Cloudformation stack apply failed with 404

[ViachaslauKabak]

Hello,
applying AWS instance scheduled stack failed with 404 error
Error: creating CloudFormation Stack (instance_scheduler) : operation error CloudFormation: CreateStack, https response error StatusCode: 404, RequestID: ... , api error UnknownError: UnknownError

with aws_cloudformation_stack. instance_scheduler,
on temp.tf line 1, in resource "aws_cloudformation_stack" "instance_scheduler":
1: resource "aws_cloudformation_stack" "instance_scheduler" {

According cloudformation doc for moto i started moto server with -H 0.0.0.0
Code Example (with provider config):

provider "aws" {
  region = "us-east-1"

  access_key                  = "test"
  secret_key                  = "test"
  s3_use_path_style           = true
  skip_credentials_validation = true
  skip_metadata_api_check     = true
  skip_requesting_account_id  = true

  endpoints {
    ec2            = "http://localhost:5000"
    s3             = "http://localhost:5000"
    iam            = "http://localhost:5000"
    lambda         = "http://localhost:5000"
    ssm            = "http://localhost:5000"
    sts            = "http://localhost:5000"
    cloudformation = "http://localhost:5000"
    kms            = "http://localhost:5000"
    eventbridge    = "http://localhost:5000"
    events         = "http://localhost:5000"
    backup         = "http://localhost:5000"
    auditmanager   = "http://localhost:5000"
    account        = "http://localhost:5000"
    s3control      = "http://localhost:5000"
    dynamodb       = "http://localhost:5000"
    config         = "http://localhost:5000"
    logs           = "http://localhost:5000"
    schemas        = "http://localhost:5000"
    scheduler      = "http://localhost:5000"
    sqs            = "http://localhost:5000"
    ssoadmin       = "http://localhost:5000"
    sns            = "http://localhost:5000"
    cloudwatch     = "http://localhost:5000"

  }
}

resource "aws_cloudformation_stack" "instance_scheduler" {
  name         = "instance_scheduler"
  capabilities = ["CAPABILITY_NAMED_IAM"]
  parameters = {
    Regions    = "us-east-1"
    KmsKeyArns = "arn:aws:kms:*:123456789012:key/*"
    Principals = 123456789012
  }

  template_url = "https://s3.amazonaws.com/solutions-reference/instance-scheduler-on-aws/3.0.11/instance-scheduler-on-aws.template"

}

[bblommers]

Hi @ViachaslauKabak! There's a few issues here. The major/first problem is that Moto will not download the template from S3 itself. It will only check whether this template exists in our mock S3 store, and if not, fail.

If you download and upload the template to Moto before running terraform apply, there are two more problems:

• Our IAM policy validation is too strict (PR already in place to fix that)
• CloudWatch Dashboards are not yet supported by Moto

The latter two problems we can fix, but you would always have to manually upload the template into Moto before this template would work.

For reference, a link to the template:
https://s3.amazonaws.com/solutions-reference/instance-scheduler-on-aws/3.0.11/instance-scheduler-on-aws.template

Which in itself points to the code for a Lambda Function that can be found here:
http://s3.amazonaws.com/solutions-us-east-1/instance-scheduler-on-aws/3.0.11/56fc89e03c0412686b14e88ae8aded501c8adb18d1c559735a2d3bf79813a47d.zip

[ViachaslauKabak]

Hi @bblommers
Thanks a lot!
Could you please add the doc how to verify that file exists in mock s3 store and how to upload it there?

[bblommers]

No problem @ViachaslauKabak. These were the commands that I used:

First download the files:

curl https://s3.amazonaws.com/solutions-reference/instance-scheduler-on-aws/3.0.11/instance-scheduler-on-aws.template -o instance-scheduler-on-aws.template

curl https://s3.amazonaws.com/solutions-us-east-1/instance-scheduler-on-aws/3.0.11/56fc89e03c0412686b14e88ae8aded501c8adb18d1c559735a2d3bf79813a47d.zip -o func.zip --verbose

Then create the buckets in Moto:

aws s3api create-bucket --bucket solutions-reference --endpoint-url http://localhost:5000
aws s3api create-bucket --bucket solutions-us-east-1 --endpoint-url http://localhost:5000

Then add the files to Moto:

aws s3api put-object --bucket solutions-us-east-1 --key "instance-scheduler-on-aws/3.0.11/56fc89e03c0412686b14e88ae8aded501c8adb18d1c559735a2d3bf79813a47d.zip" --body func.zip --endpoint-url http://localhost:5000

aws s3api put-object --bucket solutions-reference --key "instance-scheduler-on-aws/3.0.11/instance-scheduler-on-aws.template" --body instance-scheduler-on-aws.template --endpoint-url http://localhost:5000