cloudfront-function: 2.215.0 change Outputs from Fn::GetAtt to Ref - can not deploy

[Xarno]

Describe the bug

When updating aws-cdk-lib to 2.215.0 a cdk diff shows me that the Outputs are changed from Fn::GetAtt to Ref. A deployment of this fails with:

Delete canceled. Cannot delete export SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A as it is in use by Int.

Reason is, that we have shared cloudfront functions, so if you could reorder the delete to only after all refs are updated that should solve it.

Stack SharedCloudfrontPolicys-int
Outputs
[-] Output ExportsOutputFnGetAttCFReactSinglePageFunctionintA6FD2AB3FunctionARN24BBD529: {"Value":{"Fn::GetAtt":["CFReactSinglePageFunctionintA6FD2AB3","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFReactSinglePageFunctionintA6FD2AB3FunctionARN24BBD529"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiontestugaint778D4266FunctionARN5EB18E4D: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiontestugaint778D4266","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiontestugaint778D4266FunctionARN5EB18E4D"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiondkmint3F1B2CCAFunctionARNBC34ED6C: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiondkmint3F1B2CCA","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiondkmint3F1B2CCAFunctionARNBC34ED6C"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiondefaultint3EC83C72FunctionARND6D2C258: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiondefaultint3EC83C72","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiondefaultint3EC83C72FunctionARND6D2C258"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionitbint689BD46BFunctionARNADFCE0DD: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionitbint689BD46B","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionitbint689BD46BFunctionARNADFCE0DD"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiontectronicaint1B7F0943FunctionARN93FA6048: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiontectronicaint1B7F0943","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiontectronicaint1B7F0943FunctionARN93FA6048"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionagritechnicaint0F8FA192FunctionARN88251BB7: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionagritechnicaint0F8FA192","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionagritechnicaint0F8FA192FunctionARN88251BB7"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionspielwarenmesseint6AC9ED33FunctionARNECD8BA13: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionspielwarenmesseint6AC9ED33","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionspielwarenmesseint6AC9ED33FunctionARNECD8BA13"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctioninterzooint9D63D52EFunctionARN24C4A1DC: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctioninterzooint9D63D52E","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctioninterzooint9D63D52EFunctionARN24C4A1DC"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctioncmsint9FD113F1FunctionARN23201527: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctioncmsint9FD113F1","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctioncmsint9FD113F1FunctionARN23201527"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionexpoplusint2D6253FFFunctionARN42E3D034: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionexpoplusint2D6253FF","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionexpoplusint2D6253FFFunctionARN42E3D034"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionidsintA794FC0BFunctionARN0ECAA585: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionidsintA794FC0B","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionidsintA794FC0BFunctionARN0ECAA585"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionkindundjugendint82F60F7EFunctionARN4AE149D1: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionkindundjugendint82F60F7E","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionkindundjugendint82F60F7EFunctionARN4AE149D1"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionzukunfthandwerkint7C61BFC8FunctionARN29A8A96D: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionzukunfthandwerkint7C61BFC8","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionzukunfthandwerkint7C61BFC8FunctionARN29A8A96D"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionfruitint28CF2F6FFunctionARNC2FE8461: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionfruitint28CF2F6F","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionfruitint28CF2F6FFunctionARNC2FE8461"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionspogahorseintCD7B33EDFunctionARNF1CC9721: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionspogahorseintCD7B33ED","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionspogahorseintCD7B33EDFunctionARNF1CC9721"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctioninnotransintC099E326FunctionARNDA1CAF35: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctioninnotransintC099E326","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctioninnotransintC099E326FunctionARNDA1CAF35"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionismcologneintEC3E6FC8FunctionARNA0E113BC: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionismcologneintEC3E6FC8","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionismcologneintEC3E6FC8FunctionARNA0E113BC"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiondmeaint4992E0BBFunctionARN6B4450A6: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiondmeaint4992E0BB","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiondmeaint4992E0BBFunctionARN6B4450A6"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionbus2busintC40B2D55","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionilaintF59F234AFunctionARNE5DEA451: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionilaintF59F234A","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionilaintF59F234AFunctionARNE5DEA451"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionsccint8556CA7EFunctionARN49406EB0: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionsccint8556CA7E","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionsccint8556CA7EFunctionARN49406EB0"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctiondidactaint93DB386AFunctionARN7CC4BD5F: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctiondidactaint93DB386A","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctiondidactaint93DB386AFunctionARN7CC4BD5F"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctioniaatransportationint84C6C410FunctionARN20DF345E: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctioniaatransportationint84C6C410","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctioniaatransportationint84C6C410FunctionARN20DF345E"}}
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionaconityintA12D989DFunctionARN7D991590: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionaconityintA12D989D","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFResponseHeaderFunctionaconityintA12D989DFunctionARN7D991590"}}
[-] Output ExportsOutputFnGetAttCFDeviceRedirectorFunctionfintechint36C9E74DFunctionARN8E0EA821: {"Value":{"Fn::GetAtt":["CFDeviceRedirectorFunctionfintechint36C9E74D","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFDeviceRedirectorFunctionfintechint36C9E74DFunctionARN8E0EA821"}}
[-] Output ExportsOutputFnGetAttCFDeviceRedirectorFunctionbootfunint522BF6F2FunctionARN37E595B1: {"Value":{"Fn::GetAtt":["CFDeviceRedirectorFunctionbootfunint522BF6F2","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFDeviceRedirectorFunctionbootfunint522BF6F2FunctionARN37E595B1"}}
[-] Output ExportsOutputFnGetAttCFDeviceRedirectorFunctionigwint9822DF8AFunctionARN9D6E9807: {"Value":{"Fn::GetAtt":["CFDeviceRedirectorFunctionigwint9822DF8A","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFDeviceRedirectorFunctionigwint9822DF8AFunctionARN9D6E9807"}}
[-] Output ExportsOutputFnGetAttCFDeviceRedirectorFunctionbelektroint8EB637FBFunctionARN2D4E2AB0: {"Value":{"Fn::GetAtt":["CFDeviceRedirectorFunctionbelektroint8EB637FB","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFDeviceRedirectorFunctionbelektroint8EB637FBFunctionARN2D4E2AB0"}}
[-] Output ExportsOutputFnGetAttCFDeviceRedirectorFunctionihfitalyintAF840E06FunctionARN37E17B25: {"Value":{"Fn::GetAtt":["CFDeviceRedirectorFunctionihfitalyintAF840E06","FunctionARN"]},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputFnGetAttCFDeviceRedirectorFunctionihfitalyintAF840E06FunctionARN37E17B25"}}
[+] Output Exports/Output{"Ref":"CFReactSinglePageFunctionintA6FD2AB3"} ExportsOutputRefCFReactSinglePageFunctionintA6FD2AB3D9C54F66: {"Value":{"Ref":"CFReactSinglePageFunctionintA6FD2AB3"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFReactSinglePageFunctionintA6FD2AB3D9C54F66"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiontestugaint778D4266"} ExportsOutputRefCFResponseHeaderFunctiontestugaint778D4266E6247969: {"Value":{"Ref":"CFResponseHeaderFunctiontestugaint778D4266"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiontestugaint778D4266E6247969"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiondkmint3F1B2CCA"} ExportsOutputRefCFResponseHeaderFunctiondkmint3F1B2CCAC237A3C8: {"Value":{"Ref":"CFResponseHeaderFunctiondkmint3F1B2CCA"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiondkmint3F1B2CCAC237A3C8"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiondefaultint3EC83C72"} ExportsOutputRefCFResponseHeaderFunctiondefaultint3EC83C7277A84192: {"Value":{"Ref":"CFResponseHeaderFunctiondefaultint3EC83C72"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiondefaultint3EC83C7277A84192"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionitbint689BD46B"} ExportsOutputRefCFResponseHeaderFunctionitbint689BD46B4BB649E6: {"Value":{"Ref":"CFResponseHeaderFunctionitbint689BD46B"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionitbint689BD46B4BB649E6"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiontectronicaint1B7F0943"} ExportsOutputRefCFResponseHeaderFunctiontectronicaint1B7F0943DB07D9E1: {"Value":{"Ref":"CFResponseHeaderFunctiontectronicaint1B7F0943"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiontectronicaint1B7F0943DB07D9E1"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionagritechnicaint0F8FA192"} ExportsOutputRefCFResponseHeaderFunctionagritechnicaint0F8FA192ABEF83D7: {"Value":{"Ref":"CFResponseHeaderFunctionagritechnicaint0F8FA192"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionagritechnicaint0F8FA192ABEF83D7"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionspielwarenmesseint6AC9ED33"} ExportsOutputRefCFResponseHeaderFunctionspielwarenmesseint6AC9ED33A886BDB5: {"Value":{"Ref":"CFResponseHeaderFunctionspielwarenmesseint6AC9ED33"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionspielwarenmesseint6AC9ED33A886BDB5"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctioninterzooint9D63D52E"} ExportsOutputRefCFResponseHeaderFunctioninterzooint9D63D52E717AB1B2: {"Value":{"Ref":"CFResponseHeaderFunctioninterzooint9D63D52E"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctioninterzooint9D63D52E717AB1B2"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctioncmsint9FD113F1"} ExportsOutputRefCFResponseHeaderFunctioncmsint9FD113F1F1861FC6: {"Value":{"Ref":"CFResponseHeaderFunctioncmsint9FD113F1"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctioncmsint9FD113F1F1861FC6"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionexpoplusint2D6253FF"} ExportsOutputRefCFResponseHeaderFunctionexpoplusint2D6253FFC4968963: {"Value":{"Ref":"CFResponseHeaderFunctionexpoplusint2D6253FF"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionexpoplusint2D6253FFC4968963"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionidsintA794FC0B"} ExportsOutputRefCFResponseHeaderFunctionidsintA794FC0BB6906B5F: {"Value":{"Ref":"CFResponseHeaderFunctionidsintA794FC0B"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionidsintA794FC0BB6906B5F"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionkindundjugendint82F60F7E"} ExportsOutputRefCFResponseHeaderFunctionkindundjugendint82F60F7E2AB18B9B: {"Value":{"Ref":"CFResponseHeaderFunctionkindundjugendint82F60F7E"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionkindundjugendint82F60F7E2AB18B9B"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionzukunfthandwerkint7C61BFC8"} ExportsOutputRefCFResponseHeaderFunctionzukunfthandwerkint7C61BFC850907E1C: {"Value":{"Ref":"CFResponseHeaderFunctionzukunfthandwerkint7C61BFC8"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionzukunfthandwerkint7C61BFC850907E1C"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionfruitint28CF2F6F"} ExportsOutputRefCFResponseHeaderFunctionfruitint28CF2F6F9D66558D: {"Value":{"Ref":"CFResponseHeaderFunctionfruitint28CF2F6F"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionfruitint28CF2F6F9D66558D"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionspogahorseintCD7B33ED"} ExportsOutputRefCFResponseHeaderFunctionspogahorseintCD7B33EDACBD2496: {"Value":{"Ref":"CFResponseHeaderFunctionspogahorseintCD7B33ED"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionspogahorseintCD7B33EDACBD2496"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctioninnotransintC099E326"} ExportsOutputRefCFResponseHeaderFunctioninnotransintC099E326F99A35F9: {"Value":{"Ref":"CFResponseHeaderFunctioninnotransintC099E326"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctioninnotransintC099E326F99A35F9"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionismcologneintEC3E6FC8"} ExportsOutputRefCFResponseHeaderFunctionismcologneintEC3E6FC88EED3E0B: {"Value":{"Ref":"CFResponseHeaderFunctionismcologneintEC3E6FC8"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionismcologneintEC3E6FC88EED3E0B"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiondmeaint4992E0BB"} ExportsOutputRefCFResponseHeaderFunctiondmeaint4992E0BB41EF44B4: {"Value":{"Ref":"CFResponseHeaderFunctiondmeaint4992E0BB"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiondmeaint4992E0BB41EF44B4"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionbus2busintC40B2D55"} ExportsOutputRefCFResponseHeaderFunctionbus2busintC40B2D556A62D718: {"Value":{"Ref":"CFResponseHeaderFunctionbus2busintC40B2D55"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionbus2busintC40B2D556A62D718"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionilaintF59F234A"} ExportsOutputRefCFResponseHeaderFunctionilaintF59F234A143592C1: {"Value":{"Ref":"CFResponseHeaderFunctionilaintF59F234A"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionilaintF59F234A143592C1"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionsccint8556CA7E"} ExportsOutputRefCFResponseHeaderFunctionsccint8556CA7E911C4B99: {"Value":{"Ref":"CFResponseHeaderFunctionsccint8556CA7E"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionsccint8556CA7E911C4B99"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctiondidactaint93DB386A"} ExportsOutputRefCFResponseHeaderFunctiondidactaint93DB386A60DAD571: {"Value":{"Ref":"CFResponseHeaderFunctiondidactaint93DB386A"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctiondidactaint93DB386A60DAD571"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctioniaatransportationint84C6C410"} ExportsOutputRefCFResponseHeaderFunctioniaatransportationint84C6C4108D247291: {"Value":{"Ref":"CFResponseHeaderFunctioniaatransportationint84C6C410"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctioniaatransportationint84C6C4108D247291"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionaconityintA12D989D"} ExportsOutputRefCFResponseHeaderFunctionaconityintA12D989DBD9E4E85: {"Value":{"Ref":"CFResponseHeaderFunctionaconityintA12D989D"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFResponseHeaderFunctionaconityintA12D989DBD9E4E85"}}
[+] Output Exports/Output{"Ref":"CFDeviceRedirectorFunctionfintechint36C9E74D"} ExportsOutputRefCFDeviceRedirectorFunctionfintechint36C9E74D66B3FAA6: {"Value":{"Ref":"CFDeviceRedirectorFunctionfintechint36C9E74D"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFDeviceRedirectorFunctionfintechint36C9E74D66B3FAA6"}}
[+] Output Exports/Output{"Ref":"CFDeviceRedirectorFunctionbootfunint522BF6F2"} ExportsOutputRefCFDeviceRedirectorFunctionbootfunint522BF6F2EBB5BD99: {"Value":{"Ref":"CFDeviceRedirectorFunctionbootfunint522BF6F2"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFDeviceRedirectorFunctionbootfunint522BF6F2EBB5BD99"}}
[+] Output Exports/Output{"Ref":"CFDeviceRedirectorFunctionigwint9822DF8A"} ExportsOutputRefCFDeviceRedirectorFunctionigwint9822DF8A1778F413: {"Value":{"Ref":"CFDeviceRedirectorFunctionigwint9822DF8A"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFDeviceRedirectorFunctionigwint9822DF8A1778F413"}}
[+] Output Exports/Output{"Ref":"CFDeviceRedirectorFunctionbelektroint8EB637FB"} ExportsOutputRefCFDeviceRedirectorFunctionbelektroint8EB637FBDE024A3E: {"Value":{"Ref":"CFDeviceRedirectorFunctionbelektroint8EB637FB"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFDeviceRedirectorFunctionbelektroint8EB637FBDE024A3E"}}
[+] Output Exports/Output{"Ref":"CFDeviceRedirectorFunctionihfitalyintAF840E06"} ExportsOutputRefCFDeviceRedirectorFunctionihfitalyintAF840E06C8169C92: {"Value":{"Ref":"CFDeviceRedirectorFunctionihfitalyintAF840E06"},"Export":{"Name":"SharedCloudfrontPolicys-int:ExportsOutputRefCFDeviceRedirectorFunctionihfitalyintAF840E06C8169C92"}}

Is there a way to migrate successfully?

Regression Issue

• Select this option if this issue appears to be a regression.

Last Known Working CDK Library Version

2.214.0

Expected Behavior

No problem with changing internal referencing structure of the Outputs.

Current Behavior

Cloudformation can not change the Outputs which are in use because of sharing.

Reproduction Steps

I try to get this currently. But my experiment does not show this problem.

Possible Solution

No response

Additional Information/Context

No response

AWS CDK Library version (aws-cdk-lib)

2.215.0

AWS CDK CLI version

2.1029.2

Node.js Version

22

OS

mac

Language

TypeScript

Language Version

No response

Other information

No response

[pahud]

Hi @Xarno

Unfortunately I was unable to reproduce this issue despite my attempts.

---

Our Reproduction Code

Provider Stack (lib/cloudfront-function-issue-stack.ts)

import * as cdk from 'aws-cdk-lib';
import * as cloudfront from 'aws-cdk-lib/aws-cloudfront';
import { Construct } from 'constructs';

export class CloudfrontFunctionIssueStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // Create multiple CloudFront Functions similar to the issue
    const responseHeaderFunctionbus2bus = new cloudfront.Function(this, 'CFResponseHeaderFunctionbus2busint', {
      code: cloudfront.FunctionCode.fromInline(`
        function handler(event) {
          var response = event.response;
          var headers = response.headers;

          // Add security headers
          headers['strict-transport-security'] = { value: 'max-age=63072000; includeSubdomains; preload' };
          headers['content-type-options'] = { value: 'nosniff' };
          headers['x-frame-options'] = { value: 'DENY' };
          headers['referrer-policy'] = { value: 'strict-origin-when-cross-origin' };

          return response;
        }
      `),
      comment: 'Response header function for bus2bus',
    });

    const responseHeaderFunctiondefault = new cloudfront.Function(this, 'CFResponseHeaderFunctiondefaultint', {
      code: cloudfront.FunctionCode.fromInline(`
        function handler(event) {
          var response = event.response;
          var headers = response.headers;

          // Add security headers
          headers['strict-transport-security'] = { value: 'max-age=63072000; includeSubdomains; preload' };
          headers['content-type-options'] = { value: 'nosniff' };
          headers['x-frame-options'] = { value: 'DENY' };
          headers['referrer-policy'] = { value: 'strict-origin-when-cross-origin' };

          return response;
        }
      `),
      comment: 'Response header function for default',
    });

    const reactSinglePageFunction = new cloudfront.Function(this, 'CFReactSinglePageFunctionint', {
      code: cloudfront.FunctionCode.fromInline(`
        function handler(event) {
          var request = event.request;
          var uri = request.uri;

          // Check if the URI is for a file (has an extension)
          if (!uri.includes('.') && !uri.endsWith('/')) {
            request.uri = '/index.html';
          }

          return request;
        }
      `),
      comment: 'React single page application function',
    });

    // Export the function ARNs using the exact pattern from the issue
    new cdk.CfnOutput(this, 'ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A', {
      value: responseHeaderFunctionbus2bus.functionArn,
      exportName: `${this.stackName}:ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A`,
    });

    new cdk.CfnOutput(this, 'ExportsOutputFnGetAttCFResponseHeaderFunctiondefaultint3EC83C72FunctionARND6D2C258', {
      value: responseHeaderFunctiondefault.functionArn,
      exportName: `${this.stackName}:ExportsOutputFnGetAttCFResponseHeaderFunctiondefaultint3EC83C72FunctionARND6D2C258`,
    });

    new cdk.CfnOutput(this, 'ExportsOutputFnGetAttCFReactSinglePageFunctionintA6FD2AB3FunctionARN24BBD529', {
      value: reactSinglePageFunction.functionArn,
      exportName: `${this.stackName}:ExportsOutputFnGetAttCFReactSinglePageFunctionintA6FD2AB3FunctionARN24BBD529`,
  }
}

Consumer Stack (lib/consumer-stack.ts)

import * as cdk from 'aws-cdk-lib';
import * as cloudfront from 'aws-cdk-lib/aws-cloudfront';
import * as origins from 'aws-cdk-lib/aws-cloudfront-origins';
import * as s3 from 'aws-cdk-lib/aws-s3';
import { Construct } from 'constructs';

export class ConsumerStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // Import the CloudFront function ARNs from the shared stack
    const responseHeaderFunctionbus2busArn = cdk.Fn.importValue(
      'CloudfrontFunctionIssueStack:ExportsOutputFnGetAttCFResponseHeaderFunctionbus2busintC40B2D55FunctionARNBFBA877A'
    );

    const responseHeaderFunctiondefaultArn = cdk.Fn.importValue(
      'CloudfrontFunctionIssueStack:ExportsOutputFnGetAttCFResponseHeaderFunctiondefaultint3EC83C72FunctionARND6D2C258'
    );

    const reactSinglePageFunctionArn = cdk.Fn.importValue(
      'CloudfrontFunctionIssueStack:ExportsOutputFnGetAttCFReactSinglePageFunctionintA6FD2AB3FunctionARN24BBD529'
    );

    // Create a simple S3 bucket for the CloudFront distribution
    const bucket = new s3.Bucket(this, 'WebsiteBucket', {
      removalPolicy: cdk.RemovalPolicy.DESTROY,
      autoDeleteObjects: true,
    });

    // Create CloudFront distribution that uses the imported functions
    const distribution = new cloudfront.Distribution(this, 'Distribution', {
      defaultBehavior: {
        origin: new origins.S3Origin(bucket),
        functionAssociations: [
          {
            function: cloudfront.Function.fromFunctionAttributes(this, 'ImportedResponseHeaderFunctionbus2bus', {
              functionArn: responseHeaderFunctionbus2busArn,
              functionName: 'imported-response-header-function-bus2bus',
            }),
            eventType: cloudfront.FunctionEventType.VIEWER_RESPONSE,
          },
          {
            function: cloudfront.Function.fromFunctionAttributes(this, 'ImportedReactSinglePageFunction', {
              functionArn: reactSinglePageFunctionArn,
              functionName: 'imported-react-spa-function',
            }),
            eventType: cloudfront.FunctionEventType.VIEWER_REQUEST,
          },
        ],
      },
    });

    new cdk.CfnOutput(this, 'DistributionDomainName', {
      value: distribution.distributionDomainName,
    });
  }
}

App Entry Point (bin/cloudfront-function-issue.ts)

#!/usr/bin/env node
import 'source-map-support/register';
import * as cdk from 'aws-cdk-lib';
import { CloudfrontFunctionIssueStack } from '../lib/cloudfront-function-issue-stack';
import { ConsumerStack } from '../lib/consumer-stack';

const app = new cdk.App();
new CloudfrontFunctionIssueStack(app, 'CloudfrontFunctionIssueStack', {});
new ConsumerStack(app, 'ConsumerStack', {});

Key Elements

• Provider Stack: Creates 3 CloudFront Functions and exports their ARNs
• Consumer Stack: Imports the ARNs and uses them in a CloudFront Distribution
• Cross-Stack Dependencies: Consumer stack depends on provider stack exports
• Export Pattern: Uses ExportsOutputFnGetAtt...FunctionARN... naming convention
• CloudFormation Intrinsics: Uses Fn::GetAtt for CloudFront Function ARNs

---

Our Reproduction Steps

Step 1: Initial Deployment with CDK 2.214.0 ✅

cd cloudfront-function-issue
npm install aws-cdk-lib@2.214.0
npx cdk deploy CloudfrontFunctionIssueStack --require-approval never
npx cdk deploy ConsumerStack --require-approval never

Result:
• Provider stack exports CloudFront Function ARNs with ExportsOutputFnGetAtt... pattern
• Consumer stack successfully imports and uses these ARNs
• Both stacks deployed successfully

Step 2: Upgrade to CDK 2.215.0 ✅

npm install aws-cdk-lib@2.215.0

Step 3: Run cdk diff ✅

cd cloudfront-function-issue && npx cdk diff

Result:

✨ Number of stacks with differences: 0

• There were no differences for both stacks

Conclusion

Our reproduction confirms that the issue is highly specific and doesn't occur with our CloudFront Function configuration.

The issue likely requires:
• Specific CloudFront Function attribute usage patterns
• Particular CloudFormation template structures
• Certain CDK construct configurations

Further Actions

We haven't been able to replicate the issue on our end. Could you share a minimal code example that demonstrates the problem? Also, please try running our test code in your environment and let us know if you experience the same error there.

[AlexanderBartash]

This happened to me as well.

[Xarno]

Hello Pahud, thanks for the investigation.
Your Idea with the 2 stack variant helped me to get a reproducer. You need to change the testdomain and the account id.

import { App, StackProps } from "aws-cdk-lib"
import { Construct } from "constructs"
import { Stack, aws_cloudfront as cloudfront,  } from "aws-cdk-lib"
import { RemovalPolicy } from 'aws-cdk-lib';
import { aws_s3 } from "aws-cdk-lib"
import { aws_cloudfront_origins as cloudfront_origins } from "aws-cdk-lib"
import { aws_route53 as route53, aws_route53_targets as route53_targets }from "aws-cdk-lib"
import { aws_certificatemanager as certificatemanager } from "aws-cdk-lib"

interface StackPropsWithFunctions extends StackProps  {
    functions: Map<string, cloudfront.IFunction>
}


class FunctionStack extends Stack {
    public readonly functions = new Map<string, cloudfront.IFunction>()

    constructor(scope: Construct, id: string, props: StackProps) {
        super(scope, id, props)

        // shared function
        this.functions.set(
            `responseHeaderFunction_AB+INT`,
            new cloudfront.Function(this, `CFResponseHeaderFunction_AB+INT`, {
                functionName: `ApplyResponseHeaders-AB-ABC`,
                comment: "Applys x-robots, cache-control and content-security-policy headers as needed.",
                code: cloudfront.FunctionCode.fromInline("function handler(event) {\
                    const request = event.request\
                    const response = event.response\
                    return response\
                }"),
                runtime: cloudfront.FunctionRuntime.JS_2_0,
            })
        )
    }
}

class TestStack extends Stack {
    public readonly environmentCachePolicy = new Map<string, cloudfront.ICachePolicy>()
    

    private readonly testDomain = "your-domain.com"

    constructor(scope: Construct, id: string, props: StackPropsWithFunctions) {
        super(scope, id, props)
    
        

        const testBucket = new aws_s3.Bucket(this, 'Bucket', {
            blockPublicAccess: aws_s3.BlockPublicAccess.BLOCK_ALL,
            encryption: aws_s3.BucketEncryption.S3_MANAGED,
            enforceSSL: true,
            versioned: true,
            removalPolicy: RemovalPolicy.RETAIN,
        })

         const hostedZone = route53.HostedZone.fromLookup(this, "exampleHostedZone", { domainName: this.testDomain })

        const certificateConstruct = new certificatemanager.DnsValidatedCertificate(this, "Certificate", {
            domainName: "testa." + this.testDomain,
            subjectAlternativeNames: ["testb." + this.testDomain], 
            hostedZone: hostedZone,
            region: "us-east-1"
        })

        const s3Origin = cloudfront_origins.S3BucketOrigin.withBucketDefaults(testBucket);

        const cloudfrontSettingsA: cloudfront.DistributionProps = {
            comment: `Test Distribution A`,
            defaultRootObject: "index.html",
            defaultBehavior: {
                origin: s3Origin,
                compress: true,
                functionAssociations: [{ function: props.functions.get(`responseHeaderFunction_AB+INT`)!!, eventType: cloudfront.FunctionEventType.VIEWER_REQUEST}]
            },
            certificate: certificateConstruct,
            domainNames: ["testa." + this.testDomain]
        }

        const testDistributionA = new cloudfront.Distribution(this, "Test Distribution A", cloudfrontSettingsA)
       

        new route53.ARecord(this, "DnsRecord A", {
            zone: hostedZone,
            recordName: "testa",
            target: route53.RecordTarget.fromAlias(new route53_targets.CloudFrontTarget(testDistributionA))
        })


        const cloudfrontSettingsB: cloudfront.DistributionProps = {
            comment: `Test Distribution B`,
            defaultRootObject: "index.html",
            defaultBehavior: {
                origin: s3Origin,
                compress: true,
                functionAssociations: [{ function: props.functions.get(`responseHeaderFunction_AB+INT`)!!, eventType: cloudfront.FunctionEventType.VIEWER_REQUEST}]
            },
            certificate: certificateConstruct,
            domainNames: ["testb." + this.testDomain]
        }

        const testDistributionB = new cloudfront.Distribution(this, "Test Distribution B", cloudfrontSettingsB)

        new route53.ARecord(this, "DnsRecord B", {
            zone: hostedZone,
            recordName: "testb",
            target: route53.RecordTarget.fromAlias(new route53_targets.CloudFrontTarget(testDistributionB))
        })
    }
}

const appTest = new App()

const env = {
        account: "<your account>",
        region: "eu-central-1" // Europa (Frankfurt)
    }


const sharedStack = new FunctionStack(appTest, "testSharedFunctionStack", {env})

new TestStack(appTest, "testCloudfrontFunction", { env, functions: sharedStack.functions})

Behavior: Deploy under 2.214.0 successful.
Update to 2.215.0 and deploy fails.

% npx cdk diff --all
[WARNING] aws-cdk-lib.aws_certificatemanager.DnsValidatedCertificate is deprecated.
use {@link Certificate } instead
This API will be removed in the next major release.
start: Building testSharedFunctionStack Template
success: Built testSharedFunctionStack Template
start: Publishing testSharedFunctionStack Template (941344001173-eu-central-1-210944bf)
success: Published testSharedFunctionStack Template (941344001173-eu-central-1-210944bf)
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)

Stack testSharedFunctionStack
Outputs
[-] Output ExportsOutputFnGetAttCFResponseHeaderFunctionABINTE349620BFunctionARN319A2048: {"Value":{"Fn::GetAtt":["CFResponseHeaderFunctionABINTE349620B","FunctionARN"]},"Export":{"Name":"testSharedFunctionStack:ExportsOutputFnGetAttCFResponseHeaderFunctionABINTE349620BFunctionARN319A2048"}}
[+] Output Exports/Output{"Ref":"CFResponseHeaderFunctionABINTE349620B"} ExportsOutputRefCFResponseHeaderFunctionABINTE349620B59823893: {"Value":{"Ref":"CFResponseHeaderFunctionABINTE349620B"},"Export":{"Name":"testSharedFunctionStack:ExportsOutputRefCFResponseHeaderFunctionABINTE349620B59823893"}}

start: Building testCloudfrontFunction Template
success: Built testCloudfrontFunction Template
start: Publishing testCloudfrontFunction Template (941344001173-eu-central-1-780c3a84)
success: Published testCloudfrontFunction Template (941344001173-eu-central-1-780c3a84)
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)

Stack testCloudfrontFunction
Resources
[] AWS::CloudFront::Distribution Test Distribution A TestDistributionA20513976
└─ [] DistributionConfig
└─ [] .DefaultCacheBehavior:
└─ [] .FunctionAssociations:
└─ @@ -2,7 +2,7 @@
[ ] {
[ ] "EventType": "viewer-request",
[ ] "FunctionARN": {
[-] "Fn::ImportValue": "testSharedFunctionStack:ExportsOutputFnGetAttCFResponseHeaderFunctionABINTE349620BFunctionARN319A2048"
[+] "Fn::ImportValue": "testSharedFunctionStack:ExportsOutputRefCFResponseHeaderFunctionABINTE349620B59823893"
[ ] }
[ ] }
[ ] ]
[] AWS::CloudFront::Distribution Test Distribution B TestDistributionBEB5144C6
└─ [] DistributionConfig
└─ [] .DefaultCacheBehavior:
└─ [] .FunctionAssociations:
└─ @@ -2,7 +2,7 @@
[ ] {
[ ] "EventType": "viewer-request",
[ ] "FunctionARN": {
[-] "Fn::ImportValue": "testSharedFunctionStack:ExportsOutputFnGetAttCFResponseHeaderFunctionABINTE349620BFunctionARN319A2048"
[+] "Fn::ImportValue": "testSharedFunctionStack:ExportsOutputRefCFResponseHeaderFunctionABINTE349620B59823893"
[ ] }
[ ] }
[ ] ]

✨ Number of stacks with differences: 2

% npx cdk deploy testSharedFunctionStack
[WARNING] aws-cdk-lib.aws_certificatemanager.DnsValidatedCertificate is deprecated.
use {@link Certificate } instead
This API will be removed in the next major release.

✨ Synthesis time: 4.13s

testSharedFunctionStack: deploying... [1/1]
testSharedFunctionStack: creating CloudFormation changeset...
❌ testSharedFunctionStack failed: ToolkitError: The stack named testSharedFunctionStack failed to deploy: UPDATE_ROLLBACK_COMPLETE
% npx cdk deploy testSharedFunctionStack testCloudfrontFunction
[WARNING] aws-cdk-lib.aws_certificatemanager.DnsValidatedCertificate is deprecated.
use {@link Certificate } instead
This API will be removed in the next major release.

✨ Synthesis time: 4.22s

testSharedFunctionStack
testSharedFunctionStack: deploying... [1/2]
testSharedFunctionStack: creating CloudFormation changeset...
❌ testSharedFunctionStack failed: ToolkitError: The stack named testSharedFunctionStack failed to deploy: UPDATE_ROLLBACK_COMPLETE
% npx cdk deploy --all
[WARNING] aws-cdk-lib.aws_certificatemanager.DnsValidatedCertificate is deprecated.
use {@link Certificate } instead
This API will be removed in the next major release.

✨ Synthesis time: 4.05s

testSharedFunctionStack
testSharedFunctionStack: deploying... [1/2]
testSharedFunctionStack: creating CloudFormation changeset...
❌ testSharedFunctionStack failed: ToolkitError: The stack named testSharedFunctionStack failed to deploy: UPDATE_ROLLBACK_COMPLETE

Message in Cloudformation website:
Delete canceled. Cannot delete export testSharedFunctionStack:ExportsOutputFnGetAttCFResponseHeaderFunctionABINTE349620BFunctionARN319A2048 as it is in use by testCloudfrontFunction.