boto3 error for creating stack instances with "deployment targets"

user2051904 0
Viewed 33

I'm using service managed permission to create_stack_instances for an OU, filtered by intersection of a list of accounts and when i run the command, it gives me an error, Can someone please tell me what's wrong with my code here?

  1. error via cli

    Parameter validation failed: Unknown parameter in DeploymentTargets: "AccountFilterType", must be one of: Accounts, AccountsUrl, OrganizationalUnitIds

  2. error via lambda

    [ERROR] ParamValidationError: Parameter validation failed: Unknown parameter in DeploymentTargets: "AccountFilterType", must be one of: Accounts, AccountsUrl, OrganizationalUnitIds

  3. lambda code:

    def add_stack_to_stackset(StackSetName, accountid):

     response = CF.create_stack_instances(
     StackSetName=StackSetName,
     DeploymentTargets={
         'OrganizationalUnitIds': ['ou-blah'],
          'Accounts': [accountid],
         'AccountFilterType': 'INTERSECTION'
     },
     Regions=['us-east-1']
 )
 op_id = response['OperationId']
 return op_id

  4. cli code

    aws cloudformation create-stack-instances --stack-set-name demo --deployment-targets OrganizationalUnitIds=ou-blah,Accounts=12345,AccountFilterType=INTERSECTION --regions us-east-1

amazon-cloudformation boto3 aws-lambda amazon-web-services python-3.x
1 Answers

Sometimes ValidationErrors are just bugs or occur when you are using an old version of boto3 - for example, in the newest version of boto3 INTERSECTION is a valid parameter (if you are using this version then it is a bug...).

You can always disable request validation:

parameter_validation

Disable parameter validation (default is true, parameters are validated). This is a Boolean value that is either true or false. Whenever you make an API call using a client, the parameters you provide are run through a set of validation checks, including (but not limited to) required parameters provided, type checking, no unknown parameters, minimum length checks, and so on. Typically, you should leave parameter validation enabled.

ZabielskiGabriel0
Related