What's Changed

• feat: add new query types - DescribeRouteTables/DescribeSubnets/DescribeSecurityGroupRules by @jakubramut in #11

New Contributors

• @jakubramut made their first contribution in #11

Full Changelog: v0.1.0...v0.2.0

First release of function-aws-query — a Crossplane composition function that runs read-only queries against AWS APIs and exposes the results as structured data (status.* or context.*) for downstream pipeline steps. The AWS analog of function-azresourcegraph (Azure) and function-msgraph (Microsoft Graph).

Query types

• Service metadata (no account setup): GetCallerIdentity, DescribeRegions, DescribeAvailabilityZones, DescribeImages, ListServiceQuotas, GetServiceQuota.
• Existing-resource inventory:
  • ListResources (Cloud Control) — full attributes + tags for any CloudFormation-modeled type, with optional per-resource hydration.
  • GetResources (Resource Groups Tagging API) — find resources by tag with server-side filtering.

Highlights

• Dynamic queries — regionRef, filtersRef, and parametersRef resolve from a status./context./spec. path at runtime, so the XR or a prior pipeline step can drive the query.
• Provider-compatible auth — credentials Secret is byte-identical to provider-upjet-aws, so existing AWS provider secrets are reusable. Supports Secret (default), IRSA, WebIdentity, PodIdentity, and assumeRoleChain.
• Query controls — skipQueryWhenTargetHasData and queryIntervalMinutes to avoid redundant API calls.
• Local testing via crossplane render against real AWS, no cluster required.

Install

apiVersion: pkg.crossplane.io/v1
kind: Function
metadata:
  name: function-aws-query
spec:
  package: xpkg.upbound.io/upbound/function-aws-query:v0.1.0

See the README and example/ for the per-queryType matrix and authentication reference.