Release Notes

Table of Contents

Version 1.2.1 (2026-06)

Documentation Fix

  • Removed internal development bypass flag reference (SKIP_LICENSE_VALIDATION) from the Application Architecture document. This flag is an internal development mechanism and should not appear in client-facing documentation.

Breaking Changes

None. Fully backward compatible with all 1.2.0 configurations and commands.

Version 1.2.0 (2026-06)

SSM Parameters Managed by CloudFormation

SSM parameters are now created as AWS::SSM::Parameter CloudFormation resources instead of being written programmatically. This means all SSM parameters are tracked within the stack and automatically deleted when the stack is torn down — no orphaned parameters.

Parameters published under /s3/{bucket_name}/:

  • BucketName — Name of the S3 bucket

  • BucketArn — ARN of the S3 bucket

  • VPCEndpointId — VPC Endpoint ID (when VPC integration is enabled)

Enriched Post-Deployment Report

The post-deployment HTML report now includes a full physical resource inventory sourced from describe_stack_resources. Each CloudFormation resource is rendered with its logical ID, resource type, and physical resource ID — giving operators a complete, auditable view of what was deployed.

Security Fixes

  • urllib3 pinned to >=2.7.0 across all provisioner images to address CVE findings

  • perl-base upgraded in the Docker base image (python:3.13-slim) to latest available Debian patch

Lambda Name Validation

Added pre-flight validation that checks the derived Lambda function name ({bucket_name}-stack-creator) against the AWS 64-character limit before attempting deployment. Clear error message guides the user to shorten bucket_name_override if needed.

Example Configs Baked into Image

6 sample configuration files are now shipped inside the Docker image at /app/examples/configs/ and can be extracted to the local working directory with a single command:

docker run --rm \
  -v $(pwd)/s3/configs:/app/configs \
  --entrypoint cp \
  s3-provisioner:latest \
  -r /app/examples/configs/. /app/configs/

Included configs cover all three deployment patterns:

  • Shared bucket with master solution (globalbank-prod-c001-us-west-1-s3.yaml)

  • Dedicated bucket for customer-churn (globalbank-prod-c001-us-west-1-customer-churn-s3.yaml)

  • Dedicated bucket for fraud-detection (globalbank-prod-c001-us-west-1-fraud-detection-s3.yaml)

  • Usage assumption files for all three cost estimation scenarios

Prerequisites & Installation Section

The README now includes a full Prerequisites & Installation section covering:

  • Requirements table (Docker, AWS CLI, AWS Account)

  • Working directory setup

  • Documentation extraction from image

  • Example config extraction from image

Updated Sample Reports

Sample HTML reports embedded in the documentation have been refreshed with latest real-world outputs and renamed for clarity:

  • sample-pre-deployment-report.html — Generated by create-prov-template

  • sample-post-deployment-report.html — Generated by create-bucket / prep-master (includes physical resource IDs)

  • sample-cost-report.html — Generated by cost-estimate

Bug Fix — YAML Aliases in CloudFormation Templates

Fixed a bug introduced in 1.1.x where shared tag dictionaries across multiple SSM parameter CFN resources caused yaml.dump to emit YAML aliases (*id001). CloudFormation rejects templates containing YAML aliases, causing test-deploy and deploy actions to fail with a ValidationError. Resolved by ensuring each resource receives its own independent tag dictionary.

Breaking Changes

None. All 1.1.x configurations and commands remain fully compatible.

Version 1.1.0 (2026-Q2)

Cost Estimation

New built-in cost estimation feature for S3 infrastructure. Calculate monthly and annual costs before deployment with region-specific pricing from the AWS Pricing API.

New Actions

  1. cost-traffic — Generate an editable usage assumptions file with default monthly values for storage, requests, data transfer, and VPC Endpoint traffic

  2. cost-estimate — Calculate a detailed cost breakdown with storage, request, transfer, and VPC Endpoint costs. Generates a professional HTML report

  3. cost-refresh-prices — Refresh the built-in pricing data from the AWS Pricing API across all standard AWS regions

Cost Estimation Features

  • Region-specific on-demand pricing for S3 storage, requests, data transfer, and VPC Endpoints

  • Pre-loaded pricing data ships with the Docker image (works offline)

  • Editable usage assumptions for scenario modeling

  • Professional HTML cost reports

  • Fallback to hardcoded rates if pricing data is unavailable

Supported Actions (22 total)

  1. validate-config - Validate YAML against schema

  2. create-policy - Generate IAM policy JSON

  3. create-prov-template - Generate CloudFormation template

  4. validate-prov-template - Validate generated template locally

  5. show-changes - Preview pending changes

  6. check-drift - Detect infrastructure drift

  7. test-deploy - Deploy with isolated test suffix

  8. create-bucket - Create S3 bucket via CloudFormation

  9. prep-master - Prepare master solution structure

  10. deploy-solution - Deploy ML solution folders

  11. deploy-folders - Clone folder structure

  12. upload-template - Upload template to S3

  13. gitkeep-full - Add .gitkeep to all folders

  14. gitkeep-none - Remove all .gitkeep files

  15. gitkeep-partial - Selective .gitkeep removal

  16. purge-bucket - Remove all .gitkeep from bucket

  17. delete-bucket - Delete bucket directly

  18. delete-cfn-stack - Delete CloudFormation stack

  19. tear-down - Complete infrastructure cleanup

  20. cost-traffic - Generate usage assumptions file

  21. cost-estimate - Calculate estimated monthly costs with HTML report

  22. cost-refresh-prices - Refresh resource pricing from AWS Pricing API

Version 1.0.0 (2026-04-01)

Initial Release

First production release of S3 Provisioner.

Core Features

Bucket Provisioning

  • Create S3 buckets via CloudFormation

  • Configure versioning (enabled/disabled)

  • Configure tags (system + custom)

  • VPC endpoint support

  • Automated bucket naming or custom override

Automated Lifecycle Policy Profiles

4 automated lifecycle policy profiles for ML workloads with cost optimization:

lifecycle_policy Configuration:

s3:
  lifecycle_policy: ml-optimized  # or compliance, development, none

Available Profiles:

  1. ml-optimized - Production ML workloads

    • Transitions: STANDARD → STANDARD_IA (30 days) → GLACIER (90 days)

    • Expiration: None (data retained indefinitely)

    • Cost savings: ~60-70%

    • Use case: Active ML pipelines with long-term data retention

  2. compliance - HIPAA/PCI regulated industries

    • Transitions: STANDARD → GLACIER (90 days)

    • Expiration: 2555 days (7 years)

    • Cost savings: ~70-80%

    • Use case: Regulated data with mandatory retention periods

  3. development - Dev/staging environments

    • Transitions: None

    • Expiration: 90 days

    • Cost savings: ~100% (data deleted after 90 days)

    • Use case: Temporary development/testing data

  4. none - No lifecycle rules (default)

    • Transitions: None

    • Expiration: None

    • Use case: Manual lifecycle management

Implementation:

  • Lifecycle rules automatically added to CloudFormation templates

  • Rules apply to solutions/ prefix

  • Default behavior: lifecycle_policy defaults to ‘none’ (no lifecycle rules)

Configuration Management

  • YAML-based configuration (client, environment, s3 sections)

  • Schema validation

  • IAM policy generation

  • CloudFormation template generation

Solution Deployment

  • Master solution folder structure

  • ML-optimized folder hierarchy (data/raw, curated, processed, inference)

  • Multiple solution support (customer-churn, demand-forecasting, fraud-detection)

  • Folder cloning from master template

GitKeep Management

  • Full .gitkeep file creation

  • Selective .gitkeep removal

  • Bucket-wide .gitkeep purge

Supported Actions (19)

  1. validate-config - Validate YAML against schema

  2. create-policy - Generate IAM policy JSON

  3. create-prov-template - Generate CloudFormation template

  4. validate-prov-template - Validate generated template locally (no AWS calls)

  5. show-changes - Preview pending changes via CloudFormation ChangeSet

  6. check-drift - Detect infrastructure drift against deployed stack

  7. test-deploy - Deploy with isolated test suffix for safe testing

  8. create-bucket - Create S3 bucket via CloudFormation (requires --force)

  9. prep-master - Prepare master solution structure (requires --force)

  10. deploy-solution - Deploy ML solution folders

  11. deploy-folders - Clone folder structure

  12. upload-template - Upload template to S3

  13. gitkeep-full - Add .gitkeep to all folders

  14. gitkeep-none - Remove all .gitkeep files

  15. gitkeep-partial - Selective .gitkeep removal

  16. purge-bucket - Remove all .gitkeep from bucket (requires --force)

  17. delete-bucket - Delete bucket directly (requires --force)

  18. delete-cfn-stack - Delete CloudFormation stack (requires --force)

  19. tear-down - Complete infrastructure cleanup (requires --force)

Security Features

  • Non-root container execution (s3user)

  • AWS Marketplace license validation

  • Secure credential handling (AWS profiles, environment variables, IAM roles)

  • Public access blocking by default

  • Comprehensive audit logging

Documentation

  • README.md - Quick start guide

  • USER_GUIDE.md - Complete command reference

  • CONFIGURATION.md - Configuration file reference

  • S3_FOLDERS.md - Complete folder hierarchy reference

  • GOVERNANCE_COMPLIANCE.md - Enterprise governance implementation guide

  • ML_LIFECYCLE_POLICIES.md - Lifecycle policy guidance

  • IAM_PERMISSIONS.md - Required AWS permissions

  • TROUBLESHOOTING.md - Common issues and solutions

  • SUPPORT.md - Support information

  • ROADMAP.md - Product roadmap

  • RELEASE_NOTES.md - Version history and changes

System Requirements

  • Docker 20.10 or later

  • AWS account with S3 and CloudFormation permissions

  • 512 MB RAM minimum

  • 1 GB disk space

AWS Regions Supported

All AWS commercial regions:

  • US East (N. Virginia, Ohio)

  • US West (N. California, Oregon)

  • Europe (Ireland, Frankfurt, London, Paris, Stockholm, Milan)

  • Asia Pacific (Mumbai, Seoul, Singapore, Sydney, Tokyo, Hong Kong, Osaka)

  • Canada (Central)

  • South America (São Paulo)

  • Middle East (Bahrain)

  • Africa (Cape Town)

Folder Structure Created

solutions/
  <solution-name>/
    data/
      raw/                    # Raw ingested data
      curated/               # Cleaned and validated data
      processed/             # Feature-engineered training data
      inference/             # Prediction results
    models/                  # Trained model artifacts
    notebooks/               # Jupyter notebooks
    artifacts/               # Training artifacts
    code/                    # Source code
    config/                  # Configuration files

Performance Metrics

  • Bucket creation: 2-5 seconds

  • Configuration validation: <1 second

  • Template generation: 1-2 seconds

  • Solution deployment: 5-10 seconds

Roadmap

For planned features and future releases, see Roadmap.

Breaking Changes

Version 1.2.0

  • No breaking changes. All v1.1.x configurations and commands remain compatible.

Version 1.1.0

  • No breaking changes. All v1.0.0 configurations and commands remain compatible.

Version 1.0.0

  • Initial release (no breaking changes)

Deprecation Notices

None.

Contributors

Axon Tech Labs - MLOps Infrastructure Suite Development Team

Contact: support@axontechlabs.com

Support

For support information, see Support.

License

Commercial license via AWS Marketplace subscription.

Last Updated: 2026-06-13

Copyright © 2025 Axon Tech Labs All rights reserved.

See LICENSE.txt for terms and conditions.