Cloudformation Git sync with change sets?


All examples of Cloudformation Git sync show how stack update would be triggered from git commits. Instead of updating the stack, would it be possible to create a change set to be approved and executed later?

EDIT: Git sync being this feature

profile picture
preguntada hace 3 meses222 visualizaciones
3 Respuestas
Respuesta aceptada

We have a fun feature in the works where we’ll comment on your pull request with the contents of the changeset. That way you can review it and when you merge the PR, know what’ll happen!!

❤️ with love from the CloudFormation team ❤️

respondido hace 2 meses
profile picture
revisado hace un mes
  • What could be better than changeset? Changeset in PR :-)


Yes, it is possible to create a change set from a Git commit instead of directly updating the stack. When a commit is made to the Git repo, a change set can be created to preview the proposed changes before executing them.

Configure the CodePipeline to trigger on Git commits and pass the source code to CodeBuild. In CodeBuild, run a script that syncs the source code and generates a CloudFormation template.

Use the aws cloudformation create-change-set command to create a change set based on the updated template without applying the changes.

View and approve the change set in the console.

Once approved, the change set can be executed using aws cloudformation execute-change-set to update the stack.

This allows reviewing the proposed infrastructure changes before executing them, reducing the risk of unintended updates to production resources from Git commits. The change set acts as a checkpoint between code changes and stack updates.

profile picture
respondido hace 3 meses


Why don't you just use CLI command aws cloudformation create-change-set in the workflow described in the blog hyperlinked from the announcement that you point ? See documentation

You can save the id of this change set and apply it as such at your convenience.



profile pictureAWS
respondido hace 3 meses
  • But that git workflow is to run locally on developer laptop. The beef of git sync is (IMHO) you don't need to manage own runners, configure custom CodeBuilds or provide direct access to AWS for devs. Which is nice, it just would have been even better with an option to create a change-set as part of the process.

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas