aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

AWS::SQS::QueuePolicy Bug resolving dynamic references in Condition statement

Open
#874 3 comments 0 reactions 0 assignees View on GitHub
bug?
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

2. Scope of request
Dynamic reference is not being resolved within the "Condition" section. instead, the text is displayed in the policy.

3. Expected behavior

It should lookup the secret

4. Test case recommendation
The following template section does not resolve the secret.
```
QueuePolicy:
Type: AWS::SQS::QueuePolicy
Properties:
PolicyDocument:
Statement:
- Effect: Allow
Action:
- "sqs:SendMessage"
Principal:
AWS: '*'
Resource: !GetAtt Queue.Arn
Condition:
ArnEquals:
"aws:SourceArn": !Sub "{{resolve:secretsmanager:/${Environment}/${Region}/topics:SecretString:MyTopicArn}}"
Queues:
- !Ref Queue
```
I've not checked if its specific to a Condition statement or specific to QueuePolicy

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.