Releases: akamai/cli-terraform
Releases · akamai/cli-terraform
v2.2.0
2.2.0 (May 28, 2025)
FEATURES/ENHANCEMENTS:
-
Appsec
- Renamed the
clientIdentifier
field toclientIdentifiers
and changed the field type from a string to an array of strings. - Added
penaltyBoxDuration
andcounterType
to exported fields inside theakamai_appsec_rate_policy
resource.
- Renamed the
-
Identity and Access Management (IAM)
- Added the
client
subcommand to theexport-iam
command which exports terraform configuration files for an optionally provided API client. - Modified the
all
subcommand for theexport-iam
command to export configuration for a self API client.
- Added the
-
PAPI
- Added support for the new rule format
v2025-04-29
. - Added support for the additional
RDN
compliant fields insubject_rdns
undercustom_certificate_authorities
in the rule formats. - Added support for the new rule format
v2025-03-24
.
- Added support for the new rule format
BUG FIXES:
- EdgeKV
- Fixed the bug where the
namespace_name
field in theakamai_edgekv_group_items
resource was generated as a plain string
instead of a reference to the namespace name from theakamai_edgekv
resource.
- Fixed the bug where the
v2.1.0
2.1.0 (Apr 3, 2025)
FEATURES/ENHANCEMENTS:
-
General
- Migrated to Go
1.23.6
and adopted a semver-compliant Go directive.
- Migrated to Go
-
PAPI
- Added the
use_hostname_bucket
attribute to the exportedakamai_property
andakamai_property_bootstrap
resources. - Updated an export for a property configuration to include the
akamai_property_hostname_bucket
resource. - Added support for the new rule format
v2025-02-18
.
- Added the
BUG FIXES:
- General
- Fixed inserting escape sequences that do not use a backslash (#83).
v2.0.0
2.0.0 (Feb 5, 2025)
BREAKING CHANGES:
-
Removed deprecated commands:
create-domain
create-zone
create-appsec
create-property
create-cloudlets-policy< 10000 /code>
create-edgekv
create-edgeworker
create-iam
create-imaging
create-cps
-
Removed the
include
subcommand from theexport-property
command. -
Removed the
with-includes
flag from theexport-property
command. -
Removed the
schema
flag from theexport-property
,export-property-include
andexport-imaging
commands.
FEATURES/ENHANCEMENTS:
-
General
- Migrated to Go
1.22
. - Improved code by resolving issues reported by linter.
- Updated vulnerable dependencies.
- Logic responsible for excluding endpoints from retries is now configurable with the
AKAMAI_RETRY_EXCLUDED_ENDPOINTS
environment variable.
- Migrated to Go
-
IAM
- Added the
--only
option to thegroup
,role
, anduser
subcommands of theexport-iam
command. This option allows exporting only specific information.
- Added the
-
Logging
- Changed logger from
apex
toslog
.- Log output has not been changed.
- Changed logger from
-
PAPI
- Added support for the new rule format
v2025-01-13
. - Adjusted exported fields for current schema definition for the rule format
v2024-10-21
inside thegov_cloud
behaviour. - Added a property name in the error message.
- Introduced the
split-depth
flag for theexport-property
andexport-property-include
command. When used, each rule up to a specified nesting level will be generated in its own.tf
file. Rules with higher nesting levels will be placed in a file of their closest ancestor. All rules will be generated in a dedicatedrules
module.
- Added support for the new rule format
BUG FIXES:
-
General
- Fixed a problem with invisible output in the light background by converting all colors to the monochromatic representation.
-
AppSec
- Fixed issues with AAP/WAP terraform export
- Removed
hostnames
block fromvariables.tf
file - Modified
imports.tmpl
to import correct resources for AAP/WAP accounts - Renamed all references from
akamai_appsec_configuration.config
todata.akamai_appsec_configuration.config
for WAP/AAP accounts
v1.19.0
1.19.0 (Nov 21, 2024)
FEATURES/ENHANCEMENTS:
-
General
- Added retryable logic for all GET requests to the API.
This behavior can be disabled using theAKAMAI_RETRY_DISABLED
environment variable.
It can be fine-tuned using these environment variables:AKAMAI_RETRY_MAX
- The maximum retires number of API requests, default is 10.AKAMAI_RETRY_WAIT_MIN
- The minimum wait time in seconds between API requests retries, default is 1 sec.AKAMAI_RETRY_WAIT_MAX
- The maximum wait time in seconds between API requests retries, default is 30 sec.
- Added retryable logic for all GET requests to the API.
-
AppSec
- Added support to export the
akamai_botman_content_protection_rule
resource for the specified policy. - Added support to export the
akamai_botman_content_protection_rule_sequence
resource for the specified policy. - Added support to export the
akamai_botman_content_protection_javascript_injection_rule
resource for the specified policy.
- Added support to export the
-
Cloud Access Manager
- Added the
group_id
andcontract_id
flags forexport-cloudaccess
which allows exporting theakamai_cloudaccess_key
resource with the specified group and contract IDs.
- Added the
-
DNS
- Added the new
outbound_zone_transfer
field to theakamai_dns_zone
resource.
- Added the new
-
PAPI
- Added support for the new rule format
v2024-10-21
. - Added the
product_id
attribute to the exportedakamai_property_include
resource.
- Added support for the new rule format
BUG FIXES:
-
AppSec
- Fixed improper resource generation for AAP/AAP accounts in the
export-appsec
output:- Removed the
akamai_appsec_configuration
resource and added theakamai_appsec_configuration
data source. - Removed the
hostnames
variable from theappsec-variables.tf
file. - Removed the
hostnames
field from thesecurity
module.
- Removed the
- Fixed improper resource generation for AAP/AAP accounts in the
-
Cloud Access Manager
- Marked the
cloud_secret_access_key
field as sensitive in a template for theakamai_cloudaccess_key
resource and moved its definition to thevariables.tf
file. (I#580)
- Marked the
-
PAPI
- Fixed a missing child file when using uppercase letters for a second rule with lowercase letters (#78).
DEPRECATIONS:
- Excluded the deprecated
akamai_appsec_wap_selected_hostnames
resource from theexport-appsec
command. Instead, use theakamai_appsec_aap_selected_hostnames
resource to export.
v1.18.0
Version 1.18.0 (October 10, 2024)
Features/Enhancements
-
Appsec
- Resource
akamai_appsec_match_target
created only if target product is not an AAP account - Resource
akamai_appsec_wap_selected_hostnames
exported for AAP accounts
- Resource
-
Identity and Access Management (IAM)
- Added support for generation of
enable_mfa
anduser_notifications
attributes when exportingakamai_iam_user
configuration - Added
allowlist
subcommand to commandexport-iam
that exports terraform configuration files for account's IP allowlist and CIDR blocks - Modified
all
subcommand forexport-iam
command to export account's IP allowlist and CIDR blocks details
- Added support for generation of
Bug fixes
- PAPI
- Fixed an issue with property export where the hostname cnameTo begins with a number or contains a space.
v1.17.0
Version 1.17.0 (September 04, 2024)
Features/Enhancements
-
Appsec
- The
request_body_inspection_limit_override
field is added toakamai_appsec_advanced_settings_request_body
resource
- The
-
PAPI
- Added support for new rule format
v2024-08-13
- Added support for new rule format
Bug fixes
- Identity and Access Management (IAM)
- Fixed handling of new line character in fields from exported
akamai_iam_user
resource
- Fixed handling of new line character in fields from exported
v1.16.0
Version 1.16.0 (July 16, 2024)
Features/Enhancements
-
Migrated go version to 1.21.12 for builds.
-
[IMPORTANT] Cloud Access Manager
- Added command
export-cloudaccess
which allows export ofakamai_cloudaccess_key
resource
- Added command
-
PAPI
- If edgehostname uses custom TTL, it is exported in the
akamai_edge_hostname
resource - Added support for new rule format
v2024-05-31
- If edgehostname uses custom TTL, it is exported in the
v1.15.0
v1.14.0
v1.13.0
Version 1.13.0 (March 26, 2024)
Features/Enhancements
- General
- Updated minimal required terraform version to 1.0
- Migrated to go 1.21
- APPSEC
- Added support to export
akamai_appsec_penalty_box_conditions
for the specified policy - Added support to export
akamai_appsec_eval_penalty_box_conditions
for the specified policy
- Added support to export
- Cloudlets
- Changed export for
akamai_cloudlets_audience_segmentation_match_rule
to generate emptyforward_settings
whenorigin_id
andpath_and_qs
both are empty anduse_incoming_query_string
is false
- Changed export for
- GTM
- Added support for exporting fields:
sign_and_serve
,sign_and_serve_algorithm
forakamai_gtm_domain
resourcehttp_method
,http_request_body
,pre_2023_security_posture
,alternate_ca_certificate
insideliveness_test
inakamai_gtm_property
resource
- Added support for exporting fields:
- PAPI
export-property
command with flag--rules-as-hcl
now supports export of properties in frozen formatv2024-02-12
export-property-include
command with flag--rules-as-hcl
now supports export of includes in frozen formatv2024-02-12
Bug fixes
- PAPI
- Fixed issue that empty
custom_certificate_authorities
orcustom_certificates
where not generated duringexport-property
withrules-as-hcl
flag
- Fixed issue that empty
Deprecations
- APPSEC
- Excluded the deprecated
akamai_appsec_selected_hostnames
resource from theexport-appsec
command. Exportedakamai_appsec_configuration
should be used instead
- Excluded the deprecated