aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Prevent AWS::SecretsManager::Secret from generating new secret when updating "SecretStringTemplate" under "GenerateSecretString"

Open
#1,161 1 comment 2 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::SecretsManager::Secret

### Resource name

_No response_

### Description

When using property `GenerateSecretString` in `AWS::SecretsManager::Secret` it is possible to specify other parameters in `SecretStringTemplate` other than the secret. However when updating any parameter in `SecretStringTemplate`, `AWS::SecretsManager::Secret` will generate new secret after each update.

It should be possible to update parameters in `SecretStringTemplate` without generating new secret after each update.

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::SecretsManager::Secret resource and review the GenerateSecretString and SecretStringTemplate behavior described in the issue. Confirm how updates are handled, then verify that changing template parameters no longer generates a new secret while other secret-generation behavior remains unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.