AFT Control Tower - rollback customization

0

Hi, Is there a way to rollback the customization applied through AFT? For example, how to rollback the "aws_s3_account_public_access_block" created resource deployed as a global customization. For removing a provisioned account, the documentation exists, but nothing on rolling back customizations only. Thank you.

RoxTeo
gefragt vor einem Jahr326 Aufrufe
1 Antwort
1

Hi There

AFT provides a way to re-invoke customizations in the AFT pipeline. This method is useful when you’ve added a new customization step, or when you are making changes to an existing customization. See https://docs.aws.amazon.com/controltower/latest/userguide/aft-account-customization-options.html#aft-re-invoke-customizations

profile pictureAWS
EXPERTE
Matt-B
beantwortet vor einem Jahr
  • Hi Matt-B,

    Thank you for replying. I've tested the proposed solution by re-invoking the AFT pipeline as described in the guide. The re-invoke works as expected, however the resource that I was expecting to be removed from the targeted account did not get deleted. What I did is that I commented the terraform resource in the main.tf file and re-invoked the aft-account-customizations pipeline. Maybe I'm missing something or maybe it is not enough to just comment the resource in that file.

    UPDATE: I've just noticed that it worked by commenting the resource block and re-invoking the pipeline. It just takes a while 10-15 minutes to take effect and this is why I concluded it did not work. Thanks again for the help!

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen