Versions Compared

Old Version 1

changes.mady.by.user Steffen Opel [Utoolity]

Saved on

compared with

New Version 2

changes.mady.by.user Steffen Opel [Utoolity]

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Fixed odd body layout defects, pending banner.

01 August 2014

Tip
iconfalse
Div
stylepadding-bottom:0.8em

The Utoolity team is pleased to present Tasks for AWS 2.4 – this release adds shared AWS security credentials management by integrating with Identity Federation for AWS, adjusts the inline task credentials storage to facilitate the Bamboo EncryptionService API, and adds logging of nested CloudFormation stack resources.

Highlights of this release:

Table of Contents
minLevel3
excludeRelease [1-9]\.[0-9]\.[1-9]+

Updates for this release:

Table of Contents
minLevel3
includeRelease [1-9]\.[0-9]\.[1-9]+

Highlights

Panel
borderColor#F3F3F3
bgColor#FAFAFA
borderWidth1

Shared AWS security credentials management

You can now manage AWS security credentials centrally by means of an integration with the Identity Federation for AWS add-on:

  • add long-term AWS security credentials (IAM users) once, configure AWS access for Atlassian groups with temporary credentials and fine grained permissions via IAM Policies thereafter (Identity Broker)
  • grant easy access to AWS resources directly via menu links to the AWS Management Console (see the User's Guide for details)
    • (lightbulb) this can optionally include access to your elastic agents for administrators (or any other group with access to the resp. AWS Connector)
Tip
titleNo Charge
Usage of Identity Federation for AWS is forever free for Tasks for AWS licensees (and within Bamboo in general for the time being).
Panel
borderColor#F3F3F3
bgColor#FFFFFF

Improved security of

inline

Inline credentials persistence

The inline AWS security credentials of type Inline are now persisted through the Bamboo EncryptionService API.

Note
titleNo Real Encryption
Please note that the name of the  of the Bamboo EncryptionService Encryption API is misleading for the time being - as properly phrased in the method details, these just provide means to obfuscate sensitive data. Real encryption is available by using the integration with the Identity Federation for AWS instead.


Panel
borderColor#F3F3F3
bgColor#FAFAFA
borderWidth1

Logging of nested CloudFormation stack resources

Resource transition events of nested CloudFormation stacks are now logged in the Bamboo build log as well to provide immediate feedback on the actual cause of a build failure caused therein.

Details

This release addresses the following issues:

  • Stories
    • TAWS-39 - As a user, I want to manage AWS credentials centrally so that I do not need to enter them for every task
  • Improvements
    • TAWS-296 - Add logging of nested CloudFormation stack resources
    • TAWS-281 - Adjust task credentials storage to facilitate Bamboo EncryptionService API
  • Bugs
    • TAWS-335 - Fix regressions on task execution on remote agents
    • TAWS-298 - Verify add-on working after disable/enable cycle (own as well as IFAWS)
    • TAWS-283 - Fix unhelpful error message 'Encountered internal plugin error'