Merge pull request #139 from YikaiHu/main

fix: Fix the processor Lambda function urllib3 version issue
aws-solutions · Jul 5, 2023 · d1efa83 · d1efa83
2 parents e47a9ad + d538be9
commit d1efa83
Show file tree

Hide file tree

Showing 5 changed files with 24 additions and 7 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.3] - 2023-06-28
+### Fixed
+- Fix the processor Lambda function urllib3 version issue
+
 ## [1.0.2] - 2023-06-21
 ### Fixed
 - Fix the EKS Fluent-Bit deployment configuration generation issue

diff --git a/NOTICE.txt b/NOTICE.txt
@@ -12,3 +12,10 @@ THIRD PARTY COMPONENTS
 This software includes third party software subject to the following copyrights:
 
 AWS SDK under the Apache License Version 2.0
+user-agents under the Apache License Version 2.0
+maxminddb under the Apache License Version 2.0
+requests-aws4auth under the Apache License Version 2.0
+urllib3 under the MIT License
+requests under the Apache License Version 2.0
+boto3 under the Apache License Version 2.0
+botocore under the Apache License Version 2.0
diff --git a/source/constructs/lambda/pipeline/common/layer/requirements.txt b/source/constructs/lambda/pipeline/common/layer/requirements.txt
@@ -1,2 +1,5 @@
-requests
-requests-aws4auth
+requests-aws4auth~=1.2.3
+urllib3~=1.26.7
+requests~=2.31.0
+boto3~=1.26.160
+botocore~=1.29.160
diff --git a/source/constructs/lambda/plugin/standard/requirements.txt b/source/constructs/lambda/plugin/standard/requirements.txt
@@ -1,4 +1,7 @@
-user-agents
-maxminddb
-requests
-requests-aws4auth
+user-agents~=2.2.0
+maxminddb~=2.3.0
+requests-aws4auth~=1.2.3
+urllib3~=1.26.7
+requests~=2.31.0
+boto3~=1.26.160
+botocore~=1.29.160
diff --git a/source/constructs/lib/subaccount/cross-account-stack.ts b/source/constructs/lib/subaccount/cross-account-stack.ts
@@ -555,7 +555,7 @@ export class CrossAccount extends Stack {
         new iam.PolicyStatement({
           sid: "EKSPolicy1",
           effect: iam.Effect.ALLOW,
-          actions: ["iam:GetOpenIDConnectProvider"],
+          actions: ["iam:GetOpenIDConnectProvider", "iam:TagOpenIDConnectProvider", "iam:CreateOpenIDConnectProvider"],
           resources: [
             `arn:${Aws.PARTITION}:iam::${Aws.ACCOUNT_ID}:oidc-provider/oidc.eks.*`,
           ],