aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Stack resource AWS::ElasticLoadBalancingV2::Listener property MutualAuthentication Mode: passthrough got drifted.
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::ElasticLoadBalancingV2::Listener
### Resource Name
AWS::ElasticLoadBalancingV2::Listener
### Issue Description
When creating a cloudformation resource AWS::ElasticLoadBalancingV2::Listener with property MutualAuthentication Mode: passthrough and stack resource got false drifted.
### Expected Behavior
The resource "AWS::ElasticLoadBalancingV2::Listener" should show IN_SYNC and should consider MutualAuthentication Mode: passthrough in the drift detection.
### Observed Behavior
Resource property got MutualAuthentication | REMOVE | {"Mode":"passthrough"} modified.
### Test Cases
Deployed stack ap-southeast-2 with following template and performed the drift detection and resource got AWS::ElasticLoadBalancingV2::Listener MODIFIED with
```
Parameters:
PublicSubnets:
Type: List
Resources:
AppLoadBalancer:
Type: AWS::ElasticLoadBalancingV2::LoadBalancer
Properties:
IpAddressType: ipv4
LoadBalancerAttributes:
- Key: idle_timeout.timeout_seconds
Value: '30'
Name: app-mtls
Type: application
Scheme: internet-facing
IpAddressType: ipv4
Subnets: !Ref PublicSubnets
AppALBListener:
Type: AWS::ElasticLoadBalancingV2::Listener
Properties:
LoadBalancerArn: !Ref AppLoadBalancer
Port: 443
Protocol: HTTPS
Certificates:
- CertificateArn: 'certificateARN'
MutualAuthentication:
Mode: passthrough
DefaultActions:
- Type: "fixed-response"
FixedResponseConfig:
ContentType: "text/plain"
StatusCode: "403"
MessageBody: "Access Forbidden"
```
drift results :
MutualAuthentication | REMOVE | {"Mode":"passthrough"} | -
### Other Details
_No response_
Contributor guide
Research direction
Reproduce the reported stack in ap-southeast-2 using the provided AWS::ElasticLoadBalancingV2::Listener template and run drift detection. Investigate why MutualAuthentication with Mode: passthrough is reported as removed; done means the resource is IN_SYNC and the property is included in drift detection.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100