0.11.12

• Add initial GCP support with Terraform modules and examples (single_region and cross_project)
• Add permissions for scanning GCE and Artifact Registry images
• Support custom scanner and agent configuration
• Improve S3 lifecycle rules and enable KMS key rotation on RDS exports
• Fix API call Content-Type in ARM template
• Use scanner health check endpoint instead of custom service

0.11.11

• Adapt CopySnapshot policy to latest IAM changes requiring both source and destination statements
• Use t4g.medium instance type for Agentless ec2 instances
• Remove unnecessary ec2:CopyImage permission

0.11.10

Version 0.11.10 - 2025-02-23

• AWS: Add support for AutoScaling.
• Documentation improvements

Full Changelog: 0.11.9...0.11.10

0.11.9

Version 0.11.9 - 2025-02-14

• Azure: expose vnet_cidr parameter in main module

Full Changelog: 0.11.8...0.11.9

0.11.8

Version 0.11.8 - 2025-02-12

• Use Ubuntu 24.04 Minimal Server image on AWS and Azure
• Run unattended upgrade on deployment on AWS and Azure
• Remove semgrep dependency
• Fix delegate role assignment on Azure Resource Manager
• Fix hostname on Azure Resource Manager

0.11.7

Version 0.11.7 - 2024-12-10

• Add support for AWS ECR registry scanning
• Add support for scanning AWS RDS databases
• Add sensitive_data_scanning_rds_enabled parameter to opt-in to AWS RDS databases scanning
• Add S3 module to create a bucket used by the scanner to store temporary files (example: RDS exports)

0.11.6

• Prevent Datadog Agent from starting before its configuration has been changed.

0.11.5

• Scanner role delegations based on a account_id wildcard by default: variable account_roles is now optional and defaults to allowing all accounts. This was done to simplify the cross-account setups.
• Scanner role delegations can be limited to a specific list of organizational unit paths via the account_org_paths variable. This can be used to restrict the scanner to only scan resources in specific organizational units.

0.11.4

• Add parameters instance_type and instance_count to configure the auto-scaling group properties
• Fix allowing overriding conflicting parameters (hostname, api_key, site) from agent_configuration variable

0.11.3

• Add permissions to copy AMIs (ec2:CopyImage) to improve coverage of cross-account AMI scanning
• Fix permissions to be able to scan for volumes encrypted with a customer-managed key