aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

[AWS::DocDB::DBCluster] - [Coverage] - Add support for stack drift detection

Open
#2,546 0 comments 4 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::DocDB::DBCluster

### Resource name

AWS::DocDB::DBCluster, AWS::DocDB::DBInstance, AWS::DocDB::DBClusterParameterGroup

### Description

`AWS::DocDB::DBCluster`, `AWS::DocDB::DBInstance`, and `AWS::DocDB::DBClusterParameterGroup` are entirely absent from CloudFormation's [resource support table](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.html) — not listed as supported, not listed as unsupported, just not present at all (verified directly against the raw documentation source; other resource types like `AWS::RDS::DBCluster` and `AWS::S3::Bucket` are correctly present with real Yes/No columns). This means these resource types aren't yet part of the Cloud Control API-based framework that provides drift detection (and import).

Practical consequence: `detect-stack-drift` silently omits these resources from its "Resource drift status" results — with only a small console caption noting that unsupported resources are hidden — while the stack's overall drift status still reports `IN_SYNC`, giving a false impression that the stack has no drift. The same limitation appears on the newer drift-aware change sets (`--deployment-mode REVERT_DRIFT`), which explicitly return `"ResourceDriftStatus": "UNSUPPORTED"` for these same resource types.

Concretely: a stack had `EngineVersion: 4.0.0` in its template while the live DocumentDB cluster had been upgraded outside CloudFormation to `5.0.0`. This real, significant drift was completely invisible to both `detect-stack-drift` and drift-aware change sets — not because either tool checked and found no difference, but because these resource types aren't evaluated at all.

**Request:** Add `AWS::DocDB::DBCluster`, `AWS::DocDB::DBInstance`, and `AWS::DocDB::DBClusterParameterGroup` to CloudFormation's resource coverage for stack drift detection (ideally alongside import support, since #2339 already separately requests import for `DBCluster`).

### Other Details

Verified directly against the raw source of [resource-import-supported-resources.md](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.html) — zero `docdb` matches. Related open issues: #2339 (Import support for `AWS::DocDB::DBCluster` — same underlying gap, Import specifically); #1858 / #2283 (similar "`IN_SYNC` but actually drifted" symptom for other resource types, though those involve undetected property changes on resources that *are* covered, rather than resource types missing from coverage entirely).

Contributor guide

Open the contributing guide

Research direction

Start with the raw resource-import-supported-resources.md source linked in the issue and compare the existing entries for AWS::RDS::DBCluster and AWS::S3::Bucket. Review related issues #2339, #1858, and #2283 for scope and prior discussion. Done means the three AWS::DocDB resource types are covered by stack drift detection and no longer report UNSUPPORTED in drift-aware change sets.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.