Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support list of capabilities on cloudformation #186

Open
elmi82 opened this issue Dec 11, 2019 · 1 comment
Open

Support list of capabilities on cloudformation #186

elmi82 opened this issue Dec 11, 2019 · 1 comment

Comments

@elmi82
Copy link

elmi82 commented Dec 11, 2019

Currently the the capability that is used when using the cloudformation stack tasks can be defined with

cloudformation {
  /* stack configuration */
  capabilityIam true
  useCapabilityIam Capability.CAPABILITY_NAMED_IAM
}

This assumes that there is only one capability active, if you run a stack operation. In case you use nested stacks and both your "parent" stack and the nested stack create roles or policies stack operations need to run with CAPABILITY_NAMED_IAM AND CAPABILITY_AUTO_EXPAND.

The plugin currently cannot be configured to handle these kind of stack scenario. The SDK in fact allows the capabilities to be a list, but the plugin always constructs a list with only the one specified capability in useCapabilityIam Example.

Ideally a configuration would allow the definition of multiple capabilities, e.g.

cloudformation {
  /* stack configuration */
  capabilityIam true
  capabilities [Capability.CAPABILITY_NAMED_IAM, Capability.CAPABILITY_AUTO_EXPAND]
}
@davidpellerin
Copy link

Even without nested stacks, I've also run into a scenario where I need to create both a Named IAM role as well as a SAM style Lambda function. This scenario also requires both CAPABILITY_NAMED_IAM and CAPABILITY_AUTO_EXPAND.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants