform Provider

Full Changelog: v3.1.0b2...v3.1.0b3