bazaarvoice / cloudformation-ruby-dsl

Ruby DSL for creating Cloudformation templates
Apache License 2.0
210 stars 76 forks source link

Update fails if stack contains immutable parameter with NoEcho=true #129

Open robbytx opened 6 years ago

robbytx commented 6 years ago

I believe the source of this issue stems from CFN Ruby DSL thinking that the current value of the parameter is the literal string "****".

If you provide the current value of the parameter, it fails with:

Error: unable to update immutable parameter 'MasterUserPassword=****' to 'MasterUserPassword=<password>'

If you omit a value for the parameter, it fails with:

Error: unable to update immutable parameter 'MasterUserPassword=****' to 'MasterUserPassword='

Because the Immutable attribute is excised from the actual template, I am able to workaround by marking it false, and providing the current value of the parameter.