AWS AWSCloudFormation documentation change
Summary
Updated terminology from 'StackSets' to 'CloudFormation' for service references, clarified account removal behavior documentation, and improved section headers.
Security assessment
Changes are primarily terminology updates (e.g., 'StackSets' to 'CloudFormation') and documentation structure improvements. No specific security vulnerabilities or security feature enhancements are mentioned. The account removal behavior clarification ('Delete stacks' vs 'Retain stacks') relates to resource lifecycle management rather than security controls.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.md b/AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.md index d5c2e1404..cd5c71f51 100644 --- a//AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.md +++ b//AWSCloudFormation/latest/UserGuide/stacksets-orgs-manage-auto-deployment.md @@ -9 +9 @@ How automatic deployments workConsiderationsEnable or disable automatic deployme -StackSets can automatically deploy additional stacks to new AWS Organizations accounts when they're added to your target organization or organizational units (OUs). You can enable automatic deployments and choose whether to delete or retain stacks and their associated resources when accounts are removed from target OUs. These settings can be modified anytime for StackSets that use service-managed permissions. +CloudFormation can automatically deploy additional stacks to new AWS Organizations accounts when they're added to your target organization or organizational units (OUs). You can enable automatic deployments and choose whether to delete or retain stacks and their associated resources when accounts are removed from target OUs. These settings can be modified anytime for StackSets that use service-managed permissions. @@ -17 +17 @@ For example, consider `StackSet1` that targets `OU1` in the `us-east-1` Region a -If we move `AccountA` from `OU1` to `OU2` with automatic deployments enabled, StackSets automatically runs a delete operation to remove the `StackSet1` stack from `AccountA` and queues a create operation that adds the `StackSet2` stack to `AccountA`. +If you move `AccountA` from `OU1` to `OU2` with automatic deployments enabled, CloudFormation automatically runs a delete operation to remove the `StackSet1` stack from `AccountA` and queues a create operation that adds the `StackSet2` stack to `AccountA`. @@ -23 +23 @@ The following are considerations when using automatic deployments: - * The automatic deployments feature is enabled at the stack set level. You can't adjust automatic deployments selectively for OUs, accounts, or Regions. + * The automatic deployments feature is enabled at the StackSet level. You can't adjust automatic deployments selectively for OUs, accounts, or Regions. @@ -25 +25 @@ The following are considerations when using automatic deployments: - * Overridden parameter values only apply to the accounts that are currently in the target OUs and their child OUs. Accounts added to the target OUs and their child OUs in the future will use the stack set default values and not the overridden values. + * Overridden parameter values only apply to the accounts that are currently in the target OUs and their child OUs. Accounts added to the target OUs and their child OUs in the future will use the StackSet default values and not the overridden values. @@ -27 +27 @@ The following are considerations when using automatic deployments: - * If you use account level targets and enable automatic deployments, StackSets will continue to use the account level filter defined in the last deployment while also deploying to newly added accounts within the deployed organization. To prevent deployments to newly added accounts, disable automatic deployments. For more information about using account level targets, see [Account level targets for service-managed StackSets](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/account-level-targets.html). + * If you target specific accounts and enable automatic deployments, your StackSet will continue to use the account level filter defined in the last deployment while also deploying to newly added accounts within the deployed organization. To prevent deployments to newly added accounts, disable automatic deployments. @@ -33,0 +34,2 @@ The following are considerations when using automatic deployments: +###### To enable or disable automatic deployments + @@ -36 +38 @@ The following are considerations when using automatic deployments: - 2. On the navigation bar at the top of the screen, choose the AWS Region you created the stack set in. + 2. On the navigation bar at the top of the screen, choose the AWS Region you created the StackSet in. @@ -40 +42 @@ The following are considerations when using automatic deployments: - 4. On the **StackSets** page, select the option next to the name of the stack set to update. + 4. On the **StackSets** page, select the option next to the name of the StackSet to update. @@ -48 +50 @@ The following are considerations when using automatic deployments: - 2. For **Account removal behavior** , choose **Delete stacks** or **Retain stacks**. Retained resources stay in their current state, but will no longer be part of the stack set. + 2. For **Account removal behavior** , choose **Delete stacks** or **Retain stacks**. Retained resources stay in their current state, but will no longer be part of the StackSet. @@ -56,0 +59,2 @@ The following are considerations when using automatic deployments: +###### To enable or disable automatic deployments + @@ -69 +73 @@ Alternatively, to disable automatic deployments, specify `Enabled=false` as the - 2. Using the operation ID that was returned as part of the **update-stack-set** output, run [describe-stack-set-operation](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/describe-stack-set-operation.html) to verify that your stack set was updated successfully. + 2. Using the operation ID that was returned as part of the **update-stack-set** output, run [describe-stack-set-operation](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/describe-stack-set-operation.html) to verify that your StackSet was updated successfully. @@ -82 +86 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Override parameters on stacks +Create StackSets (service-managed permissions) @@ -84 +88 @@ Override parameters on stacks -Delete stacks from StackSets +Update StackSets