Releases: akamai/cli-terraform
Releases · akamai/cli-terraform
v2.9.0
2.9.0 (Apr 1, 2026)
FEATURES/ENHANCEMENTS:
-
General
- Migrated to Go
1.25.
- Migrated to Go
-
Appsec (Beta)
- Added the
akamai_appsec_url_protection_actionresource to theexport-appseccommand. - Added the
akamai_appsec_url_protection_policyresource to theexport-appseccommand. - Added the
akamai_appsec_security_policy_protectionsresource to theexport-appseccommand, which enables or disables all security controls under one resource. Additionally, removed all individual protection resources, such asakamai_appsec_waf_protection,akamai_appsec_api_constraints_protection,akamai_appsec_ip_geo_protection, and others to avoid redundant API calls.
- Added the
-
Cloud Access Manager
- Added support for an empty
cloud_access_key_idfield in theakamai_cloudaccess_keyresource.
- Added support for an empty
-
GTM
- Added support for the
state_change_notification_webhookattribute object in theakamai_gtm_propertyresource.
- Added support for the
-
PAPI
- Added support for exporting the
https_service_bindingfield in theakamai_edge_hostnameresource using theexport-propertycommand. - Added support for the new rule format
v2026-02-16.
- Added support for exporting the
BUG FIXES:
-
Cloudlets
- Resolved a bug where multiple
terraform importcommands were generated for the sameakamai_cloudlets_policy_activationandakamai_cloudlets_application_load_balancer_activationresources when activations existed on both staging and production networks, causing "resource already exists" errors during state initialization.
- Resolved a bug where multiple
-
Cloud Certificates (Beta)
- Fixed a bug where the
export-cloudcertificatecommand used the full renewed certificate name, for example,example.renewed.2026-03-11T16_50_39Z, as both thebase_nameand the Terraform resource instance name. The command now correctly extracts the base name (example) by removing the.renewed.<timestamp>suffix.
- Fixed a bug where the
v2.8.0
2.8.0 (Feb 25, 2026)
FEATURES/ENHANCEMENTS:
-
ClientLists
- Removed
versionfrom theakamai_clientlist_activationtemplate because theversionattribute is marked now in the schema asComputedinstead ofRequired.
- Removed
-
Cloud Certificates (Beta)
- Added the
lifecycle { create_before_destroy = true }block to theakamai_cloudcertificates_certificateresource template.
- Added the
-
PAPI
- Added support for the new rule format
v2026-01-09. - Removed the
secret_keyandapi_keyattributes and introduced support for theapi_key_cam_guid,additional_headers_mode, andadditional_headers_listattributes
in thevisitor_prioritization_queue_itbehavior when working with rules in JSON or theakamai_property_rules_builderdata source using these rule formats:v2025-05-30,v2025-07-07,v2025-09-09, andv2025-10-16.
- Added support for the new rule format
BUG FIXES:
- PAPI
- Fixed a typo in the exported
ccm_certificatesblock for theakamai_propertyresource: renamedecdasa_cert_idtoecdsa_cert_idto match the provider schema.
- Fixed a typo in the exported
v2.7.0
2.7.0 (Jan 21, 2026)
FEATURES/ENHANCEMENTS:
-
General
- Added support for building the
cli-terraformfor thelinux/arm64architecture. - Added support for generating configs with custom
edgercpaths to all providers. - Migrated to Go
1.24. - Migrated to Terraform
1.13.5version. - Updated various dependencies.
- Added support for building the
-
PAPI
- Added support for exporting
mtlsandtls_configurationattributes for hostnames with acert_provisioning_typeofCCMwhen running theexport-propertycommand. - Added the
--rule-formatflag to theexport-propertyandexport-property-includecommands. The flag allows exporting with a rule tree in a specific format version.
- Added support for exporting
-
PAPI Domain Ownership Validation (Beta)
- Added the
validation_methodto the exported fields inside theakamai_property_domainownership_validationresource.
- Added the
v2.6.0
2.6.0 (Nov 13, 2025)
FEATURES/ENHANCEMENTS:
-
Cloud Certificates (Beta)
- Added the
export-cloudcertificatecommand that generates the configuration for the
akamai_cloudcertificates_certificateandakamai_cloudcertificates_upload_signed_certificateresources.
- Added the
-
PAPI Domain Ownership Validation (Beta)
- Added support for exporting the
akamai_property_domainownership_validationandakamai_property_domainownership_domainsresources
for specified domains and optionally validation scopes using theexport-domainownershipcommand.
If a domain is not validated, it is exported as commented out in theakamai_property_domainownership_validationresource.
- Added support for exporting the
-
PAPI
- Modified the
export-propertycommand to generateCCMspecific information for hostnames in theakamai_propertyresource.
Additionally, forCCMrelated hostnames, theakamai_edge_hostnameresource is not generated. - Added support for the new rule format
v2025-10-16.
- Modified the
BUG FIXES:
- AppSec
- Fixed an export of the
akamai_appsec_ip_georesource for theasn_controls,geo_controls, andip_controlsfields, which wasn't working correctly since Akamai Terraform 9.0.0.
- Fixed an export of the
v2.5.0
2.5.0 (Oct 15, 2025)
FEATURES/ENHANCEMENTS:
-
PAPI
- Added support for the new rule format
v2025-09-09.
- Added support for the new rule format
-
AppSec
- Fixed the
catagoryIddependency inmodules-security-bot-directory.
- Fixed the
BUG FIXES:
- mTLS Truststore (Beta)
- Fixed an issue with the
akamai_mtlstruststore_ca_setresource where multiline descriptions were incorrectly exported.
- Fixed an issue with the
v2.4.0
2.4.0 (Sep 4, 2025)
FEATURES/ENHANCEMENTS:
-
API Definitions (Beta)
- Added the new
export-apidefinitionscommand to create the API Definitions resources.
- Added the new
-
AppSec
- Added support for Account Protection when exporting a security configuration.
-
mTLS Truststore (Beta)
- Added support for exporting the
akamai_mtlstruststore_ca_setresource for a specified CA set's name and version.
For each network where the CA set is active, theakamai_mtlstruststore_ca_set_activationresource will also be generated.
- Added support for exporting the
v2.3.0
2.3.0 (Aug 6, 2025)
FEATURES/ENHANCEMENTS:
-
mTLS Keystore
- Added the
export-mtls-keystore <certificate_id> [<group_id> <contract_id>]command that generates the configuration for the
akamai_mtlskeystore_client_certificate_akamaiandakamai_mtlskeystore_client_certificate_third_partyresources.
- Added the
-
PAPI
- Added support for the new rule formats
v2025-05-30andv2025-07-07.
- Added support for the new rule formats
v2.2.0
2.2.0 (May 28, 2025)
FEATURES/ENHANCEMENTS:
-
Appsec
- Renamed the
clientIdentifierfield toclientIdentifiersand changed the field type from a string to an array of strings. - Added
penaltyBoxDurationandcounterTypeto exported fields inside theakamai_appsec_rate_policyresource.
- Renamed the
-
Identity and Access Management (IAM)
- Added the
clientsubcommand to theexport-iamcommand which exports terraform configuration files for an optionally provided API client. - Modified the
allsubcommand for theexport-iamcommand to export configuration for a self API client.
- Added the
-
PAPI
- Added support for the new rule format
v2025-04-29. - Added support for the additional
RDNcompliant fields insubject_rdnsundercustom_certificate_authoritiesin the rule formats. - Added support for the new rule format
v2025-03-24.
- Added support for the new rule format
BUG FIXES:
- EdgeKV
- Fixed the bug where the
namespace_namefield in theakamai_edgekv_group_itemsresource was generated as a plain string
instead of a reference to the namespace name from theakamai_edgekvresource.
- Fixed the bug where the
v2.1.0
2.1.0 (Apr 3, 2025)
FEATURES/ENHANCEMENTS:
-
General
- Migrated to Go
1.23.6and adopted a semver-compliant Go directive.
- Migrated to Go
-
PAPI
- Added the
use_hostname_bucketattribute to the exportedakamai_propertyandakamai_property_bootstrapresources. - Updated an export for a property configuration to include the
akamai_property_hostname_bucketresource. - Added support for the new rule format
v2025-02-18.
- Added the
BUG FIXES:
- General
- Fixed inserting escape sequences that do not use a backslash (#83).
v2.0.0
2.0.0 (Feb 5, 2025)
BREAKING CHANGES:
-
Removed deprecated commands:
create-domaincreate-zonecreate-appseccreate-propertycreate-cloudlets-policycreate-edgekvcreate-edgeworkercreate-iamcreate-imagingcreate-cps
-
Removed the
includesubcommand from theexport-propertycommand. -
Removed the
with-includesflag from theexport-propertycommand. -
Removed the
schemaflag from theexport-property,export-property-includeandexport-imagingcommands.
FEATURES/ENHANCEMENTS:
-
General
- Migrated to Go
1.22. - Improved code by resolving issues reported by linter.
- Updated vulnerable dependencies.
- Logic responsible for excluding endpoints from retries is now configurable with the
AKAMAI_RETRY_EXCLUDED_ENDPOINTSenvironment variable.
- Migrated to Go
-
IAM
- Added the
--onlyoption to thegroup,role, andusersubcommands of theexport-iamcommand. This option allows exporting only specific information.
- Added the
-
Logging
- Changed logger from
apextoslog.- Log output has not been changed.
- Changed logger from
-
PAPI
- Added support for the new rule format
v2025-01-13. - Adjusted exported fields for current schema definition for the rule format
v2024-10-21inside thegov_cloudbehaviour. - Added a property name in the error message.
- Introduced the
split-depthflag for theexport-propertyandexport-property-includecommand. When used, each rule up to a specified nesting level will be generated in its own.tffile. Rules with higher nesting levels will be placed in a file of their closest ancestor. All rules will be generated in a dedicatedrulesmodule.
- Added support for the new rule format
BUG FIXES:
-
General
- Fixed a problem with invisible output in the light background by converting all colors to the monochromatic representation.
-
AppSec
- Fixed issues with AAP/WAP terraform export
- Removed
hostnamesblock fromvariables.tffile - Modified
imports.tmplto import correct resources for AAP/WAP accounts - Renamed all references from
akamai_appsec_configuration.configtodata.akamai_appsec_configuration.configfor WAP/AAP accounts