❗ NOTICE(ec2): new `WindowsVersion` enum values used in `WindowsImage()` gives: `Deployment failed: Error [ValidationError]: Unable to fetch parameters [/aws/service/ami-windows-latest/Windows_Server-<Specific-Image>-<YYYY.MM.DD>] from parameter store for this account.`

[scanlonp]

Please add your +1 👍 to let us know you have encountered this

Status: IN-PROGRESS

Overview:

Present in v2.135.0-v2.136.0

The only impact to existing applications is a deprecation notice. You can safely ignore this.

#29435 updated the windows versions enums. The new enums suffixed with dates (i.e. WINDOWS_SERVER_2022_ENGLISH_FULL_BASE_2024_02_14) are not found when used in constructs that extend GenericSSMParameterImage. The working enums were mistakenly deprecated (i.e. WINDOWS_SERVER_2022_ENGLISH_FULL_BASE).

const ami = new ec2.WindowsImage(ec2.WindowsVersion.WINDOWS_SERVER_2022_ENGLISH_FULL_BASE_2024_02_14);

const instance = new ec2.Instance(this, "WindowsInstance", {
  vpc: new ec2.Vpc(this, "WindowsVPC"),
  instanceType: ec2.InstanceType.of(ec2.InstanceClass.T2, ec2.InstanceSize.MICRO),
  machineImage: ami,
});

When deployed gives the following error.

Complete Error Message: Deployment failed: Error [ValidationError]: Unable to fetch parameters [/aws/service/ami-windows-latest/Windows_Server-2022-English-Full-Base-1.28-2024.02.13] from parameter store for this account.

Workaround:

Continue to use the wrongly deprecated enum values that are not suffixed with dates.

Solution:

We issue has been reverted and the fix is in place as of v2.136.1.

[nmussy]

I'll have a look, thanks for letting me know 👍

[nmussy]

Yeah, didn't see that issue, sorry about that. I think keeping the datestamped, non-generic versions around would be best, given the replacement issues with latestWindows. Splitting the WindowsVersion enum and adding a MachineImage method is probably the solution here:

new ec2.Instance(this, 'WindowsLatestLookup', {
  instanceType,
  machineImage: ec2.MachineImage.latestWindows(
    ec2.WindowsVersion.WINDOWS_SERVER_2022_ENGLISH_FULL_BASE,
  ),
  vpc,
});

new ec2.Instance(this, 'WindowsSpecificVersion', {
  instanceType,
  machineImage: ec2.MachineImage.specificWindows(
    ec2.WindowsSpecificVersion.WINDOWS_SERVER_2022_ENGLISH_FULL_BASE_2024_02_14,
  ),
  vpc,
});

latestWindows would keep using the /aws/service/ami-windows-latest/ SSM parameter query, and specificWindows would use ecr:DescribeImages with MachineImage.lookup

Should have a fix ready in the next few hours