aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
ssm-secure dynamic reference resource type coverage
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
## ``AWS::ElasticBeanstalk::Environment-Properties-OptionSettings[namespace==`aws:elasticbeanstalk:application:environment`].Value`` (environment variables values) should support Dynamic References to AWS Systems Manager Parameter Store Secure Strings.
Currently, [Dynamic References to AWS Systems Manager Parameter Store Secure Strings are only supported in a limited set of places](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#template-parameters-dynamic-patterns-resources). It would be nice if they were supported in [Beanstalk environment variable values](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html#command-options-general-elasticbeanstalkapplicationenvironment) (which are specified in CloudFormation at ``AWS::ElasticBeanstalk::Environment-Properties-OptionSettings[namespace==`aws:elasticbeanstalk:application:environment`].Value``).
This should would allow the Beanstalk application to see an environment variable named `` with value `supersecret` when defined by this CloudFormation template fragment:
```
---
AWSTemplateFormatVersion: '2010-09-09'
Resoures:
BeanstalkEnvironment:
Type: AWS::ElasticBeanstalk::Environment
Properties:
OptionSettings:
-
Namespace: "aws:elasticbeanstalk:application:environment"
OptionName: SPRING_DATASOURCE_PASSWORD
Value: !Sub "{{resolve:ssm-secure-env:/my/parameter:42}}"
```
## 6. Category (required) - Will help with tagging and be easier to find by other users to +1
Use the categories as displayed in the AWS Management Console (simplified):
1. Compute (Elastic Beanstalk)
Contributor guide
Assessment
This issue has not been assessed yet.