fix: add cfn-lint ignore rules for new format validation checks#3915
Merged
roger-zhangg merged 1 commit intoaws:developfrom Apr 21, 2026
Merged
Conversation
cfn-lint 1.49.0 expanded format keyword coverage (aws-cloudformation/cfn-lint#4442), adding validation for ACM Certificate ARNs (E1159), IAM Role ARNs (E1156), KMS Key ARNs (E1157), Ref/GetAtt format matching (E1041), and Fn::Sub resolved value checking (W1031). These new rules flag placeholder/fake ARN values in test fixture files under tests/translator/output/. Since these are intentionally simplified test values (not real templates), suppress the checks in .cfnlintrc.yaml.
Member
Author
|
aws-cloudformation/cfn-lint#4468 |
valerena
approved these changes
Apr 21, 2026
Contributor
valerena
left a comment
There was a problem hiding this comment.
Reading only the description I thought that it didn't make sense to ignore E1041, but then I saw the other comment and the linked issue in their repo. Sounds good.
seshubaws
approved these changes
Apr 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
cfn-lint v1.49.0 (aws-cloudformation/cfn-lint#4442) expanded format keyword coverage, adding validation for several new AWS resource property formats. This causes 97 new lint errors on test fixture files that use placeholder/fake ARN values.
New rules added to
.cfnlintrc.yamlignore listsome-arnthisIsaKeyarn::cert::abcContext
These errors are not caused by any code change — they are triggered by the upstream cfn-lint release. The
developbranch will also fail once CI re-runs with cfn-lint >= 1.49.0. This also unblocks #3913.The test fixture files under
tests/translator/output/intentionally use simplified placeholder values for ARNs, which is consistent with how other checks (E3001, E3006, W3037) are already suppressed in.cfnlintrc.yaml.Testing
Verified locally that
cfn-lint 1.49.1 --format parseableproduces 0 errors with this change.