aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Support AccountFilterType with CodePipeline Providers CloudFormationStackSet and CloudFormationStackInstances
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::CodePipeline::Pipeline
### Resource Name
_No response_
### Issue Description
Currently with [AWS console](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stackinstances-override.html), AWS CLI, and [AWS::CloudFormation::StackSet DeploymentTargets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-deploymenttargets.html) it is possible to override parameters for a specific target account when updating a stack instance in a Service-managed permissions model StackSet.
However, CodePipeline Action [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) does not support filtering with AccountFilterType.
I believe we should be able also to override parameter of a specific target account for a Stackset resource with Service-managed permissions model managed by a CloudFormationStackSet action in CodePipeline as it is supported by CLI and AWS::CloudFormation::StackSet.
### Expected Behavior
CodePipeline actions [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) support [AccountTypeFilter](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-deploymenttargets.html) with SERVICE_MANAGED permissions.
### Observed Behavior
CodePipeline actions [CloudFormationStackSet and CloudFormationStackInstances](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet-config) only support OU ID as DeploymentTargets when using SERVICE_MANAGED permissions.
### Test Cases
Pass `AccountFilterType: String` as additional Parameter to CodePipeline actions **CloudFormationStackSet** and **CloudFormationStackInstances** along with parameters _Accounts: String_ and _OrganizationalUnitIds: String_
### Other Details
_No response_
Contributor guide
Research direction
Start with the issue's AWS CodePipeline CloudFormationStackSet and CloudFormationStackInstances action documentation, then compare the AccountFilterType behavior described for the CLI and AWS::CloudFormation::StackSet. Confirm whether AccountFilterType can be passed alongside Accounts and OrganizationalUnitIds; done means the actions support that filter for SERVICE_MANAGED permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 20/100