[Bug]: When creating a new DB Storage after creating a App Runner service It can't be deployed

[Frans06]

Description:

I created a new App with Copilot. I wanted to create an App runner service and then attach a DB to this service. I did this a couple of times before without any issues. I installed the latest Copilot version and after trying to follow the same procedure I got the following error at deploying db.

ValidationError: Template error: instance of Fn::GetAtt references undefined resource ServiceSecurityGroup

At the beginning I thought that I had made a mistake but after cleaning up the current app and creating a new one I still had the same problem. I didn't change the auto-generated manifest, and the docker image I was using was public.ecr.aws/docker/library/httpd:2.4

Details:

Copilot version: 1.33.4 OS: Ubuntu 22.04.4 AWS region: us-east-2

Observed result:

ValidationError: Template error: instance of Fn::GetAtt references undefined resource ServiceSecurityGroup

Expected result:

I would expect not to get that error. In case it is an expected behavior I think the CLI and documentation should be updated.

Debugging:

WORKAROUND After digging up the problem I did a workaround forcing a security group on the app runner manifest. Despite of App runner doesn't have a Security group configuration I bypassed the the error.

network:
  vpc:
    placement: private
    security_groups:
      - "sg-0001668de5c18249f"