dflook / cloudformation-dns-certificate

Cloudformation DNS Validated Certificate Resource
MIT License
48 stars 13 forks source link

First describe_certificate call does not return DomainValidationOptions #6

Closed mseiwald closed 5 years ago

mseiwald commented 5 years ago

Since yesterday we are running into the issue that the Lambda fails with the following error:

Traceback (most recent call last):
File "/var/task/index.py", line 74, in handler
j()
File "/var/task/index.py", line 57, in j
for F in K[Z]:
KeyError: 'DomainValidationOptions'

Apparently this is because the first call to describe_certificate here does not return DomainValidationOptions. After adding a sleep(10) directly in front of the describe_certificate it starts working again.

dflook commented 5 years ago

Thanks for creating an issue, I'll look at this today.

dflook commented 5 years ago

What region are you creating the certificate in? I can't seem to reproduce this in eu-north-1.

mseiwald commented 5 years ago

eu-west-1

dflook commented 5 years ago

This stopped working in eu-west-1 and possibly some other regions due to a change in ACM API behaviour. It's fixed in 1.7.1 and verified to work in all regions.