Kevin Teague

The 2020-06-11 change to Troposphere changed props for AWS::ElasticLoadBalancingV2::LoadBalancer SecurityGroups and Subnets from: `'Subnets': (list, False),` -- to --> `'Subnets': ([basestring], False),` https://github.com/cloudtools/troposphere/commit/4d404fafd001f3d01c4bbd2dc322d143f5975143 If you create a `troposphere.elasticloadbalancingv2.LoadBalancer` using `from_dict`...

Validate az CIDRs

1

**What problems do you have?** There are a number of ways to configure segments that can't be provisioned. **What solutions could solve that problem?** Validate the configuration and raise an...

ec2lm fails if instance doesn't have network access

1

The EC2LM bundle doesn't get synced during UserData if the instance doesn't have network access. This is because "yum update -y" is run and when it can't connect it fails...

**What problems do you have?** An ALB requries at least 2 AZs. Paco will try to provision with only 1 AZ and fail on the ALB stack. **What solutions could...

Port kms template to Troposphere

1

**What problems do you have?** The cftemplates/kms.py template is format strings. This was from the early AIM code - most of the other original templates have been ported to use...

**What problems do you have?** Paco generates a Policy which limits access of the Lambda to just the LogGroups it needs. It's good security practice and is _usually_ recommended by...

**What problems do you have?** Paco originally caught errors with a special PacoException class, then a code and message string was passed to the exception. This is clunky and has...

**What problems do you have?** When you run "paco provision" the default is to answer Yes/no prompts. You can skip this with -y but users forget to do this and...

Trying to add a new cert: ``` File "/Users/kteague/water/paco/src/paco/stack_grps/grp_application.py", line 53, in provision acm_ctl.provision() File "/Users/kteague/water/paco/src/paco/controllers/ctl_acm.py", line 67, in provision acm_client.create_domain_validation_records(cert_arn) File "/Users/kteague/water/paco/src/paco/aws_api/acm/ACM.py", line 161, in create_domain_validation_records changes = [...

Paco delete can generate this error: ``` Waiter Error: Waiter StackDeleteComplete failed: Waiter encountered a terminal failure state Stack: NE-anet-dev-App-asgpatch-app-target-instance-iam-role-Role Template: /Users/kteague/water/customers/waterbear-paco/build/waterbear-networks/templates/dev/eu-central-1/NE-anet-dev-App-asgpatch-app-target-instance-iam-role-Role.yaml Stack Status: StackStatus.DELETE_FAILED Status Reasons: LogicalId Status Reason...