aws/copilot-cli v1.22.0

copilot-cli: Release v1.22.0

on GitHub

⚡️ Features and Enhancements

• Enable setting IAM permissions boundaries for all IAM roles in an application (#3969)

  You can now leverage IAM permissions boundaries to comply with your organization’s security requirements and service control policies by passing the --permissions-boundary flag with the copilot app init command.
  See our blog post to learn more!

• Add FIFO (first in, first out) capabilities for SNS topics and SQS queues of Worker Services (#4014, #4018)

  For applications when the order of operations and events is critical, or where duplicates can't be tolerated you can now enable fifo: true in your manifests.
  See our blog post for a walkthrough of connecting SNS FIFO topics to the SQS FIFO queue of a Worker Service.
  See the manifest specification for SNS FIFO topics and SQS FIFO queues.

• Configure the CloudFront CDN to terminate TLS (#4017)

  Your application can now benefit from terminating TLS at a geographically closer endpoint to the end user for faster TLS handshakes:

  cdn:
    tls_termination: true

  See our [blog post](https://aws.github.io/copilot-cli/blogs/release-v122/#cloudfront-tls-termination to learn more!
  See the environment manifest for the specification.

• Enable TLS connections between the Application Load Balancer and Fargate tasks (#4021)

  If the port of the target container is set to 443, the target group's protocol and health check protocol is now set to HTTPS.
  See the sample end-to-end encryption manifest specification.

• Add support for Windows Server 2022 (#3968)

  You can now specify windows_server_2022_core and windows_server_2022_full as OS Family options to run Windows 2022 Fargate tasks.
  See platform in the manifest specification.

• Allow disabling HTTP to HTTPS redirection for Load Balanced Web Services (#4003)

  You can now set http.redirect_to_https as false (by default it's true) for your applications with a domain name.
  This field is particularly useful when enabling CloudFront to terminate TLS.
  See the manifest specification.

• Display logs for the last stopped task using the new -p, --previous flag (#3983)

  You can now easily view the logs of the last stopped task to help with troubleshooting with copilot svc logs -p.

• Filter logs to an individual container with the new --container flag (#3985)

  You can now run copilot svc logs --container nginx to filter the logs to an individual container.

🐛 Bug Fixes

• Allow the creation of an internal hosted zone in the aws-cn and aws-us-gov partitions (#3995)
• Fix object ownership for pipeline artifacts to be the bucket owner so cross accounts deployments are enabled (#3998)
• Disable writing health check grace period to CloudFormation by setting http.grace_period: 0s (#4015)

❤️ Contributions

Thank you, contributors 🥰!

• @shingos (#3976)
• @gabrielcostasilva (#3993)
• @jterry75 (#3968)