Revert "Remove error"

[Divyaasm]

Reverts #35

[Divyaasm]

Stack Changeset Details

## CI-Config Stack Changeset

> [email protected] cdk
> cdk diff OpenSearch-CI-Config-Dev -c useSsl=false -c serverAccessType=prefixList -c restrictServerAccessTo=pl-60b85b09

Stack OpenSearch-CI-Config-Dev
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
There were no differences

✨  Number of stacks with differences: 0


## CI-Dev Stack ChangeSet

> [email protected] cdk
> cdk diff OpenSearch-CI-Dev -c useSsl=true -c authType=github -c dataRetention=true -c macAgent=true -c useProdAgents=true -c enableViews=true -c ignoreResourcesFailures=false -c serverAccessType=prefixList -c restrictServerAccessTo=pl-60b85b09

Including dependency stacks: OpenSearch-CI-Config-Dev
[Warning at /OpenSearch-CI-Dev/MainNodeAsg] desiredCapacity has been configured. Be aware this will reset the size of your AutoScalingGroup on every deployment. See https://github.com/aws/aws-cdk/issues/5215 [ack: @aws-cdk/aws-autoscaling:desiredCapacitySet]
Stack OpenSearch-CI-Config-Dev
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
There were no differences
Stack OpenSearch-CI-Dev
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
IAM Statement Changes
┌───┬───────────────────────────────────────────────────────────────────────────────┬────────┬────────────────────────────────────────┬──────────────────────────────────────────────────┬───────────────────────────────────────────────┐
│   │ Resource                                                                      │ Effect │ Action                                 │ Principal                                        │ Condition                                     │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ + │ ${jenkinsAuditBucket.Arn}/loadBalancerAccessLogs/AWSLogs/${AWS::AccountId}/*  │ Allow  │ s3:PutObject                           │ AWS:arn:${AWS::Partition}:iam::[MASKED]:root │                                               │
│ + │ ${jenkinsAuditBucket.Arn}/loadBalancerAccessLogs/AWSLogs/${AWS::AccountId}/*  │ Allow  │ s3:PutObject                           │ Service:delivery.logs.amazonaws.com              │ "StringEquals": {                             │
│   │                                                                               │        │                                        │                                                  │   "s3:x-amz-acl": "bucket-owner-full-control" │
│   │                                                                               │        │                                        │                                                  │ }                                             │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ - │ ${jenkinsAuditBucket.Arn}/loadBalancerAccessLogs/AWSLogs/[MASKED]/*       │ Allow  │ s3:PutObject                           │ AWS:arn:${AWS::Partition}:iam::[MASKED]:root │                                               │
│ - │ ${jenkinsAuditBucket.Arn}/loadBalancerAccessLogs/AWSLogs/[MASKED]/*       │ Allow  │ s3:PutObject                           │ Service:delivery.logs.amazonaws.com              │ "StringEquals": {                             │
│   │                                                                               │        │                                        │                                                  │   "s3:x-amz-acl": "bucket-owner-full-control" │
│   │                                                                               │        │                                        │                                                  │ }                                             │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ + │ *                                                                             │ Allow  │ ecr-public:GetAuthorizationToken       │ AWS:${OpenSearch-CI-AgentNodeRole}               │ "StringEquals": {                             │
│   │                                                                               │        │ sts:GetServiceBearerToken              │                                                  │   "aws:RequestedRegion": "us-east-1",         │
│   │                                                                               │        │                                        │                                                  │   "aws:PrincipalAccount": [                   │
│   │                                                                               │        │                                        │                                                  │     "${AWS::AccountId}"                       │
│   │                                                                               │        │                                        │                                                  │   ]                                           │
│   │                                                                               │        │                                        │                                                  │ }                                             │
│ - │ *                                                                             │ Allow  │ ecr-public:GetAuthorizationToken       │ AWS:${OpenSearch-CI-AgentNodeRole}               │ "StringEquals": {                             │
│   │                                                                               │        │ sts:GetServiceBearerToken              │                                                  │   "aws:RequestedRegion": "us-east-1",         │
│   │                                                                               │        │                                        │                                                  │   "aws:PrincipalAccount": [                   │
│   │                                                                               │        │                                        │                                                  │     "[MASKED]"                            │
│   │                                                                               │        │                                        │                                                  │   ]                                           │
│   │                                                                               │        │                                        │                                                  │ }                                             │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ + │ arn:aws:ecr-public::${AWS::AccountId}:repository/*                            │ Allow  │ ecr-public:BatchCheckLayerAvailability │ AWS:${OpenSearch-CI-AgentNodeRole}               │ "StringEquals": {                             │
│   │                                                                               │        │ ecr-public:CompleteLayerUpload         │                                                  │   "aws:RequestedRegion": "us-east-1",         │
│   │                                                                               │        │ ecr-public:DescribeImageTags           │                                                  │   "aws:PrincipalAccount": [                   │
│   │                                                                               │        │ ecr-public:DescribeImages              │                                                  │     "${AWS::AccountId}"                       │
│   │                                                                               │        │ ecr-public:DescribeRegistries          │                                                  │   ]                                           │
│   │                                                                               │        │ ecr-public:DescribeRepositories        │                                                  │ }                                             │
│   │                                                                               │        │ ecr-public:GetRegistryCatalogData      │                                                  │                                               │
│   │                                                                               │        │ ecr-public:GetRepositoryCatalogData    │                                                  │                                               │
│   │                                                                               │        │ ecr-public:GetRepositoryPolicy         │                                                  │                                               │
│   │                                                                               │        │ ecr-public:InitiateLayerUpload         │                                                  │                                               │
│   │                                                                               │        │ ecr-public:PutImage                    │                                                  │                                               │
│   │                                                                               │        │ ecr-public:UploadLayerPart             │                                                  │                                               │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ - │ arn:aws:ecr-public::[MASKED]:repository/*                                 │ Allow  │ ecr-public:BatchCheckLayerAvailability │ AWS:${OpenSearch-CI-AgentNodeRole}               │ "StringEquals": {                             │
│   │                                                                               │        │ ecr-public:CompleteLayerUpload         │                                                  │   "aws:RequestedRegion": "us-east-1",         │
│   │                                                                               │        │ ecr-public:DescribeImageTags           │                                                  │   "aws:PrincipalAccount": [                   │
│   │                                                                               │        │ ecr-public:DescribeImages              │                                                  │     "[MASKED]"                            │
│   │                                                                               │        │ ecr-public:DescribeRegistries          │                                                  │   ]                                           │
│   │                                                                               │        │ ecr-public:DescribeRepositories        │                                                  │ }                                             │
│   │                                                                               │        │ ecr-public:GetRegistryCatalogData      │                                                  │                                               │
│   │                                                                               │        │ ecr-public:GetRepositoryCatalogData    │                                                  │                                               │
│   │                                                                               │        │ ecr-public:GetRepositoryPolicy         │                                                  │                                               │
│   │                                                                               │        │ ecr-public:InitiateLayerUpload         │                                                  │                                               │
│   │                                                                               │        │ ecr-public:PutImage                    │                                                  │                                               │
│   │                                                                               │        │ ecr-public:UploadLayerPart             │                                                  │                                               │
├───┼───────────────────────────────────────────────────────────────────────────────┼────────┼────────────────────────────────────────┼──────────────────────────────────────────────────┼───────────────────────────────────────────────┤
│ - │ arn:aws:iam::[MASKED]:role/OpenSearchSignerMac-ArtifactAccessRole         │ Allow  │ sts:AssumeRole                         │ AWS:${OpenSearch-CI-AgentNodeRole}               │                                               │
│   │ arn:aws:iam::[MASKED]:role/data-prepper-artifacts-upload-role             │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/fork-aws-public-role                           │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/ml-models-artifacts-upload-role                │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/opensearch-migrations-artifacts-upload-role    │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/reporting-cli-artifacts-upload-role            │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/sql-jdbc-upload-role                           │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/sql-odbc-upload-role                           │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/OpenSearchJarSignerApp-Prod-ArtifactAccessRole │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/MensorAPIPartnerAccess                         │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/cfn-set-up                                     │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/SearchServiceCodeSigner-ArtifactAccessRole     │        │                                        │                                                  │                                               │
│   │ arn:aws:iam::[MASKED]:role/OpenSearchSignerPGPSigning-ArtifactAccessRole  │        │                                        │                                                  │                                               │
└───┴───────────────────────────────────────────────────────────────────────────────┴────────┴────────────────────────────────────────┴──────────────────────────────────────────────────┴───────────────────────────────────────────────┘
Security Group Changes
┌───┬─────────────────────────────┬─────┬──────────┬─────────────────────────────┐
│   │ Group                       │ Dir │ Protocol │ Peer                        │
├───┼─────────────────────────────┼─────┼──────────┼─────────────────────────────┤
│ + │ ${ExternalAccessSG.GroupId} │ In  │ TCP 80   │ Everyone (IPv4)             │
│ + │ ${ExternalAccessSG.GroupId} │ In  │ TCP 443  │ pl-60b85b09                 │
│ - │ ${ExternalAccessSG.GroupId} │ In  │ TCP 80   │ pl-60b85b09                 │
├───┼─────────────────────────────┼─────┼──────────┼─────────────────────────────┤
│ + │ ${MainNodeSG.GroupId}       │ In  │ TCP 443  │ ${ExternalAccessSG.GroupId} │
│ - │ ${MainNodeSG.GroupId}       │ In  │ TCP 80   │ ${ExternalAccessSG.GroupId} │
└───┴─────────────────────────────┴─────┴──────────┴─────────────────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Parameters
[-] Parameter PackagingAggregateId: {"Type":"String","Default":"default_aggregate_id","Description":"Aggregate Id that can be used to reference resources from different transformations"}
[-] Parameter PackagingTransformId: {"Type":"String","Default":"default_aggregate_id_transform","Description":"Deployment Id is used to figure out artifact locations in S3 and ECR"}
[-] Parameter PackagingS3KeyPrefix: {"Type":"String","Default":"local_development_resources","Description":"Deployment Id is used to figure out artifact locations in S3 and ECR"}
[-] Parameter AmazonPipelinesRollbackFlag: {"Type":"String","Default":"false","Description":"When a rollback deployment is triggered in Pipelines, the system will override the AmazonPipelinesRollbackFlag with a value of true"}
[+] Parameter BootstrapVersion BootstrapVersion: {"Type":"AWS::SSM::Parameter::Value<String>","Default":"/cdk-bootstrap/hnb659fds/version","Description":"Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"}
[~] Parameter authType authType: {"Type":"String","Default":"default","Description":"Auth type for jenkins login"} to {"Type":"String","Default":"github","Description":"Auth type for jenkins login"}
[~] Parameter useSsl useSsl: {"Type":"String","Default":false,"Description":"If the jenkins instance should be access via SSL"} to {"Type":"String","Default":true,"Description":"If the jenkins instance should be access via SSL"}

Conditions
[-] Condition IsRollback: {"Fn::Equals":[{"Ref":"AmazonPipelinesRollbackFlag"},"true"]}

Resources
[-] AWS::EC2::Subnet JenkinsVPC/PublicSubnet3/Subnet JenkinsVPCPublicSubnet3Subnet803B093B destroy
[-] AWS::EC2::RouteTable JenkinsVPC/PublicSubnet3/RouteTable JenkinsVPCPublicSubnet3RouteTable2B4148BC destroy
[-] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PublicSubnet3/RouteTableAssociation JenkinsVPCPublicSubnet3RouteTableAssociation4E00BC13 destroy
[-] AWS::EC2::Route JenkinsVPC/PublicSubnet3/DefaultRoute JenkinsVPCPublicSubnet3DefaultRoute8C25D44E destroy
[-] AWS::EC2::EIP JenkinsVPC/PublicSubnet3/EIP JenkinsVPCPublicSubnet3EIP200F48D7 destroy
[-] AWS::EC2::NatGateway JenkinsVPC/PublicSubnet3/NATGateway JenkinsVPCPublicSubnet3NATGatewayDEBAC0DB destroy
[-] AWS::EC2::Subnet JenkinsVPC/PrivateSubnet3/Subnet JenkinsVPCPrivateSubnet3Subnet2A4510C8 destroy
[-] AWS::EC2::RouteTable JenkinsVPC/PrivateSubnet3/RouteTable JenkinsVPCPrivateSubnet3RouteTable63A06CC3 destroy
[-] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PrivateSubnet3/RouteTableAssociation JenkinsVPCPrivateSubnet3RouteTableAssociation18378B92 destroy
[-] AWS::EC2::Route JenkinsVPC/PrivateSubnet3/DefaultRoute JenkinsVPCPrivateSubnet3DefaultRouteFA303C9E destroy
[-] AWS::EC2::SecurityGroupIngress ExternalAccessSG/from pl-60b85b09:80 ExternalAccessSGfrompl60b85b09806F58559B destroy
[-] AWS::EC2::SecurityGroupIngress MainNodeSG/from OpenSearchCIDevExternalAccessSG215C7C86:80 MainNodeSGfromOpenSearchCIDevExternalAccessSG215C7C8680E9DD0FEC destroy
[-] AWS::IAM::Policy OpenSearch-CI-AgentNodeRole/DefaultPolicy OpenSearchCIAgentNodeRoleDefaultPolicy7F2F563B destroy
[-] AWS::EFS::FileSystem EFSfilesystem EFSfilesystemEC7F7B0C orphan
[-] AWS::EFS::MountTarget EFSfilesystem/EfsMountTarget1 EFSfilesystemEfsMountTarget10AC47AA6 destroy
[-] AWS::EFS::MountTarget EFSfilesystem/EfsMountTarget2 EFSfilesystemEfsMountTarget2703C3608 destroy
[-] AWS::EFS::MountTarget EFSfilesystem/EfsMountTarget3 EFSfilesystemEfsMountTarget3DBAC0813 destroy
[+] AWS::EC2::SecurityGroupIngress ExternalAccessSG/from pl-60b85b09:443 ExternalAccessSGfrompl60b85b0944383BF8E62 
[+] AWS::EC2::SecurityGroupIngress MainNodeSG/from OpenSearchCIDevExternalAccessSG215C7C86:443 MainNodeSGfromOpenSearchCIDevExternalAccessSG215C7C8644316F7D90A 
[+] AWS::ElasticLoadBalancingV2::Listener JenkinsALB/Redirect80To443 JenkinsALBRedirect80To443905217EC 
[~] AWS::S3::BucketPolicy jenkinsAuditBucket/Policy jenkinsAuditBucketPolicyF5EA2021 
 └─ [~] PolicyDocument
     └─ [~] .Statement:
         └─ @@ -26,7 +26,11 @@
            [ ]           "Arn"
            [ ]         ]
            [ ]       },
            [-]       "/loadBalancerAccessLogs/AWSLogs/[MASKED]/*"
            [+]       "/loadBalancerAccessLogs/AWSLogs/",
            [+]       {
            [+]         "Ref": "AWS::AccountId"
            [+]       },
            [+]       "/*"
            [ ]     ]
            [ ]   ]
            [ ] }
            @@ -52,7 +56,11 @@
            [ ]           "Arn"
            [ ]         ]
            [ ]       },
            [-]       "/loadBalancerAccessLogs/AWSLogs/[MASKED]/*"
            [+]       "/loadBalancerAccessLogs/AWSLogs/",
            [+]       {
            [+]         "Ref": "AWS::AccountId"
            [+]       },
            [+]       "/*"
            [ ]     ]
            [ ]   ]
            [ ] }
[~] AWS::EC2::Subnet JenkinsVPC/PublicSubnet1/Subnet JenkinsVPCPublicSubnet1Subnet70FBE248 replace
 └─ [~] CidrBlock (requires replacement)
     ├─ [-] 10.0.0.0/19
     └─ [+] 10.0.0.0/18
[~] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PublicSubnet1/RouteTableAssociation JenkinsVPCPublicSubnet1RouteTableAssociation15098AB8 replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPublicSubnet1Subnet70FBE248
         └─ [+] JenkinsVPCPublicSubnet1Subnet70FBE248 (replaced)
[~] AWS::EC2::NatGateway JenkinsVPC/PublicSubnet1/NATGateway JenkinsVPCPublicSubnet1NATGateway47D9BCD8 replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPublicSubnet1Subnet70FBE248
         └─ [+] JenkinsVPCPublicSubnet1Subnet70FBE248 (replaced)
[~] AWS::EC2::Subnet JenkinsVPC/PublicSubnet2/Subnet JenkinsVPCPublicSubnet2SubnetC3A1B2BA replace
 └─ [~] CidrBlock (requires replacement)
     ├─ [-] 10.0.32.0/19
     └─ [+] 10.0.64.0/18
[~] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PublicSubnet2/RouteTableAssociation JenkinsVPCPublicSubnet2RouteTableAssociationA58FD216 replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPublicSubnet2SubnetC3A1B2BA
         └─ [+] JenkinsVPCPublicSubnet2SubnetC3A1B2BA (replaced)
[~] AWS::EC2::NatGateway JenkinsVPC/PublicSubnet2/NATGateway JenkinsVPCPublicSubnet2NATGateway947FA98D replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPublicSubnet2SubnetC3A1B2BA
         └─ [+] JenkinsVPCPublicSubnet2SubnetC3A1B2BA (replaced)
[~] AWS::EC2::Subnet JenkinsVPC/PrivateSubnet1/Subnet JenkinsVPCPrivateSubnet1SubnetF4E4D2EC replace
 └─ [~] CidrBlock (requires replacement)
     ├─ [-] 10.0.96.0/19
     └─ [+] 10.0.128.0/18
[~] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PrivateSubnet1/RouteTableAssociation JenkinsVPCPrivateSubnet1RouteTableAssociationD53BEB6A replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPrivateSubnet1SubnetF4E4D2EC
         └─ [+] JenkinsVPCPrivateSubnet1SubnetF4E4D2EC (replaced)
[~] AWS::EC2::Subnet JenkinsVPC/PrivateSubnet2/Subnet JenkinsVPCPrivateSubnet2Subnet6A372843 replace
 └─ [~] CidrBlock (requires replacement)
     ├─ [-] 10.0.128.0/19
     └─ [+] 10.0.192.0/18
[~] AWS::EC2::SubnetRouteTableAssociation JenkinsVPC/PrivateSubnet2/RouteTableAssociation JenkinsVPCPrivateSubnet2RouteTableAssociation5923ABF1 replace
 └─ [~] SubnetId (requires replacement)
     └─ [~] .Ref:
         ├─ [-] JenkinsVPCPrivateSubnet2Subnet6A372843
         └─ [+] JenkinsVPCPrivateSubnet2Subnet6A372843 (replaced)
[~] AWS::EC2::SecurityGroup ExternalAccessSG ExternalAccessSGFD03F4DC 
 └─ [+] SecurityGroupIngress
     └─ [{"CidrIp":"0.0.0.0/0","Description":"Allow from anyone on port 80","FromPort":80,"IpProtocol":"tcp","ToPort":80}]
[~] AWS::AutoScaling::LaunchConfiguration MainNodeAsg/LaunchConfig MainNodeAsgLaunchConfigAAD3F8CE replace
 └─ [~] UserData (requires replacement)
     └─ [~] .Fn::Base64:
         └─ [~] .Fn::Join:
             └─ @@ -1,7 +1,7 @@
                [ ] [
                [ ]   "",
                [ ]   [
                [-]     "#!/bin/bash\n# fingerprint: d69b2569ce49673d\n(\n  set +e\n  /opt/aws/bin/cfn-init -v --region ",
                [+]     "#!/bin/bash\n# fingerprint: 3a911304ddddc2bc\n(\n  set +e\n  /opt/aws/bin/cfn-init -v --region ",
                [ ]     {
                [ ]       "Ref": "AWS::Region"
                [ ]     },
                @@ -9,7 +9,7 @@
                [ ] {
                [ ]   "Ref": "AWS::StackName"
                [ ] },
                [-] " --resource MainNodeAsgASGC856B1F7 -c default\n  /opt/aws/bin/cfn-signal -e $? --region ",
                [+] " --resource MainNodeAsgASGC856B1F7 -c default\n  /opt/aws/bin/cfn-signal -e 0 --region ",
                [ ] {
                [ ]   "Ref": "AWS::Region"
                [ ] },
[~] AWS::AutoScaling::AutoScalingGroup MainNodeAsg/ASG MainNodeAsgASGC856B1F7 may be replaced
 └─ [~] VPCZoneIdentifier (may cause replacement)
     └─ @@ -4,8 +4,5 @@
        [ ]   },
        [ ]   {
        [ ]     "Ref": "JenkinsVPCPrivateSubnet2Subnet6A372843"
        [-]   },
        [-]   {
        [-]     "Ref": "JenkinsVPCPrivateSubnet3Subnet2A4510C8"
        [ ]   }
        [ ] ]
[~] AWS::ElasticLoadBalancingV2::LoadBalancer JenkinsALB JenkinsALB9F3D5428 
 ├─ [~] Subnets
 │   └─ @@ -4,8 +4,5 @@
 │      [ ]   },
 │      [ ]   {
 │      [ ]     "Ref": "JenkinsVPCPublicSubnet2SubnetC3A1B2BA"
 │      [-]   },
 │      [-]   {
 │      [-]     "Ref": "JenkinsVPCPublicSubnet3Subnet803B093B"
 │      [ ]   }
 │      [ ] ]
 └─ [~] DependsOn
     └─ @@ -3,7 +3,5 @@
        [ ]   "JenkinsVPCPublicSubnet1RouteTableAssociation15098AB8",
        [ ]   "JenkinsVPCPublicSubnet2DefaultRoute01ECA3F3",
        [ ]   "JenkinsVPCPublicSubnet2RouteTableAssociationA58FD216",
        [-]   "JenkinsVPCPublicSubnet3DefaultRoute8C25D44E",
        [-]   "JenkinsVPCPublicSubnet3RouteTableAssociation4E00BC13",
        [ ]   "jenkinsAuditBucketPolicyF5EA2021"
        [ ] ]
[~] AWS::ElasticLoadBalancingV2::Listener JenkinsALB/JenkinsListener JenkinsALBJenkinsListenerAFCB043D 
 ├─ [+] Certificates
 │   └─ [{"CertificateArn":{"Fn::Join":["",["{{resolve:secretsmanager:",{"Fn::ImportValue":"certificateArnSecret"},":SecretString:::}}"]]}}]
 ├─ [~] Port
 │   ├─ [-] 80
 │   └─ [+] 443
 ├─ [~] Protocol
 │   ├─ [-] HTTP
 │   └─ [+] HTTPS
 └─ [+] SslPolicy
     └─ ELBSecurityPolicy-2016-08
[~] AWS::ElasticLoadBalancingV2::TargetGroup JenkinsALB/JenkinsListener/MainJenkinsNodeTargetGroup JenkinsALBJenkinsListenerMainJenkinsNodeTargetGroup24BBFD71 replace
 ├─ [~] HealthCheckProtocol
 │   ├─ [-] HTTP
 │   └─ [+] HTTPS
 ├─ [~] Port (requires replacement)
 │   ├─ [-] 80
 │   └─ [+] 443
 └─ [~] Protocol (requires replacement)
     ├─ [-] HTTP
     └─ [+] HTTPS

Other Changes
[+] Unknown Rules: {"CheckBootstrapVersion":{"Assertions":[{"Assert":{"Fn::Not":[{"Fn::Contains":[["1","2","3","4","5"],{"Ref":"BootstrapVersion"}]}]},"AssertDescription":"CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."}]}}


✨  Number of stacks with differences: 1