aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
[AWS::CertificateManager::Certificate] - [Enhancement] - Apply tags using RequestCertificate API
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::CertificateManager::Certificate
### Resource name
_No response_
### Description
Currently creation of `AWS::CertificateManager::Certificate` resource is making `RequestCertificate` API and `AddTagsToCertificate` API separately. This causes issue in resource creation when there is SCP applied which only allows creation of resource when specific tags are passed. Since Cloudformation passes tags in a second API the first `RequestCertificate` API is blocked by the SCP.
`AWS::CertificateManager::Certificate` resource can be improved to pass the tags in `RequestCertificate` API directly.
### Other Details
_No response_
Contributor guide
Research direction
Locate the AWS::CertificateManager::Certificate resource implementation and review how it invokes RequestCertificate and AddTagsToCertificate. Confirm the creation path passes CloudFormation tags with RequestCertificate and avoids the SCP failure described, while preserving tag handling.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100