How to be less verbose on cdk diff?

[nomike]

I maintain a CI/CD pipeline on a gitlab server which runs cdk diff`` on a quite large repository. The idea is, that people instantly see what effect their code change has. Our code is written as python classes for each resource type (e.g. Route53.AliasRecord, ClourFront.Distribution, etc.) and stacks are created by creating .json` files with parameters in it.

Though everyone using the repository has some level of tech-savviness, not all of them are familiar with programming or the intricacies of AWS and most people just work with the .json files, whereas the inner workings are maintained by us, the CloudOps team.

I thus want the diff to only show relevant changes.

I've posted a feature request ages ago which resulted in someone more familiar with the aws-cdk source code than I am adding a "--quit" flag (thanks a lot for that), which was implemented after a few months, It had a major bug, which was fixed a year after I filed a bug report, and now that it is finally working, it no longer helps me that much, as aws-cdk outputs a lot more to the terminal nowadays.

So the diff currently looks like this:

$ cdk diff --concurrency=20 --quiet use1-pr-customer-api-public-route53-aliasrecord
Including dependency stacks: use1-pr-customer-api-cloudfront-distribution, use1-pr-customer-api-cloudfront-waf-papplruleset, use1-default-nocaching-cloudfront-cachepolicy, use1-default-cloudfront-originrequestpolicy, use1-default-cloudfront-responseheaderspolicy, use1-default-cloudfront-realtimelogconfig, use1-cloudfront-edge-true-client-ip-cloudfront-edgefunction, use1-pr-customer-api-origin-tmp-tmp-route53-aliasrecord, euc1-aws-waf-logs-eu-central-1-289230003688-s3-bucket, euc1-splunk-cfl-kinesis-kinesisstream, euw1-pr-customer-api-tmp-alb-alb, euw1-bigip0, euw1-pr-customer-api-alb-waf-papplruleset, euw1-vpc, euw1-alb-http-ec2-securitygroup, euw1-alb-https-ec2-securitygroup, euw1-rfc1918-vpc-prefixlist, euw1-appdynamics-vpc-prefixlist, euw1-acmecorp-vpc-prefixlist, global-pr-euw1-acmecorp-com-r53-zone
[Warning at /euw1-pr-customer-api-alb-waf-papplruleset/euw1-rfc1918-private-ip-ranges-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /euw1-pr-customer-api-alb-waf-papplruleset/euw1-acmecorp-ips-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-rate-limit-execption-list-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-fraud-countries-ban-execption-list-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-compliance-countries-ban-execption-list-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-body-waf-regexpatternset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-referrer-waf-regexpatternset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-uri-path-waf-regexpatternset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-pr-regex-blocks-exception-list-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-user-agent-waf-regexpatternset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-query-arguments-waf-regexpatternset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-block-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/use1-global-exception-list-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/euc1-rfc1918-private-ip-ranges-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /use1-pr-customer-api-cloudfront-waf-papplruleset/euc1-acmecorp-ips-waf-ipset_reader] installLatestAwsSdk was not specified, and defaults to true. You probably do not want this. Set the global context flag '@aws-cdk/customresources:installLatestAwsSdkDefault' to false to switch this behavior off project-wide, or set the property explicitly to true if you know you need to call APIs that are not in Lambda's built-in SDK version. [ack: @aws-cdk/custom-resources:installLatestAwsSdkNotSpecified]
[Warning at /euw1-pr-customer-api-tmp-alb-alb/subnet-0] No routeTableId was provided to the subnet at 'euw1-pr-customer-api-tmp-alb-alb/subnet-0'. Attempting to read its .routeTable.routeTableId will return null/undefined. (More info: https://github.com/aws/aws-cdk/pull/3171) [ack: @aws-cdk/aws-ec2:noSubnetRouteTableId]
[Warning at /euw1-pr-customer-api-tmp-alb-alb/subnet-1] No routeTableId was provided to the subnet at 'euw1-pr-customer-api-tmp-alb-alb/subnet-1'. Attempting to read its .routeTable.routeTableId will return null/undefined. (More info: https://github.com/aws/aws-cdk/pull/3171) [ack: @aws-cdk/aws-ec2:noSubnetRouteTableId]
[Info at /use1-pr-customer-api-public-route53-aliasrecord/MappingCopy-AWSCloudFrontPartitionHostedZoneIdMap-c88b0307188360f6083c72a2a857503f8678fb10e7] Consider making this CfnMapping a lazy mapping by providing `lazy: true`: either no findInMap was called or every findInMap could be immediately resolved without using Fn::FindInMap
start: Building 57a500ec68beab2278a65b4d30898ace70eb2e0fe52439e6646780f898020e4e:289230003688-eu-central-1
success: Built 57a500ec68beab2278a65b4d30898ace70eb2e0fe52439e6646780f898020e4e:289230003688-eu-central-1
start: Publishing 57a500ec68beab2278a65b4d30898ace70eb2e0fe52439e6646780f898020e4e:289230003688-eu-central-1
success: Published 57a500ec68beab2278a65b4d30898ace70eb2e0fe52439e6646780f898020e4e:289230003688-eu-central-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 933f1419b8c038424522770923bf3acbe660bc459cfa579b2b5c9ded89e5dbd6:289230003688-us-east-1
success: Built 933f1419b8c038424522770923bf3acbe660bc459cfa579b2b5c9ded89e5dbd6:289230003688-us-east-1
start: Publishing 933f1419b8c038424522770923bf3acbe660bc459cfa579b2b5c9ded89e5dbd6:289230003688-us-east-1
success: Published 933f1419b8c038424522770923bf3acbe660bc459cfa579b2b5c9ded89e5dbd6:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 5f9fae1c6972782af1fe7e8448f0967559bed3b513c5889b90ba4949dde241de:289230003688-us-east-1
success: Built 5f9fae1c6972782af1fe7e8448f0967559bed3b513c5889b90ba4949dde241de:289230003688-us-east-1
start: Publishing 5f9fae1c6972782af1fe7e8448f0967559bed3b513c5889b90ba4949dde241de:289230003688-us-east-1
success: Published 5f9fae1c6972782af1fe7e8448f0967559bed3b513c5889b90ba4949dde241de:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 70247a8522af806b65b6482d349c6bab28d05ce64b1992fe242fce83d3c55edb:289230003688-us-east-1
success: Built 70247a8522af806b65b6482d349c6bab28d05ce64b1992fe242fce83d3c55edb:289230003688-us-east-1
start: Publishing 70247a8522af806b65b6482d349c6bab28d05ce64b1992fe242fce83d3c55edb:289230003688-us-east-1
success: Published 70247a8522af806b65b6482d349c6bab28d05ce64b1992fe242fce83d3c55edb:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building e05d1a6661c4e599a621588223a27121535f61dc882034e5ad5a6e71d1b0960a:289230003688-us-east-1
success: Built e05d1a6661c4e599a621588223a27121535f61dc882034e5ad5a6e71d1b0960a:289230003688-us-east-1
start: Publishing e05d1a6661c4e599a621588223a27121535f61dc882034e5ad5a6e71d1b0960a:289230003688-us-east-1
success: Published e05d1a6661c4e599a621588223a27121535f61dc882034e5ad5a6e71d1b0960a:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 9de273e850109f1dbdeec1b86ef02106d97f0cce714d2c7c24baf4984ec33479:289230003688-eu-central-1
success: Built 9de273e850109f1dbdeec1b86ef02106d97f0cce714d2c7c24baf4984ec33479:289230003688-eu-central-1
start: Publishing 9de273e850109f1dbdeec1b86ef02106d97f0cce714d2c7c24baf4984ec33479:289230003688-eu-central-1
success: Published 9de273e850109f1dbdeec1b86ef02106d97f0cce714d2c7c24baf4984ec33479:289230003688-eu-central-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 5b08677a657b29ea76f323e681736f1ea4406d3546331fa0ca4a91e7eede471f:289230003688-eu-west-1
success: Built 5b08677a657b29ea76f323e681736f1ea4406d3546331fa0ca4a91e7eede471f:289230003688-eu-west-1
start: Publishing 5b08677a657b29ea76f323e681736f1ea4406d3546331fa0ca4a91e7eede471f:289230003688-eu-west-1
success: Published 5b08677a657b29ea76f323e681736f1ea4406d3546331fa0ca4a91e7eede471f:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building c7a521bc06d8270e1dfebd3d757bc0bb29279ca04236ffb82312b09a8e04877a:289230003688-eu-west-1
success: Built c7a521bc06d8270e1dfebd3d757bc0bb29279ca04236ffb82312b09a8e04877a:289230003688-eu-west-1
start: Publishing c7a521bc06d8270e1dfebd3d757bc0bb29279ca04236ffb82312b09a8e04877a:289230003688-eu-west-1
success: Published c7a521bc06d8270e1dfebd3d757bc0bb29279ca04236ffb82312b09a8e04877a:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building a0921441d7f45e8f19a5c9f3e0520f16a1ffc71755614aa3080191a2718f81e9:289230003688-eu-west-1
success: Built a0921441d7f45e8f19a5c9f3e0520f16a1ffc71755614aa3080191a2718f81e9:289230003688-eu-west-1
start: Publishing a0921441d7f45e8f19a5c9f3e0520f16a1ffc71755614aa3080191a2718f81e9:289230003688-eu-west-1
success: Published a0921441d7f45e8f19a5c9f3e0520f16a1ffc71755614aa3080191a2718f81e9:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building a67b75a709c50332de42cf734eda630ea37a8e9cf21fe7282353815b08b74881:289230003688-eu-west-1
success: Built a67b75a709c50332de42cf734eda630ea37a8e9cf21fe7282353815b08b74881:289230003688-eu-west-1
start: Publishing a67b75a709c50332de42cf734eda630ea37a8e9cf21fe7282353815b08b74881:289230003688-eu-west-1
success: Published a67b75a709c50332de42cf734eda630ea37a8e9cf21fe7282353815b08b74881:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building d5fd03add5788fc2f83a76283cb7f2c30114fbf3ebb8b2b8e0011016bed05175:289230003688-eu-west-1
success: Built d5fd03add5788fc2f83a76283cb7f2c30114fbf3ebb8b2b8e0011016bed05175:289230003688-eu-west-1
start: Publishing d5fd03add5788fc2f83a76283cb7f2c30114fbf3ebb8b2b8e0011016bed05175:289230003688-eu-west-1
success: Published d5fd03add5788fc2f83a76283cb7f2c30114fbf3ebb8b2b8e0011016bed05175:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building b50213ed38e27a332446a40ee71f01b9ec09fb198822da7e541c7e8a86751c6f:289230003688-us-east-1
success: Built b50213ed38e27a332446a40ee71f01b9ec09fb198822da7e541c7e8a86751c6f:289230003688-us-east-1
start: Publishing b50213ed38e27a332446a40ee71f01b9ec09fb198822da7e541c7e8a86751c6f:289230003688-us-east-1
success: Published b50213ed38e27a332446a40ee71f01b9ec09fb198822da7e541c7e8a86751c6f:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building a556da0fbab4c53a3be3511a7f8b012c4ee4d061fe180595bb2b0431bc1864d1:289230003688-us-east-1
success: Built a556da0fbab4c53a3be3511a7f8b012c4ee4d061fe180595bb2b0431bc1864d1:289230003688-us-east-1
start: Publishing a556da0fbab4c53a3be3511a7f8b012c4ee4d061fe180595bb2b0431bc1864d1:289230003688-us-east-1
success: Published a556da0fbab4c53a3be3511a7f8b012c4ee4d061fe180595bb2b0431bc1864d1:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building baeffb9c8d53cd0e1ce6b547c50caac45fba2dd83375c4228e9bb91eda41a785:289230003688-eu-west-1
success: Built baeffb9c8d53cd0e1ce6b547c50caac45fba2dd83375c4228e9bb91eda41a785:289230003688-eu-west-1
start: Publishing baeffb9c8d53cd0e1ce6b547c50caac45fba2dd83375c4228e9bb91eda41a785:289230003688-eu-west-1
success: Published baeffb9c8d53cd0e1ce6b547c50caac45fba2dd83375c4228e9bb91eda41a785:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building facee76a338f4e7ad657cd12ebac711f49fc6bee4e8464f742d73819dfddcb52:289230003688-eu-west-1
success: Built facee76a338f4e7ad657cd12ebac711f49fc6bee4e8464f742d73819dfddcb52:289230003688-eu-west-1
start: Publishing facee76a338f4e7ad657cd12ebac711f49fc6bee4e8464f742d73819dfddcb52:289230003688-eu-west-1
success: Published facee76a338f4e7ad657cd12ebac711f49fc6bee4e8464f742d73819dfddcb52:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building f4931ddde8ca727e58ff165daca86ad57fde0c4500f160a66e68841ebeac213e:289230003688-eu-west-1
success: Built f4931ddde8ca727e58ff165daca86ad57fde0c4500f160a66e68841ebeac213e:289230003688-eu-west-1
start: Publishing f4931ddde8ca727e58ff165daca86ad57fde0c4500f160a66e68841ebeac213e:289230003688-eu-west-1
success: Published f4931ddde8ca727e58ff165daca86ad57fde0c4500f160a66e68841ebeac213e:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
start: Building 86a60ae7e6d79c710784bb96d99805a0cca7efa7814a6b83a770717b53228511:289230003688-eu-west-1
success: Built 86a60ae7e6d79c710784bb96d99805a0cca7efa7814a6b83a770717b53228511:289230003688-eu-west-1
start: Publishing 86a60ae7e6d79c710784bb96d99805a0cca7efa7814a6b83a770717b53228511:289230003688-eu-west-1
success: Published 86a60ae7e6d79c710784bb96d99805a0cca7efa7814a6b83a770717b53228511:289230003688-eu-west-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
Stack euw1-pr-customer-api-tmp-alb-alb
Template
[+] Description Description: Load Balancing Pattern for Ideal State: ALB

IAM Statement Changes
┌───┬──────────────────────────────────────────────┬────────┬──────────────────────────────────────────────┬──────────────────────────────────────────────┬───────────┐
│   │ Resource                                     │ Effect │ Action                                       │ Principal                                    │ Condition │
├───┼──────────────────────────────────────────────┼────────┼──────────────────────────────────────────────┼──────────────────────────────────────────────┼───────────┤
│ + │ ${Custom::CrossRegionExportWriterCustomResou │ Allow  │ sts:AssumeRole                               │ Service:lambda.amazonaws.com                 │           │
│   │ rceProvider/Role.Arn}                        │        │                                              │                                              │           │
├───┼──────────────────────────────────────────────┼────────┼──────────────────────────────────────────────┼──────────────────────────────────────────────┼───────────┤
│ + │ arn:aws:ssm:eu-central-1:289230003688:parame │ Allow  │ ssm:DeleteParameters                         │ AWS:${Custom::CrossRegionExportWriterCustomR │           │
│   │ ter/cdk/exports/*                            │        │ ssm:GetParameters                            │ esourceProvider/Role}                        │           │
│   │                                              │        │ ssm:ListTagsForResource                      │                                              │           │
│   │                                              │        │ ssm:PutParameter                             │                                              │           │
└───┴──────────────────────────────────────────────┴────────┴──────────────────────────────────────────────┴──────────────────────────────────────────────┴───────────┘
IAM Policy Changes
┌───┬───────────────────────────────────────────────────────────────┬──────────────────────────────────────────────────────────────────────────────────────────────┐
│   │ Resource                                                      │ Managed Policy ARN                                                                           │
├───┼───────────────────────────────────────────────────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ + │ ${Custom::CrossRegionExportWriterCustomResourceProvider/Role} │ {"Fn::Sub":"arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"} │
└───┴───────────────────────────────────────────────────────────────┴──────────────────────────────────────────────────────────────────────────────────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Parameters
[+] Parameter BootstrapVersion BootstrapVersion: {"Type":"AWS::SSM::Parameter::Value<String>","Default":"/cdk-bootstrap/hnb659fds/version","Description":"Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"}

Resources
[+] AWS::ElasticLoadBalancingV2::LoadBalancer alb-pr-customer-api-tmp albprcustomerapitmp41E75A29 
[+] AWS::Shield::Protection Protection Protection 
[+] AWS::WAFv2::WebACLAssociation alb-pr-customer-api-tmp-waf-association albprcustomerapitmpwafassociation 
[+] AWS::ElasticLoadBalancingV2::TargetGroup pr-customer-api-tmp prcustomerapitmpF7F390CE 
[+] AWS::ElasticLoadBalancingV2::Listener alb-listener-pr-customer-api-tmp-tls-redirect alblistenerprcustomerapitmptlsredirect9BB0ED0F 
[+] AWS::CertificateManager::Certificate alb_cerficicate albcerficicateDF3D810C 
[+] AWS::CloudWatch::Alarm alb_cerficicate-expiry-alarm albcerficicateexpiryalarmE659B432 
[+] AWS::ElasticLoadBalancingV2::Listener alb-listener-pr-customer-api-tmp-tls alblistenerprcustomerapitmptls2D2C5F20 
[+] AWS::SSM::Parameter ssm_export_arn ssmexportarnCB0F9BB0 
[+] AWS::SSM::Parameter ssm_export_security_group_id ssmexportsecuritygroupidA0C899FF 
[+] AWS::SSM::Parameter ssm_export_domain_name ssmexportdomainname642C6D8A 
[+] AWS::SSM::Parameter ssm_export_canonical_hosted_zone_id ssmexportcanonicalhostedzoneid88359384 
[+] Custom::CrossRegionExportWriter ExportsWritereucentral1E172851B/Resource ExportsWritereucentral1E172851B74269898 
[+] AWS::IAM::Role Custom::CrossRegionExportWriterCustomResourceProvider/Role CustomCrossRegionExportWriterCustomResourceProviderRoleC951B1E1 
[+] AWS::Lambda::Function Custom::CrossRegionExportWriterCustomResourceProvider/Handler CustomCrossRegionExportWriterCustomResourceProviderHandlerD8786E8A 

Outputs
[+] Output alb-pr-customer-api-tmp-arn albprcustomerapitmparn: {"Value":{"Ref":"albprcustomerapitmp41E75A29"}}
[+] Output alb-pr-customer-api-tmp-dnsname albprcustomerapitmpdnsname: {"Value":{"Fn::GetAtt":["albprcustomerapitmp41E75A29","DNSName"]}}

Stack use1-pr-customer-api-origin-tmp-tmp-route53-aliasrecord
IAM Statement Changes
┌───┬──────────────────────────────────────────────┬────────┬──────────────────────────────────────────────┬──────────────────────────────────────────────┬───────────┐
│   │ Resource                                     │ Effect │ Action                                       │ Principal                                    │ Condition │
├───┼──────────────────────────────────────────────┼────────┼──────────────────────────────────────────────┼──────────────────────────────────────────────┼───────────┤
│ + │ ${Custom::CrossRegionExportReaderCustomResou │ Allow  │ sts:AssumeRole                               │ Service:lambda.amazonaws.com                 │           │
│   │ rceProvider/Role.Arn}                        │        │                                              │                                              │           │
├───┼──────────────────────────────────────────────┼────────┼──────────────────────────────────────────────┼──────────────────────────────────────────────┼───────────┤
│ + │ arn:aws:ssm:eu-central-1:289230003688:parame │ Allow  │ ssm:AddTagsToResource                        │ AWS:${Custom::CrossRegionExportReaderCustomR │           │
│   │ ter/cdk/exports/use1-pr-customer-api-origin- │        │ ssm:GetParameters                            │ esourceProvider/Role}                        │           │
│   │ tmp-tmp-route53-aliasrecord/*                │        │ ssm:RemoveTagsFromResource                   │                                              │           │
└───┴──────────────────────────────────────────────┴────────┴──────────────────────────────────────────────┴──────────────────────────────────────────────┴───────────┘
IAM Policy Changes
┌───┬───────────────────────────────────────────────────────────────┬──────────────────────────────────────────────────────────────────────────────────────────────┐
│   │ Resource                                                      │ Managed Policy ARN                                                                           │
├───┼───────────────────────────────────────────────────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────┤
│ + │ ${Custom::CrossRegionExportReaderCustomResourceProvider/Role} │ {"Fn::Sub":"arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"} │
└───┴───────────────────────────────────────────────────────────────┴──────────────────────────────────────────────────────────────────────────────────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Parameters
[+] Parameter BootstrapVersion BootstrapVersion: {"Type":"AWS::SSM::Parameter::Value<String>","Default":"/cdk-bootstrap/hnb659fds/version","Description":"Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"}

Resources
[+] AWS::Route53::RecordSet record record10230D7D 
[+] AWS::SSM::Parameter ssm_export_domain_name ssmexportdomainname642C6D8A 
[+] Custom::CrossRegionExportReader ExportsReader/Resource ExportsReader8B249524 
[+] AWS::IAM::Role Custom::CrossRegionExportReaderCustomResourceProvider/Role CustomCrossRegionExportReaderCustomResourceProviderRole10531BBD 
[+] AWS::Lambda::Function Custom::CrossRegionExportReaderCustomResourceProvider/Handler CustomCrossRegionExportReaderCustomResourceProviderHandler46647B68 

start: Building 78bb8d07556903bcfcbfb1b0f85238e831c28184b604897fba804d3a2cb2118d:289230003688-us-east-1
success: Built 78bb8d07556903bcfcbfb1b0f85238e831c28184b604897fba804d3a2cb2118d:289230003688-us-east-1
start: Publishing 78bb8d07556903bcfcbfb1b0f85238e831c28184b604897fba804d3a2cb2118d:289230003688-us-east-1
success: Published 78bb8d07556903bcfcbfb1b0f85238e831c28184b604897fba804d3a2cb2118d:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
Stack use1-pr-customer-api-cloudfront-distribution
Resources
[~] AWS::CloudFront::Distribution distribution distribution114A0A2A 
 └─ [~] DistributionConfig
     └─ [~] .Origins:
         └─ @@ -11,7 +11,7 @@
            [ ]     "TLSv1.2"
            [ ]   ]
            [ ] },
            [-] "DomainName": "customer-api-origin.acmecorp.com",
            [+] "DomainName": "customer-api-origin-tmp-tmp.acmecorp.com",
            [ ] "Id": "use1prcustomerapicloudfrontdistributionOrigin1C326A709",
            [ ] "OriginCustomHeaders": [
            [ ]   {

start: Building f6f51f100af9746a6ab45a3f066f42b2b9fdfa7efccaf8c5a3b7cefd4d11475d:289230003688-us-east-1
success: Built f6f51f100af9746a6ab45a3f066f42b2b9fdfa7efccaf8c5a3b7cefd4d11475d:289230003688-us-east-1
start: Publishing f6f51f100af9746a6ab45a3f066f42b2b9fdfa7efccaf8c5a3b7cefd4d11475d:289230003688-us-east-1
success: Published f6f51f100af9746a6ab45a3f066f42b2b9fdfa7efccaf8c5a3b7cefd4d11475d:289230003688-us-east-1
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
Stack use1-pr-customer-api-public-route53-aliasrecord

✨  Number of stacks with differences: 3

I kind a get why these "InstallLatestAwsSdk was not specified" warnings are there.

I never understood what value those "No routeTableId was provided to the subnet at 'euw1-pr-customer-api-tmp-alb-alb/subnet-0'. Attempting to read its .routeTable.routeTableId will return null/undefined." warnings try to tell me.

I didn't provide a routeTableId. So if I try to read the routeTableId it will be undefined. Sounds a bit like Captain Obvious.

And then there's all the "start: Building", "success: Built", "start: Publishing", "success: published" and "Hold on while we create a read-only change set" messages.

I fear that important stuff will drown in this level of verbosity and would like a way to control that level.

Is there any way I can get rid of at list some of these messages?

• The routeTable thingy is redundant in my opinion and shouldn't be there in the first place.
• I'm aware of the --no-change-set option, but I'm intentionally not using it. So I'd like to suppress that message.
• And I don't care about those assets building and uploading thingies as well.

Any ideas?

[khushail]

Hi @nomike , thanks for getting request for the -quiet flag and finding a bug thereafter. Really appreciate your insights.

Looks like, currently we don't have any other feature that could customise the difference you want to see in the output for the command. However it might be a good feature request if you would like to create one with elaborating your use case and sharing details.