Merge pull request #112 from aws-solutions/release/v3.3.4

release v3.3.4

.github/ISSUE_TEMPLATE/bug_report.md

@@ -22,7 +22,7 @@ assignees: ""
 
 - [ ] Version: [e.g. v1.0.0]
 
-To get the version of the solution, you can look at the description of the created CloudFormation stack. For example, "_(SO0009) - The AWS CloudFormation template for deployment of the aws-centralized-logging. Version v1.0.0_". You can also find the version from [releases](https://github.com/aws-solutions/aws-centralized-logging/releases)
+To get the version of the solution, you can look at the description of the created CloudFormation stack. For example, "_(SO0058) - The AWS CloudFormation template. Version v1.0.0_".
 
 - [ ] Region: [e.g. us-east-1]
 - [ ] Was the solution modified from the version published on this repository?

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [3.3.4] - 2024-04
+
+### Fixed
+- Upgrade webpack-dev-middleware to mitigate CVE-2024-29180
 
 ## [3.3.3] - 2023-10
 

NOTICE.txt

@@ -1,6 +1,10 @@
-Network Orchestration for AWS Transit Gateway
-
+network-orchestration-for-aws-transit-gateway
 Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+Licensed under the Apache License Version 2.0 (the "License"). You may not use this file except
+in compliance with the License. A copy of the License is located at http://www.apache.org/licenses/
+or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, express or implied. See the License for the
+specific language governing permissions and limitations under the License.
 
 **********************
 THIRD PARTY COMPONENTS
@@ -39,7 +43,9 @@ web-vitals under Apache-2.0
 @testing-library/user-event under MIT
 @types/jest under MIT
 mnth under MIT
+webpack-dev-middleware under MIT
 nanoid under MIT
+minimist under MIT
 babel-jest under MIT
 msw under MIT
 renamer under MIT
@@ -98,6 +104,18 @@ isort                                    MIT License
 jmespath                                 MIT License
 jschema-to-python                        MIT License
 jsondiff                                 MIT License
+mypy-boto3-cloudformation                MIT License
+mypy-boto3-dynamodb                      MIT License
+mypy-boto3-ec2                           MIT License
+mypy-boto3-lambda                        MIT License
+mypy-boto3-logs                          MIT License
+mypy-boto3-rds                           MIT License
+mypy-boto3-s3                            MIT License
+mypy-boto3-sns                           MIT License
+mypy-boto3-sqs                           MIT License
+mypy-boto3-stepfunctions                 MIT License
+mypy-boto3-sts                           MIT License
+
 jsonpatch                                BSD License
 jsonpickle                               BSD License
 jsonpointer                              BSD License

README.md

@@ -180,9 +180,9 @@ Network Orchestration for AWS Transit Gateway solution consists of:
 
 See license [here](./LICENSE.txt).
 
-## Anonymized data collection
+## Collection of operational metrics
 
-This solution includes an option to send anonymized operational metrics to AWS. We use this data to better understand how customers use this solution and related services and products. For more information, including how to disable this capability, please see the [implementation guide](https://docs.aws.amazon.com/solutions/latest/network-orchestration-aws-transit-gateway/anonymized-data-collection.html).
+This solution includes an option to send anonymized operational metrics to AWS. We use this data to better understand how customers use this solution and related services and products. For more information, including how to disable this capability, please see the [implementation guide](https://docs.aws.amazon.com/solutions/latest/network-orchestration-aws-transit-gateway/reference.html).
 
 ---
 

deployment/manifest-generator/package.json

@@ -1,12 +1,15 @@
 {
     "name": "manifest-generator",
-    "version": "0.0.0",
+    "version": "3.3.4",
+    "license": "Apache-2.0",
+    "author": {
+        "name": "Amazon Web Services",
+        "url": "https://aws.amazon.com/solutions",
+        "organization": true
+    },
     "private": true,
     "description": "Helper utility to create web site manifest for deployment",
     "main": "app.js",
-    "author": {
-        "name": "aws-solutions-builder"
-    },
     "dependencies": {
         "minimist": "*"
     }

source/cognito-trigger/package.json

@@ -1,7 +1,12 @@
 {
   "name": "cognito-trigger",
-  "version": "3.3.3",
+  "version": "3.3.4",
   "description": "Triggered when a new user is confirmed in the user pool to allow for custom actions to be taken",
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com/solutions",
+    "organization": true
+  },
   "main": "index.js",
   "dependencies": {
     "@aws-sdk/client-cognito-identity-provider": "^3.102.0",

source/lambda/tgw_peering_attachment/lib/tgw_peering_helper.py

@@ -27,7 +27,7 @@ def validate_tag(event: dict):
     """
     logger.debug("validating tgw tag value")
     # pylint:disable=line-too-long
-    tgw_peer_regex = r"^tgw-[0-9a-z]{17}_(us(-gov)?|ap|ca|cn|eu|sa)-(central|[(north|south)?(east|west)?]+)-\d$"
+    tgw_peer_regex = r"^tgw-[0-9a-z]{17}_(us(-gov)?|ap|ca|cn|eu|sa)-(central|north|(north(?:east|west))|south|south(?:east|west)|east|west)-\d+$"
     peers = event["detail"]["tags"][environ.get("TGW_PEERING_TAG")]
     if peers == "":
         raise ValueError("EMPTY_TAG")