feat(cli): CcApi context provider can be configured to fail if listing does not find a specific count of resources

packages/aws-cdk/lib/context-providers/cc-api-provider.ts

@@ -122,6 +122,13 @@ export class CcApiContextProviderPlugin implements ContextProviderPlugin {
     } catch (err) {
       throw new ContextProviderError(`Could not get resources ${JSON.stringify(propertyMatch)}. Error: ${err}`);
     }
+
+    if (resultObjs.length === 0) {
+      throw new ContextProviderError(`Could not find any resources matching ${JSON.stringify(propertyMatch)}`);
+    }
+    if (resultObjs.length > 1) {
+      throw new ContextProviderError(`Found ${resultObjs.length} resources matching ${JSON.stringify(propertyMatch)}; please narrow the search criteria`);
+    }
     return resultObjs;
   }
 }

packages/aws-cdk/test/context-providers/cc-api-provider.test.ts

@@ -107,10 +107,6 @@ test('looks up RDS instance using CC API listResources', async () => {
         Identifier: 'my-db-instance-2',
         Properties: '{"DBInstanceArn":"arn:aws:rds:us-east-1:123456789012:db:test-instance-2","StorageEncrypted":"false","Endpoint":{"Address":"address2.amazonaws.com","Port":"5432"}}',
       },
-      {
-        Identifier: 'my-db-instance-3',
-        Properties: '{"DBInstanceArn":"arn:aws:rds:us-east-1:123456789012:db:test-instance-3","StorageEncrypted":"true","Endpoint":{"Address":"address3.amazonaws.com","Port":"6000"}}',
-      },
     ],
   });
 
@@ -134,15 +130,7 @@ test('looks up RDS instance using CC API listResources', async () => {
     Identifier: 'my-db-instance-1',
   }));
 
-  propsObj = results[1];
-  expect(propsObj).toEqual(expect.objectContaining({
-    DBInstanceArn: 'arn:aws:rds:us-east-1:123456789012:db:test-instance-3',
-    StorageEncrypted: 'true',
-    'Endpoint.Port': '6000',
-    Identifier: 'my-db-instance-3',
-  }));
-
-  expect(results.length).toEqual(2);
+  expect(results.length).toEqual(1);
 });
 
 test('looks up RDS instance using CC API listResources - nested prop', async () => {
@@ -204,6 +192,50 @@ test('looks up RDS instance using CC API listResources - error in CC API', async
   ).rejects.toThrow('Could not get resources {"Endpoint.Port":"5432"}.'); // THEN
 });
 
+test('looks up VPC managed prefix list using CC API listResources - error for empty result', async () => {
+  // GIVEN
+  mockCloudControlClient.on(ListResourcesCommand).resolves({
+    ResourceDescriptions: [
+      { Identifier: 'pl-xxxx', Properties: '{"PrefixListName":"name1","PrefixListId":"pl-xxxx","OwnerId":"123456789012"}' },
+      { Identifier: 'pl-yyyy', Properties: '{"PrefixListName":"name1","PrefixListId":"pl-yyyy","OwnerId":"234567890123"}' },
+      { Identifier: 'pl-zzzz', Properties: '{"PrefixListName":"name2","PrefixListId":"pl-zzzz","OwnerId":"123456789012"}' },
+    ],
+  });
+
+  await expect(
+    // WHEN
+    provider.getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      typeName: 'AWS::EC2::PrefixList',
+      propertyMatch: { PrefixListName: 'name3' },
+      propertiesToReturn: ['PrefixListId'],
+    }),
+  ).rejects.toThrow('Could not find any resources matching {"PrefixListName":"name3"}'); // THEN
+});
+
+test('looks up VPC managed prefix list using CC API listResources - error for multiple results', async () => {
+  // GIVEN
+  mockCloudControlClient.on(ListResourcesCommand).resolves({
+    ResourceDescriptions: [
+      { Identifier: 'pl-xxxx', Properties: '{"PrefixListName":"name1","PrefixListId":"pl-xxxx","OwnerId":"123456789012"}' },
+      { Identifier: 'pl-yyyy', Properties: '{"PrefixListName":"name1","PrefixListId":"pl-yyyy","OwnerId":"234567890123"}' },
+      { Identifier: 'pl-zzzz', Properties: '{"PrefixListName":"name2","PrefixListId":"pl-zzzz","OwnerId":"123456789012"}' },
+    ],
+  });
+
+  await expect(
+    // WHEN
+    provider.getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      typeName: 'AWS::EC2::PrefixList',
+      propertyMatch: { PrefixListName: 'name1' },
+      propertiesToReturn: ['PrefixListId'],
+    }),
+  ).rejects.toThrow('Found 2 resources matching {"PrefixListName":"name1"}'); // THEN
+});
+
 test('error by specifying both exactIdentifier and propertyMatch', async () => {
   // GIVEN
   mockCloudControlClient.on(GetResourceCommand).resolves({