X509CertificatePem times out during deployment

[jusiskin]

An RFDK user reported experiencing deployment failures related to timeouts in the X509CertificatePem construct's Lambda function. The Lambda timed out and the Cfn response was not received. The Lambda function is currently set to timeout after 30 seconds:

aws-rfdk/packages/aws-rfdk/lib/core/lib/x509-certificate.ts

Line 204 in 18a8098

timeout: Duration.seconds(30),

which is pretty low. We can safely increase this to give the function more time to complete.

Error Log

The following log from the Lambda function was provided. Account IDs and stack names have been scrubbed:

2021-06-16T21:53:43.828Z    <redacted>    INFO    Handling event: 
{
    "RequestType": "Create",
    "ServiceToken": "<redacted>-RQCertGeneratorCD9C63B1-G1PHTCVPwZ8W",
    "ResponseURL": "<redacted>",
    "StackId": "<redacted>",
    "RequestId": "<redacted>",
    "LogicalResourceId": "RQCert",
    "ResourceType": "Custom::RFDK_X509Generator",
    "ResourceProperties": {
        "ServiceToken": "<redacted>",
        "Secret": {
            "NamePrefix": "mystacknameService/RQCert",
            "Description": "mystacknameService/RQCert",
            "Tags": [
                {
                    "Value": "<redacted>",
                    "Key": "X509SecretGrant-<redacted>"
                }
            ]
        },
        "DistinguishedName": {
            "OU": "RenderQueueExternal",
            "CN": "renderqueue.nimble.us-west-2.aws",
            "O": "mystackname"
        },
        "SigningCertificate": {
            "CertChain": "",
            "Passphrase": "<redacted>",
            "Cert": "<redacted>",
            "Key": "<redacted>"
        },
        "Passphrase": "<redacted>"
    }
}
2021-06-16T21:54:10.829Z    <redacted>    INFO    CfnResponse: 
{
    "Status": "FAILED",
    "Reason": "Timeout error\nError: Timeout error\n    at X509CertificateGenerator.handler (/var/task/lib/custom-resource/simple-resource.js:58:136)\n    at Runtime.generate [as handler] (/var/task/x509-certificate/handlers.js:252:26)\n    at Runtime.handleOnce (/var/runtime/Runtime.js:66:25)",
    "PhysicalResourceId": "<redacted>",
    "StackId": "<redacted>",
    "RequestId": "<redacted>",
    "LogicalResourceId": "RQCert"
}
2021-06-16T21:54:10.920Z    <redacted>    INFO    Result: FAILEDTimeout error
Error: Timeout error
    at X509CertificateGenerator.handler (/var/task/lib/custom-resource/simple-resource.js:58:136)
    at Runtime.generate [as handler] (/var/task/x509-certificate/handlers.js:252:26)
    at Runtime.handleOnce (/var/runtime/Runtime.js:66:25)

Note the timestamps of the logs between the CREATE event and the FAILED event being 30 seconds which lines up with the Lambda function timeout.

---

This is 🐛 Bug Report