AWS AWSCloudFormation documentation change
Summary
Updated terminology from 'stack set' to 'StackSet' (capitalized), added CLI command structure for delegated administrators, clarified failure tolerance behavior, and reorganized service-managed permissions instructions
Security assessment
Changes focus on branding consistency (capitalization), command syntax improvements, and operational clarity. The added '--call-as DELEGATED_ADMIN' note reinforces existing security practices but does not address a new vulnerability or weakness. No evidence of patching a security issue or introducing new security features.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/stackinstances-create.md b/AWSCloudFormation/latest/UserGuide/stackinstances-create.md index 285757e27..e2c432db3 100644 --- a//AWSCloudFormation/latest/UserGuide/stackinstances-create.md +++ b//AWSCloudFormation/latest/UserGuide/stackinstances-create.md @@ -5 +5 @@ -Add stacks to a stack set (console)Add stacks to a stack set (AWS CLI) +Add stacks to a StackSet (console)Add stacks to a StackSet (AWS CLI) @@ -9 +9 @@ Add stacks to a stack set (console)Add stacks to a stack set (AWS CLI) -When you create a stack set, you can create the stacks for that stack set. CloudFormation also enables you to add more stacks, for additional accounts and Regions, at any point after the stack set is created. You can add stacks using either the CloudFormation console or the AWS CLI. +When you create a StackSet, you can create the stacks for that StackSet. CloudFormation also enables you to add more stacks, for additional accounts and Regions, at any point after the StackSet is created. You can add stacks using either the CloudFormation console or the AWS CLI. @@ -13 +13 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - * Add stacks to a stack set (console) + * Add stacks to a StackSet (console) @@ -15 +15 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - * Add stacks to a stack set (AWS CLI) + * Add stacks to a StackSet (AWS CLI) @@ -20 +20,3 @@ When you create a stack set, you can create the stacks for that stack set. Cloud -## Add stacks to a stack set (console) +## Add stacks to a StackSet (console) + +###### To add stacks to a StackSet @@ -24 +26 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - 2. On the navigation bar at the top of the screen, choose the AWS Region you created the stack set in. + 2. On the navigation bar at the top of the screen, choose the AWS Region you created the StackSet in. @@ -26 +28 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - 3. From the navigation pane, choose **StackSets**. On the StackSets page, select the stack set that you created. + 3. From the navigation pane, choose **StackSets**. On the StackSets page, select the StackSet that you created. @@ -28 +30 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - 4. With the stack set selected, choose **Add stacks to StackSet** from the **Actions** menu. + 4. With the StackSet selected, choose **Add stacks to StackSet** from the **Actions** menu. @@ -32 +34 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - 1. For **Add stacks to stack set** , choose **Deploy new stacks**. + 1. For **Add stacks to StackSet** , choose **Deploy new stacks**. @@ -34 +36 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - 2. Next, do the following depending on your stack set's permissions configuration: + 2. Next, do the following depending on your StackSet's permissions configuration: @@ -42 +44 @@ When you create a stack set, you can create the stacks for that stack set. Cloud - * Choose **Deploy to organizational units (OUs)** to deploy to all accounts in specific OUs. Choose **Add another OU** , and then paste the target OU ID in the text box. Repeat for each new target OU. StackSets also targets any child OUs of your selected targets. + * Choose **Deploy to organizational units (OUs)** to deploy to all accounts in specific OUs. Choose **Add another OU** , and then paste the target OU ID in the text box. Repeat for each new target OU. CloudFormation also targets any child OUs of your selected targets. @@ -46 +48 @@ When you create a stack set, you can create the stacks for that stack set. Cloud -If you add an OU that your stack set already targets, StackSets creates new stacks in any accounts in the OU that don't already have stacks from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). +If you add an OU that your StackSet already targets, CloudFormation creates new stacks in any accounts in the OU that don't already have stacks from your StackSet (for example, accounts that were added to the OU after your StackSet was created and with automatic deployments disabled). @@ -54 +56 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * For **Failure tolerance** , specify how many failures are acceptable before the operation stops. + * For **Failure tolerance** , specify the maximum number of account failures allowed per Region. The operation will stop and won't proceed to other Regions once this limit is reached. @@ -60 +62 @@ If you add an OU that your stack set already targets, StackSets creates new stac - * **Strict failure tolerance** – Reduces concurrency level when failures occur, staying within **Failure tolerance** +1. + * **Strict failure tolerance** – Reduces account concurrency level when failures occur, staying within **Failure tolerance** +1. @@ -72 +74 @@ If you add an OU that your stack set already targets, StackSets creates new stac -CloudFormation starts creating your stacks. View the progress and status of the creation of the stacks in your stack set in the stack set details page that opens when you choose **Submit**. When complete, your new stacks should be listed on the **Stack instances** tab. +CloudFormation starts creating your stacks. View the progress and status of the creation of the stacks in your StackSet in the StackSet details page that opens when you choose **Submit**. When complete, your new stacks should be listed on the **Stack instances** tab. @@ -77 +79 @@ CloudFormation starts creating your stacks. View the progress and status of the -## Add stacks to a stack set (AWS CLI) +## Add stacks to a StackSet (AWS CLI) @@ -79 +81 @@ CloudFormation starts creating your stacks. View the progress and status of the -When acting as a delegated administrator, you must set the `--call-as` option to `DELEGATED_ADMIN` each time you run a stack set command. +###### Note @@ -80,0 +83 @@ When acting as a delegated administrator, you must set the `--call-as` option to +When acting as a delegated administrator, you must include `--call-as DELEGATED_ADMIN` in the command. @@ -82 +85 @@ When acting as a delegated administrator, you must set the `--call-as` option to - --call-as DELEGATED_ADMIN +###### To add stacks to a StackSet with self-managed permissions @@ -84 +87 @@ When acting as a delegated administrator, you must set the `--call-as` option to - * Use the **create-stack-instances** CLI command. +Use the **create-stack-instances** CLI command. For the `--accounts` option, provide the accounts IDs for which you want to create stacks. @@ -86 +88,0 @@ When acting as a delegated administrator, you must set the `--call-as` option to -[Self-managed permissions] For the `--accounts` option, provide the accounts IDs for which you want to create stacks. @@ -88 +90 @@ When acting as a delegated administrator, you must set the `--call-as` option to - aws cloudformation create-stack-instances --stack-set-name my-awsconfig-stackset \ + aws cloudformation create-stack-instances --stack-set-name my-stackset \ @@ -91,4 +93 @@ When acting as a delegated administrator, you must set the `--call-as` option to -[Service-managed permissions] For the `--deployment-targets` option, provide the organization (root) ID or OU IDs for which you want to create stacks. - - aws cloudformation create-stack-instances --stack-set-name my-stackset \ - --deployment-targets OrganizationalUnitIds='["ou-rcuk-r1qi0wl7"]' --regions eu-west-1 us-west-2 +###### To add stacks to a StackSet with service-managed permissions @@ -96 +95 @@ When acting as a delegated administrator, you must set the `--call-as` option to -###### Note +Use the **create-stack-instances** CLI command. For the `--deployment-targets` option, provide the organization (root) ID or OU IDs for which you want to create stacks. For example commands that target specific accounts, see [Create a StackSet with service-managed permissions (AWS CLI)](./stacksets-orgs-associate-stackset-with-org.html#stacksets-orgs-associate-stackset-with-org-cli). @@ -98 +96,0 @@ When acting as a delegated administrator, you must set the `--call-as` option to -If you add an OU that your stack set already targets, StackSets creates new stacks in any accounts in the OU that don't already have stacks from your stack set (for example, accounts that were added to the OU after your stack set was created and with automatic deployments disabled). @@ -99,0 +98,2 @@ If you add an OU that your stack set already targets, StackSets creates new stac + aws cloudformation create-stack-instances --stack-set-name my-stackset \ + --deployment-targets OrganizationalUnitIds=ou-rcuk-r1qi0wl7 --regions eu-west-1 us-west-2 @@ -100,0 +101 @@ If you add an OU that your stack set already targets, StackSets creates new stac +###### Note @@ -101,0 +103 @@ If you add an OU that your stack set already targets, StackSets creates new stac +If you add an OU that your StackSet already targets, CloudFormation creates new stacks in any accounts in the OU that don't already have stacks from your StackSet (for example, accounts that were added to the OU after your StackSet was created and with automatic deployments disabled).