Book Image

Mastering AWS CloudFormation

By : Karen Tovmasyan
Book Image

Mastering AWS CloudFormation

By: Karen Tovmasyan

Overview of this book

DevOps and the cloud revolution have forced software engineers and operations teams to rethink how to manage infrastructures. With this AWS book, you'll understand how you can use Infrastructure as Code (IaC) to simplify IT operations and manage the modern cloud infrastructure effectively with AWS CloudFormation. This comprehensive guide will help you explore AWS CloudFormation from template structures through to developing complex and reusable infrastructure stacks. You'll then delve into validating templates, deploying stacks, and handling deployment failures. The book will also show you how to leverage AWS CodeBuild and CodePipeline to automate resource delivery and apply continuous integration and continuous delivery (CI/CD) practices to the stack. As you advance, you'll learn how to generate templates on the fly using macros and create resources outside AWS with custom resources. Finally, you'll improve the way you manage the modern cloud in AWS by extending CloudFormation using AWS serverless application model (SAM) and AWS cloud development kit (CDK). By the end of this book, you'll have mastered all the major AWS CloudFormation concepts and be able to simplify infrastructure management.
Table of Contents (17 chapters)
1
Section 1: CloudFormation Internals
4
Section 2: Provisioning and Deployment at Scale
9
Section 3: Extending CloudFormation

Preventing failures of multiple StackSet deployments using TAGs

When we want to deploy StackSets where stack instances in one StackSet depend on the stack instances in another , then we need to make sure that these deployments do not fail.

Although there is a failure-tolerance option in implementing StackSet operations, we need to catch and handle all possible exceptions before the actual operation.

StackSets have an optional feature called a target account gate. A target account gate (TAG) is a Lambda function that is executed on a target account before a StackSet operation and checks whether a target account is ready to perform this operation—for example, if the required resources exist, or if there is no other ongoing StackSet operation.

TAGs must be developed by us, but their outcome is quite simple: if all checks pass, then it should return SUCCESS, or FAIL if one or more checks do not pass.

For this chapter, we will develop a TAG function that will check the...