AWS AWSCloudFormation documentation change
Summary
Updated terminology from 'stack instances' to 'stacks' throughout document, clarified deployment options with concurrency mode details, and simplified CLI syntax examples
Security assessment
Changes focus on terminology standardization and operational clarity rather than addressing security vulnerabilities. The concurrency mode explanations improve operational understanding but don't introduce security controls.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/stackinstances-create.md b/AWSCloudFormation/latest/UserGuide/stackinstances-create.md index ff9fe114b..6a67480a5 100644 --- a//AWSCloudFormation/latest/UserGuide/stackinstances-create.md +++ b//AWSCloudFormation/latest/UserGuide/stackinstances-create.md @@ -3 +3 @@ -Add stack instances to a stack set (console)Add stack instances to a stack set (AWS CLI) +Add stacks to a stack set (console)Add stacks to a stack set (AWS CLI) @@ -5 +5 @@ Add stack instances to a stack set (console)Add stack instances to a stack set ( -# Add stack instances to CloudFormation StackSets +# Add stacks to CloudFormation StackSets @@ -7 +7 @@ Add stack instances to a stack set (console)Add stack instances to a stack set ( -When you create a stack set, you can create the stacks for that stack set. CloudFormation also enables you to add more stacks, for additional accounts and Regions, at any point after the stack set is created. You can add stack instances using either the CloudFormation console or the AWS CLI. +When you create a stack set, you can create the stacks for that stack set. CloudFormation also enables you to add more stacks, for additional accounts and Regions, at any point after the stack set is created. You can add stacks using either the CloudFormation console or the AWS CLI. @@ -11 +11 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - * Add stack instances to a stack set (console) + * Add stacks to a stack set (console) @@ -13 +13 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - * Add stack instances to a stack set (AWS CLI) + * Add stacks to a stack set (AWS CLI) @@ -18 +18 @@ When you create a stack set, you can create the stacks for that stack set. Cloud -## Add stack instances to a stack set (console) +## Add stacks to a stack set (console) @@ -44 +44 @@ When you create a stack set, you can create the stacks for that stack set. Cloud -If you add an OU that your stack set already targets, StackSets creates new stack instances in any accounts in the OU that don't already have stack instances from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). +If you add an OU that your stack set already targets, StackSets creates new stacks in any accounts in the OU that don't already have stacks from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). @@ -48 +48 @@ If you add an OU that your stack set already targets, StackSets creates new stac - 4. For **Deployment options** : + 4. For **Deployment options** , do the following: @@ -50 +50 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * For **Maximum concurrent accounts** , modify the maximum concurrent accounts as needed. + * For **Maximum concurrent accounts** , specify how many accounts are processed concurrently. @@ -52 +52 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * For **Failure tolerance** , modify the failure tolerance as needed. + * For **Failure tolerance** , specify how many failures are acceptable before the operation stops. @@ -54 +54 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * For **Region concurrency** , modify the region concurrency as needed. + * For **Region concurrency** , choose how to process Regions: **Sequential** (one Region at a time) or **Parallel** (multiple Regions concurrently). @@ -56 +56,5 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * For **Concurrency mode** , modify the concurrency mode as needed. + * For **Concurrency mode** , choose how concurrency behaves during operation execution. + + * **Strict failure tolerance** – Reduces concurrency level when failures occur, staying within **Failure tolerance** +1. + + * **Soft failure tolerance** – Maintains your specified concurrency level (the value of **Maximum concurrent accounts**) regardless of failures. @@ -66 +70 @@ If you add an OU that your stack set already targets, StackSets creates new stac -CloudFormation starts creating your stack instances. View the progress and status of the creation of the stack instances in your stack set in the stack set details page that opens when you choose **Submit**. When complete, your new stack instances should be listed on the **Stack instances** tab. +CloudFormation starts creating your stacks. View the progress and status of the creation of the stacks in your stack set in the stack set details page that opens when you choose **Submit**. When complete, your new stacks should be listed on the **Stack instances** tab. @@ -71 +75 @@ CloudFormation starts creating your stack instances. View the progress and statu -## Add stack instances to a stack set (AWS CLI) +## Add stacks to a stack set (AWS CLI) @@ -73 +77 @@ CloudFormation starts creating your stack instances. View the progress and statu -When acting as a delegated administrator, you must set the `--call-as` option to `DELEGATED_ADMIN` each time you run a StackSets command. +When acting as a delegated administrator, you must set the `--call-as` option to `DELEGATED_ADMIN` each time you run a stack set command. @@ -80 +84 @@ When acting as a delegated administrator, you must set the `--call-as` option to -[Self-managed permissions] For the `--accounts` option, provide the accounts IDs for which you want to create stack instances. +[Self-managed permissions] For the `--accounts` option, provide the accounts IDs for which you want to create stacks. @@ -83 +87 @@ When acting as a delegated administrator, you must set the `--call-as` option to - --accounts '["account_id"]' --regions '["eu-west-1", "us-west-2"]' + --accounts account_id --regions eu-west-1 us-west-2 @@ -85 +89 @@ When acting as a delegated administrator, you must set the `--call-as` option to -[Service-managed permissions] For the `--deployment-targets` option, provide the organization (root) ID or OU IDs for which you want to create stack instances. +[Service-managed permissions] For the `--deployment-targets` option, provide the organization (root) ID or OU IDs for which you want to create stacks. @@ -88 +92 @@ When acting as a delegated administrator, you must set the `--call-as` option to - --deployment-targets OrganizationalUnitIds='["ou-rcuk-r1qi0wl7"]' --regions '["eu-west-1", "us-west-2"]' + --deployment-targets OrganizationalUnitIds='["ou-rcuk-r1qi0wl7"]' --regions eu-west-1 us-west-2 @@ -92 +96 @@ When acting as a delegated administrator, you must set the `--call-as` option to -If you add an OU that your stack set already targets, StackSets creates new stack instances in any accounts in the OU that don't already have stack instances from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). +If you add an OU that your stack set already targets, StackSets creates new stacks in any accounts in the OU that don't already have stacks from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). @@ -105 +109 @@ Update StackSets -Choose the Concurrency Mode +Override parameters on stacks