v2.0.0

2.0.0 (Feb 5, 2025)

BREAKING CHANGES:

• Removed deprecated commands:

  • create-domain
  • create-zone
  • create-appsec
  • create-property
  • create-cloudlets-policy
  • create-edgekv
  • create-edgeworker
  • create-iam
  • create-imaging
  • create-cps

• Removed the include subcommand from the export-property command.

• Removed the with-includes flag from the export-property command.

• Removed the schema flag from the export-property, export-property-include and export-imaging commands.

FEATURES/ENHANCEMENTS:

• General

  • Migrated to Go 1.22.
  • Improved code by resolving issues reported by linter.
  • Updated vulnerable dependencies.
  • Logic responsible for excluding endpoints from retries is now configurable with the AKAMAI_RETRY_EXCLUDED_ENDPOINTS environment variable.

• IAM

  • Added the --only option to the group, role, and user subcommands of the export-iam command. This option allows exporting only specific information.

• Logging

  • Changed logger from apex to slog.
    • Log output has not been changed.

• PAPI

  • Added support for the new rule format v2025-01-13.
  • Adjusted exported fields for current schema definition for the rule format v2024-10-21 inside the gov_cloud behaviour.
  • Added a property name in the error message.
  • Introduced the split-depth flag for the export-property and export-property-include command. When used, each rule up to a specified nesting level will be generated in its own .tf file. Rules with higher nesting levels will be placed in a file of their closest ancestor. All rules will be generated in a dedicated rules module.

BUG FIXES:

• General

  • Fixed a problem with invisible output in the light background by converting all colors to the monochromatic representation.

• AppSec

  • Fixed issues with AAP/WAP terraform export
  • Removed hostnames block from variables.tf file
  • Modified imports.tmpl to import correct resources for AAP/WAP accounts
  • Renamed all references from akamai_appsec_configuration.config to data.akamai_appsec_configuration.config for WAP/AAP accounts

v1.19.0

1.19.0 (Nov 21, 2024)

FEATURES/ENHANCEMENTS:

• General

  • Added retryable logic for all GET requests to the API.
    This behavior can be disabled using the AKAMAI_RETRY_DISABLED environment variable.
    It can be fine-tuned using these environment variables:
    • AKAMAI_RETRY_MAX - The maximum retires number of API requests, default is 10.
    • AKAMAI_RETRY_WAIT_MIN - The minimum wait time in seconds between API requests retries, default is 1 sec.
    • AKAMAI_RETRY_WAIT_MAX - The maximum wait time in seconds between API requests retries, default is 30 sec.

• AppSec

  • Added support to export the akamai_botman_content_protection_rule resource for the specified policy.
  • Added support to export the akamai_botman_content_protection_rule_sequence resource for the specified policy.
  • Added support to export the akamai_botman_content_protection_javascript_injection_rule resource for the specified policy.

• Cloud Access Manager

  • Added the group_id and contract_id flags for export-cloudaccess which allows exporting the akamai_cloudaccess_key resource with the specified group and contract IDs.

• DNS

  • Added the new outbound_zone_transfer field to the akamai_dns_zone resource.

• PAPI

  • Added support for the new rule format v2024-10-21.
  • Added the product_id attribute to the exported akamai_property_include resource.

BUG FIXES:

• AppSec

  • Fixed improper resource generation for AAP/AAP accounts in the export-appsec output:
    • Removed the akamai_appsec_configuration resource and added the akamai_appsec_configuration data source.
    • Removed the hostnames variable from the appsec-variables.tf file.
    • Removed the hostnames field from the security module.

• Cloud Access Manager

  • Marked the cloud_secret_access_key field as sensitive in a template for the akamai_cloudaccess_key resource and moved its definition to the variables.tf file. (I#580)

• PAPI

  • Fixed a missing child file when using uppercase letters for a second rule with lowercase letters (#78).

DEPRECATIONS:

• Excluded the deprecated akamai_appsec_wap_selected_hostnames resource from the export-appsec command. Instead, use the akamai_appsec_aap_selected_hostnames resource to export.

v1.18.0

Version 1.18.0 (October 10, 2024)

Features/Enhancements

• Appsec

  • Resource akamai_appsec_match_target created only if target product is not an AAP account
  • Resource akamai_appsec_wap_selected_hostnames exported for AAP accounts

• Identity and Access Management (IAM)

  • Added support for generation of enable_mfa and user_notifications attributes when exporting akamai_iam_user configuration
  • Added allowlist subcommand to command export-iam that exports terraform configuration files for account's IP allowlist and CIDR blocks
  • Modified all subcommand for export-iam command to export account's IP allowlist and CIDR blocks details

Bug fixes

• PAPI
  • Fixed an issue with property export where the hostname cnameTo begins with a number or contains a space.

v1.17.0

Version 1.17.0 (September 04, 2024)

Features/Enhancements

• Appsec

  • The request_body_inspection_limit_override field is added to akamai_appsec_advanced_settings_request_body resource

• PAPI

  • Added support for new rule format v2024-08-13

Bug fixes

• Identity and Access Management (IAM)
  • Fixed handling of new line character in fields from exported akamai_iam_user resource

v1.16.0

Version 1.16.0 (July 16, 2024)

Features/Enhancements

• Migrated go version to 1.21.12 for builds.

• [IMPORTANT] Cloud Access Manager

  • Added command export-cloudaccess which allows export of akamai_cloudaccess_key resource

• PAPI

  • If edgehostname uses custom TTL, it is exported in the akamai_edge_hostname resource
  • Added support for new rule format v2024-05-31

v1.15.0

Version 1.15.0 (May 28, 2024)

Features/Enhancements

• General

  • Updated various dependencies

• Cloudlets

  • Added import support for akamai_cloudlets_application_load_balancer_activation resource

• PAPI

  • Added export of the certificate for akamai_edge_hostname resource (I#338)

v1.14.0

Version 1.14.0 (April 23, 2024)

Features/Enhancements

• General

  • Updated various dependencies

• Image and Video Manager

  • Added handling of SmartCrop transformation when exporting image with policy-as-hcl flag

v1.13.0

Version 1.13.0 (March 26, 2024)

Features/Enhancements

• General
  • Updated minimal required terraform version to 1.0
  • Migrated to go 1.21
• APPSEC
  • Added support to export akamai_appsec_penalty_box_conditions for the specified policy
  • Added support to export akamai_appsec_eval_penalty_box_conditions for the specified policy
• Cloudlets
  • Changed export for akamai_cloudlets_audience_segmentation_match_rule to generate empty forward_settings when origin_id and path_and_qs both are empty and use_incoming_query_string is false
• GTM
  • Added support for exporting fields:
    • sign_and_serve, sign_and_serve_algorithm for akamai_gtm_domain resource
    • http_method, http_request_body, pre_2023_security_posture, alternate_ca_certificate inside liveness_test in akamai_gtm_property resource
• PAPI
  • export-property command with flag --rules-as-hcl now supports export of properties in frozen format v2024-02-12
  • export-property-include command with flag --rules-as-hcl now supports export of includes in frozen format v2024-02-12

Bug fixes

• PAPI
  • Fixed issue that empty custom_certificate_authorities or custom_certificates where not generated during export-property with rules-as-hcl flag

Deprecations

• APPSEC
  • Excluded the deprecated akamai_appsec_selected_hostnames resource from the export-appsec command. Exported akamai_appsec_configuration should be used instead

v1.12.0

Version 1.12.0 (February 19, 2024)

Features/Enhancements

• Cloudlets
  • Modified export of active policies for cloudlets to generate akamai_cloudlets_policy_activation resource entry in import.sh script. In case of activation on both networks, only production will be exported
  • Added support to export shared (V3) policies
  • Added support for exporting policies without any version
• Edgeworkers
  • Added support for generation of note field when exporting EdgeWorker configuration
• IVM
  • Added support for generation of serve_stale_duration, allow_pristine_on_downsize and prefer_modern_formats when exporting using --policy-as-hcl flag
• PAPI
  • Introduced two variables activate_latest_on_staging and activate_latest_on_production in exported configuration for property activation or include activation (when exporting includes alone), to drive which version to use for activation
  • When there is no activation for given network, export activation commented out
  • Added a new export command export-property-include as replacement for export-property.include subcommand. It'll generate include configuration without related properties
  • Deprecated include subcommand available for export-property
  • Deprecated --with-includes flag available for export-property
  • export-property and export-property-include commands with flag --rules-as-hcl now support export of properties in frozen format v2024-01-09
  • Added support for export-property command with flag --akamai-property-bootstrap to export property using akamai_property_bootstrap resource. This option is false by default

Bug fixes

• APPSEC
  • Fixed issue where advanced exceptions were not generated for Rules and Risk Groups (#61)

v1.11.0

Version 1.11.0 (Dec 7, 2023)

Features/Enhancements

• APPSEC
  • Added support for asn_network_lists to akamai_appsec_ip_geo resource for IP/Geo Firewall.
• Deprecated --schema flag and replaced with
  • --policy-as-hcl (for export-imaging command)
  • --rules-as-hcl (for export-property command)
• Cloudlets
  • Add origin_description field export in akamai_cloudlets_application_load_balancer resource
• PAPI
  • export-property command with flag --rules-as-hcl now supports export of properties in frozen format v2023-10-30

Bug fixes

• DNS (export-zone)
  • Fixed target field string escaping in akamai_dns_record resource
  • Changed provider version requirement from ~> 1.6.1 to >= 1.6.1
• PAPI
  • Fixed error with exporting schema containing serialNumber