New Feature: fmt command

New Feature: fmt command.

Rewrite all YAML files found in account directories in the same format that IAMY generates when performing a pull operation.

See #14 for more details.

BUGFIX: resources ending in account numbers are no longer skipped

Fixes

• resources ending in account numbers (e.g. elasticbeanstalk-us-east-1-123456789012 are no longer misidentified as cloudformation created by the heuristics and will no longer be ignored. This is a breaking change.

New features:

• Added --include-tagged command line flag to force the inclusion of a resource, regardless of other reasons for it be skipped.

New Feature: .iamy-flags file

Adds support for an .iamy-flags file.

This file can contain command line arguments that will be read and merged with args passed on the command line.

Minor Bug Fixes:

• Both --skip-cfn-tagged and --skip-tag= are bow supported for both push and pull commands.

Enable --skip-cfn-tagged for push and pull

Under the covers the push command does a pull to compare against.
We want to allow folks to control how cloudformation resources are excluded for this under the covers pull as well as explicit ones.

Support build tags in .iamy-version file

Previous version supported basic semver versioning in the .iamy-version file, this release updates that support to properly handle prerelease levels and build tags as well.

NOTE: This version requires the s3:GetBucketTagging priv for the first time, if you have been practicing LeastPrivilege policy development you will likely need to add this to your driftdetection CI pipelines.

More accurate identification of cloudformation managed resources

New option added --skip-tagged= Defaults to aws:cloudformation:stack-name intent is to more accurately exclude things created by cloudformation.

v2.4.1

No functional changes, documentation changes only.

Add support for .iamy-version

Initial release based on v2.3.1 from 99designs/iamy

Adds support for .iamy-version file.
If this file exists and contains something that looks like a sem ver it will exit if the version of iamy isn't sufficient. It also requires that build tags if present match.