AWS CloudFormation 堆栈：根据条件添加负载均衡器侦听器

Question

我正在尝试使用 CloudFormation 来构建负载均衡器侦听器列表，并将可选参数 TCPPort1 设置为侦听器仅（如果已设置该值）。

我在其他地方使用过Condition，但如果我在侦听器级别使用它，我会收到错误： The following resource(s) failed to create: [LoadBalancer]. . Rollback requested by user. Encountered unsupported property Condition

LoadBalancer:
    Type: 'AWS::ElasticLoadBalancing::LoadBalancer'
    Properties:
      HealthCheck:
        HealthyThreshold: '2'
        Interval: '15'
        Target: 'HTTP:9000/'
        Timeout: '5'
        UnhealthyThreshold: '10'
      Listeners:
        - InstancePort: TCPPort1
          Condition: HasTCPPort1
          InstanceProtocol: HTTP
          LoadBalancerPort: TCPPort1
          SSLCertificateId: !If
            - HasLoadBalancerCertificateARN
            - !Ref LoadBalancerCertificateARN
            - !Ref 'AWS::NoValue'
          Protocol: !If
            - HasLoadBalancerCertificateARN
            - HTTPS
            - HTTP
      Scheme: internet-facing
      Subnets:
        - 'Fn::ImportValue':
              !Sub '${ParentVPCStack}-SubnetAPublic'
        - 'Fn::ImportValue':
              !Sub '${ParentVPCStack}-SubnetBPublic'
        - 'Fn::ImportValue':
              !Sub '${ParentVPCStack}-SubnetCPublic'
      SecurityGroups:
        - !Ref SecurityGroup
      Instances:
        - !Ref Server

Answer 1

编辑：使用经典负载均衡器...

LoadBalancer:
  Type: 'AWS::ElasticLoadBalancing::LoadBalancer'
  Properties:
    HealthCheck:
      HealthyThreshold: '2'
      Interval: '15'
      Target: 'HTTP:9000/'
      Timeout: '5'
      UnhealthyThreshold: '10'
    Listeners: !If 'HasTCPPort1'
      -
        - InstancePort: TCPPort1
          Condition: HasTCPPort1
          InstanceProtocol: HTTP
          LoadBalancerPort: TCPPort1
          SSLCertificateId: !If
            - HasLoadBalancerCertificateARN
            - !Ref LoadBalancerCertificateARN
            - !Ref 'AWS::NoValue'
          Protocol: !If
            - HasLoadBalancerCertificateARN
            - HTTPS
            - HTTP
      - !Ref 'AWS::NoValue' 
    Scheme: internet-facing
    Subnets:
      - 'Fn::ImportValue':
            !Sub '${ParentVPCStack}-SubnetAPublic'
      - 'Fn::ImportValue':
            !Sub '${ParentVPCStack}-SubnetBPublic'
      - 'Fn::ImportValue':
            !Sub '${ParentVPCStack}-SubnetCPublic'
    SecurityGroups:
      - !Ref SecurityGroup
    Instances:
      - !Ref Server