aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
AWS::SQS::QueuePolicy Bug resolving dynamic references in Condition statement
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
2. Scope of request
Dynamic reference is not being resolved within the "Condition" section. instead, the text is displayed in the policy.
3. Expected behavior
It should lookup the secret
4. Test case recommendation
The following template section does not resolve the secret.
```
QueuePolicy:
Type: AWS::SQS::QueuePolicy
Properties:
PolicyDocument:
Statement:
- Effect: Allow
Action:
- "sqs:SendMessage"
Principal:
AWS: '*'
Resource: !GetAtt Queue.Arn
Condition:
ArnEquals:
"aws:SourceArn": !Sub "{{resolve:secretsmanager:/${Environment}/${Region}/topics:SecretString:MyTopicArn}}"
Queues:
- !Ref Queue
```
I've not checked if its specific to a Condition statement or specific to QueuePolicy
Contributor guide
Assessment
This issue has not been assessed yet.