terraform-aws-account v2.0.0

Summary

Version 2.0.0 adds scoped Security Hub corrective remediation routes and the monitoring v3 delivery failure contract.

Changes

• Added scoped Security Hub corrective remediation routes.
• Added corrective failure alarms and rejected unsafe routes.
• Consumed the monitoring v3 delivery failure contract.
• Bound the corrective start role to the finding rule.

Breaking changes

Consumers enabling Security Hub alerting must set security_hub.delivery_failure with an owner, a separate same-account and Region escalation SNS topic ARN, and an HTTPS runbook URL.

Upgrade impact

Update Security Hub alerting configurations with the required security_hub.delivery_failure owner, same-account and Region escalation SNS topic ARN, and HTTPS runbook URL before deploying version 2.0.0.

Verification

Validate the security_hub.delivery_failure configuration for Security Hub alerting, including its owner, escalation SNS topic ARN, and HTTPS runbook URL, before deployment.

Release details

• Repository: dasmeta/terraform-aws-account
• Tag: v2.0.0
• Published: 27 October 2026