aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Support AccountFilterType with CodePipeline Providers CloudFormationStackSet and CloudFormationStackInstances

Open
#1,777 1 comment 0 reactions 0 assignees View on GitHub
bug NeedTriage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::CodePipeline::Pipeline

### Resource Name

_No response_

### Issue Description

Currently with [AWS console](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stackinstances-override.html), AWS CLI, and [AWS::CloudFormation::StackSet DeploymentTargets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-deploymenttargets.html) it is possible to override parameters for a specific target account when updating a stack instance in a Service-managed permissions model StackSet.

However, CodePipeline Action [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) does not support filtering with AccountFilterType.

I believe we should be able also to override parameter of a specific target account for a Stackset resource with Service-managed permissions model managed by a CloudFormationStackSet action in CodePipeline as it is supported by CLI and AWS::CloudFormation::StackSet.

### Expected Behavior

CodePipeline actions [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) support [AccountTypeFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-deploymenttargets.html) with SERVICE_MANAGED permissions.

### Observed Behavior

CodePipeline actions [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) only support OU ID as DeploymentTargets when using SERVICE_MANAGED permissions.

### Test Cases

Pass `AccountFilterType: String` as additional Parameter to CodePipeline actions **CloudFormationStackSet** and **CloudFormationStackInstances** along with parameters _Accounts: String_ and _OrganizationalUnitIds: String_

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the issue's AWS CodePipeline CloudFormationStackSet and CloudFormationStackInstances action documentation, then compare the AccountFilterType behavior described for the CLI and AWS::CloudFormation::StackSet. Confirm whether AccountFilterType can be passed alongside Accounts and OrganizationalUnitIds; done means the actions support that filter for SERVICE_MANAGED permissions.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.