AWS Glue OCF Connector Release Notes¶
Alation Cloud Service Applies to Alation Cloud Service instances of Alation
Customer Managed Applies to customer-managed instances of Alation
October 30, 2024¶
AWS Glue OCF Connector: Version 1.3.1¶
Enhancements¶
SDK Upgrade¶
The SDK version is now upgraded to 4.9.7 along with updates to multiple packages in JVM.
This upgrade addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2024-47554
, CVE-2024-9143
. (AL-176849)
September 18, 2024¶
AWS Glue OCF Connector: Version 1.3.0¶
Enhancements¶
FIPS Compliance¶
The JDK is now upgraded to Temurin-11.0.24+8. This upgrade addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2024-45490
, CVE-2024-45491
, CVE-2024-45492
, CVE-2024-6119
(AL-136319)
August 28, 2024¶
AWS Glue OCF Connector: Version 1.2.0¶
Enhancements¶
SDK Upgrade¶
The AWS Glue OCF connector is now upgraded to the latest SDK version 4.8.16. (AL-165682)
This upgrade addresses the following Common Vulnerabilities and Exposures (CVEs):
CVE-2022-25647
, CVE-2023-2976
, CVE-2020-8908
, CVE-2021-22569
, CVE-2021-22570
, CVE-2022-3509
, CVE-2022-3510
, CVE-2022-3171
, CVE-2021-29425
, CVE-2021-37136
, CVE-2021-37137
, CVE-2019-20444
, CVE-2021-21290
, CVE-2021-43797
, CVE-2022-24823
, CVE-2024-29025
, CVE-2021-21295
, CVE-2021-21409
, CVE-2020-11612
, CVE-2019-20445
, CVE-2023-34462
OpenJDK Upgrade¶
The JDK is now upgraded to Temurin-11.0.23+9. This upgrade addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2024-20952
and CVE-2023-20918
. (AL-165682)
Support for Authentication Based on AWS Secret Manager Credentials¶
When installed on an Alation Agent, the AWS Glue OCF connector supports authentication using credentials the Agent has fetched from AWS Secrets Manager. For more information, see Integration with AWS Secrets Manager for Data Source Authentication Using OCF Connector. (AL-165682)
Note
Support for authentication based on AWS Secret Manager is available for all installations (on-premise and Alation Cloud Service), however, integrating with AWS Secrets Manager through an Alation Agent applies only to cloud native architecture.
Docker CIS Benchmark Compliance¶
AWS Glue OCF connector versions 1.2.0 and newer are now compliant with the following Docker CIS benchmarks (AL-165682):
Docker 4.1 Ensure that a user for the container has been created
Docker 4.6 Ensure that HEALTHCHECK instructions have been added to container images
Docker 4.7 Ensure update instructions are not used alone in Dockerfiles
Fixed Issues¶
The Get List of Schemas Fails to Display Results for Restricted IAM Policy¶
If there is a restricting IAM policy over resources (databases), selecting the Get List of Schemas option did not show any results. (AL-163533)