Updating/deleting stacksets deployed in Organization

0

Is there a clean way to update or delete stacksets that are created at Organization level? While creating a stackset there is an option to select "Deploy to Organization" option. But after creation while trying to update it, it needs to have specific OU Ids selected and cannot be targeted to the whole Organization. Is there an easier way to do it especially for large enterprises? Even after using a valid OU during update, it errors out saying "Organizational unit ou-xxxx not found in StackSet". A similar situation occurs while trying to delete the stackset. To delete stackset, you need to remove all stacks first, but can’t get stacks removed because it only offers choice of OU and any OU type gets similar message of not existing in stack. Is there a better way of handling this?

AWS
asked 4 years ago2158 views
1 Answer
0
Accepted Answer

You can update a stackset created at Organization level using rootId, as these stacksets are created against the rootId.

To get the rootId, use ListRoots Organizations API https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html or get it from console (from Organizations). Format will be similar to “arn:aws:organizations::111111111111:root/o-exampleorgid/r-examplerootid111”. The error – “Organizational unit ou-xxxx not found in StackSet” happens when there are no accounts in the OU, and this means no stack-instances. In this case update operation is expected to fail.

AWS
answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions