aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Stack resource AWS::ElasticLoadBalancingV2::Listener property MutualAuthentication Mode: passthrough got drifted.

Open
#1,897 1 comment 2 reactions 0 assignees View on GitHub
bug NeedTriage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::ElasticLoadBalancingV2::Listener

### Resource Name

AWS::ElasticLoadBalancingV2::Listener

### Issue Description

When creating a cloudformation resource AWS::ElasticLoadBalancingV2::Listener with property MutualAuthentication Mode: passthrough and stack resource got false drifted.

### Expected Behavior

The resource "AWS::ElasticLoadBalancingV2::Listener" should show IN_SYNC and should consider MutualAuthentication Mode: passthrough in the drift detection.

### Observed Behavior

Resource property got MutualAuthentication | REMOVE | {"Mode":"passthrough"} modified.

### Test Cases

Deployed stack ap-southeast-2 with following template and performed the drift detection and resource got AWS::ElasticLoadBalancingV2::Listener MODIFIED with

```
Parameters:
PublicSubnets:
Type: List

Resources:
AppLoadBalancer:
Type: AWS::ElasticLoadBalancingV2::LoadBalancer
Properties:
IpAddressType: ipv4
LoadBalancerAttributes:
- Key: idle_timeout.timeout_seconds
Value: '30'
Name: app-mtls
Type: application
Scheme: internet-facing
IpAddressType: ipv4
Subnets: !Ref PublicSubnets

AppALBListener:
Type: AWS::ElasticLoadBalancingV2::Listener
Properties:
LoadBalancerArn: !Ref AppLoadBalancer
Port: 443
Protocol: HTTPS
Certificates:
- CertificateArn: 'certificateARN'
MutualAuthentication:
Mode: passthrough
DefaultActions:
- Type: "fixed-response"
FixedResponseConfig:
ContentType: "text/plain"
StatusCode: "403"
MessageBody: "Access Forbidden"
```

drift results :

MutualAuthentication | REMOVE | {"Mode":"passthrough"} | -

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Reproduce the reported stack in ap-southeast-2 using the provided AWS::ElasticLoadBalancingV2::Listener template and run drift detection. Investigate why MutualAuthentication with Mode: passthrough is reported as removed; done means the resource is IN_SYNC and the property is included in drift detection.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.