Bug? CloudFromation AWS::ServiceCatalog::PortfolioPrincipalAssociation does not delete IAM_PATTERN principals

0

Bug: CloudFormation resource AWS::ServiceCatalog::PortfolioPrincipalAssociation allows for creating resources with type IAM_PATTERN, even though the documentation does not allow the. Those resources always fail to be deleted.

Excepted behavior:

  • Resource fails validation during creation, or
  • Resource can be deleted

To replicate: Deploy this template. Delete it.

{
 "Resources": {
  "Portfolio": {
   "Type": "AWS::ServiceCatalog::Portfolio",
   "Properties": {
    "DisplayName": "test",
    "ProviderName": "test",
    "Description": "test"
   },
   "PrincipalAssoc": {
    "Type": "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
    "Properties": {
     "PortfolioId": {
      "Ref": "Portfolio"
     },
     "PrincipalARN": "arn:aws:iam:::role/SomeRolePattern*",
     "PrincipalType": "IAM_PATTERN"
    }
   }
  }
 }
}

f0ff
已提问 8 个月前176 查看次数
1 回答
0

Hi,

this same ticket has been previously raised; https://github.com/aws/aws-cdk/issues/24370

You can probably weigh on it or open a Support ticket in your AWS console (service teams like CFN are not supposed to monitor re:Post for bug reports)

Best,

Didier

profile pictureAWS
专家
已回答 8 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则

相关内容