3.42.0 (2025-01-04)
Summary
New Setting
CreateRoleToDeleteStack
onCloudFormationStack
- if a cloudformation stack is missing it's role, this setting will allow AWS nuke to re-create the role to allow the deletion of the stack.
New Resources
S3AccessGrantsInstance
S3AccessGrantsGrant
S3AccessGrantsLocation
TransferWebApp
Removed Resources
MobileProject
Changes
Bug Fixes
- cloudformation-stack: remove role afterwards (bafba21)
- cloudwatchlogs-loggroup: property RetentionInDays should always have a value (76177af)
- deps: update module github.com/aws/aws-sdk-go to v1.55.5 (340043a)
- deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.72.0 (1cf5971)
- s3-access-grants-grant: pass account id to delete input (d1f2ccc)
Features
- adding support for s3 access grants, grant, instance, location (cc5548a)
- cloudformation-stack: new setting CreateRoleToDeleteStack (1c42a86)
- cloudwatchevents-target: add properties (60243b3)
- cloudwatchlogs-loggroup: add RetentionInDays properties (b8982b4)
- cloudwatchlogs-loggroup: new properties, refactor properties struct (d8ffbc5)
- mobile-project: remove resource, no longer supported by AWS (de5feb2)
- new resource TransferWebApp (0c8daf7)
Verify Binaries
Currently only the checksums.txt
is signed, therefore it's sha256 signature is signed. Simply verify the hash and then verify the checksums signature.
cosign verify-blob \
--signature https://github.com/ekristen/aws-nuke/releases/download/v3.42.0/checksums.txt.sig \
--certificate https://github.com/ekristen/aws-nuke/releases/download/v3.42.0/checksums.txt.pem \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
--certificate-identity "https://github.com/ekristen/aws-nuke/.github/workflows/goreleaser.yml@refs/tags/v3.42.0" \
https://github.com/ekristen/aws-nuke/releases/download/v3.42.0/checksums.txt