Skip to content

[BUG] sra-easy-setup.yaml missing Patch Parameters #265

@sbrown-tecracer

Description

@sbrown-tecracer

Describe the bug

New install of SRA on CfCT 2.7.2, deployed latest sra-easy-setup.yaml but Codebuild failing on Lambda call:

Step functions -> Create-CustomControlTower-sra-easy-setup-2024-09-16T14-13-43

{
  "cause": {
    "errorMessage": "An error occurred (ValidationError) when calling the UpdateStackSet operation: Parameters: [pPatchMgmtTask3Operation, pEnableEksRuntimeMonitoring, pPatchMgmtMaintWindow1Desc, pPatchMgmtMaintWindow3utoff, pPatchMgmtTask1Desc, pPatchMgmtTask3RebootOption, pPatchMgmtTask1Operation, pPatchMgmtMaintWindow2TZ, pPatchMgmtTask1RebootOption, pPatchMgmtTask2RebootOption, pPatchMgmtMaintWindow3TZ, pPatchMgmtTask2Desc, pPatchMgmtMaintWindow1TZ, pPatchMgmtTask2Name, pPatchMgmtRoleName, pPatchMgmtTarget3Desc, pPatchMgmtTarget3Name, pPatchMgmtTarget2Desc, pPatchMgmtMaintWindow2Name, pPatchMgmtMaintWindow3Desc, pPatchMgmtMaintWindow1Name, pPatchMgmtTask1Name, pPatchMgmtTask3Desc, pPatchMgmtTarget2Name, pPatchMgmtMaintWindow3Name, pPatchMgmtTarget1Desc, pPatchMgmtTask3Name, pPatchMgmtMaintWindow2Desc, pPatchMgmtTarget1Name, pPatchMgmtTask2Operation] do not exist in the template",
    "errorType": "ClientError",
    "requestId": "5a9aeb2f-b0de-48da-bc5f-d3071960b0b8",
    "stackTrace": [
      "  File \"/var/task/state_machine_router.py\", line 206, in lambda_handler\n    return cloudformation(event, function_name)\n",
      "  File \"/var/task/state_machine_router.py\", line 45, in cloudformation\n    response = stack_set.update_stack_set()\n",
      "  File \"/var/task/cfct/state_machine_handler.py\", line 588, in update_stack_set\n    response = stack_set.update_stack_set(\n",
      "  File \"/var/task/cfct/aws/services/cloudformation.py\", line 286, in update_stack_set\n    response = self.cfn_client.update_stack_set(\n",
      "  File \"/var/task/botocore/client.py\", line 535, in _api_call\n    return self._make_api_call(operation_name, kwargs)\n",
      "  File \"/var/task/botocore/client.py\", line 980, in _make_api_call\n    raise error_class(parsed_response, operation_name)\n"
    ]
  },
  "error": "ClientError"
}

To Reproduce

Steps to reproduce the behavior:

  1. https://github.com/aws-samples/aws-security-reference-architecture-examples/tree/main/aws_sra_examples/easy_setup#customizations-for-control-tower-implementation-instructions
  2. Commit default SRA manifest.yaml
  3. See error

Expected behavior

SRA deployment ready and successfully deployed

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions