aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Make CloudFormation WaitCondition Pre-signed URL expiration time configurable

Open
#1,842 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::CloudFormation::WaitConditionHandle

### Resource name

_No response_

### Description

Currently CloudFormation WaitCondition handle exposes a pre-signed S3 URL for user data script to signal to indicate script execution status. However, even though the waitCondition itself has a timeout setting, the pre-signed S3 URL's expiration time isn't configurable. since the pre-signed URL itself inherits read or write credential for a particular object on S3 bucket, ideally this url should be expired after being used. This is a request to make this pre-signed URL expiration time configurable, or in line with the wait condition timeout setting itself.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-waitcondition.html

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::CloudFormation::WaitConditionHandle resource and read the linked CloudFormation WaitCondition documentation. Determine how the pre-signed S3 URL expiration should be configured or aligned with the WaitCondition timeout. Done means the expiration behavior is configurable and documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.