Pahud Hsieh

## Current vs Expected Behavior ```mermaid flowchart TD A["User runs amplify add auth"] --> B["CLI generates UpdateRolesWithIDPFunction"] B --> C["Function deployed with current runtime"] C --> D["User wants to upgrade...

Make perfect sense to me. Welcome to submit a PR. Thank you.

Yes I can reproduce that by following your steps. I think we need to look into the implementation from the custom resource to get it fixed.

Thank you for bringing this up. This is a very great use case. I guess the code should be like: stack.ts ```ts export class PrimaryRegionStack extends Stack { readonly primaryKmsKeyArn:...

@justin-masse Check my provided app.ts above: ``` const primaryStack = new PrimaryRegionStack(app, 'primary-stack', { env }); new SecondaryRegionStack(app, 'secondary-stack', { env: uw2env, primaryKmsKeyArn: primaryStack.primaryKmsKeyArn, crossRegionReferences: true, }); ``` This implicitly...

>If there was a method on ISecret to attach a KMS key ISecret could be a reference of an existing Secret created outsides cloudformation and CDK/CFN generally can't modify the...

The `generateKey()` function for me is like this FYI. Definitely could be scoped down a little bit further. Just FYR. ```ts function generateKeyPolicy(scope: Construct) { // return a dummy policy(do...

>we don't use cdk deploy instead we use the output CFN templates and run them through codepipeline Oh if you don't use `cdk deploy` then it would be another story....

If you are deploying with CloudFormation deployment actions from the pipeline then you can control the deployment sequence from the pipeline. For example 1. DeployActionUE1: deploy the `us-east-1` stack 2....

Not sure if you are on cdk.dev slack. Feel free to ping me on that slack if you need more ad-hoc discussion with me.