aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Log stack name in Request Parameters in the UpdateStack CloudTrail event whenever there are 'no updates are to be performed'
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
Other
### Resource name
_No response_
### Description
When a stack update is attempted and there aren't any updates the CloudTrail event doesn't provide the stack name in the parameters.
Sample of current event:
```
{
"eventVersion": "1.08",
"userIdentity": {},
"eventTime": "",
"eventSource": "cloudformation.amazonaws.com",
"eventName": "UpdateStack",
"awsRegion": "us-east-1",
"sourceIPAddress": "1.1.1.1",
"userAgent": "xxxxxx",
"errorCode": "ValidationException",
"errorMessage": "No updates are to be performed.",
"requestParameters": null,
"responseElements": null,
"requestID": "xxxxxx",
"eventID": "xxxxxx",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "xxxxxx",
"eventCategory": "Management",
"tlsDetails": {},
"sessionCredentialFromConsole": "true"
}
```
Desired Event:
```
{
"eventVersion": "1.08",
"userIdentity": {},
"eventTime": "",
"eventSource": "cloudformation.amazonaws.com",
"eventName": "UpdateStack",
"awsRegion": "us-east-1",
"sourceIPAddress": "1.1.1.1",
"userAgent": "xxxxxx",
"errorCode": "ValidationException",
"errorMessage": "No updates are to be performed.",
"requestParameters": {
"stackName": "mystack",
},
"responseElements": null,
"requestID": "xxxxxx",
"eventID": "xxxxxx",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "xxxxxx",
"eventCategory": "Management",
"tlsDetails": {},
"sessionCredentialFromConsole": "true"
}
```
Having the stack name logged will make it easier to review which stacks are being updated/update attempts being made on
### Other Details
_No response_
Contributor guide
Research direction
Start by reproducing an UpdateStack attempt with no updates and inspect the resulting CloudTrail event. Compare its requestParameters with the desired event; done means the event includes the attempted stack's name while retaining the No updates are to be performed error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100