Bugs That Bite
Published in

Bugs That Bite

[‘ ‘] value passed to — parameter-overrides must be of format Key=Value

Incorrect CloudFormation error message when using AWS profiles

I could see how this error could be extremely confusing to someone who hasn’t programmed for years and knows what kind of non-sensical error messages can be generated by parsers.

Once again this error message really didn’t have to do what the stated error message. There was nothing wrong with the value I was passing into a CloudFormation template.

The problem was that the parser that executes the AWS CLI cloudformation deploy command doesn’t correctly recognize a new switch on the command line. I put the profile option at the end of the command and the parser thought it was part of the parameter overrides just before that switch. I fixed it by simply moving the profile option before the parameter overrides option. This parsing error could have security implications but I don’t have time to think about that any further.

Basically I changed this:

aws cloudformation deploy \
--stack-name $groupname \
--template-file cfn/group_batch_job_admins.yaml \
--parameter-overrides \
groupnameparam=$groupname \
--profile $profile

to this:

aws cloudformation deploy \
--profile $profile \
--stack-name $groupname \
--template-file cfn/group_batch_job_admins.yaml \
--parameter-overrides \
groupnameparam=$groupname

Teri Radichel

If you liked this story please clap and follow:

Medium: Teri Radichel or Email List: Teri Radichel
Twitter: @teriradichel or @2ndSightLab
Requests services via LinkedIn: Teri Radichel or IANS Research

© 2nd Sight Lab 2022

____________________________________________

Author:

Cybersecurity for Executives in the Age of Cloud on Amazon

Need Cloud Security Training? 2nd Sight Lab Cloud Security Training

Is your cloud secure? Hire 2nd Sight Lab for a penetration test or security assessment.

Have a Cybersecurity or Cloud Security Question? Ask Teri Radichel by scheduling a call with IANS Research.

Cybersecurity & Cloud Security Resources by Teri Radichel: Cybersecurity and Cloud security classes, articles, white papers, presentations, and podcasts

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Teri Radichel

Teri Radichel

Cloud Security Training and Penetration Testing | GSE, GSEC, GCIH, GCIA, GCPM, GCCC, GREM, GPEN, GXPN | AWS Hero | Infragard | IANS Faculty | 2ndSightLab.com