v0.7

Enhancements

• Clarify that Amazon ECS Exec Checker doesn't support shared VPC subnets (#29)
• Permission checks related to KMS now use specific KMS key ARN (#33, #34)

Bug Fixes

• Fix broken output when there is neither EC2 instance role nor ECS task role configured (#30)
• Support using MFA devices (#28)
• Fix "PrivateLink check" when target ECS task is on EC2 (4e067b2)

Acknowledgement

Thank you @hi1280, @rectalogic and @grimm26 for the contributions!

v0.6

Enhancements

• Support using MFA devices (#28)

Acknowledgement

Thank you @deleugpn for the request and for testing it out!

v0.5

Enhancements

• Add new check as a red item for checking the readonlyRootFilesystem flag (#24)

Bug Fixes

• Respect overridden task role for the task role permission checks (#23)

v0.4

Enhancements

• Add new check as a yellow item for initProcessEnabled (#17)
• Add new check as a red item for ensuring the ECS task is in RUNNING status (#19)
• Show lastStartedAt in the managed agent's status for debugging (#20)

Bug Fixes

• Fix typos in README (#14)

Acknowledgments

Thank you @erjanmx for the contribution!

v0.3

Enhancements

• Support assumed IAM roles to run the "Can I ExecuteCommand?" check (#12, #10)
• Show an error message when the AWS region parameter is missing (#13)

Acknowledgments

Thank you @sindrig for the contributions!

v0.2

Enhancements

• Task existence check (#8)
• The "Can I ExecuteCommand?" check now also checks to ensure the IAM user/role cannot call ssm:StartSession from the security perspevtive (#7), see also its background at #1

Bug Fixes

• Make the shebang work (#9)
• The "Can I ExecuteCommand?" check now checks on task instead of cluster (#6)
• The version number of AWS CLI v1 is now printed in the right place (#5)

Acknowledgments

Thank you @fujiwara and @Anorlondo448 for the contributions!

Initial release

v0.1

Initial import