#pr-reviews (2021-11)

what can now enable encryption on the sns topic why we’re encrypting everything

what The IAM role for putting objects into S3 can only be created if create_sns_topic is true, because the data object on line 144 depends on it, and the IAM role currently needs this data object …

what Adds an input to pass a response headers policy ID into the CloudFront distribution in the default cache behaviour. why AWS have recently released the ability to generate response header po…

what Adds an input to pass a response headers policy ID into the CloudFront distribution in the default cache behaviour. why AWS have recently released the ability to generate response header po…

what Enabling versioning on a bucket is a permanent action that cannot be disabled. For this reason, when versioning attribute is added to the s3 resource, the bucket is prepared to be versioned an…

what Custom label for cloudwatch log group name why Allow slash in log group names references https://sweetops.slack.com/archives/CB6GHNLG0/p1636985722167300 test provider "aws" { …

what Add performance_insights_retention_period Add ca_cert_identifier Add preferred_maintenance_window to instances Add timeout to instances why Performance insights retention Add a ca cert iden…

what Disable policy if no principals why Prevent a malformed policy references https://github.com/cloudposse/actions/runs/4267827651?check_suite_focus=true Fixes cloudposse/terraform-aws-code-…

what Added iam_access_key_max_age to configure when the IAM credentials are to be rotated. why Since v0.21.0 the IAM user created by this module expires by-default without being able to override…

what Disable provider role assumption if enabled is false why Allow enabled = false references N/A

what make github/init why latest context references N/A

what Prevent creating empty DNS replicas record when cluster_size < 1 why If the cluster_size = 0 this would result in an attempt to create an empty DNS record, which is not permitted by the …