Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Glue Jobs fail with ERROR when AvailabilityZone is specified #3886

Open
evilensky opened this issue Dec 19, 2024 · 0 comments
Open

Glue Jobs fail with ERROR when AvailabilityZone is specified #3886

evilensky opened this issue Dec 19, 2024 · 0 comments

Comments

@evilensky
Copy link

CloudFormation Lint Version

1.12.3

What operating system are you using?

Mac and Linux

Describe the bug

GlueConnections fail linting when az is specified:

INFO     cfnlint.runner:runner.py:125 Run scan of template tests/data/integration/based-on-poc-serverless-service.yml
ERROR    lint_cfn:lint_cfn.py:17 W3010: Availability zone properties should not be hardcoded: Avoid hardcoding availability zones 'us-west-2c'
 at:Resources/AlsoPoliticianProcessingDefaultGlueConnection/Properties/ConnectionInput/PhysicalConnectionRequirements/AvailabilityZone

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-glue-connection-physicalconnectionrequirements.html#cfn-glue-connection-physicalconnectionrequirements-availabilityzone

What's not documented is that AvailabilityZone is required if SecurityGroupIdList[] is provided or the Glue Connection silently fails.

Expected behavior

Should not lint as error.

Reproduction template

Resources:
  AlsoPoliticianProcessingDefaultGlueConnection:
    Properties:
      CatalogId:
        Ref: AWS::AccountId
      ConnectionInput:
        ConnectionType: NETWORK
        Description: Default VPC Connection for job also-politician-processing
        Name: tools-dev-poc-serverless-service-also-politician-processing-network
        PhysicalConnectionRequirements:
          AvailabilityZone: us-west-2c
          SecurityGroupIdList:
          - Fn::ImportValue: DefaultGlueSecurityGroupId
          SubnetId:
            Fn::ImportValue: DefaultGlueSubnetId
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant