-
Notifications
You must be signed in to change notification settings - Fork 35
Open
Labels
Description
Describe the bug
When the prerequisite Guardrail for preventive guardrails is active it is not possible to create Dashboards with this cdk resource.
To Reproduce
Steps to reproduce the behavior:
Activate guardrail CT.CLOUDFORMATION.PR.1
Try to create a new Dashboard while the guardrail is active like this:
new DatadogCloudFormationResource(this, 'DatadogDashboardResource', {
typeName: DatadogCfResourceName.DASHBOARD,
datadogSecrets: datadogSecrets
})
Logs
Received response status [FAILED] from custom resource. Message returned: User: arn:aws:sts::***:assumed-role/***/*** is not authorized to perform: cloudformation:SetTypeConfiguration on resource: arn:aws:cloudformation:eu-central-1:***:type/resource/Datadog-Dashboards-Dashboard with an explicit deny in a service control policy (RequestId: ***)
Expected behavior
It should be able to use this resource with the most basic guardrails.
Reactions are currently unavailable