v2.6.1

• Added protection for switching boundary permissions using SCP.

Full Changelog: v2.6.0...v2.6.1

v2.6.0

• Added IAM user management permissions to SecurityAdministratorAccess role in protect-foundations.json SCP.
• Added backup:* and backup-storage:* permissions to DeveloperAccess SSO permission set and permission boundary.

Full Changelog: v2.5.5...v2.6.0

v2.5.5

• Added vpce:AllowMultiRegion to the NetworkAdministratorAccess SSO Permission Set.

Full Changelog: 2.5.5...v2.5.5

v2.5.4

• Updated ARCHITECTURE.md.

Full Changelog: v2.5.3...v2.5.4

v2.5.3

• Fixed zsh comments.
• Fixed deploy script for Foundation-security-services-setup. Distributed to all repos.
• Added ARCHITECTURE.md, describing the operation of the OpenSecOps Installer and its scripts.
• Added header doc strings to all scripts under scripts/.
• Fixed script execution to properly pass --verbose flag to component scripts when using verbose mode.
• Added Foundation-security-services-setup component to automate AWS security services configuration (GuardDuty, Security Hub, IAM Access Analyzer, AWS Config, Detective, and Inspector delegation and setup across the organization), including updates to apps.exampleconfiguration files.
• Added data/ML services (Athena, Batch, CloudShell, Glue, QuickSight, SageMaker) to DeveloperAccess permission sets.

Full Changelog: v2.5.2...v2.5.3

v2.3.0

• Added ReclassifyAWSHealthIncidents parameter to OpenSecOps SOAR example configuration to support AWS Health incident reclassification feature introduced in OpenSecOps SOAR v2.2.0, reducing false positives.

Full Changelog: v2.2.0...v2.3.0

v2.2.0

• Added the developer SSO group to the default configuration in /apps.example. This also matches the default account request templates in our tailored version of Foundation-AFT-account-request, for easier setup.
• The SSO Group prefix is now by default the empty string, "".

Full Changelog: v2.1.0...v2.2.0

v2.1.0

• The default model in apps.example for Claude updated to Claude Sonnet v4.

Full Changelog: v2.0.3...v2.1.0

v2.0.3

• Corrected indentation in the SecurityAdministratorAccess.yaml file
• Changes to the README

Full Changelog: v2.0.2...v2.0.3

v2.0.2

Full Changelog: v2.0.1...v2.0.2