aws-cloudformation / aws-cloudformation/cloudformation-cli-java-plugin

Ensure that re-invocations are time/count limited

Open
#82 2 comments 0 reactions 1 assignee Claimed by @rjlohan View on GitHub
enhancement question
Dominant language
Java
Stars
30
Forks
48
PR merge metrics
No merged PRs in 30d

Description

Currently, although CloudFormation will eventually timeout on waiting for a resource provisioning action, there is no constraint on the duration or number of re-invocations that can be scheduled, leading to essentially unbounded Lambda compute.

Wrapper should auto-inject a net runtime into the callback context and use this to compute a restriction and eventual timeout at https://github.com/aws-cloudformation/aws-cloudformation-rpdk-java-plugin/blob/master/src/main/java/com/aws/cfn/LambdaWrapper.java#L262

This timeout should probably be slightly less than the CloudFormation timeout to ensure that stack events reflect actual progress and termination of handler occurs before CloudFormation abandons the request.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.