Return Value "Name" for a keypair

Question

Return Value "Name" for a keypair

Closed this issue 6 years ago · 22 comments

Hi, how can I get the Return Value "Name" for a keypair. merci A

merci

Answer 1 · 2018-09-29T19:26:21.000Z

@aerioeus Which Name are you looking for? The Name of the user is passed in. The returned AccessKey can be used as a username with login on SMTP.

Answer 2 · 2018-09-29T21:25:38.000Z

I am looking for the resource name, like the keypair name. When I try !Ref Keypair it returns the ARN. but for many uses like ECS I need the pure Keypair name. Right now I use the !split function to get the KeyName from the ARN.

Answer 3 · 2018-09-30T11:45:46.000Z

So, you actually looking to get the Name you provided as input parameter as output parameter. Right?

Answer 4 · 2018-09-30T11:59:45.000Z

Version 0.12.3 has the functionality you requested.

Answer 5 · 2018-10-01T07:12:38.000Z

Merci, what returns the Name? Did you change the !Ref output or do I need to use !GetAtt resource.name?

Answer 6 · 2018-10-01T08:43:03.000Z

You need to do a `!GetAtt resource.Name`. The Ref customarily returns the physical resource id, which is the ARN in this case. Cheers, Mark

…

On Mon, Oct 1, 2018 at 9:12 AM aerioeus ***@***.***> wrote: Merci, what returns the Name? Did you change the !Ref output or do I need to use !GetAtt resource.name? — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub <#22 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAjMa1IQbKy0zPGSiXxgIblU9HfwIqJ-ks5ugcBigaJpZM4W_ve1> .

-- ing.Mark van Holsteijn tel: +316-22-374-114

Answer 7 · 2018-10-01T10:57:38.000Z

sorry, doesnt seem to work,

I'm using:

  ECSKeyPair:
    Type: Custom::KeyPair
    DependsOn: CustomPrivateKey
    Properties:
      Name: ECSKeyPair
      PublicKeyMaterial:
        Fn::GetAtt:
        - CustomPrivateKey
        - PublicKey
      ServiceToken:
        Fn::Join:
        - ":"
        - - arn:aws:lambda
          - Ref: AWS::Region
          - Ref: AWS::AccountId
          - function:binxio-cfn-secret-provider


ECSKeyPairName:
Value: !GetAtt 'ECSKeyPair.name'
Description: ECSKeyPairName

and I'm getting the following error:

CustomResource attribute error: Vendor response doesn't contain name key in object arn:aws:cloudformation:eu-west-1:300746241447:stack/iam-stack-UserGroups-G5K80XQS8UMJ/4c970710-bb64-11e8-b88a-503ac9eaaa99|ECSKeyPair|086b41a6-afb3-4191-bef0-8ebb79e29914 in S3 bucket cloudformation-custom-resource-storage-euwest1

Answer 8 · 2018-10-01T11:40:30.000Z

You should use a capital N -> !GetAtt 'ECSKeyPair.Name'.

Answer 9 · 2018-10-01T12:06:36.000Z

merci, typo, :-)

Answer 10 · 2018-10-01T12:08:33.000Z

Is there any chance I could trouble you with extend the template to generate ssm-secure resources? Merci Andreas

Answer 11 · 2018-10-01T14:28:00.000Z

the Custom::Secret allows you to generate values in the SSM parameter store of type SecureString. It also allows you to store a value, but imho this defeats the purpose as your secret will need to be passed in.

Answer 12 · 2018-10-01T14:30:04.000Z

PS: I would suggest to write:

        Fn::Join:
        - ":"
        - - arn:aws:lambda
          - Ref: AWS::Region
          - Ref: AWS::AccountId
          - function:binxio-cfn-secret-provider

as

      !Sub 'arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:binxio-cfn-secret-provider'

Which is shorter and sweeter...

Answer 13 · 2018-10-01T15:20:08.000Z

ok, let me have a look , that would be great, since calling the ssm-secure is supported by AWS since August, just creating one doesnt work (yet)

Answer 14 · 2018-10-01T15:57:02.000Z

it seems there is an error in the yaml file, when I try to convert it I get: Error: SyntaxError: Unexpected token S in JSON at position 63

Answer 15 · 2018-10-01T19:39:45.000Z

Merci, figured it out myself and tested it, works great, many thanks!!!

Answer 16 · 2018-10-02T09:01:06.000Z

Hi, another question: How can I add a Description to the Secure Parameter?

Answer 17 · 2018-10-02T11:43:32.000Z

i'm sorry to have to bother you again, but it doesnt work with the !GetAtt 'ECSKeyPair.Name'.
the error is still : CustomResource attribute error: Vendor response doesn't contain Name key in object arn:aws:cloudformation:eu

when I try Value: !Select [1, !Split ["/", !Ref ECSKeyPair]] everything works fine; I have repeatedly updated the repository, so I dont know how to fix that..

Answer 18 · 2018-10-02T13:58:44.000Z

another question; is it actually possible to generate multiple keypairs with this provider or is it limited to just one?

Answer 19 · 2018-10-04T15:54:56.000Z

Hi, another question: How can I add a Description to the Secure Parameter?

Yes. Just specify the Description property.

Answer 20 · 2018-10-04T15:55:20.000Z

another question; is it actually possible to generate multiple keypairs with this provider or is it limited to just one?

Yes you can. Just you other key names...

Answer 21 · 2018-10-04T15:56:27.000Z

i'm sorry to have to bother you again, but it doesnt work with the !GetAtt 'ECSKeyPair.Name'.

Did you deploy the latest vesion of the cfn-secret-provider into your account and created the keypair with it?