The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.
Describe the bug
The template has a Lambda Backed Custom Resource (CustomControlTowerDeploymentLambda) that modifies the attribute of the S3 Bucket (CustomControlTowerPipelineS3Bucket) created by the same stack. Thus, causing a configuration drift and potential alerts and bigger issues. Is there any way to avoid that? Perhaps avoid custom resources that configure stack managed resources? Thx
To Reproduce
Launch the Stack, check drift.
Expected behavior
Expected behaviour is to have no configuration drifts after stack creation. This could cause other issues if we had any mechanisms to revert drifts automatically.
Please complete the following information about the solution:
[x] Version: v2.2.0
[x] Region: eu-west-1
[x] Was the solution modified from the version published on this repository? NO
[x] If the answer to the previous question was yes, are the changes available on GitHub? NO
[x] Have you checked your service quotas for the sevices this solution uses? N/A
[x] Were there any errors in the CloudWatch Logs? N/A
Screenshots
If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).
Additional context
Add any other context about the problem here.
Describe the bug The template has a Lambda Backed Custom Resource (CustomControlTowerDeploymentLambda) that modifies the attribute of the S3 Bucket (CustomControlTowerPipelineS3Bucket) created by the same stack. Thus, causing a configuration drift and potential alerts and bigger issues. Is there any way to avoid that? Perhaps avoid custom resources that configure stack managed resources? Thx
To Reproduce Launch the Stack, check drift.
Expected behavior Expected behaviour is to have no configuration drifts after stack creation. This could cause other issues if we had any mechanisms to revert drifts automatically.
Please complete the following information about the solution:
Screenshots If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).
Additional context Add any other context about the problem here.