search

aws-cloudformation / cloudformation-coverage-roadmap

The AWS CloudFormation Public Coverage Roadmap
https://aws.amazon.com/cloudformation/
Creative Commons Attribution Share Alike 4.0 International
1.11k stars 56 forks source link

AWS::DirectoryService::MicrosoftAD - AWS::DirectoryService::* - !GetAtt SecurityGroup #568

Open guidola opened 4 years ago

guidola commented 4 years ago

2. Scope of request

AWS::DirectoryService::* should Ideally return the security group that aws creates around it to make it easier to add additional entries which need to be added to allow integration with other dns servers or domain controllers.

3. Expected behavior

The 'Create' and 'Update' functions should always return the 'SecurityGroup' that for example 'DescribeDirectories' operation of the Sdk returns as an attribute later available through the !GetAtt function.

5. Helpful Links to speed up research and evaluation

https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/DirectoryService.html#describeDirectories-property

6. Category (required) - Will help with tagging and be easier to find by other users to +1

  1. Other (IoT, Migration, Budgets...)

7. Any additional context (optional)

rshayman commented 2 years ago

For example,

Having the directory's security Group available, would make it easier to configure the engress rules for a (Route53) Outbound Resolver Endpoint. At present, I have to added the AD IP addresses individually rather than by security group ID, which is less than ideal.