You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
feat: Add support for aws_backup_logically_air_gapped_vault (#260)
* feat: Add support for aws_backup_logically_air_gapped_vault
This implementation adds support for AWS Backup Logically Air Gapped Vault, providing enhanced backup isolation and compliance capabilities.
Key features:
- New vault_type variable supporting "standard" and "logically_air_gapped"
- Mandatory retention configuration for air-gapped vaults
- Backward compatibility with existing standard vault configurations
- Comprehensive example configuration with compliance patterns
- Enhanced outputs for both vault types
Security enhancements:
- Built-in retention enforcement for compliance requirements
- Enhanced isolation for regulatory environments (SOX, PCI-DSS, HIPAA)
- Immutable retention policies once configured
Breaking changes: None - fully backward compatible
Closes#236
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* fix: resolve pre-commit and validation issues
- Remove invalid cross-variable validation blocks in variables.tf
- Add proper lifecycle precondition for air-gapped vault validation
- Remove unused local.vault_arn to fix TFLint warning
- Fix end-of-file issues in example files
- Apply proper terraform formatting
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* fix: address code review issues for air-gapped vault implementation
- Fix critical bug: change min_retention_days default from 2555 to 7 days
- Add sensitive flag to airgapped_vault_recovery_points output for security
- Improve vault reference logic readability with multi-line formatting
- Optimize validation logic using logical OR operator
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* fix: address code review issues for air-gapped vault implementation
- Fix documentation inconsistency in README.md (retention values)
- Rename airgapped_vault_valid to vault_retention_valid for clarity
- Add cross-validation between min/max retention days
- Improve vault_name logic readability
- Add validation to example variables for better error handling
- Update comments to reflect configurable compliance periods
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* fix: address critical code review issues for air-gapped vault implementation
- Move cross-validation logic from variable to lifecycle precondition to fix confusing error messages
- Add sensitive flag to recovery points output in example to prevent information disclosure
- Rename vault_retention_valid to airgapped_vault_requirements_met for clarity
- Optimize depends_on to only reference relevant vault type resources
- Document force_destroy limitations and AWS API constraints in README
- Add comprehensive validation documentation for air-gapped vault constraints
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* fix: address critical code review issues for air-gapped vault implementation
- Remove circular dependency in cross-variable validation from example
- Optimize dependency logic by replacing inefficient compact() with conditional dependencies
- Consolidate validation logic using unified logical OR approach
- Comment out hardcoded provider settings in example to prevent production issues
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
* feat: add AWS Backup Logically Air Gapped Vault support
- Add support for aws_backup_logically_air_gapped_vault resource
- New vault_type variable supporting "standard" and "logically_air_gapped"
- Mandatory retention configuration for air-gapped vaults
- Backward compatibility with existing configurations
- Comprehensive example with compliance patterns
- Enhanced outputs for both vault types
- Updated AWS provider requirement to >= 6.11.0
- Added comprehensive test suite for air-gapped vault functionality
- Updated documentation with new vault type feature
Closes#236
* fix: pre-commit cleanup - add missing newlines and update docs
* fix: update CI matrix to support AWS provider >= 6.11.0 for air gapped vault
- Update aws_provider_version matrix from [5.0.0, 5.70.0] to [6.11.0, 6.70.0]
- Add logically_air_gapped_vault example to validation matrix
- Update documentation via terraform-docs
- Fix CI failures with unsupported resource in older AWS provider versions
* fix: resolve CI failures and pre-commit issues
- Update AWS provider versions in CI matrix from 6.70.0 to 6.13.0 (latest available)
- Fix terraform-docs generated documentation and remove duplicate sections
- All pre-commit hooks now pass cleanly
- Terraform validation will work with supported provider versions
---------
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
Co-authored-by: Luis M. Gallardo D. <lgallard@users.noreply.github.com>
0 commit comments