add v3.0.5 release candidate to github (#269)

Author: yq-yang-qin

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.5] - 2024-09-17
+
+### Security
+
+- Vulnerability patches to address CVE-2024-45296, CVE-2024-43788, CVE-2024-4067, and CVE-2024-43799.
+
 ## [3.0.4] - 2024-08-20
 
 ### Security

NOTICE.txt

@@ -57,6 +57,7 @@ aws-cdk-lib under the Apache License Version 2.0
 aws-cdk.asset-awscli-v1 under the Apache License Version 2.0
 aws-cdk.asset-kubectl-v20 under the Apache License Version 2.0
 aws-cdk.asset-node-proxy-agent-v6 under the Apache License Version 2.0
+aws-cdk.cloud-assembly-schema under the Apache License Version 2.0
 blessed under the Massachusetts Institute of Technology license
 cattrs under the Massachusetts Institute of Technology license
 cffi under the Massachusetts Institute of Technology license

README.md

@@ -356,6 +356,20 @@ Example body for uploading to a new PT1H, P1D, or P1M dataset with deleted field
 6. The Glue job can be monitored in the solution's UI or the AWS Console
 ---
 
+## Local development for web console
+
+* Step 1: Deploy the solution.
+* Step 2: Open the URL shown in the `UserInterface` output of the base stack and login.
+* Step 3: Open the Javascript console of your web browser and copy the runtime config values printed by `main.js` into your local `src/website/public/runtimeConfig.json`
+* Step 4: Specify `http://localhost:8080` for `COGNITO_CALLBACK_URL` in your local `src/website/public/runtimeConfig.json`
+* Step 5: Specify `http://localhost:8080` for `COGNITO_LOGOUT_URL` in your local `src/website/public/runtimeConfig.json`
+* Step 6: Open Amazon Cognito console, select the corresponding User pool, click the App integration tab, select application details in the App client list, edit Hosted UI, and set a new URL: http://localhost:8080 into Allowed callback URLs.
+* Step 7: Run `npm start run` from `src/website/`
+```
+cd src/website
+npm run start
+```
+* Step 8: Open http://localhost:8080
 
 # Troubleshooting
 

solution-manifest.yaml

@@ -1,7 +1,7 @@
 ---
 id: SO0222 # Solution Id
 name: amazon-marketing-cloud-uploader-from-aws # trademarked name
-version: v3.0.4 # current version of the solution. Used to verify template headers
+version: v3.0.5 # current version of the solution. Used to verify template headers
 cloudformation_templates: # This list should match with AWS CloudFormation templates section of IG
   - template: amazon-marketing-cloud-uploader-from-aws.template
     main_template: true

source/amc_uploader/setup.py

@@ -1,16 +1,5 @@
-# #####################################################################################################################
-#  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.                                                 #
-#                                                                                                                     #
-#  Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance     #
-#  with the License. You may obtain a copy of the License at                                                          #
-#                                                                                                                     #
-#   http://www.apache.org/licenses/LICENSE-2.0                                                                        #
-#                                                                                                                     #
-#  Unless required by applicable law or agreed to in writing, software distributed under the License is distributed   #
-#  on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for  #
-#  the specific language governing permissions and limitations under the License.                                     #
-# #####################################################################################################################
-
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
 
 import setuptools
 

source/cognito_hosted_ui_resource/cognito_hosted_ui_resource.py

@@ -1,3 +1,5 @@
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
 
 import os
 import json

source/share/tasks.py

@@ -268,7 +268,7 @@ def process_request(self, **kwargs):
             "Authorization": f'Bearer {kwargs["access_token"]}',
             "Content-Type": "application/json",
             "x-amzn-service-name": "amazon-marketing-cloud-uploader-from-aws",
-            "x-amzn-service-version": "v3.0.4"
+            "x-amzn-service-version": "v3.0.5"
         }
 
         if kwargs.get("advertiser_id"):

source/website/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "amcufa",
-  "version": "3.0.4",
+  "version": "3.0.5",
   "private": true,
   "scripts": {
     "serve": "vue-cli-service serve",