Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cfn-lint doesn't support GovCloud targeted templates. #3885

Open
2 tasks
M66605 opened this issue Dec 18, 2024 · 1 comment
Open
2 tasks

cfn-lint doesn't support GovCloud targeted templates. #3885

M66605 opened this issue Dec 18, 2024 · 1 comment

Comments

@M66605
Copy link

M66605 commented Dec 18, 2024

Is this feature request related to a new rule or cfn-lint capabilities?

New capability

Describe the feature you'd like to request

cfn-lint doesn't recognize the ARNs for govcloud items as valid.

[cfn-lint] W1031: {'Fn::Sub': 'arn:aws-us-gov:iam::${AWS::AccountId}/managed-by-org/test-policy'} does not match 'arn:(aws[a-zA-Z-]*)?:iam::(\d{12}|aws):policy/[a-zA-Z_0-9+=,.@\-_/]+' when 'Fn::Sub' is resolved

Describe the solution you'd like

Allow cfn-lint to be aware of GovCloud ARNS.

Additional context

No response

Is this something that you'd be interested in working on?

  • 👋 I may be able to implement this feature request

Would this feature include a breaking change?

  • ⚠️ This feature might incur a breaking change
@kddejong
Copy link
Contributor

arn:aws-us-gov:iam::${AWS::AccountId}/managed-by-org/test-policy this doesn't look quit right to me.

From the docs I have a policy arn as arn:aws:iam::123456789012:policy/ManageCredentialsPermissions. I don't see :policy in your Sub string.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants