Release Notes¶

v1.2.1 (2026-06-15)¶

Version bumped to align with the rest of the provisioner suite (s3, vpc, sec all at 1.2.1)
No functional changes

None. Fully backward compatible with all 1.2.0 configurations and commands.

urllib3 pinned to >=2.7.0 - resolves CVE findings in the Python dependency chain
perl-base upgraded to latest available Debian patch in python:3.13-slim base image

Example configuration files now bundled inside the Docker image at /app/examples/configs/. Three globalbank examples covering direct VPC resolution (3-tier override), SSM VPC resolution (2-tier), and SSM VPC resolution (3-tier). Extract with:

docker run --rm \
  -v $(pwd)/sg/configs:/app/configs \
  --entrypoint cp \
  sg-provisioner:latest \
  -r /app/examples/configs/. /app/configs/

Added Prerequisites and Installation section to documentation covering working directory setup, documentation extraction, and example config extraction

License validation fix — corrected ProductSKU in AWS Marketplace License Manager integration to use Product ID (prod-kytp6kp7i5cnw) instead of product code

Initial release of the SG Provisioner Tool.

Scenario-based provisioning — 9 pre-built scenarios for common architectures
- 3-tier-web (PostgreSQL), 3-tier-rds-postgresql, 3-tier-rds-mysql
- 3-tier-redshift, 3-tier-oracle, 3-tier-sqlserver, 3-tier-documentdb
- 2-tier-web, 2-tier-rds-postgresql
Override system — port overrides, additional ingress/egress rules per tier
Workload discriminator — deploy multiple SG sets in the same environment
CloudFormation generation — cross-tier references via standalone ingress/egress resources
VPC integration — resolve VPC ID from Parameter Store or direct
Parameter Store storage — SG IDs stored at /sg/{name}/{tier}/SecurityGroupId
12 CLI actions:
- validate-config, list-scenarios, show-scenario
- create-policy, create-prov-template, validate-prov-template
- create-review-report
- test-deploy, create-security-groups, delete-security-groups
- show-changes, check-drift
Pre-deployment review report — HTML with override highlighting (amber/green badges)
Post-deployment report — CONFIDENTIAL HTML with real SG IDs
IAM policy generation — least-privilege with split SSM permissions
Dry-run mode — preview operations without making changes
AWS Marketplace license validation