aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

DeletionPolicy / UpdateReplacePolicy resource type coverage

Open
#224 1 comment 12 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

[Resource types that support snapshots](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html)
[Resource types that support snapshots](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html)

**Missing Snapshot support for:**
[`AWS::DynamoDB::Table`](https://docs.aws.amazon.com/cli/latest/reference/dynamodb/)
[`AWS::DocDB::DBCluster`](https://docs.aws.amazon.com/cli/latest/reference/docdb/)
[`AWS::FSx::FileSystem`](https://docs.aws.amazon.com/cli/latest/reference/fsx/)
[`AWS::EMR::Cluster`](https://docs.aws.amazon.com/cli/latest/reference/emr/)
[`AWS::QLDB::Ledger`](https://docs.aws.amazon.com/cli/latest/reference/qldb/)

**Missing Delete support for:**
[AWS::S3::Bucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html) ([`aws s3 rb s3://$BUCKET --force`](https://docs.aws.amazon.com/cli/latest/reference/s3/rb.html)) (might timeout)
[AWS::ECR::Repository](https://stackoverflow.com/questions/49175834/how-to-force-delete-an-aws-ecr-with-cloudformation)

---

I'd also like a new policy for all resource types that doesn't allow removal from the stack and stops forward progress of the stack update

All current options, `Delete` / `Retain` / `Snapshot`, mean old resources can no longer be managed through CloudFormation if [resource import doesn't support their resource type yet](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.html). This new policy would allow users to more easily prevent this compared with needing to evaluate [change sets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-changesets.html) or write [IAM stack policies](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html)

Contributor guide

Open the contributing guide

Research direction

Start with the linked CloudFormation DeletionPolicy and UpdateReplacePolicy documentation, then compare the listed resource types with the resource import support list. Confirm which snapshot and delete behaviors are missing, and define the proposed policy that prevents resource removal while stopping stack-update progress. Done means the supported coverage and the new policy behavior are specified and implemented.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.