AWS AWSCloudFormation documentation change
Summary
Updated documentation with consistent 'StackSet' capitalization, clarified failure tolerance behavior, restructured CLI instructions with delegated admin note, and modified deployment target syntax examples
Security assessment
Changes are primarily terminology standardization (StackSet capitalization) and operational clarifications. The failure tolerance clarification improves operational safety but doesn't address a specific vulnerability. The delegated admin note reinforces existing security practices without introducing new security content.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/stacksets-update.md b/AWSCloudFormation/latest/UserGuide/stacksets-update.md index ea5bdaeb0..e65487bd8 100644 --- a//AWSCloudFormation/latest/UserGuide/stacksets-update.md +++ b//AWSCloudFormation/latest/UserGuide/stacksets-update.md @@ -5 +5 @@ -Update your stack set (console)Update your stack set (AWS CLI) +Update your StackSet (console)Update your StackSet (AWS CLI) @@ -7 +7 @@ Update your stack set (console)Update your stack set (AWS CLI) -# Update CloudFormation StackSets +# Update AWS CloudFormation StackSets @@ -9 +9 @@ Update your stack set (console)Update your stack set (AWS CLI) -You can update your stack set using either the CloudFormation console or the AWS CLI. +You can update your StackSet using either the CloudFormation console or the AWS CLI. @@ -11 +11 @@ You can update your stack set using either the CloudFormation console or the AWS -To add and remove accounts and Regions from a stack set, see [Add stacks to StackSets](./stackinstances-create.html) and [Delete stacks from StackSets](./stackinstances-delete.html). To override parameter values for a stack, see [Override parameters on stacks](./stackinstances-override.html). +To add and remove accounts and Regions from a StackSet, see [Add stacks to StackSets](./stackinstances-create.html) and [Delete stacks from StackSets](./stackinstances-delete.html). To override parameter values for a stack, see [Override parameters on stacks](./stackinstances-override.html). @@ -15 +15 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - * Update your stack set (console) + * Update your StackSet (console) @@ -17 +17 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - * Update your stack set (AWS CLI) + * Update your StackSet (AWS CLI) @@ -22 +22,3 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac -## Update your stack set (console) +## Update your StackSet (console) + +###### To update a StackSet @@ -26 +28 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - 2. On the navigation bar at the top of the screen, choose the AWS Region you created the stack set in. + 2. On the navigation bar at the top of the screen, choose the AWS Region you created the StackSet in. @@ -30 +32 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - 4. On the **StackSets** page, select the stack set you want to update. + 4. On the **StackSets** page, select the StackSet you want to update. @@ -32 +34 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - 5. With the stack set selected, choose **Edit StackSet details** from the **Actions** menu. + 5. With the StackSet selected, choose **Edit StackSet details** from the **Actions** menu. @@ -40 +42 @@ To add and remove accounts and Regions from a stack set, see [Add stacks to Stac - 9. On the **Specify StackSet details** page, for **StackSet description** , update the description for the stack set as needed. + 9. On the **Specify StackSet details** page, for **StackSet description** , update the description for the StackSet as needed. @@ -62 +64 @@ CloudFormation will deploy stack updates in the specified accounts within the fi - 1. [Self-managed permissions] For **Accounts** , **Deployment locations** , choose **Deploy stacks in accounts**. Paste the target account IDs that you used to create your stack set in the text box, separating multiple numbers with commas. + 1. [Self-managed permissions] For **Accounts** , **Deployment locations** , choose **Deploy stacks in accounts**. Paste the target account IDs that you used to create your StackSet in the text box, separating multiple numbers with commas. @@ -66 +68 @@ CloudFormation will deploy stack updates in the specified accounts within the fi - * Choose **Deploy to organizational units (OUs)**. Enter the target OUs that you used to create your stack set. + * Choose **Deploy to organizational units (OUs)**. Enter the target OUs that you used to create your StackSet. @@ -68 +70 @@ CloudFormation will deploy stack updates in the specified accounts within the fi - * Choose **Deploy to accounts**. Paste the target OU IDs or account IDs that you used to create your stack set. + * Choose **Deploy to accounts**. Paste the target OU IDs or account IDs that you used to create your StackSet. @@ -76 +78 @@ CloudFormation will deploy stack updates in the specified accounts within the fi - * For **Failure tolerance** , specify how many failures are acceptable before the operation stops. + * For **Failure tolerance** , specify the maximum number of account failures allowed per Region. The operation will stop and won't proceed to other Regions once this limit is reached. @@ -82 +84 @@ CloudFormation will deploy stack updates in the specified accounts within the fi - * **Strict failure tolerance** – Reduces concurrency level when failures occur, staying within **Failure tolerance** +1. + * **Strict failure tolerance** – Reduces account concurrency level when failures occur, staying within **Failure tolerance** +1. @@ -92 +94 @@ CloudFormation will deploy stack updates in the specified accounts within the fi -CloudFormation starts applying your updates to your stack set, and displays the **Operations** tab of the stack set details page. You can view the progress and status of update operations on the **Operations** tab. +CloudFormation starts applying your updates to your StackSet, and displays the **Operations** tab of the StackSet details page. You can view the progress and status of update operations on the **Operations** tab. @@ -97 +99 @@ CloudFormation starts applying your updates to your stack set, and displays the -## Update your stack set (AWS CLI) +## Update your StackSet (AWS CLI) @@ -99 +101 @@ CloudFormation starts applying your updates to your stack set, and displays the -When acting as a delegated administrator, you must set the `--call-as` option to `DELEGATED_ADMIN` each time you run a stack set command. +###### Note @@ -100,0 +103 @@ When acting as a delegated administrator, you must set the `--call-as` option to +When acting as a delegated administrator, you must include `--call-as DELEGATED_ADMIN` in the command. @@ -102 +105 @@ When acting as a delegated administrator, you must set the `--call-as` option to - --call-as DELEGATED_ADMIN + 1. ###### To update a StackSet @@ -104 +107 @@ When acting as a delegated administrator, you must set the `--call-as` option to - 1. Use the [update-stack-set](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/update-stack-set.html) command to make changes to your stack set. +Use the [update-stack-set](https://docs.aws.amazon.com/cli/latest/reference/cloudformation/update-stack-set.html) command to make changes to your StackSet. @@ -106 +109 @@ When acting as a delegated administrator, you must set the `--call-as` option to -In the following examples, we're updating the stack set by using `--parameters` option. Specifically, we change the default snapshot delivery frequency for delivery channel configuration from `TwentyFour_Hours` to `Twelve_Hours`. Because we're still using the current template, we add the `--use-previous-template` option. +In the following examples, we're updating the StackSet by using `--parameters` option. Specifically, we change the default snapshot delivery frequency for delivery channel configuration from `TwentyFour_Hours` to `Twelve_Hours`. Because we're still using the current template, we add the `--use-previous-template` option. @@ -112 +115 @@ Set concurrent account processing and other deployment preferences using the `-- - aws cloudformation update-stack-set --stack-set-name my-awsconfig-stackset \ + aws cloudformation update-stack-set --stack-set-name my-stackset \ @@ -124 +127 @@ Set concurrent account processing and other deployment preferences using the `-- - --deployment-targets OrganizationalUnitIds='["ou-rcuk-1x5j1lwo", "ou-rcuk-slr5lh0a"]' \ + --deployment-targets OrganizationalUnitIds=ou-rcuk-1x5j1lwo,ou-rcuk-slr5lh0a \ @@ -130 +133 @@ For more information, see [UpdateStackSet](https://docs.aws.amazon.com/AWSCloudF - 2. Verify that your stack set was updated successfully by running the **describe-stack-set-operation** command to show the status and results of your update operation. For `--operation-id`, use the operation ID that was returned by your **update-stack-set** command. + 2. Verify that your StackSet was updated successfully by running the **describe-stack-set-operation** command to show the status and results of your update operation. For `--operation-id`, use the operation ID that was returned by your **update-stack-set** command. @@ -144 +147 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Create StackSets (service-managed permissions) +Enable-disable automatic deployments