require Terraform 1.1

Fixed

• cloudflare-sg requires Terraform 1.1 because of a "moved" block

Rename Cloudflare security group rule

Changed

• Rename the Cloudflare security group rule to remove the "ipv4" since it now contains IPv6 addresses.

Update cloudflare-sg to allow use of AWS v5

Changed

• Move cloudflare/ips into cloudflare-sg to get AWS updated

allow AWS provider version 5

Added

• Added support for AWS provider version 5 in all modules except vpc. (The vpc module uses the vpc parameter, which is deprecated in version 4 and removed from version 5.)

Cloudtrail access key and deprecation

Added

• Optionally add an access key for the Cloudtrail bucket user in the cloudtrail module
• Added deprecation notice for cloudtrail module

fixed a syntax error

Fixed

• Fixed a syntax error in a variable description

add IPv6 support to asg and alb modules

Added

• Added enable_ipv6 inputs to the asg and alb modules.
  • alb: Changes ip_address_type to "dualstack".
  • asg: Sets ipv6_address_count to 1.

Fix vpc route plan issue

Fixed

• In vpc module, change aws_route.private_ipv6 to use egress_only_gateway_id rather than gateway_id. This should resolve an issue where every plan wants to remove an egress_only_gateway_id value and add a gateway_id value.

Add IPv6 support

Added

• Added new outputs to vpc module: ipv6_association_id, ipv6_cidr_block
• Added new input to vpc module: ipv6_enable, which controls the following:
  • Optionally assign IPv6 CIDR blocks to VPC and subnets
  • Optionally add an IPv6 route to the public internet gateway routing table.
  • Optionally add an egress-only internet gateway and IPv6 route for egress traffic.
• Added IPv6 support to the cloudflare-sg module

Enable forcing an ECR repo to be deleted

Added

• Enable forcing an ECR repo to be deleted even if it contains images

Fixed

• Fix a typo in the aws/ecr readme file