org-formation-cli icon indicating copy to clipboard operation
org-formation-cli copied to clipboard

example: publish example on how to run cfn-lint

Open OlafConijn opened this issue 4 years ago • 3 comments

put together an example on how to run cfn-lint / cfn-guard on org-formation builds.

OlafConijn avatar Nov 28 '20 09:11 OlafConijn

Are there any plan to support a cloud-formation registry resource schemas definition for org-formation. so that we can perhaps use that with cfn-lint.

nbaillie avatar Jun 30 '22 14:06 nbaillie

hi @nbaillie

org-formation allows you to register types into the cloud-formation resource registry. the organization.yml however is not being executed/processed by CloudFormation. the intention behind this issue was to document something along the lines of:

//print tasks as cloudformation (after having processed the org-formation directives)
org-formation print-tasks ./organization-tasks.yml 

//install lint & run lint
pip install cfn-lint
cfn-lint \"./.printed-stacks/**/*.yaml\" -i W2001,E3001,E1019,W1020,W2509,E3021,E1010

the warnings here are to be expected (most likely false negatives)

did you have something else in mind with cloud-formation registry resource schemas?

thanks

OlafConijn avatar Jun 30 '22 19:06 OlafConijn

Thanks for getting back to me. I had not looked at this in detail but had a thought..

we are seeing this issue: 3001 Invalid or unsupported Type Community::SSO::AssignmentGroup for resource AssignmentGroup in us-east-1

From cfn-lint issue and readme

I had seen that you can do:

-s, --registry-schemas
one or more directories of [CloudFormation Registry](https://aws.amazon.com/blogs/aws/cloudformation-update-cli-third-party-resource-support-registry/) [Resource Schemas](https://github.com/aws-cloudformation/aws-cloudformation-resource-schema/)

The thought was would it help the lint if we had the schema available.

nbaillie avatar Jul 01 '22 07:07 nbaillie