Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Question] What is validate-tasks actually validating? #591

Open
zwo-bot opened this issue Oct 25, 2024 · 0 comments
Open

[Question] What is validate-tasks actually validating? #591

zwo-bot opened this issue Oct 25, 2024 · 0 comments

Comments

@zwo-bot
Copy link

zwo-bot commented Oct 25, 2024

From the Documentation it is not clear what is the purpose of the validate-tasks is and what it is actually doing. By the required policy, that contains cloudformation:ValidateTemplate I would expect that the stacks of the tasks are rendered and validated using the validate-template endpoint. This is not the case as you can have any malformed CloudFormation template in task that would not pass the validate-template, but pass the validate-tasks action.

It also needs to have access to OrganizationAccessRole and assumes it in the member account. Can you tell me why this admin role is needed for validation, and what is actually validated?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant