ansible-collections/amazon.aws 10.3.0

amazon.aws 10.3.0

on GitHub

Release Summary

This minor release includes several bug fixes across ALB, S3, and the SSM connection plugin, security hardening for ARN parsing, and expanded compatibility with ansible-core >= 2.16.

Minor Changes

• meta/runtime.yml - Lowered the ansible-core minimum version to 2.16. This expands compatibility and does not change or remove existing functionality.

Security Fixes

• arn - fix potential ReDoS vulnerability in ARN parsing regex by using negated character class instead of non-greedy quantifier (#2884).
• ec2_security_group - fix potential ReDoS vulnerability in security group ID parsing regex by using negated character classes and adding end anchor (#2884).

Bugfixes

• aws_ssm - Fixed connection being re-established on every loop iteration. The plugin now properly establishes a single connection for a loop (#2869).
• elb_application_lb - fixed comparison of multi-rule default actions to properly handle the Order field when determining if listener modifications are needed (#2537).
• elb_application_lb - fixed error where creating a new application load balancer with listener rules would fail with Parameter validation failed: Invalid type for parameter ListenerArn, value: None (#2400).
• s3_object - fixed error when using PUT with an empty content string (#2810)