JDBC_ENFORCE_SSL doesn't work for Cloudformation type AWS::Glue::Connection

1

We provision our AWS Glue Crowler with Cloudformation and while doing so ran into a bug. When I create a DB Connection like this:

  GlueConnectionPostgres:
    Type: AWS::Glue::Connection
    Properties:
      CatalogId: !Ref AWS::AccountId
      ConnectionInput:
        Name: !Sub '${AWS::StackName}-${Environment}-connection'
        Description: "Connection to database."
        ConnectionType: "JDBC"
        PhysicalConnectionRequirements:
          SubnetId: !Ref DBSubnetId
          SecurityGroupIdList:
            - !Ref DBSecurityGroup
        ConnectionProperties: {
          "JDBC_CONNECTION_URL": !Ref JDBCConnectionString,
          "JDBC_ENFORCE_SSL": "true",
          "USERNAME": !Ref DBUsername,
          "PASSWORD": !Ref DBPassword
        }

The AWS Console shows the Glue connection and it has the property "Require SSL connection" set to true. When I then start a crowler using that connection, it ends with the following error:

ERROR : Crawler cannot be started. Verify the permissions in the policies attached to the IAM role defined in the crawler.

If I now go back to the Glue Connection -> click edit -> change "Require SSL connection" to "false" save it and then switch it back to true, my crawler works. When I delete my Cloudformation Stack and recreate it, I can reproduce that behavior. I guess that is a Bug.

P.S.: Tried it as boolean ("JDBC_ENFORCE_SSL": true) as well, same effect.

질문됨 일 년 전74회 조회
답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠