v3.26.0

• Add additional dimensions to SignalFx metrics reporter to enable canary analysis of CMS deployments.

v3.25.8

Convert STS assumed-role ARN to IAM role ARN before creating AwsIamRoleRecord with it

v3.25.7

Enable audit logging for sts auth failures

v3.25.6

Limit max age of database connection to handle RDS failover better

v3.25.5

• Fixed bug where there could be duplicate SDB name slugs.
• Fixed bug where SDB id wasn't being used when manipulating secure data, so data could be un-intentionally deleted or read if an SDB was created outside the dashboard.

v3.25.4

• Added an additional method of retrieving the hostname in the Logback config so that it is not null in Ubuntu 16.04

v3.25.3

• Fixes bug when restoring data that is potentially created before we removed whitespace from the db via an upgrade script.

v3.25.3-RC

• Fixes bug when restoring data that is potentially created before we removed whitespace from the db via an upgrade script.

v3.25.2

• Fix issue where removing an assumed-role's SDB permissions will make the assumed-role lose access to the SDB even if the base IAM role has permissions
• Fix issue where an assumed-role doesn't inherit base IAM role's admin privileges
• Fix STS auth API doc and API error message

v3.25.1

• Separated ApiExceptions from other exception types in the OKTA Auth Connector so that they may be caught and re-thrown as they are configured to have context through back stopper already.