aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Log stack name in Request Parameters in the UpdateStack CloudTrail event whenever there are 'no updates are to be performed'

Open
#1,900 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

Other

### Resource name

_No response_

### Description

When a stack update is attempted and there aren't any updates the CloudTrail event doesn't provide the stack name in the parameters.

Sample of current event:

```
{
"eventVersion": "1.08",
"userIdentity": {},
"eventTime": "",
"eventSource": "cloudformation.amazonaws.com",
"eventName": "UpdateStack",
"awsRegion": "us-east-1",
"sourceIPAddress": "1.1.1.1",
"userAgent": "xxxxxx",
"errorCode": "ValidationException",
"errorMessage": "No updates are to be performed.",
"requestParameters": null,
"responseElements": null,
"requestID": "xxxxxx",
"eventID": "xxxxxx",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "xxxxxx",
"eventCategory": "Management",
"tlsDetails": {},
"sessionCredentialFromConsole": "true"
}
```

Desired Event:
```
{
"eventVersion": "1.08",
"userIdentity": {},
"eventTime": "",
"eventSource": "cloudformation.amazonaws.com",
"eventName": "UpdateStack",
"awsRegion": "us-east-1",
"sourceIPAddress": "1.1.1.1",
"userAgent": "xxxxxx",
"errorCode": "ValidationException",
"errorMessage": "No updates are to be performed.",
"requestParameters": {
"stackName": "mystack",
},
"responseElements": null,
"requestID": "xxxxxx",
"eventID": "xxxxxx",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "xxxxxx",
"eventCategory": "Management",
"tlsDetails": {},
"sessionCredentialFromConsole": "true"
}
```

Having the stack name logged will make it easier to review which stacks are being updated/update attempts being made on

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reproducing an UpdateStack attempt with no updates and inspect the resulting CloudTrail event. Compare its requestParameters with the desired event; done means the event includes the attempted stack's name while retaining the No updates are to be performed error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.