Release: AWS SDK for Ruby 1.1.4

It is now possible to launch Amazon EC2 instances into subnets configured using Amazon VPC. If you have the ID of a subnet you can pass it to InstanceCollection#create:

ec2 = AWS::EC2.new
instance = ec2.instances.create(:image_id => 'ami-123456', :subnet_id => 'subnet-123456')
            

VPC instances may also be assigned VPC security groups. InstanceCollection#create accepts both :security_groups and :security_group_ids when launching VPC instances.

instance = ec2.instances.create(
  :image_id => 'ami-123456', 
  :subnet_id => 'subnet-123456',
  :security_group_ids => 'sg-123456',
  :security_groups => 'my-vpc-security-group-name')
            

You can now create VPC security groups by passing :vpc_id to SecurityGroupCollection#create. VPC security groups behave like EC2 security groups, but they also accept egress permissions.

vpc_sg = ec2.security_groups.create('sg-name', :vpc_id => 'vpc-123456')
vpc_sg.authorize_egress('10.0.0.0/16', :protocol => :any)
vpc_sg.egress_ip_permissions.each do |permission|
  # ... 
end
            

This release improves library load time by employing autoloading and by eliminating gem dependencies that are slow to load. We've also incorporated a community contribution through GitHub which uses lazy-loading for the Rails integration with Amazon Simple Email Service.

Note: Autoloading in Ruby is known to have thread safety issues; if this is an issue for your application, you can force the SDK to load fully at application start with the following code:

AWS.eager_autoload!
            

This release resolves an issue where the return value of this method was incorrect when used with certain hash options.

This release corrects the behavior of this method to match its documentation.

In response to Mozilla recently revoking the certificates of DigiNotar and Staat der Nederlanden, we are shipping an update to the SDK that removes these certificates from the included CA bundle.

For more information, please see the DigiNotar Removal Follow Up post on the Mozilla Security Blog.

If you are unable to update to the latest version of the SDK, you can configure your current version of the SDK (since version 1.0.1) to use an updated version of the CA bundle as follows:

AWS.config(:ssl_ca_file => "path/to/ca-bundle.crt")
            

This option should be set before constructing any service interfaces. An updated version of the CA bundle can be obtained from our GitHub repository.