August 2022

IMPROVEMENT Billable assets graph - Address use case of no env onboarded to CG yet - 15:00 UTC

Description: Add “No billable assets” in case there are no onboarded environments
Case ID: PLAT-4430
Known limitations: N/A 
Affected Components: billable assets

IMPROVEMENT New Azure regions - 14:30 UTC

Description: Added support for new Azure regions: West US 3, Sweden Central, China North 3, Brazil Southeast, East US 2 EUAP, Jio India West, Jio India Central, and Qatar Central.
Case ID: IN-4951
Known limitations: N/A 
Affected Components: UI API Compliance engine protected assets

IMPROVEMENT Compliance Rulesets Update - 12:00 UTC

Description: Deprecated 1048 CSPM Network rules for AWS and replaced them with 12 new rules, 1 K8S rule was deprecated and 3 more were fixed. A list can be found here.
Case ID: IN-5194
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

IMPROVEMENT Azure Storage Account - 10:00 UTC

Description: Added support for "classicDiagnosticSettings" field in blobServiceProperties, tableServiceProperties, queueServiceProperties in Azure Storage Account in Compliance Engine and Protected Assets
Case ID: IN-5037
Known limitations: N/A 
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS

fixed Created time one events table was not properly sent - 10:00 UTC

Description: Events table was not sending the actual time on events table instead sent the time application started
Case ID: PLAT-4646
Known limitations: N/A 
Affected Components: events table

IMPROVEMENT Azure Virtual Machine Scale Set - 10:00 UTC

Description: Added new 'virtualMachineProfile.extensions' property in Azure Virtual Machine Scale Set in Compliance Engine and Protected Assets.
Case ID: DFR-2378
Known limitations: N/A 
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS

IMPROVEMENT GCP Storage Bucket - 10:00 UTC

Description: Added support for the following properties in GCP Storage Bucket in Compliance Engine, Protected Assets, and API:

• iamConfiguration.publicAccessPrevention

• locationType

• satisfiesPZS

• rpo

• customPlacementConfig

Case ID: IN-4288
Known limitations: N/A 
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS API

fixed Issue with widgets that use "entity type" aggregation - 13:00 UTC

Description: Fixed issue with widgets that use “entity type” aggregation
Case ID: PLAT-4345
Known limitations: N/A 
Affected Components: ui

FEATURE Azure Synapse Workspace - 13:00 UTC

Description: Added support for Azure Synapse Workspace in Compliance Engine and Protected Assets.
Case ID: DFR-2401
Known limitations: N/A 
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS

fixed Policy Deletion - 10:20 UTC

Description: Fix OU Policy Deletion Flow.
Case ID: PLAT-3627
Known limitations: N/A 
Affected Components: COMPLIANCE engine events

IMPROVEMENT Compliance Exclusions - 10:00 UTC

Description: Improve the Exclusion API to not include deleted rules
Case ID: PLAT-5372
Known limitations: N/A 
Affected Components: COMPLIANCE Exclusions API

IMPROVEMENT Serverless - Obsolete Python3.6 - 15:30 UTC

Description: From August 17, 2022, you can no longer create or update functions that use the runtime Python3.6. To update a function, you need to migrate it to a supported runtime version. After you migrate the function to a supported runtime version, you cannot rollback the function to the previous runtime. AWS strongly recommends that you migrate functions to a supported runtime version.

FSP has been changed. the new version: 1.5.101
Case ID: PROT-1437
Known limitations: N/A 
Affected Components: serverless

IMPROVEMENT Compliance Rulesets Update - 15:30 UTC

Description: Improvements in AWS rules.
Case ID: IN-5157
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

FEATURE Azure Postgre SQL Flexible server - 10:30 UTC

Description: Added support for Azure Postgre SQL Flexible Server in compliance engine and protected assets.
Case ID: IN-4600
Known limitations: N/A
Affected Components: FETCHERS COMPLIANCE ENGINE PROTECTED ASSETS

fixed Protected Assets - 15:00 UTC

Description: Fixed an issue with aggregation by region.
Case ID: PLAT-5145
Known limitations: N/A
Affected Components: UI

fixed Access Lease - 15:00 UTC

Description: Fixed an issue with the link generated for Access Lease invitation.
Case ID: PLAT-3897
Known limitations: N/A
Affected Components: UI

fixed Events - Archive - 15:00 UTC

Description: Fixed an issue with the aggregations.
Case ID: PLAT-5288
Known limitations: N/A
Affected Components: UI

IMPROVEMENT Aws Environment - 15:00 UTC

Description: improve the Edit Credentials of the Aws Environment.
Case ID: PLAT-5289
Known limitations: N/A
Affected Components: UI

fixed Exclusions - 15:00 UTC

Description: Fix some errors in exclusions. Error when editing deleted Rule, and when changing severity.
Case ID: PLAT-5299, PLAT-5331
Known limitations: N/A
Affected Components: UI

fixed Fix icons in Entity Type quick filter in Findings - 15:00 UTC

Description: In Findings, the quick filter for Entity should show the icon of the asset type instead of the icon of the platform.
Case ID: PLAT-4986
Known limitations: N/A
Affected Components: findings

fixed Findings - tab in protected assets is stuck - 15:00 UTC

Description: Posture findings table was stuck when grouping inside a protected asset
Case ID: PLAT-5003
Known limitations: N/A
Affected Components: protected asset posture findings

fixed Findings - Export to CSV - 13:30 UTC

Description: Fix export to CSV of findings.
Case ID: PLAT-5286, DFT-2041
Known limitations: N/A
Affected Components: compliance engine events

fixed Findings Deletion for Unassociated Policies - 16:00 UTC

Description: Fix findings deletion for unassociated OU and Vendor policies.
Case ID: PLAT-5292
Known limitations: N/A
Affected Components: compliance engine events

IMPROVEMENT Intelligence Rulesets Update - 10:00 UTC

Description: Updating Intelligence rules
Case ID: IN-5033
Known limitations: N/A
Affected Components: INTELLIGENCE RULESETS

ANNOUNCEMENT GCP Big Query Table - 08:25 UTC

Description: Removed the previously supported 'Schema' field from GCP Big Query Table.
Case ID: IN-4501
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS Fetchers

IMPROVEMENT Compliance Rulesets Update - 09:05 UTC

Description: Fix of AWS rules. A list can be found here.
Case ID: IN-5051
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

improvement React | Welcome Pages - 14:00 UTC

Description: Migrate the following pages to react:

• Posture Management

• Network Security

• CIEM

• Intelligence

Case ID: PLAT-5004
Known limitations: N/A 
Affected Components: react webapp

improvement AWS Unified Onboarding - Permission on Manual Change - 14:00 UTC

Description: AWS Unified Onboarding - Permission on Manual Change

Case ID: PLAT-4078
Known limitations: N/A 
Affected Components: aws onboarding

Fixed Protected assets API returns empty result for some CI users - 10:00 UTC

Description: Fixed error “Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).”
Case ID: DFT-2025
Known limitations: N/A 
Affected Components: PROTECTED ASSETS SERVERLESS backend

Fixed Findings inside a grouping are considered "shown" only when the grouping is open - 13:15 UTC

Description: Findings inside grouping was considered shown only for the finding that was grouped and open. Now all of the findings that appear on screen are considered shown.
Case ID: PLAT-4326
Known limitations: N/A 
Affected Components: posture findings

Fixed Now showing policy after creating policy - 15:30 UTC

Description: Before, when creating a new policy, policy was not shown on the policies table. Table is now refreshed after creating a policy
Case ID: PLAT-4751
Known limitations: N/A 
Affected Components: policies

IMPROVEMENT Compliance Rulesets Update - 15:30 UTC

Description: The first release of the AWS NIST 800-53 Rev 5 ruleset, a new GCP CIS v1.3 rule, new Azure CIS v1.4 rules. A list can be found here.
Case ID: IN-5006, DFT-1975, DFR-2364
Known limitations: N/A 
Affected Components: COMPLIANCE RULESETS

improvement AWS KMS - 14:30 UTC

Description: Added support for 'multiRegionConfiguration' and 'multiRegion' properties in AWS KMS in Compliance Engine, Protected Assets, and API
Case ID: DFR-2348
Known limitations: N/A
Affected Components: PROTECTED ASSETS API Compliance Engine Fetchers

improvement AWS VPC Endpoint - 14:30 UTC

Description: Added support for 'connections' property in AWS VPC Endpoint in Compliance Engine and Protected Assets
Case ID: IN-4261
Known limitations: N/A
Affected Components: PROTECTED ASSETS Compliance Engine Fetchers

improvement Azure Storage Account - 14:00 UTC

Description: Added new property "keysRegeneratedInThePast90Days" that will hold true if both Storage Account keys were regenerated, false otherwise.
Case ID: IN-5008
Known limitations: N/A
Affected Components: PROTECTED ASSETS Compliance Engine Fetchers

improvement CIEM Consolidated Policy UI - 9:00 UTC

Description: CIEM Consolidated Policy now displayed as a searchable table
Case ID: INT-1438
Known limitations: N/A
Affected Components: FRONTEND

Fixed Intelligence was suggested for unsupported account types - 9:00 UTC

Description: Intelligence onboarding is no longer suggested or available for unsupported account types like AWS China and AWS Gov.
Case ID: INT-941, INT-942, INT-1704
Known limitations: N/A
Affected Components: FRONTEND