DeletionPolicy attribute causes errors about aws-security-assessment-solution HOT 4 CLOSED

I'm not able to replicate this, can you please share what settings you used to the deploy the stack and in what region?

from aws-security-assessment-solution.

Hi @aws-brad,

I've used the region eu-west-1 (Ireland) with latest master version of this github repo.
Apart from that, I've used a private S3 bucket for the files, in the same region (eu-west-1).

I'm not sure how I can help, do you want me to configure a new demo AWS account where the error can be reproduced?

from aws-security-assessment-solution.

@aws-brad also in AWS documentation is mentioned that DeletionPolicy is mandatory to be in the CloudFormation template. See https://aws.amazon.com/blogs/aws/new-import-existing-resources-into-a-cloudformation-stack/

or https://docs.amazonaws.cn/en_us/AWSCloudFormation/latest/UserGuide/resource-import-existing-stack.html

Quote:

In this template I am setting DeletionPolicy to Retain for both resources. In this way, if I remove them from the stack, they will not be deleted. This is a good option for resources which contain data you don’t want to delete by mistake, or that you may want to move to a different stack in the future. It is mandatory for imported resources to have a deletion policy set, so you can safely and easily revert the operation, and be protected from mistakenly deleting resources that were imported by someone else.

from aws-security-assessment-solution.

The tool is not meant to be persistent, rather it's to be used for a point in time assessment. By design, the environment will self terminate after completing the analysis, however the S3 bucket and data will persist until the stack is deleted.

from aws-security-assessment-solution.