cloud-nuke፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

## Fixes

• **API Gateway：cloud-nuke removes custom domain name mappings before deleting an API.** Since v0.47.0, every run failed to delete an HTTP or WebSocket API with an API mapping, or a REST API with a base path mapping. The delete failed with `BadRequestException: ... Please remove all API mappings for the API from your custom domain names`. Mappings on private custom domain names are removed too. (#1166)
• **KMS：include and exclude rules match the bare alias name.** Aliases carry an `alias/` prefix, so a rule such as `^my-key$` matched nothing, and an exclude rule written that way let the key be deleted. Rules now match the name with or without `alias/`, and a key is protected if any of its aliases matches an exclude rule. (#1162)
• **S3：`--region global` deletes buckets in every region.** Buckets outside the global region (us-east-1 by default) were skipped after a `301 PermanentRedirect`, and the run still reported nothing to nuke. (#1157)
• **CloudWatch log groups are deleted again.** The log group ARN's trailing `:*` made `ListTagsForResource` fail, so every log group was skipped. (#1151)
• **EC2 subnets：`--older-than` works again.** cloud-nuke stopped writing the tag that records when it first saw a subnet, which `--older-than` reads to age the subnet, so `--older-than` excluded every subnet. (#1154)
• **VPC Lattice service networks：cloud-nuke removes VPC and resource associations first.** Deletion failed with a `409 ConflictException` while either kind of association remained. (#1158, #1159)
• **Service-linked roles：a role IAM still lists right after its deletion no longer counts as a failure.** cloud-nuke keeps waiting for IAM to catch up instead of reporting the role as failed. (#1149)

## Migration note

• **A run can delete more than it did before:** each fix above deletes resources that earlier versions skipped or failed to delete.
• **KMS include rules written against a bare alias name now select keys for deletion:** such a rule matched nothing before. (#1162)
• **S3 buckets in every region are deleted under `--region global`:** before, only buckets in the global region were. (#1157)
• **A policy that limits cloud-nuke's API Gateway access needs more permissions:** `apigateway:GET` on `/domainnames`, `/domainnames/*/apimappings` and `/domainnames/*/basepathmappings`, and `apigateway:DELETE` on those mappings. (#1166)

**Full Changelog**：https://github.com/gruntwork-io/cloud-nuke/compare/v0.52.0...v0.53.0

Features
- Parallel scanning and nuking. Resource discovery and deletion now run concurrently, controlled by a new --parallelism flag (default 10). Regions and resource types are scanned under a single global concurrency cap, and regional resources are nuked concurrently while global resources (IAM, Route53, CloudFront) are deleted last. Within-region dependency order is preserved. (#1144, #1148)
Fixes
- Service-linked roles that delete quickly. When AWS purges the deletion-task record before the status poll (a NoSuchEntity response), the role is now verified via GetRole and treated as deleted instead of erroring. (#1147)
Migration note
- Library consumers: aws.NukeAllResources and gcp.NukeAllResources now take an additional parallelism int parameter.
Full Changelog: v0.51.0...v0.52.0

Features
- BackupPlan support. New backup-plan resource type so AWS Backup plans are nuked. (#1138)
- --dry-run for defaults-aws. Preview which default VPCs and security group rules would be deleted before running for real. (#1136)
Fixes
- SageMaker: delete inference components before endpoint. DeleteEndpoint was failing with a ValidationException while an inference component was still associated; the endpoint's inference components are now deleted and awaited first. (#1142)
- IAM instance profile: honor the cloud-nuke-excluded tag. ListInstanceProfiles does not return tags, so excluded profiles were nuked anyway; tags are now fetched via ListInstanceProfileTags. (#1141)
- Time filters: skip resources with no creation time. --older-than / --newer-than silently let through resources whose creation time AWS reports as nil (e.g. an RDS instance still creating), letting an hourly run race a still-creating resource. They are now excluded when a time filter is set. (#1134)
Full Changelog: v0.50.0...v0.51.0

Fixes
- IPAM custom-allocation: scope state per instance. The pool/CIDR metadata captured at list time lived in a package-level global and was reset by every region's InitClient, wiping data needed at deletion time. Multi-region runs hit unable to find pool allocation info for ipam-pool-alloc-.... Regression from #992. State is now closure-scoped per resource instance, so each region's metadata is isolated. (#1130)
- ECS cluster: deregister container instances before delete. EC2-launch-type clusters with registered instances failed with ClusterContainsContainerInstancesException. The nuker now lists container instances and force-deregisters them as a step before DeleteCluster. (#1131)
- Network interface: classify 'currently in use' as a warning. InvalidParameterValue: Network interface 'eni-...' is currently in use is treated like the existing DependencyViolation ordering errors, non-fatal and resolved on the next run once the attaching resource is gone. (#1132)
Full Changelog: v0.49.0...v0.50.0

What's Changed
New Resources
- feat: add ResourceShares support by @ehmanel in #1092
- feat: add support for Amazon MQ broker resources by @james00012 in #1116
- feat: add rds-cluster-snapshot resource type by @james00012 in #1091
New Features
- feat: add SetConfigProvider for programmatic AWS config injection by @james00012 in #1117
- feat: migrate release signing from CircleCI to GitHub Actions by @james00012 in #1081
Tag Filtering Expansion
- feat(backup-vault): add tag filtering support by @thomgun in #1085
- feat: add tag filtering for RDS and ElastiCache resources by @james00012 in #1101
- feat: add tag filtering for EC2, ELB, and VPC Lattice resources by @james00012 in #1102
- feat: add tag filtering for CloudWatch, EventBridge, and DynamoDB resources by @james00012 in #1103
- feat: add tag filtering for Lambda, Kinesis, SNS, SQS, and ECR resources by @james00012 in #1104
- feat: add tag filtering for ACM, CloudFront, SageMaker, and misc resources by @james00012 in #1105
- feat: add tag filtering for CodeDeploy applications by @james00012 in #1106
- feat: add tag filtering for Security Hub by @james00012 in #1107
- fix: add tag filtering to resources with tags in API response by @james00012 in #1099
- fix: apply tag filtering to ec2-dhcp-option and handle NotFound as warning by @james00012 in #1098
Bug Fixes
- fix: classify SCP-denied errors as warnings in nuke runs by @james00012 in #1088
- fix: respect protect_until_expire YAML config instead of always forcing true by @james00012 in #1079
- fix: skip non-deletable RDS snapshots during nuke by @james00012 in #1095
- fix: consolidate nuke run warning errors and increase OpenSearch wait by @james00012 in #1094
- fix: skip default backup vaults during nuke by @james00012 in #1113
- fix: enable IAM policy cleanup in nuke jobs by @james00012 in #1112
- fix: treat transient nuke errors as non-fatal warnings by @james00012 in #1115
- fix: treat all NotFound AWS errors as non-fatal warnings by @james00012 in #1119
- fix: treat EKS waiter timeouts as non-fatal warnings by @james00012 in #1118
Dependencies
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot in #1114
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 by @dependabot in #1120
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs by @dependabot in #1121
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/kinesis by @dependabot in #1122
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/lambda by @dependabot in #1123
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot in #1125
New Contributors
- @ehmanel made their first contribution in #1092
- @thomgun made their first contribution in #1085
Full Changelog: v0.48.0...v0.49.0

What's Changed
New Features
- feat(aws): add SSM Parameter Store resource by @Amit2465 in #1069
Bug Fixes
- fix: classify CloudTrail and Data Pipeline transient errors as warnings by @james00012 in #1074
- fix: deduplicate ListTags and handle tag-fetch errors in OpenSearch lister by @james00012 in #1075
- fix: exclude Control Tower EventBridge rules and reduce Slack noise by @james00012 in #1078
- fix: suppress Slack notifications for warning-only nuke runs by @james00012 in #1086
Full Changelog: v0.47.0...v0.48.0

What's Changed
- docs: update README to reflect tag support for ECS services and launch templates by @james00012 in #945
- refactor: reorganize commands directory for better code organization by @james00012 in #958
- fix: implement pagination for network interface listing by @james00012 in #960
- build(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in #962
- fix: add go mod download before lint by @james00012 in #969
- build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.8.3 by @dependabot[bot] in #970
- Add support for nuking Redshift Snapshot Copy Grants by @james00012 in #966
- fix: respect --timeout flag for AWS resource deletion waiters by @james00012 in #967
- fix: resolve golangci-lint typecheck failures by @james00012 in #971
- fix: handle IAM policies used as permissions boundaries by @james00012 in #973
- feat: use mise.toml for tool version management by @james00012 in #975
- Add GitHub Actions CI workflow by @james00012 in #978
- fix: set default timeout in Init() and update tests by @james00012 in #977
Full Changelog: v0.45.0...v0.46.0

What's Changed
- fix(apigatewayv2): pass tags to filtering logic to enable tag-based filtering by @james00012 in #954
- fix: resolve KMS key filtering issues by @james00012 in #951
- fix: detect and delete RDS clusters/instances with deletion protection enabled by @james00012 in #955
Full Changelog: v0.44.0...v0.45.0

What's Changed
- fix(cloudmap): add-cloudmap-to-readme by @ErezWeiss in #938
- feat: Add tag support for ECS services and fix tag support for EC2 launch templates by @james00012 in #942
- fix(cloudtrail): add-tags-support-to-readme by @ErezWeiss in #935
- Fix: Exclude resources without tag support when tag filters are specified by @james00012 in #934
- fix(iam): always fetch tags for roles and policies to support default exclusion tag by @james00012 in #943
- feat: add tag support for CloudMap namespaces and services by @james00012 in #946
- fix: respect output-format and output-file flags in aws and gcp nuke commands by @james00012 in #949
- Skip deletion protection modification for Aurora cluster members by @james00012 in #947
Full Changelog: v0.43.0...v0.44.0

What's Changed
- fix(ekscluster): filtering for tags is omitted by @roehrijn in #899
- fix(vpc): handle errors from DescribeVpcEndpoints in EC2 VPC endpoint by @monodot in #903
- fix: handle nil output from DescribeResourcePolicy in network firewall by @james00012 in #904
- fix(ecs-cluster): fix regex name filtering for ECS clusters by @james00012 in #901
- Add static analysis with golangci-lint to prevent nil pointer exceptions by @james00012 in #905
- fix(cloudtrail): handle mixed ownership error when listing CloudTrail resources by @james00012 in #906
- feat: add support for AWS Cloud Map resources by @james00012 in #909
- feat(launch-template): add tag support for filtering with improved readability by @james00012 in #915
- feat(rds-cluster): add deletion protection support by @james00012 in #914
- Feat/ecscluster tag support by @ErezWeiss in #922
- feat(cloudformation): add support for CloudFormation stacks by @james00012 in #917
- Fix S3 bucket deletion by adding pagination for versioned objects by @ErezWeiss in #919
- fix(vpc): resolve VPC deletion failures and security group race conditions by @james00012 in #923
- feat: Add JSON output format support by @james00012 in #924
- docs(README): explain how tag matching works by @mtfurlan in #927
- feat(LambdaFunctions): support tag filtering (#931) by @mtfurlan in #932
- feat(SecretsManager): support tags (#928) by @mtfurlan in #929
New Contributors
- @monodot made their first contribution in #903
- @ErezWeiss made their first contribution in #922
- @mtfurlan made their first contribution in #927
Full Changelog: v0.42.0...v0.43.0

What's Changed
- exclude internet-gateway for configtests by @gcagle3 in #878
- Improve the tags filtering logic by @james03160927 in #877
- Extend to support GCP nuking operations by @james03160927 in #879
- Bump golang.org/x/net from 0.21.0 to 0.38.0 by @dependabot[bot] in #883
- Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot[bot] in #881
- Update IAMRoles.shouldInclude to filter out AWS-managed service linked roles by @james03160927 in #884
- feat(oidcprovider): add tag filtering support by @roehrijn in #888
- feat(iam-role): add tag filtering support by @roehrijn in #890
- feat(route53-hosted-zone): add tag filtering support by @roehrijn in #895
- Bump golang.org/x/oauth2 from 0.17.0 to 0.27.0 by @dependabot[bot] in #891
- feat(iam-policy): add tag filtering support by @roehrijn in #894
- fix: tag inclusion filtering to properly exclude untagged resources by @james03160927 in #896
New Contributors
- @roehrijn made their first contribution in #888
Full Changelog: v0.41.0...v0.42.0

What's Changed
- Added new resource - SageMaker Endpoint by @ChildishGirl in #856
- Start nuking global resources as part of circleCi automated nuking operation by @james03160927 in #857
- Revert "Start nuking global resources as part of circleCi automated n… by @james03160927 in #860
- Add new resource - SageMaker Endpoint configuration by @ChildishGirl in #858
- add cloudfront distribution by @james03160927 in #859
- add tags support for cloudtrail by @james03160927 in #861
- fix name regex for EKS cluster by @james03160927 in #863
- Start nuking global resources to cleanup some left-over resources in test environment. by @james03160927 in #866
- Update CODEOWNERS by @james03160927 in #868
- Update README by @james03160927 in #869
- Improve + Update the README for available resources by @james03160927 in #870
- delete s3 bucket lifecycle by @james03160927 in #874
- Fix api gateway nuke failure when associated custom domain exists by @james03160927 in #875
Full Changelog: v0.40.0...v0.41.0

What's Changed
- add aws iam instance profile by @james03160927 in #853
- disable deletion protection by @james03160927 in #855
Full Changelog: v0.38.3...v0.40.0

What's Changed
- fix for #825 assignment to nil map in TG. by @wakeful in #827
- bump AWS SDK package to address non-refreshing credentials issue by @wakeful in #830
Full Changelog: v0.38.1...v0.38.2