Skip to content

fix(ecs): TagParameterContainerImage cannot be used across accounts#15073

Merged
mergify[bot] merged 4 commits intoaws:masterfrom
skinny85:fix/cross-account-tag-param-container-image
Jun 15, 2021
Merged

fix(ecs): TagParameterContainerImage cannot be used across accounts#15073
mergify[bot] merged 4 commits intoaws:masterfrom
skinny85:fix/cross-account-tag-param-container-image

Conversation

@skinny85
Copy link
Copy Markdown
Contributor

When TagParameterContainerImage is used from a different acocunt than the service itself is in,
it fails resolution, because the Task's execution Role does not have a physical name set by default.
Create it with PhysicalName.GENERATE_IF_NEEDED, so that it assigns a name when accessed from a cross-account context.

Fixes #15070


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

When TagParameterContainerImage is used from a different acocunt than the service itself is in,
it fails resolution, because the Task's execution Role does not have a physical name set by default.
Create it with PhysicalName.GENERATE_IF_NEEDED, so that it assigns a name when accessed from a cross-account context.

Fixes aws#15070
@skinny85 skinny85 requested a review from SoManyHs June 10, 2021 18:28
@skinny85 skinny85 self-assigned this Jun 10, 2021
@gitpod-io
Copy link
Copy Markdown

gitpod-io bot commented Jun 10, 2021

@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Jun 10, 2021
@SoManyHs SoManyHs added the @aws-cdk/aws-ecs Related to Amazon Elastic Container label Jun 10, 2021
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Jun 15, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: 685fafe
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit 486f2e5 into aws:master Jun 15, 2021
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Jun 15, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@skinny85 skinny85 deleted the fix/cross-account-tag-param-container-image branch June 15, 2021 21:16
hollanddd pushed a commit to hollanddd/aws-cdk that referenced this pull request Aug 26, 2021
…ws#15073)

When TagParameterContainerImage is used from a different acocunt than the service itself is in,
it fails resolution, because the Task's execution Role does not have a physical name set by default.
Create it with PhysicalName.GENERATE_IF_NEEDED, so that it assigns a name when accessed from a cross-account context.

Fixes aws#15070

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

@aws-cdk/aws-ecs Related to Amazon Elastic Container contribution/core This is a PR that came from AWS.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

(aws-codepipeline-actions): TagParameterContainerImage unusable cross-account

3 participants