Important
We highly recommend that you keep your environments up to date by upgrading to the latest version. See Update the solution for the required actions to upgrade. The Landing Zone Accelerator on AWS is designed and tested to work with the latest versions of Service Control Policies (SCPs) from the LZA Universal Configuration . Please review the latest changes in these repositories to ensure your SCPs align with the latest changes.
Bug Fixes
Transit Gateway Associations and Propagations Preserve Externally-Created Resources
Resolved an issue introduced with the v1.16.0 Transit Gateway associations and propagations module where the module removed associations and propagations on a managed Transit Gateway that were not declared in network-config.yaml, including those created outside of LZA (for example, by an LZA customization or an external script). This affected both route table associations and propagations and Direct Connect gateway to Transit Gateway associations. The module now tracks ownership and only removes associations and propagations that LZA itself previously created, leaving externally-created resources in place. Resources declared in network-config.yaml continue to be reconciled to configuration as before.
Dependency Vulnerability Remediation
Resolved HIGH severity vulnerabilities in dependencies, including updates to js-yaml, fast-uri, ip-address, nanoid, postcss, and brace-expansion.
Additional Resources
For full details, please see the CHANGELOG.