github awslabs/landing-zone-accelerator-on-aws v1.14.5

4 hours ago

Important

We highly recommend that you keep your environments up to date by upgrading to the latest version. See Update the solution for the required actions to upgrade.

Bug Fixes

Security Group Handling for V2 Network Stacks

This release resolves a critical issue where security groups associated with RAM-shared subnets were unintentionally deleted during the networking v1-to-v2 stack upgrade (enabled via useV2Stacks: true). The root cause was a shared createSecurityGroups function used by both the NetworkVpcStack and NetworkAssociationsStack, which performed a resourceExists() lookup to determine resource ownership during the v1→v2 migration. However, because NetworkAssociationsStack templates are never downloaded by GetCloudFormationTemplatesModule, the lookup incorrectly returned false, causing the v1 stack to remove the security group under the assumption that v2 owned it — while the v2 stack never recreated it, resulting in deletion. The fix introduces a dedicated createSecurityGroupsForSharedVpcs method for the NetworkAssociationsStack that bypasses the template lookup entirely, ensuring security groups for RAM-shared subnets are always created unconditionally.

GovCloud Account Vending Template Output Bucket

We've resolved an issue where the build script for the GovCloud Account Vending Service Catalog product did not correctly set the template output bucket. The TEMPLATE_OUTPUT_BUCKET variable is now properly defaulted when not present in the environment, ensuring that the GovCloud account vending product templates are published to the correct S3 location during the build process.

Changed

Updated !include Documentation

The documentation for the !include YAML tag has been updated with additional sample configurations, making it easier for users to understand how to split and organize their LZA configuration files across multiple YAML files.

Dependency Updates

This release addresses dependency issues with fast-xml-parser, tar, and ajv to ensure compatibility and resolve known vulnerabilities.

Please see the v1.14.5 Release Notes for information on significant changes from a previous minor version.

Don't miss a new landing-zone-accelerator-on-aws release

NewReleases is sending notifications on new releases.