Additional Debugging Output

What's Changed

Added more log output to confirm/refute theory that tags are not being fetched properly due to concurrency issues

Full Changelog: v5.1.0...v5.1.1

Small feature

What's Changed

• Add support for InstanceProfile tags by @viraptor in #30

Full Changelog: v5.0.1...v5.1.0

BUGFIX: force use of us-east-1 for resourcegroupstagging operations

What's Changed

• Work around the resourcegroupstaggingapi being broken if called outside us-east-1 by @andrewjhumphrey in #29

Full Changelog: v5.0.0...v5.0.1

BUGFIX: sort lists of policies, groups and users

What's Changed

Breaking Change: We now sort the order of lists of policies, groups and users. This will likely cause drift builds to fail.

• AWS is changing return order in API calls. by @andrewjhumphrey in #28

Full Changelog: v4.1.1...v5.0.0

BUGFIX: No longer crash when IAM GetRole api call fails.

What's Changed

• Ignoring errors is a bad idea by @andrewjhumphrey in #27

Full Changelog: v4.1.0...v4.1.1

Support for linux-arm64

What's Changed

• Add linux-arm64 build target by @orien in #25

New Contributors

• @orien made their first contribution in #25

Full Changelog: v4.0.0...v4.1.0

Massive Performance Increase

What's Changed

• Batch tag operations by @viraptor in #24
• Fix rebuilding using make by @viraptor in #23
• Breaking Change: iamy now requires the tag:GetResources permission to allow it to efficiently fetch tags on roles and policies

New Contributors

• @viraptor made their first contribution in #24

Full Changelog: v3.3.0...v4.0.0

Bugfix: tags on policies were not honoured

Bugfix: tags on policies were not honoured
New Platform: freebsd amd64 (Thanks Tim!)

iamy has a feature that lets you either explicitly include or exclude resources that otherwise wouldn't be based on their naming.
Sadly this didn't work for managed policies. It does now. This is unlikely to cause drift unless folks have explicitly worked around the bug somehow.

What's Changed

• Add freebsd-amd64 build target by @tehpeh in #21
• Check policy tags for ignore/include by @andrewjhumphrey in #22

New Contributors

• @tehpeh made their first contribution in #21

Full Changelog: v3.2.1...v3.3.0

Bugfix: fetch MaxSessionDuration during push

Bugfix: Fetch MaxSessionDuration during push.

iamy has an optimisation that skips fetch role descriptions when unneeded we also fetch max session durations in the same function.
This is a quick bugfix to fix the drift. The correct fix (coming in a future PR) is to either rewrite the fetch functions to separate description fetching from maxsessionduration fetching, or remove the plumbing for the skip optimisation.

New features: --skip-path-prefix, support for MaxSessionDuration

New feature: --skip-path-prefix

Add new flag to allow us to skip IAM resources that start with a specified path.
Motivated by AWS SSO and it's creation of roles with the path /aws-reserved/ but no useful tags.

New feature: support for MaxSessionDuration

Add support for specifying MaxSessionDuration on a role