0.8.0

• Added pre-commit linting
• Drift detection: allow add_shortcuts() to have shortcuts as arguments
• Fixed #49 - Warn and return None when a NoSuchBucket error is caught from get_bucket_acl()
• Added CRXcavator intel module to ingest Chrome extension data
• Fixed #104 - Drift Detection CLI failed occasionally
• Fixed #99 - improved how AWS ELBs are determined to be internet exposed
• IAM: fixed UnboundLocalError and added support for AWS IAM Federated Principals
• Added Drift Detection feature to track graph changes over time

0.7.0

• GCP instances that are exposed to the internet via firewall rules are now marked with exposed_internet: True

0.6.0

• Add GCP firewalls, firewall allow and deny rules, network tags, connect firewall rules to IP ranges, GCP VPCs, subnets, network interfaces, NIC access configs
• Use partial_uri as unique identifier on GCP instances
• Add AWSPrincipal nodes to represent the root identity of each AWS account being synced
• Fix IAM statement parsing bug which would cause single-statement policies to crash sync
• Use policyuniverse to parse IAM statements and find role assumption permissions
• Ingest Global Secondary Indexes and more DynamoDB properties
• Change relationship between AWSPrincipal and AWSRole nodes to clarify the distinction between trust and permission relationships
• Add AWSPrincipal label to AWSRole nodes
• Integration tests are now configurable

0.5.0

• Ingest Google Cloud Platform organizations, projects, folders, and compute instance objects.

0.4.0

• Added (:AWSRole)-[:STS_ASSUMEROLE_ALLOW]->(:AWSRole) relationship ingestion.
• Fixed #60

0.3.0

• Added VPC peering to the graph
• Fix #31, #34, #41, #55, #51
• Added docs on manual testing

0.3.0rc2

Including Sacha's fix for #55.

0.3.0rc1

• Add VPC peering
• Fix bug in STS_ASSUMEROLE_ALLOW (see #51)

0.2.3rc3

Fix #31

0.2.3rc2

Fix firstseen typo in IpRanges.