Watchmaker

**Summary**:

* [[PR 391][391]] Updates CloudFormation templates with a parameter that
exposes the option to use the S3 API and the instance role to retrieve the
Watchmaker content archive
* ash-linux-formula
* (el7) Updates firewalld "safety" state so that firewalld remains in the
active state; the prior approach left firewalld dead/inactive, until
the service was restarted or the system was rebooted

[391]: https://github.com/plus3it/watchmaker/pull/391

**Summary**:

* [[PR 381][381]] Restricts `wheel` version on Python 2.6 to be less than or
equal to 0.29.0, as `wheel` 0.30.0 removed support for py26.

[381]: https://github.com/plus3it/watchmaker/pull/381

**Summary**:

* ash-linux-formula
* (el7) Includes a "safety" state for firewalld that ensures SSH inbound
access will remain available, in the event the default zone is set to
"drop"

**Summary**:

* ash-linux-formula
* (el6) Improve the method of disabling the sysctl option `ip_forward`,
to account for the behavior of the `aws-vpc-nat` rpm
* scap-formula
* (elX) Updates openscap security guide content to version 0.1.34-1

**Summary**:

* ash-linux-formula
* Modified the FIPS custom execution module to discover the boot
partition and add the `boot=` line to the grub configuration

**Summary**:

* ash-linux-formula
* Updates the EL7 stig baseline to manage the FIPS state. The state
defaults to `enabled` but can be overridden via a pillar or grain,
`ash-linux:lookup:fips-state`. The grain takes precedence over the
pillar. Valid values are `enabled` or `disabled`
* ash-windows-formula
* Updates the STIG baselines for Windows Server 2016 member servers and
domain controllers with SCAP content from the DISA v1r1 SCAP benchmark
release
* join-domain-formula
* Fixes an issue when joining Windows 2016 servers to a domain, where the
Set-DnsSearchSuffix.ps1 helper would fail because the builtin
PowerShell version does not work when `$null` is used in a ValidateSet.
The equivalent value must now be passed as the string, `"null"`
* scap-formula
* Adds SCAP content for the Window Server 2016 SCAP v1r1 Benchmark