Release: 1.15.0

Author: AWS

README.md

@@ -94,7 +94,6 @@ As of version 1.6.0, AFT collects anonymous operational metrics to help AWS impr
 |------|------|
 | [aws_partition.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/partition) | data source |
 | [aws_service.home_region_validation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/service) | data source |
-| [aws_ssm_parameters_by_path.servicecatalog_regional_data](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ssm_parameters_by_path) | data source |
 | [local_file.python_version](https://registry.terraform.io/providers/hashicorp/local/latest/docs/data-sources/file) | data source |
 | [local_file.version](https://registry.terraform.io/providers/hashicorp/local/latest/docs/data-sources/file) | data source |
 
@@ -109,6 +108,7 @@ As of version 1.6.0, AFT collects anonymous operational metrics to help AWS impr
 | <a name="input_account_request_repo_branch"></a> [account\_request\_repo\_branch](#input\_account\_request\_repo\_branch) | Branch to source account request repo from | `string` | `"main"` | no |
 | <a name="input_account_request_repo_name"></a> [account\_request\_repo\_name](#input\_account\_request\_repo\_name) | Repository name for the account request files. For non-CodeCommit repos, name should be in the format of Org/Repo | `string` | `"aft-account-request"` | no |
 | <a name="input_aft_backend_bucket_access_logs_object_expiration_days"></a> [aft\_backend\_bucket\_access\_logs\_object\_expiration\_days](#input\_aft\_backend\_bucket\_access\_logs\_object\_expiration\_days) | Amount of days to keep the objects stored in the access logs bucket for AFT backend buckets | `number` | `365` | no |
+| <a name="input_aft_codebuild_compute_type"></a> [aft\_codebuild\_compute\_type](#input\_aft\_codebuild\_compute\_type) | The CodeBuild compute type that build projects will use. | `string` | `"BUILD_GENERAL1_MEDIUM"` | no |
 | <a name="input_aft_customer_private_subnets"></a> [aft\_customer\_private\_subnets](#input\_aft\_customer\_private\_subnets) | A list of private subnets to deploy AFT resources in, if customer is providing an existing VPC. Only supported for new deployments. | `list(string)` | `[]` | no |
 | <a name="input_aft_customer_vpc_id"></a> [aft\_customer\_vpc\_id](#input\_aft\_customer\_vpc\_id) | The VPC ID to deploy AFT resources in, if customer is providing an existing VPC. Only supported for new deployments. | `string` | `null` | no |
 | <a name="input_aft_enable_vpc"></a> [aft\_enable\_vpc](#input\_aft\_enable\_vpc) | Flag turning use of VPC on/off for AFT | `bool` | `true` | no |
@@ -127,6 +127,7 @@ As of version 1.6.0, AFT collects anonymous operational metrics to help AWS impr
 | <a name="input_aft_vpc_public_subnet_02_cidr"></a> [aft\_vpc\_public\_subnet\_02\_cidr](#input\_aft\_vpc\_public\_subnet\_02\_cidr) | CIDR Block to allocate to the Public Subnet 02 | `string` | `"192.168.2.128/25"` | no |
 | <a name="input_audit_account_id"></a> [audit\_account\_id](#input\_audit\_account\_id) | Audit Account Id | `string` | n/a | yes |
 | <a name="input_backup_recovery_point_retention"></a> [backup\_recovery\_point\_retention](#input\_backup\_recovery\_point\_retention) | Number of days to keep backup recovery points in AFT DynamoDB tables. Default = Never Expire | `number` | `null` | no |
+| <a name="input_cloudwatch_log_group_enable_cmk_encryption"></a> [cloudwatch\_log\_group\_enable\_cmk\_encryption](#input\_cloudwatch\_log\_group\_enable\_cmk\_encryption) | Flag toggling CloudWatch Log Groups encryption by using the AFT customer managed key stored in KMS. Additional charges apply. Otherwise, logs will use CloudWatch managed server-side encryption. | `bool` | `false` | no |
 | <a name="input_cloudwatch_log_group_retention"></a> [cloudwatch\_log\_group\_retention](#input\_cloudwatch\_log\_group\_retention) | Amount of days to keep CloudWatch Log Groups for Lambda functions. 0 = Never Expire | `string` | `"0"` | no |
 | <a name="input_concurrent_account_factory_actions"></a> [concurrent\_account\_factory\_actions](#input\_concurrent\_account\_factory\_actions) | Maximum number of accounts that can be provisioned in parallel. | `number` | `5` | no |
 | <a name="input_ct_home_region"></a> [ct\_home\_region](#input\_ct\_home\_region) | The region from which this module will be executed. This MUST be the same region as Control Tower is deployed. | `string` | n/a | yes |
@@ -139,6 +140,7 @@ As of version 1.6.0, AFT collects anonymous operational metrics to help AWS impr
 | <a name="input_log_archive_account_id"></a> [log\_archive\_account\_id](#input\_log\_archive\_account\_id) | Log Archive Account Id | `string` | n/a | yes |
 | <a name="input_log_archive_bucket_object_expiration_days"></a> [log\_archive\_bucket\_object\_expiration\_days](#input\_log\_archive\_bucket\_object\_expiration\_days) | Amount of days to keep the objects stored in the AFT logging bucket | `number` | `365` | no |
 | <a name="input_maximum_concurrent_customizations"></a> [maximum\_concurrent\_customizations](#input\_maximum\_concurrent\_customizations) | Maximum number of customizations/pipelines to run at once | `number` | `5` | no |
+| <a name="input_sns_topic_enable_cmk_encryption"></a> [sns\_topic\_enable\_cmk\_encryption](#input\_sns\_topic\_enable\_cmk\_encryption) | Flag toggling SNS topics encryption by using the AFT Customer managed key stored in KMS. Additional charges apply. Otherwise the SNS topics are encrypted using the AWS-managed KMS key. | `bool` | `false` | no |
 | <a name="input_tags"></a> [tags](#input\_tags) | Map of tags to apply to resources deployed by AFT. | `map(any)` | `null` | no |
 | <a name="input_terraform_api_endpoint"></a> [terraform\_api\_endpoint](#input\_terraform\_api\_endpoint) | API Endpoint for Terraform. Must be in the format of https://xxx.xxx. | `string` | `"https://app.terraform.io/api/v2/"` | no |
 | <a name="input_terraform_distribution"></a> [terraform\_distribution](#input\_terraform\_distribution) | Terraform distribution being used for AFT - valid values are oss, tfc, or tfe | `string` | `"oss"` | no |
@@ -159,10 +161,34 @@ As of version 1.6.0, AFT collects anonymous operational metrics to help AWS impr
 | <a name="output_account_provisioning_customizations_repo_name"></a> [account\_provisioning\_customizations\_repo\_name](#output\_account\_provisioning\_customizations\_repo\_name) | n/a |
 | <a name="output_account_request_repo_branch"></a> [account\_request\_repo\_branch](#output\_account\_request\_repo\_branch) | n/a |
 | <a name="output_account_request_repo_name"></a> [account\_request\_repo\_name](#output\_account\_request\_repo\_name) | n/a |
+| <a name="output_aft_access_logs_primary_backend_bucket_id"></a> [aft\_access\_logs\_primary\_backend\_bucket\_id](#output\_aft\_access\_logs\_primary\_backend\_bucket\_id) | n/a |
+| <a name="output_aft_account_provisioning_framework_step_function_arn"></a> [aft\_account\_provisioning\_framework\_step\_function\_arn](#output\_aft\_account\_provisioning\_framework\_step\_function\_arn) | n/a |
+| <a name="output_aft_admin_role_arn"></a> [aft\_admin\_role\_arn](#output\_aft\_admin\_role\_arn) | n/a |
+| <a name="output_aft_audit_exec_role_arn"></a> [aft\_audit\_exec\_role\_arn](#output\_aft\_audit\_exec\_role\_arn) | n/a |
+| <a name="output_aft_backend_lock_table_name"></a> [aft\_backend\_lock\_table\_name](#output\_aft\_backend\_lock\_table\_name) | n/a |
+| <a name="output_aft_backend_primary_kms_key_alias_arn"></a> [aft\_backend\_primary\_kms\_key\_alias\_arn](#output\_aft\_backend\_primary\_kms\_key\_alias\_arn) | n/a |
+| <a name="output_aft_backend_primary_kms_key_id"></a> [aft\_backend\_primary\_kms\_key\_id](#output\_aft\_backend\_primary\_kms\_key\_id) | n/a |
+| <a name="output_aft_backend_secondary_kms_key_alias_arn"></a> [aft\_backend\_secondary\_kms\_key\_alias\_arn](#output\_aft\_backend\_secondary\_kms\_key\_alias\_arn) | n/a |
+| <a name="output_aft_backend_secondary_kms_key_id"></a> [aft\_backend\_secondary\_kms\_key\_id](#output\_aft\_backend\_secondary\_kms\_key\_id) | n/a |
+| <a name="output_aft_controltower_events_table_name"></a> [aft\_controltower\_events\_table\_name](#output\_aft\_controltower\_events\_table\_name) | n/a |
+| <a name="output_aft_ct_management_exec_role_arn"></a> [aft\_ct\_management\_exec\_role\_arn](#output\_aft\_ct\_management\_exec\_role\_arn) | n/a |
+| <a name="output_aft_exec_role_arn"></a> [aft\_exec\_role\_arn](#output\_aft\_exec\_role\_arn) | n/a |
+| <a name="output_aft_failure_sns_topic_arn"></a> [aft\_failure\_sns\_topic\_arn](#output\_aft\_failure\_sns\_topic\_arn) | n/a |
 | <a name="output_aft_feature_cloudtrail_data_events"></a> [aft\_feature\_cloudtrail\_data\_events](#output\_aft\_feature\_cloudtrail\_data\_events) | n/a |
 | <a name="output_aft_feature_delete_default_vpcs_enabled"></a> [aft\_feature\_delete\_default\_vpcs\_enabled](#output\_aft\_feature\_delete\_default\_vpcs\_enabled) | n/a |
 | <a name="output_aft_feature_enterprise_support"></a> [aft\_feature\_enterprise\_support](#output\_aft\_feature\_enterprise\_support) | n/a |
+| <a name="output_aft_features_step_function_arn"></a> [aft\_features\_step\_function\_arn](#output\_aft\_features\_step\_function\_arn) | n/a |
+| <a name="output_aft_invoke_customizations_step_function_arn"></a> [aft\_invoke\_customizations\_step\_function\_arn](#output\_aft\_invoke\_customizations\_step\_function\_arn) | n/a |
+| <a name="output_aft_kms_key_alias_arn"></a> [aft\_kms\_key\_alias\_arn](#output\_aft\_kms\_key\_alias\_arn) | n/a |
+| <a name="output_aft_kms_key_id"></a> [aft\_kms\_key\_id](#output\_aft\_kms\_key\_id) | n/a |
+| <a name="output_aft_log_archive_exec_role_arn"></a> [aft\_log\_archive\_exec\_role\_arn](#output\_aft\_log\_archive\_exec\_role\_arn) | n/a |
 | <a name="output_aft_management_account_id"></a> [aft\_management\_account\_id](#output\_aft\_management\_account\_id) | n/a |
+| <a name="output_aft_primary_backend_bucket_id"></a> [aft\_primary\_backend\_bucket\_id](#output\_aft\_primary\_backend\_bucket\_id) | n/a |
+| <a name="output_aft_request_audit_table_name"></a> [aft\_request\_audit\_table\_name](#output\_aft\_request\_audit\_table\_name) | n/a |
+| <a name="output_aft_request_metadata_table_name"></a> [aft\_request\_metadata\_table\_name](#output\_aft\_request\_metadata\_table\_name) | n/a |
+| <a name="output_aft_request_table_name"></a> [aft\_request\_table\_name](#output\_aft\_request\_table\_name) | n/a |
+| <a name="output_aft_secondary_backend_bucket_id"></a> [aft\_secondary\_backend\_bucket\_id](#output\_aft\_secondary\_backend\_bucket\_id) | n/a |
+| <a name="output_aft_sns_topic_arn"></a> [aft\_sns\_topic\_arn](#output\_aft\_sns\_topic\_arn) | n/a |
 | <a name="output_aft_vpc_cidr"></a> [aft\_vpc\_cidr](#output\_aft\_vpc\_cidr) | n/a |
 | <a name="output_aft_vpc_private_subnet_01_cidr"></a> [aft\_vpc\_private\_subnet\_01\_cidr](#output\_aft\_vpc\_private\_subnet\_01\_cidr) | n/a |
 | <a name="output_aft_vpc_private_subnet_02_cidr"></a> [aft\_vpc\_private\_subnet\_02\_cidr](#output\_aft\_vpc\_private\_subnet\_02\_cidr) | n/a |

VERSION

@@ -1 +1 @@
-1.14.1
+1.15.0

data.tf

@@ -9,11 +9,6 @@ data "local_file" "python_version" {
   filename = "${path.module}/PYTHON_VERSION"
 }
 
-data "aws_ssm_parameters_by_path" "servicecatalog_regional_data" {
-  count = data.aws_partition.current.partition == "aws" ? 1 : 0
-  path  = "/aws/service/global-infrastructure/services/servicecatalog/regions"
-}
-
 data "aws_service" "home_region_validation" {
   service_id = "controltower"
   lifecycle {