cloudformation-coverage-roadmap icon indicating copy to clipboard operation
cloudformation-coverage-roadmap copied to clipboard

AWS::EC2::Route support for DestinationPrefixListId

Open mikeydowntown opened this issue 4 years ago β€’ 15 comments

Looks like the CLI and SDKs supports defining a route destination as a prefix list however this is not yet implemented in CloudFormation and I see no evidence that this is planned. Is it? I see that it is implemented in the SecurityGroup resource type as property DestinationPrefixListId.

My use case is that I'm using CFN to create routes across a large number of route tables back to a common set CIDRs, targeted to new transit gateways, via multiple stacks in multiple regions and accounts. These CIDRs will eventually change so customer-managed prefix lists would be a very useful feature here but not practical for me to use if I cannot do so from my CloudFormation template, as I can do for properties such as DestinationCidrBlock.

mikeydowntown avatar Jul 27 '20 20:07 mikeydowntown

We have a similar scenario ☝️ for a project. Would really appreciate DestinationPrefixListId Cloudformation support for AWS::EC2::Route. We have over 400 route tables to be updated and this would extremely beneficial to our automation process.

hugo-galindo avatar Oct 22 '20 02:10 hugo-galindo

#this

terryrankine avatar Oct 22 '20 04:10 terryrankine

This seems like an oversight. Please implement this either as a separate property (e.g DestinationPrefixListId) or as a context sensitive one under the existing DestinationCidrBlock, similar to how it works for Security Group entries, where CidrIp can handle PrefixListId, SecurityGroupId or CIDR ranges. Either way, this is a major inconsistency that needs to be addressed.

datablitz7 avatar Nov 09 '20 09:11 datablitz7

Concurred. Use Prefix lists to manage subnets are very beneficial but without the option to add it to the CFN route entry is a useless feature. I can manually add the Prefix lists manually the route entry to go around this issue, but it defeats the purpose in terms of the CFN automation.

mfang329 avatar Dec 10 '20 01:12 mfang329

bump

Anything being done about this yet?

ghost avatar Mar 29 '21 23:03 ghost

I don't understand how something like this can take 1 year or more to be addressed.

mquidi86 avatar Jun 23 '21 22:06 mquidi86

I have a similar need to all those expressed here.

sbwrege2z avatar Jun 25 '21 19:06 sbwrege2z

This would be very helpful for one of my client projects.

jtaylormayfield avatar Aug 19 '21 15:08 jtaylormayfield

Definitely need this feature. My template to deploy transit gateway, including all the routing, is made unnecessarily complex because I can't route to a prefix list.

patrickmryan avatar Aug 24 '21 00:08 patrickmryan

So disappointed that there is yet another feature without full support in CloudFormation before being launched. Complete lack of shock that it's still not implemented over a year after it being pointed out that it's missing.

geof2001 avatar Nov 04 '21 20:11 geof2001

also willing to take benefit of this πŸ’―

adriantaut avatar Nov 15 '21 15:11 adriantaut

If you're not using CDK this could also apply but you'd have to bake your own CustomResource provider lambda to suit..

Otherwise those of us who use the unstoppable, incredible and amazing AWS CDK: πŸ‘ŒπŸΌπŸ˜ŽπŸš€πŸ™πŸ™Œ

The workaround right now that allows one to keep the infrastructure orchestration and resource building within the stack management and not need an external post script or similar is to use the AWSCustomResource and call the JS SDK CreateRoute with the minimum required params (RouteTableId, DestinantionPrefixListId plus whatever the target is: gateway, endpoint, interface etc)

This is actually what the definition of the what the CustomResource exists for; to fulfil any resource provisioning etc that isn't available natively in CFN constructs.

This is what we use and it's really very cool and effective πŸ”₯πŸš€

And p.s. I wholeheartedly agree with all of you above that this should be naturally supported as an accepted value to cidrIp or as a standalone param to support PLs. However, for reasons beyond comprehension this is not the case yet, and thus we are forced to innovate, evolve and adapt πŸ‘ŒπŸΌπŸ˜ŽπŸ™πŸš€ #spacexFTW

julienbonastre avatar Nov 19 '21 23:11 julienbonastre

Similarly, this ought to be supported by AWS::EC2::TransitGatewayRoute which also support creating routes to prefix lists via console and CLI.

djessup avatar Dec 24 '21 01:12 djessup

This issue is yet to be resolved and is a very frustrating experience.

thenamanpatwari avatar Jul 05 '22 07:07 thenamanpatwari

@thenamanpatwari customresources FTW ! πŸš€ 😍

julienbonastre avatar Jul 05 '22 08:07 julienbonastre

+1 for this. Very annoying gap.

elpres101 avatar Nov 28 '22 14:11 elpres101

Bumping. It doesn't make sense that we can create a PrefixList resource in CF but not use it in routes. This is a gap that should have already been resolved.

bonzai2010 avatar Feb 09 '23 16:02 bonzai2010

Hi, Please address this gap.

disco-msmith avatar Feb 14 '23 16:02 disco-msmith

Any progress on this? Seems like low hanging fruit, easy to implement and a huge benefit.

nwesoccer avatar Apr 05 '23 13:04 nwesoccer

Please implement this - I have repeatedly run into this issue

jackhamburger avatar Apr 12 '23 19:04 jackhamburger

Chill, it's only been 3 years! Check back in 2030.

djessup avatar May 01 '23 23:05 djessup

Let's be honest, CloudFormation is for πŸ¦– πŸ¦• 's..

It's time to drop that pseudo-IaC rubbish and move to a real IaC framework..

For example: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route.html#destination_prefix_list_id

And you can use it with https://developer.hashicorp.com/terraform/cdktf , so it's a WIN WIN! marriage of two superpowers! 😍 πŸš€

julienbonastre avatar May 02 '23 00:05 julienbonastre

great news everyone! DestinationPrefixListId is available.

TheDanBlanco avatar Sep 25 '23 22:09 TheDanBlanco