Coder Social home page Coder Social logo

cloudformation-aws-exasol's People

Stargazers

avatar

Watchers

avatar avatar avatar avatar avatar avatar

cloudformation-aws-exasol's Issues

Allow EBS encryption with custom KMS key in cloudformation templates

So far it is not possible to enable the ec2 EBS volumes encryption with a custom KMS key.

To achieve this we need an additional parameter where we hand over the custom KMS Key and put the correct policy in place for the lambda role to have all the permission to create new ec2 instances with ebs volume encrypted with this key.

Template fails with strange error if stack name is too long

In case the stack name is quite long the stack creation fails with:

INFO	Error run Instances: UnauthorizedOperation: You are not authorized to perform this operation. 
Encoded authorization failure message: 10QnXCrTA5hRImFyyLQio...

Decoded message:

{\"allowed\":false,\"explicitDeny\":false,\"matchedStatements\":{\"items\":[]},\"failures\":{\"items\":[]},\"context\":{\"principal\":{\"id\":\"AROASNN2LAKNXFGVOL57M:exasol-test-setup-abstract-CreateEC2InstanceLambda-d1kdTkFS8Jrf\",\"arn\":\"arn:aws:sts::XXXXXXXX:assumed-role/exasol-test-setup-abstrac-CreateEC2InstanceLambdaR-LGWS28ZCQCJ8/exasol-test-setup-abstract-CreateEC2InstanceLambda-d1kdTkFS8Jrf\"},\"action\":\"iam:PassRole\",\"resource\":\"arn:aws:iam::XXXXXXXX:role/exasol-test-setup-abstraction-ci-exa-EC2RoleDBNode-WGDM0C34NAZ3\",\"conditions\":{\"items\":[{\"key\":\"aws:Region\",\"values\":{\"items\":[{\"value\":\"eu-central-1\"}]}},{\"key\":\"aws:Service\",\"values\":{\"items\":[{\"value\":\"ec2\"}]}},{\"key\":\"aws:Resource\",\"values\":{\"items\":[{\"value\":\"role/exasol-test-setup-abstraction-ci-exa-EC2RoleDBNode-WGDM0C34NAZ3\"}]}},{\"key\":\"iam:RoleName\",\"values\":{\"items\":[{\"value\":\"exasol-test-setup-abstraction-ci-exa-EC2RoleDBNode-WGDM0C34NAZ3\"}]}},{\"key\":\"aws:Account\",\"values\":{\"items\":[{\"value\":\"XXXXXXXX\"}]}},{\"key\":\"aws:Type\",\"values\":{\"items\":[{\"value\":\"role\"}]}},{\"key\":\"aws:ARN\",\"values\":{\"items\":[{\"value\":\"arn:aws:iam::XXXXXXXX:role/exasol-test-setup-abstraction-ci-exa-EC2RoleDBNode-WGDM0C34NAZ3\"}]}}]}}}

The error message is distracting since it sounds like the user had insufficient privileges.
However, with a shorter stack name everything works fine.

Delay creation until Exasol is fully started

Currently, the template exits after the EC2 instances were created. At that time the Exasol database is, however not yet reachable. Instead, it takes about 20 mins until everything is running.

Acceptance Criteria

  • When the cloud formation template enters the "done" state, the database is reachable.
  • The check does not require that any ports of the database are exposed to the internet. (It also works with a security group with no ingress rules)

Suggested Solution

It should be possible by using a Creation Policy or Wait Condition.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.