Skip to content

Conversation

rix0rrr
Copy link
Contributor

@rix0rrr rix0rrr commented Sep 1, 2025

{Fn::GetAtt} on an AWS::SSM::Parameter is eventually consistent. If an SSM Parameter was just created in a stack deployment, the {Fn::GetAtt} may sometimes fail with a "Parameter not found" error.

This causes ~2 canary failures per week (about 1% failure rate).

We don't actually need to {Fn::GetAtt} the value as we know what it is (it is static, after all). Copy the same literal value into both places to reduce the canary failure rate by a little bit, and add a test to make sure the values don't accidentally drift apart.

Internal reference D259904064.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

`{Fn::GetAtt}` on an `AWS::SSM::Parameter` is eventually consistent. If
an SSM Parameter was just created in a stack deployment, the
`{Fn::GetAtt}` may sometimes fail with a "Parameter not found" error.

This causes ~2 canary failures per week (about 1% failure rate).

We don't actually need to `{Fn::GetAtt}` the value as we know what it is
(it is static, after all). Copy the same literal value into both places
to reduce the canary failure rate by a little bit, and add a test to
make sure the values don't accidentally drift apart.

Internal reference D259904064.
@rix0rrr rix0rrr requested a review from a team September 1, 2025 10:03
@github-actions github-actions bot added the p2 label Sep 1, 2025
@aws-cdk-automation aws-cdk-automation requested a review from a team September 1, 2025 10:04
@rix0rrr rix0rrr closed this Sep 1, 2025
auto-merge was automatically disabled September 1, 2025 10:06

Pull request was closed

@rix0rrr rix0rrr reopened this Sep 1, 2025
@rix0rrr rix0rrr enabled auto-merge September 1, 2025 10:06
@codecov-commenter
Copy link

codecov-commenter commented Sep 1, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.15%. Comparing base (7ad2e9c) to head (5f50cee).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #830      +/-   ##
==========================================
- Coverage   82.82%   82.15%   -0.68%     
==========================================
  Files          65       65              
  Lines        9509     9509              
  Branches     1120     1105      -15     
==========================================
- Hits         7876     7812      -64     
- Misses       1599     1664      +65     
+ Partials       34       33       -1     
Flag Coverage Δ
suite.unit 82.15% <ø> (-0.68%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link

github-actions bot commented Sep 1, 2025

⚠️ Bootstrap Template Protection

This PR modifies the bootstrap template (packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml), which requires special protections.

✅ All requirements met! This PR can proceed with normal review process.

Requirements

Version Increment
✅ Version increment exempted (PR has pr/exempt-bootstrap-version label)

Security Review
✅ Review completed (PR has pr/security-reviewed label)

Why these protections exist

  • The bootstrap template contains critical infrastructure
  • Changes can affect IAM roles, policies, and resource access across all CDK deployments
  • Version increments ensure users are notified of updates

@rix0rrr rix0rrr added this pull request to the merge queue Sep 8, 2025
Merged via the queue into main with commit e68193e Sep 8, 2025
28 checks passed
@rix0rrr rix0rrr deleted the huijbers/parameter-getatt branch September 8, 2025 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants