Date: Fri, 29 Mar 2024 00:35:13 +0000 (UTC) Message-ID: <541651021.1.1711672513273@17e28b04e5f9> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_0_128361633.1711672513257" ------=_Part_0_128361633.1711672513257 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
The Utoolity team is pleased to present Tasks for AWS 2.21<= /strong> =E2=80=93 this release adds an IAM role for EC2/ECS= credentials provider and introduces namespace and scope handling for = generated Bamboo variables.
You can now provide AWS security credentials via an IAM role for EC2/ECS= when you run your Atlassian products on Amazon EC2, Amazon ECS, or AWS Far= gate, and you can adjust the namespace and scope of generated Bamboo variab= les.
If you are using Bamboo remote agents, please review the Tasks for AWS 2.21 Upgrade Notes for important = information on this release.
You can now enable the IAM role for EC2/ECS credentials provider via a <= a href=3D"/wiki/spaces/IFAWS/pages/16318498/Enabling+Labs+Features#Enabling= LabsFeatures-Enableconnectormanagementbyrestrictedadministrators" data-link= ed-resource-id=3D"16318498" data-linked-resource-version=3D"15" data-linked= -resource-type=3D"page">feature flag. If you have provisioned Bamb= oo on Amazon EC2, Amazon ECS, or AWS Fargate, you can now benefit from the = convenience and flexibility of providing AWS security credentials via = IAM roles for A= mazon EC2 instances and IAM roles for Amazon ECS tasks.
= This feature is provided by Identity Federation for AWS (Bamboo), which is bundle= d and free for Tasks for AWS licensees, see the resp. FAQ for d= etails.
Security assessment
The convenience of IAM roles for Amazon EC2 instances has the downside of a le= ss explicit security posture and more indirect regression potential, as fur= ther outlined in UAA-49 - Getting issue det= ails... STATUS . The feature currently requ= ires an opt-in via a feature flag accordi= ngly, and we also recommend the principal type 'Assume Role' rather than 'P= rovided' to gain the actual permissions via another role instead of the one= directly attached to the EC2 instance. Either way, please make sure you ha= ve thoroughly assessed the security configuration of your underlying EC2 in= stance(s) and the attached or assumed IAM roles.
Feature flag status
LABS FEATURE
We are committed to fully support this feature going forward, which is t= he first exploratory step in our journey to offer more choices and flexibil= ity in providing AWS security credentials via a dedicated SPI. However= , due to requiring architectural changes, we are releasing an opt-in early = version as a labs feature so that we can provide it sooner and gather feedb= ack around usability and security questions before bringing it front and ce= nter to all customers. Please provide feedback via the built-in Jira integr= ation, or contact us directly.
Similar to the Inject Bamboo variables task that has been included with =
;Bamboo as of release 6.7, you can now specify the namespace and scope for =
Bamboo variables gene=
rated by all applicable AWS tasks. You can now p=
ass a variable between stages, pass a variable from a plan to a deployment =
project, and you can use multiple tasks within the same job without overrid=
ing variables from preceding tasks by adjusting the namespace. The tasks de=
fault to the preceding behavior with local
scope and a c=
ustom.aws
namespace so that this remains an opt-in choice for advanc=
ed use cases.
2021-05-18
This release addresses the following issues:
Improvements
TAWS-2129 =E2=80=93 Update Identity Federation for AWS dependency to 2.1= 4.2
Bugs
TAWS-2117 =E2=80=93 Fix erroneous script tag usage in Bamboo tasks
= li>2021-05-18
This release addresses the following issues:
Improvements
TAWS-2085 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-02-26 - Linux)
TAWS-2086 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-03-01 - Linux)
TAWS-2087 =E2=80=93 Surface new AWS region Asia Pacific (Osaka) / ap-nor= theast-3
TAWS-2090 =E2=80=93 Deprecate support for Lambda Node.js 10.x runtime
TAWS-2096 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-03-31 - Linux)
TAWS-2098 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-04-19 - Python)
TAWS-2099 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-04-21 - Linux)
TAWS-2100 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-04-22 - Windows)
TAWS-2101 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-05-03 - Linux)
TAWS-2103 =E2=80=93 Update Identity Federation for AWS dependency to 2.1= 4.1
Bugs
TAWS-2089 =E2=80=93 Update available Elastic Beanstalk solution stacks (= as per 2021-03-19 - Windows)
TAWS-2094 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-03-30 - Linux)
2021-02-16
This release addresses the following issues:
Improvements
TAWS-2070 =E2=80=93 Integrate support for S3 bucket owner condition=
TAWS-2074 =E2=80=93 Integrate ECS support of FSx volumes for W= indows containers
TAWS-2081 =E2=80=93 Add support for Lambda Node.js 14.x runtim= e
Bugs
TAWS-2051 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-12-07 - Docker)
TAWS-2052 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-12-29 - Linux)
TAWS-2053 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-12-30 - Linux)
TAWS-2054 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-01-07 - Windows)
TAWS-2055 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-01-22 - Windows)
TAWS-2056 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-01-28 - Linux)
TAWS-2083 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2021-01-29 - Linux)
2020-11-25
This release addresses the following issues:
Stories
TAWS-1596 =E2=80=93 As a user, I want to be in control of variable = namespace and scope so that I gain simplified plan composition
Improvements
TAWS-2042 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-10-06 - Linux)
TAWS-2043 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-10-07 - Windows)
TAWS-2044 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-10-07 - Linux)
TAWS-2048 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-11-20 - .NET 5)
Bugs
TAWS-2024 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-09-03 - Linux)
TAWS-2025 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-09-04 - Windows)
TAWS-2026 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-09-10 - Linux / 2020-09-10 - Linux)
TAWS-2045 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-11-05 - Windows)
TAWS-2046 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-11-10 - Linux)
TAWS-2047 =E2=80=93 Update available Elastic Beanstalk solution sta= cks (as per 2020-11-11 - Linux)
Tasks
TAWS-1947 =E2=80=93 Drop support for Bamboo 6.5
TAWS-1991 =E2=80=93 Drop support for Bamboo 6.6