v3.0.0

[3.0.0] - 2024-06-05

Added

• Added support for scheduling of Neptune and DocumentDB clusters
• Added support for scheduling of ASG through the automatic creation of Scheduled Scaling Rules from configured schedules
• Added optional Operational Insights Dashboard to CloudWatch for monitoring and insights into solution performance
• Added support for using multiple EC2 maintenance windows with a single schedule
• Added ability to specify KMS keys that Instance Scheduler should be granted permissions to use when starting
  EC2 instances with encrypted EBS volumes

Changed

• Separated "Scheduled Services" parameter into individual enabled/disabled parameters for each supported service
• Upgrade Python runtime to 3.11
• Extensive refactoring to internal code to improve code quality and testability
• CloudWatch metrics feature renamed to "Per Schedule Metrics" and integrated with new Operational Insights Dashboard
• DynamoDB Deletion Protection now enabled by default on solution DynamoDB tables.
• Refactored maintenance window dynamodb table to be more cost-efficient at scale
• Updated schedule logs to include SchedulingDecision entries for all decisions made by the EC2/RDS schedulers.
• Scheduler CLI will now error when attempting to overwrite schedules managed by CloudFormation

Removed

• Configuration settings from CloudFormation parameters no longer duplicated in DynamoDB
• Remove deprecated "overwrite" Schedule flag (distinct from still-supported "override" flag)
• Cloudwatch Metrics feature replaced with Operational Monitoring

Fixed

• Fixed deployment error in China partition, introduced in v1.5.0
• Fixed bug where CloudFormation Schedules used UTC timezone if not specified in template (instead of stack default)
• Fixed bug that would cause the scheduling request handler lambda would hang when trying to scheduler more than 50 RDS instances in the same region
• Fixed bug that would sometimes cause the CFN schedule custom resource to error when many schedules were deployed in parallel
• Fixed bug that would cause spoke stacks to not be correctly deregistered from the hub stack when undeployed
• Fixed bug in cli describe_schedule_usage command that would incorrectly estimate the behavior of schedules using nth weekday expressions
• Fixed bug that would cause schedules using monthday ranges of the format "n-31" to fail to load in months
  with less days then the end of the range (such as February)
• Fixed configured_in_stack property not being correctly applied to periods deployed by CloudFormation custom resource.

Security

• Break monolith Lambda Function and permissions apart based on principle of least privilege
• Spoke stack trust permissions restricted to only specific lambda roles in the Hub account
• Allow KMS keys for scheduling encrypted EBS volumes to be specified directly on hub/spoke stacks in cloudformation
  rather needing to be added to scheduling roles manually
• Upgrade Requests to mitigate CVE-2024-35195

v1.5.6

[1.5.6] -- 2024-05-10

Security

• Upgrade werkzeug to mitigate CVE-2024-34069
• Upgrade jinja2 to mitigate CVE-2024-34064

v1.5.5

[1.5.5] -- 2024-04-12

Security

• Upgrade Black to mitigate CVE-2024-21503
• Upgrade idna to mitigate CVE-2024-3651

v1.5.4

[1.5.4] -- 2024-02-29

Security

• Upgrade cryptography to mitigate CVE-2024-26130, CVE-2023-50782, CVE-2024-0727, CVE-2023-49083
• Upgrade Jinja to mitigate CVE-2024-22195
• Upgrade Werkzeug to mitigate CVE-2023-46136
• Upgrade IP to mitigate CVE-2023-42282
• Remove ecdsa to mitigate CVE-2024-23342

v1.5.3

[1.5.3] - 2023-10-22

Security

• Upgrade @babel/traverse to mitigate CVE-2023-45133
• Upgrade urllib3 to mitigate CVE-2023-45803

v1.5.2

[1.5.2] - 2023-10-9

Security

• Upgrade cryptography to mitigate GHSA-v8gr-m533-ghj9 and GHSA-jm77-qphf-c4w8
• Upgrade urllib3 to mitigate CVE-2023-43804
• Upgrade certifi to mitigate CVE-2023-37920

v1.5.1

[1.5.1] - 2023-07-24

Changed

• Add a default start and stop tag
• Use EC2 API more efficiently when filtering EC2 instances for scheduling
• Use system tzdata instead of pytz
• Upgrade Python runtime to 3.10
• Package CLI as sdist and wheel
• Refactoring, type hinting, and improved testing
• Add projen for managing project configuration

Fixed

• Restore Python 3.8 support to CLI
• Fix bug starting EC2 instances at least 10 minutes before maintenance windows
• Fix bug targeting RDS instances that are part of an Aurora cluster for scheduling
• Fix bug where EC2 instances failing to start or stop cause an entire batch to fail to start or stop
• Fix bug where the instance type field on a period in a CloudFormation schedule has no effect
• Fix bug creating CloudWatch log streams when hub scheduling is disabled

Security

• Upgrade cryptography to mitigate CVE-2023-38325 and CVE-2023-2650
• Upgrade aws-cdk-lib to mitigate CVE-2023-35165
• Upgrade fast-xml-parser to mitigate CVE-2023-34104
• Upgrade requests to mitigate CVE-2023-32681
• Upgrade word-wrap to mitigate CVE-2023-26115
• Upgrade semver to mitigate CVE-2022-25883

v1.5.0

Added

• Enable solution to support deployment using organization id.
• Solution now deployable with CDK deploy
• Development/e2e testing pipeline included under source/infrastructure/pipeline capable of automatically deploying and testing solution.
• App Registry integration

Updated

• Boto Retry module could cause unintended high lambda utilization in case of API failures.
• Cross account scheduling no longer requires IAM role name but only account id.

Removed

• override_status flag on schedules has been deprecated

v1.4.2

[1.4.2] - 2023-01-11

Fixed

• Upgrade certifi to mitigate CVE-2022-23491.
• Updated issues in bandit scan.
• Updated the CDK version 2.x

v1.4.1

[1.4.1] - 2022-05-12

Fixed

• Replaced the DescribeLogStreams API call used for getting the next sequence token with PutLogEvents API call to reduce the lambda execution time #307