aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

ssm-secure dynamic reference resource type coverage

Open
#227 21 comments 65 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

## ``AWS::ElasticBeanstalk::Environment-Properties-OptionSettings[namespace==`aws:elasticbeanstalk:application:environment`].Value`` (environment variables values) should support Dynamic References to AWS Systems Manager Parameter Store Secure Strings.

Currently, [Dynamic References to AWS Systems Manager Parameter Store Secure Strings are only supported in a limited set of places](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#template-parameters-dynamic-patterns-resources). It would be nice if they were supported in [Beanstalk environment variable values](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html#command-options-general-elasticbeanstalkapplicationenvironment) (which are specified in CloudFormation at ``AWS::ElasticBeanstalk::Environment-Properties-OptionSettings[namespace==`aws:elasticbeanstalk:application:environment`].Value``).

This should would allow the Beanstalk application to see an environment variable named `` with value `supersecret` when defined by this CloudFormation template fragment:
```
---
AWSTemplateFormatVersion: '2010-09-09'
Resoures:
BeanstalkEnvironment:
Type: AWS::ElasticBeanstalk::Environment
Properties:
OptionSettings:
-
Namespace: "aws:elasticbeanstalk:application:environment"
OptionName: SPRING_DATASOURCE_PASSWORD
Value: !Sub "{{resolve:ssm-secure-env:/my/parameter:42}}"
```

## 6. Category (required) - Will help with tagging and be easier to find by other users to +1

Use the categories as displayed in the AWS Management Console (simplified):

1. Compute (Elastic Beanstalk)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.