Currently CloudFormation WaitCondition handle exposes a pre-signed S3 URL for user data script to signal to indicate script execution status. However, even though the waitCondition itself has a timeout setting, the pre-signed S3 URL's expiration time isn't configurable. since the pre-signed URL itself inherits read or write credential for a particular object on S3 bucket, ideally this url should be expired after being used. This is a request to make this pre-signed URL expiration time configurable, or in line with the wait condition timeout setting itself.
Name of the resource
AWS::CloudFormation::WaitConditionHandle
Resource name
No response
Description
Currently CloudFormation WaitCondition handle exposes a pre-signed S3 URL for user data script to signal to indicate script execution status. However, even though the waitCondition itself has a timeout setting, the pre-signed S3 URL's expiration time isn't configurable. since the pre-signed URL itself inherits read or write credential for a particular object on S3 bucket, ideally this url should be expired after being used. This is a request to make this pre-signed URL expiration time configurable, or in line with the wait condition timeout setting itself.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-waitcondition.html
Other Details
No response