# 2023.5.1

### Integrations

#### Enhancements

* When configuring a Google Cloud integration, administrators can now set allow and deny lists to limit KMS extraction by [location](https://cloud.google.com/kms/docs/locations).
* The AWS integration now gathers metadata for EKS Services and EKS Clusters. You will need to apply an updated [integration trust policy](/4yItIzMvkpAvMVFAamTf/integrations/integrations/aws.md#1-create-a-veza-aws-connector-policy) that allows `eks:ListClusters` and `eks:DescribeCluster`. New *Saved Queries* identify:
  * AWS IAM Users with EKS permissions
  * AWS IAM Roles with EKS permissions
  * AWS EKS Clusters with public endpoint access
* Additional entity types are now supported when connecting to OneLogin:
  * OneLogin Groups
  * OneLogin Roles
  * OneLogin Apps
* Insight Point Configuration page:
  * Administrators can now initialize a new Insight Point by clicking *Create* (changed from *Generate New Key*).
  * The list of Insight Points now instantly refreshes after creating a provisioning key.
  * An expiration date for the provisioning key is no longer specified when creating an Insight Point.
* Early Access: The Google Cloud integration can now show cross-account access where identities in one organization have access to resources in another organization integrated with Veza. Cross organization permission mapping can be configured in the following ways:
  * At the Google Workspace and Cloud IAM level (such as Groups in one Google Organization with Project roles in another Organization).
  * At all levels, including cross-organization access granted by a policy applied at the resource level.
  * Contact your support team to enable the most appropriate setting for your environment.

#### Bug Fixes

* Salesforce: Integrating a sandbox environment containing a full replica of an integrated production environment no longer causes entity duplication and collision errors.

### Search and Insights

#### Bug Fixes

* Fixed an issue where queries for Snowflake could appear even when an integration was not configured.

### Workflows

#### Enhancements

* A description is now shown when hovering over possible Smart Actions.

#### Bug Fixes

* Certification PDF exports correctly include the *Signed Off By ID*, *Signed Off By Name*, and *Signed Off By Email* columns.
* Fixed an issue with CSV and PDF exports missing file extensions.
* Prevented unexpected error messages when switching Smart Actions and selecting reviewers to assign.
* Fixed an issue that could prevent nested roles from appearing in certification results.

#### Developers

* To ensure performance, filter operators on certification result `decision`, `signed_off_state`, and `reviewers` are temporarily restricted to `eq`.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.veza.com/4yItIzMvkpAvMVFAamTf/release-notes/release-notes/archive/2023.5.1.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.