From 3106c03c30db6d9201a35ce339683161bc712548 Mon Sep 17 00:00:00 2001
From: Brandon Cook <bcook@adobe.com>
Date: Tue, 27 Sep 2016 08:20:52 -0700
Subject: [PATCH 1/2] fix whitespace

---
 commands/help/aws_network.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/commands/help/aws_network.go b/commands/help/aws_network.go
index 6600de3..f02103b 100644
--- a/commands/help/aws_network.go
+++ b/commands/help/aws_network.go
@@ -64,9 +64,9 @@ DESCRIPTION
     See https://aws.amazon.com/blogs/aws/aws-ip-ranges-json/ for more
 
 OPTIONS
-	-r  AWS region
+    -r  AWS region
 
-	-s  Service (defaults to AMAZON if undefined)`
+    -s  Service (defaults to AMAZON if undefined)`
 }
 
 func (recv *AwsNetworkCmd) SubCommands() []cli.Command {

From c7b8054c4f09981395bb1bbcb5160c04f8adfc2f Mon Sep 17 00:00:00 2001
From: Brandon Cook <bcook@adobe.com>
Date: Tue, 27 Sep 2016 11:28:47 -0700
Subject: [PATCH 2/2] release notes

---
 CHANGELOG.md     | 1 +
 RELEASE_NOTES.md | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80b8e5b..ee97466 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,6 @@
 **v2.2.0**
 
+- running docker with --security-opt=no-new-privileges
 - support docker registries as an alternative to S3
 - support auto scaling group egress whitelist
 - deprecated `dst_env_file`
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index 63b02df..32af949 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,8 +1,15 @@
+See the [CHANGELOG](CHANGELOG.md) for an exhaustive list of changes.
+
 v2.2
 ====
 
 [Docker registries](docs/detailed_design/service-payload.md) are supported
 
+[ASG egress rules can be defined](docs/detailed_design/config-reference.md#security_group_egress)
+
+This changes the porter deployment policy to include
+`ec2:AuthorizeSecurityGroupEgress` and `ec2:RevokeSecurityGroupEgress`
+
 v2.1
 ====