StageAuto Changelog

v1.1.0 — IAM Security Update

New IAM Security Analysis

• Added advanced IAM security analysis for Terraform environments
• Added detection of IAM policies that allow full administrative access
• Added detection of wildcard IAM administrative permissions such as iam:*
• Added detection of dangerous iam:PassRole permissions using wildcard resources
• Added detection of wildcard service actions such as service:*
• Added detection of sensitive IAM and STS permissions using wildcard resources
• Added detection of AWS managed AdministratorAccess policy attachments
• Added detection of IAM roles that can be assumed by wildcard principals
• Added detection of IAM roles that trust an AWS account root principal
• Added detection of long-lived IAM access keys created through Terraform
• Added detection of IAM users configured with force_destroy = true
• Improved IAM risk prioritization across CRITICAL, HIGH and MEDIUM severity levels
• Tested IAM detection rules against both insecure and secure Terraform configurations
• Secure IAM test configurations produced no IAM findings during release testing
• Expanded StageAuto coverage for identity, permissions and access-management risks

v1.0.8 — FinOps & Accuracy Update

New Features & Improvements

• Added 5 new FinOps infrastructure cost-analysis findings
• Added detection of potentially unused EBS volumes
• Added detection of potentially unused Elastic IP addresses
• Added detection of NAT Gateway traffic that may benefit from VPC endpoints
• Added RDS gp2 storage optimization analysis
• Added cost-risk analysis for publicly accessible S3 buckets
• Improved RDS Multi-AZ analysis to reduce false positives
• Multi-AZ is now reported only when the Terraform configuration explicitly disables it
• Configurations without an explicit multi_az value are no longer automatically treated as a risk
• Improved confidence when analyzing production-like Terraform configurations
• Expanded FinOps coverage to identify potential infrastructure cost optimization opportunities

v1.0.7 — Report Traceability Update

Improvements

• Added Terraform source filename to PDF reports
• Added Terraform source filename to TXT reports
• Improved report traceability for multi-file Terraform projects
• Easier identification of the affected infrastructure file during remediation
• Removed full local file paths from TXT and PDF reports
• Reports now display only the Terraform filename (e.g. example.tf)
• Improved customer privacy by hiding local workstation directories
• More professional client-facing report presentation

v1.0.6 — Infrastructure Scorecard Update

New Features

• Infrastructure Scorecard added to Executive Summary
• Category-based scoring:
• Security Score
• Architecture Score
• Compliance Score
• Cost Score
• Overall Infrastructure Score added
• Color-coded scoring visualization:
• Green = Healthy
• Yellow = Moderate Risk
• Orange = High Risk
• Red = Critical Risk
• Improved executive readability for technical and non-technical stakeholders
• Faster infrastructure health assessment during report review

v1.0.5 — Reporting & Audit Readiness Update

New Features

• Terraform Fix Examples added to PDF reports
• Automatic remediation snippets for detected infrastructure risks
• Compliance mapping tags added to findings:
• SOC 2
• ISO 27001
• CIS
• Improved executive readability for client-facing reports
• Better audit-style report presentation for B2B environments
• More actionable remediation guidance inside PDF reports

v1.0.4 — Stability & Accuracy Update

Improvements

• Improved Terraform analysis accuracy for real-world configurations
• Better detection of inline S3 configurations (versioning & encryption)
• More precise resource attribution in reports (resource names preserved)
• Reduced false positives in secure infrastructure setups
• Improved handling of nested configuration blocks
• General improvements:
• More consistent analysis across different Terraform styles
• Better reliability in production-like environments
• Cleaner and more trustworthy report outputs

v1.0.3 — Security & Architecture Update

New Features

• Detection of HTTPS misconfiguration (HTTP without TLS)
• Global HTTPS enforcement check
• Infrastructure exposure detection:
• Public subnet (auto public IP)
• Database snapshot risk (no final snapshot)
• Database high availability check (Multi-AZ)
• Improved architecture insights:
• S3 versioning analysis
• S3 encryption visibility
• Improved report scoring and prioritization
• More realistic risk modeling for production-like environments

v1.0.2 — Initial Release

Core Features (Current Scope)

• Terraform (.tf) infrastructure analysis
• Detection of critical security risks:
• Public S3 buckets (data exposure)
• Public database access (RDS)
• Exposed sensitive ports (SSH, RDP)
• Basic architecture insights:
• S3 versioning not enabled
• Missing encryption configuration
• Compliance-oriented findings:
• Public storage risks (aligned with common standards like SOC 2 / ISO 27001)
• Cost-related signals:
• Public resources increasing potential traffic costs
• Professional report generation:
• TXT report
• PDF report (client-ready format)
• License validation system
• Automatic license delivery via email

Positioning

StageAuto v1.0 focuses on identifying high-impact security risks in Terraform environments. Future updates will expand into deeper infrastructure analysis, compliance frameworks, and advanced cloud configurations.