Migration to new versions, material for talk - TBD | Міграція на нові версії, матеріал доповіді - https://youtube.com/live/uK8QgE17dzg

pre-commit.yaml

  repos:
  - repo: https://github.com/antonbabenko/pre-commit-terraform
    rev: v1.77.1
    hooks:
      #? Restricts Terraform and providers versions.

      #?
      #?
      #? Terraform
      #?
      #?

      # - name: Pin Terraform version (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=terraform
      #     - --args=--version '~> 1.3'
      #   exclude: '/(\.)?modules/'

      - name: Pin Terraform version (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=terraform
          - --args=--version '>= 1.3'
        files: '/(\.)?modules/'

      #?
      #?
      #? Hashicorp official providers
      #?
      #?

      # - name: Pin hashicorp/archive provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider archive
      #     - --args=--version '~> 2.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/archive provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider archive
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/aws provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider aws
      #     - --args=--version '~> 4.38'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/aws provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider aws
          - --args=--version '>= 4.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/cloudinit provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider cloudinit
      #     - --args=--version '~> 2.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/cloudinit provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider cloudinit
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/dns provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider dns
      #     - --args=--version '~> 3.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/dns provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider dns
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/external provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider external
      #     - --args=--version '~> 2.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/external provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider external
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/helm provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider helm
      #     - --args=--version '~> 2.7'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/helm provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider helm
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/http provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider http
      #     - --args=--version '~> 3.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/http provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider http
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/kubernetes provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider kubernetes
      #     - --args=--version '~> 2.15'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/kubernetes provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider kubernetes
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/local provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider local
      #     - --args=--version '~> 2.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/local provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider local
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/null provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider null
      #     - --args=--version '~> 3.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/null provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider null
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/random provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider random
      #     - --args=--version '~> 3.4'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/random provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider random
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'

      #! DEPRECATED. Here possible replacements: https://github.com/hashicorp/terraform-provider-template/issues/85
      - name: Pin hashicorp/template provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider template
          - --args=--version '~> 2.2'
        exclude: '/(\.)?modules/'

      - name: Pin hashicorp/template provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider template
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'


      # - name: Pin hashicorp/time provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider time
      #     - --args=--version '~> 0.9.1'
      #   exclude: '/(\.)?modules/'

      - name: Pin hashicorp/time provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider time
          - --args=--version '>= 0.7'
        files: '/(\.)?modules/'

      #?
      #?
      #? Cloud Posse providers
      #?
      #?

      # - name: Pin cloudposse/awsutils provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider awsutils
      #     - --args=--version '~> 0.15.0'
      #   exclude: '/(\.)?modules/'

      - name: Pin cloudposse/awsutils provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider awsutils
          - --args=--version '>= 0.11'
        files: '/(\.)?modules/'

      # #? cloudposse/utils provider not used anymore
      # - name: Pin cloudposse/utils provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider utils
      #     - --args=--version '1.3.0'
      #   exclude: '/(\.)?modules/'

      # - name: Pin cloudposse/utils provider versions (TF modules/TF child modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider utils
      #     - --args=--version '>= 1.3.0'
      #   files: '/(\.)?modules/'

      #?
      #?
      #? Other providers
      #?
      #?

      # - name: Pin mrolla/circleci provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider circleci
      #     - --args=--version '~> 0.6.0'
      #   exclude: '/(\.)?modules/'

      - name: Pin mrolla/circleci provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider circleci
          - --args=--version '>= 0.6.0'
        files: '/(\.)?modules/'


      # - name: Pin cloudflare/cloudflare provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider cloudflare
      #     - --args=--version '~> 3.27.0'
      #   exclude: '/(\.)?modules/'

      - name: Pin cloudflare/cloudflare provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider cloudflare
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'


      # - name: Pin anschoewe/curl provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider curl
      #     - --args=--version '~> 1.0.2'
      #   exclude: '/(\.)?modules/'

      - name: Pin anschoewe/curl provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider curl
          - --args=--version '>= 1.0'
        files: '/(\.)?modules/'


      # - name: Pin datadog/datadog provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider datadog
      #     - --args=--version '~> 3.17.0'
      #   exclude: '/(\.)?modules/'

      - name: Pin datadog/datadog provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider datadog
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'


      # - name: Pin integrations/github provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider github
      #     - --args=--version '~> 5.7'
      #   exclude: '/(\.)?modules/'

      - name: Pin integrations/github provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider github
          - --args=--version '>= 5.0'
        files: '/(\.)?modules/'

      #! DO NOT UPGRADE to 0.14.1 - contains breaking changes
      # https://github.com/mumoshu/terraform-provider-helmfile/issues/63
      - name: Pin mumoshu/helmfile provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider helmfile
          - --args=--version '0.14.0'
        exclude: '/(\.)?modules/'

      - name: Pin mumoshu/helmfile provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider helmfile
          - --args=--version '>= 0.14'
        files: '/(\.)?modules/'


      # - name: Pin mongey/kafka provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider kafka
      #     - --args=--version '~> 0.5.1'
      #   exclude: '/(\.)?modules/'

      - name: Pin mongey/kafka provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider kafka
          - --args=--version '>= 0.5'
        files: '/(\.)?modules/'

      #! DO NOT UPGRADE before K8s will be upgraded. Now k8s is 1.18
      # https://kops.sigs.k8s.io/releases/1.23-notes/#deprecations
      - name: Pin eddycharly/kops provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider kops
          - --args=--version '1.23.4'
        exclude: '/(\.)?modules/'

      - name: Pin eddycharly/kops provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider kops
          - --args=--version '>= 1.22'
        files: '/(\.)?modules/'

        #! DO NOT UPDATE. Breaking changes in 1.1.0
        # https://github.com/lacework/terraform-provider-lacework/issues/421
      - name: Pin lacework/lacework provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider lacework
          - --args=--version '~> 1.4.0'
        exclude: '/(\.)?modules/'

      - name: Pin lacework/lacework provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider lacework
          - --args=--version '>= 1.0'
        files: '/(\.)?modules/'


      # - name: Pin mongodb/mongodbatlas provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider mongodbatlas
      #     - --args=--version '~> 1.4.0'
      #   exclude: '/(\.)?modules/'

      - name: Pin mongodb/mongodbatlas provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider mongodbatlas
          - --args=--version '>= 1.0'
        files: '/(\.)?modules/'


      # - name: Pin okta/okta provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider okta
      #     - --args=--version '~> 3.38'
      #   exclude: '/(\.)?modules/'

      - name: Pin okta/okta provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider okta
          - --args=--version '>= 3.0'
        files: '/(\.)?modules/'

      #! Can't use v0.6.x due to breaking changes. It is not compatible with Cloudposse's Opsgenie config
      - name: Pin opsgenie/opsgenie provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider opsgenie
          - --args=--version "~> 0.5.0"
        exclude: '/(\.)?modules/'

      - name: Pin opsgenie/opsgenie provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider opsgenie
          - --args=--version '>= 0.5'
        files: '/(\.)?modules/'


      # - name: Pin scottwinkler/shell provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider shell
      #     - --args=--version '~> 1.7.10'
      #   exclude: '/(\.)?modules/'

      - name: Pin scottwinkler/shell provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider shell
          - --args=--version '>= 1.7'
        files: '/(\.)?modules/'


      # - name: Pin spacelift.io/spacelift-io/spacelift provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider spacelift
      #     - --args=--version '~> 0.1.31'
      #   exclude: '/(\.)?modules/'

      - name: Pin spacelift.io/spacelift-io/spacelift provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider spacelift
          - --args=--version '>= 0.1'
        files: '/(\.)?modules/'

      # #? Teleport provider not used anymore?
      # - name: Pin gravitational.com/teleport/teleport provider versions (Atmos components/TF root modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider teleport
      #     - --args=--version '~> 7.1'
      #   exclude: '/(\.)?modules/'

      # - name: Pin gravitational.com/teleport/teleport provider versions (TF modules/TF child modules)
      #   id: tfupdate
      #   args:
      #     - --args=provider teleport
      #     - --args=--version '>= 7.0'
      #   files: '/(\.)?modules/'

      - name: Pin zscaler/zpa provider versions (Atmos components/TF root modules)
        id: tfupdate
        args:
          - --args=provider zpa
          - --args=--version '~> 2.6.6'
        exclude: '/(\.)?modules/'

      - name: Pin zscaler/zpa provider versions (TF modules/TF child modules)
        id: tfupdate
        args:
          - --args=provider zpa
          - --args=--version '>= 2.0'
        files: '/(\.)?modules/'

      #?
      #?
      #? Modules
      #?
      #?

      # - name: Pin cloudposse/acm-request-certificate/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/acm-request-certificate/aws
      #     - --args=--version '0.17.0'

      # - name: Pin cloudposse/alb/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/alb/aws
      #     - --args=--version '1.6.0'

      # - name: Pin cloudposse/cloud-infrastructure-automation/spacelift module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/cloud-infrastructure-automation/spacelift
      #     - --args=--version '0.51.2'

      # - name: Pin cloudposse/cloudfront-s3-cdn/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/cloudfront-s3-cdn/aws
      #     - --args=--version '0.84.0'

      # - name: Pin cloudposse/cloudtrail-cloudwatch-alarms/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/cloudtrail-cloudwatch-alarms/aws
      #     - --args=--version '0.14.3'

      # - name: Pin cloudposse/cloudtrail-s3-bucket/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/cloudtrail-s3-bucket/aws
      #     - --args=--version '0.23.1'

      # - name: Pin cloudposse/cloudtrail/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/cloudtrail/aws
      #     - --args=--version '0.22.0'

      # - name: Pin cloudposse/config-storage/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config-storage/aws
      #     - --args=--version '0.8.1'

      # - name: Pin cloudposse/config/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config/aws
      #     - --args=--version '0.17.0'

      # - name: Pin cloudposse/config/aws//modules/cis-1-2-rules module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config/aws//modules/cis-1-2-rules
      #     - --args=--version '0.17.0'

      # - name: Pin cloudposse/config/aws//modules/conformance-pack module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config/aws//modules/conformance-pack
      #     - --args=--version '0.17.0'

      # - name: Pin cloudposse/config/yaml module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config/yaml
      #     - --args=--version '1.0.2'

      # - name: Pin cloudposse/config/yaml//modules/deepmerge module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/config/yaml//modules/deepmerge
      #     - --args=--version '1.0.2'

      # - name: Pin cloudposse/datadog-integration/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/datadog-integration/aws
      #     - --args=--version '1.0.0'

      # - name: Pin cloudposse/datadog-platform/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/datadog-platform/aws
      #     - --args=--version '1.0.1'

      # - name: Pin cloudposse/datadog-platform/aws//modules/synthetics module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/datadog-platform/aws//modules/synthetics
      #     - --args=--version '1.0.1'

      # - name: Pin cloudposse/dynamic-subnets/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/dynamic-subnets/aws
      #     - --args=--version '2.0.4'

      # - name: Pin cloudposse/dynamodb/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/dynamodb/aws
      #     - --args=--version '0.32.0'

      # - name: Pin cloudposse/ec2-autoscale-group/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ec2-autoscale-group/aws
      #     - --args=--version '0.31.1'

      # - name: Pin cloudposse/ec2-bastion-server/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ec2-bastion-server/aws
      #     - --args=--version '0.30.1'

      # - name: Pin cloudposse/ec2-instance/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ec2-instance/aws
      #     - --args=--version '0.45.1'

      # - name: Pin cloudposse/ecr/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ecr/aws
      #     - --args=--version '0.35.0'

      # - name: Pin cloudposse/ecs-alb-service-task/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ecs-alb-service-task/aws
      #     - --args=--version '0.66.2'

      # - name: Pin cloudposse/ecs-container-definition/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ecs-container-definition/aws
      #     - --args=--version '0.58.1'

      # - name: Pin cloudposse/efs/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/efs/aws
      #     - --args=--version '0.32.7'

      # - name: Pin cloudposse/eks-cluster/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/eks-cluster/aws
      #     - --args=--version '2.6.0'

      # - name: Pin cloudposse/eks-fargate-profile/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/eks-fargate-profile/aws
      #     - --args=--version '1.1.0'

      # - name: Pin cloudposse/eks-iam-role/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/eks-iam-role/aws
      #     - --args=--version '1.1.0'

      # - name: Pin cloudposse/eks-node-group/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/eks-node-group/aws
      #     - --args=--version '2.6.1'

      # - name: Pin cloudposse/elasticache-redis/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/elasticache-redis/aws
      #     - --args=--version '0.49.0'

      # - name: Pin cloudposse/firewall-manager/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/firewall-manager/aws
      #     - --args=--version '0.3.0'

      # - name: Pin cloudposse/github-action-token-rotator/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/github-action-token-rotator/aws
      #     - --args=--version '0.1.0'

      # - name: Pin cloudposse/global-accelerator/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/global-accelerator/aws
      #     - --args=--version '0.5.0'

      # - name: Pin cloudposse/guardduty/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/guardduty/aws
      #     - --args=--version '0.5.0'

      # - name: Pin cloudposse/helm-release/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/helm-release/aws
      #     - --args=--version '0.7.0'

      # - name: Pin cloudposse/iam-account-settings/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/iam-account-settings/aws
      #     - --args=--version '0.4.0'

      # - name: Pin cloudposse/iam-role/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/iam-role/aws
      #     - --args=--version '0.17.0'

      # - name: Pin cloudposse/iam-s3-user/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/iam-s3-user/aws
      #     - --args=--version '1.0.0'

      # - name: Pin cloudposse/iam-system-user/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/iam-system-user/aws
      #     - --args=--version '1.1.0'

      # - name: Pin cloudposse/kms-key/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/kms-key/aws
      #     - --args=--version '0.12.1'

      # - name: Pin cloudposse/label/null module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/label/null
      #     - --args=--version '0.25.0'

      # - name: Pin cloudposse/label/terraform module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/label/terraform
      #     - --args=--version '0.8.0'

      # - name: Pin cloudposse/incident-management/opsgenie//modules/config module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/incident-management/opsgenie//modules/config
      #     - --args=--version '0.16.0'

      # - name: Pin cloudposse/rds-cluster/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/rds-cluster/aws
      #     - --args=--version '1.3.2'

      # - name: Pin cloudposse/rds/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/rds/aws
      #     - --args=--version '0.40.0'

      # - name: Pin cloudposse/route53-cluster-hostname/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/route53-cluster-hostname/aws
      #     - --args=--version '0.12.3'

      # - name: Pin cloudposse/route53-cluster-zone/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/route53-cluster-zone/aws
      #     - --args=--version '0.15.0'

      # - name: Pin cloudposse/s3-bucket/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/s3-bucket/aws
      #     - --args=--version '3.0.0'

      # - name: Pin cloudposse/s3-log-storage/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/s3-log-storage/aws
      #     - --args=--version '1.0.0'

      # - name: Pin cloudposse/security-group/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/security-group/aws
      #     - --args=--version '2.0.0-rc1'

      # - name: Pin cloudposse/security-hub/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/security-hub/aws
      #     - --args=--version '0.9.0'

      # - name: Pin cloudposse/security-hub/aws//modules/control-disablements module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/security-hub/aws//modules/control-disablements
      #     - --args=--version '0.9.0'

      # - name: Pin cloudposse/service-control-policies/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/service-control-policies/aws
      #     - --args=--version '0.12.0'

      # - name: Pin cloudposse/ses/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ses/aws
      #     - --args=--version '0.22.3'

      # - name: Pin cloudposse/sns-topic/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/sns-topic/aws
      #     - --args=--version '0.20.2'

      # - name: Pin cloudposse/ssm-parameter-chamber-reader/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ssm-parameter-chamber-reader/aws
      #     - --args=--version '0.2.0'

      # - name: Pin cloudposse/ssm-parameter-store/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ssm-parameter-store/aws
      #     - --args=--version '0.10.0'

      # - name: Pin cloudposse/ssm-tls-ssh-key-pair/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/ssm-tls-ssh-key-pair/aws
      #     - --args=--version '0.10.2'

      # - name: Pin cloudposse/sso/aws//modules/account-assignments module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/sso/aws//modules/account-assignments
      #     - --args=--version '0.7.1'

      # - name: Pin cloudposse/sso/aws//modules/permission-sets module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/sso/aws//modules/permission-sets
      #     - --args=--version '0.7.1'

      # - name: Pin cloudposse/stack-config/yaml//modules/remote-state module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/stack-config/yaml//modules/remote-state
      #     - --args=--version '1.3.1'


      # - name: Pin cloudposse/tfstate-backend/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/tfstate-backend/aws
      #     - --args=--version '0.38.1'

      # - name: Pin cloudposse/transfer-sftp/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/transfer-sftp/aws
      #     - --args=--version '1.2.0'

      #! DO NOT UPGRADE before we complete migration to EKS
      - name: Pin cloudposse/transit-gateway/aws module version
        id: tfupdate
        args:
          - --args=module cloudposse/transit-gateway/aws
          - --args=--version '0.6.1'
      #! DO NOT UPGRADE before we complete migration to EKS
      - name: Pin cloudposse/transit-gateway/aws//modules/subnet_route module version
        id: tfupdate
        args:
          - --args=module cloudposse/transit-gateway/aws//modules/subnet_route
          - --args=--version '0.6.1'
      #! DO NOT UPGRADE before we complete migration to EKS
      - name: Pin cloudposse/transit-gateway/aws//modules/transit_gateway_route module version
        id: tfupdate
        args:
          - --args=module cloudposse/transit-gateway/aws//modules/transit_gateway_route
          - --args=--version '0.6.1'

      # - name: Pin cloudposse/utils/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/utils/aws
      #     - --args=--version '1.1.0'

      # - name: Pin cloudposse/vpc-flow-logs-s3-bucket/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/vpc-flow-logs-s3-bucket/aws
      #     - --args=--version '0.18.0'

      # - name: Pin cloudposse/vpc-peering-multi-account/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/vpc-peering-multi-account/aws
      #     - --args=--version '0.19.1'

      # - name: Pin cloudposse/vpc/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/vpc/aws
      #     - --args=--version '2.0.0'

      # - name: Pin cloudposse/vpc/aws//modules/vpc-endpoints module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/vpc/aws//modules/vpc-endpoints
      #     - --args=--version '2.0.0'

      # - name: Pin cloudposse/waf/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module cloudposse/waf/aws
      #     - --args=--version '0.0.4'

      # - name: Pin lacework/cloudtrail/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module lacework/cloudtrail/aws
      #     - --args=--version '2.3.1'

      # - name: Pin lacework/config/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module lacework/config/aws
      #     - --args=--version '0.7.1'

      # - name: Pin lacework/ecr/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module lacework/ecr/aws
      #     - --args=--version '0.7.2'

      # - name: Pin terraform-aws-modules/apigateway-v2/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module terraform-aws-modules/apigateway-v2/aws
      #     - --args=--version '2.2.1'

      # - name: Pin terraform-aws-modules/lambda/aws module version
      #   id: tfupdate
      #   args:
      #     - --args=module terraform-aws-modules/lambda/aws
      #     - --args=--version '4.7.1'