aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Prevent AWS::SecretsManager::Secret from generating new secret when updating "SecretStringTemplate" under "GenerateSecretString"
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::SecretsManager::Secret
### Resource name
_No response_
### Description
When using property `GenerateSecretString` in `AWS::SecretsManager::Secret` it is possible to specify other parameters in `SecretStringTemplate` other than the secret. However when updating any parameter in `SecretStringTemplate`, `AWS::SecretsManager::Secret` will generate new secret after each update.
It should be possible to update parameters in `SecretStringTemplate` without generating new secret after each update.
### Other Details
_No response_
Contributor guide
Research direction
Start with the AWS::SecretsManager::Secret resource and review the GenerateSecretString and SecretStringTemplate behavior described in the issue. Confirm how updates are handled, then verify that changing template parameters no longer generates a new secret while other secret-generation behavior remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100