We use AWS CDK to build and manage our AWS environment. We have split accounts by use and manage nearly 100 accounts apart from security accounts and other administrative accounts.

We are regularly updating the existing mechanism in accordance with continuous updates of AWS services, but we are no longer able to respond in a timely manner because we are performing equivalent processing for nearly 100 accounts.

I know that CDK and multi-account configurations are already being used by many companies, but how are you resolving this kind of operational burden? I am wondering if it is possible to trigger pull request approval and automatically perform tests using fine-grained assersions and cdk diff, and if there are no problems, automatically deploy to all accounts. I am wondering how it is done in the world in general.

Best Regards,

1 Answer
Accepted Answer

Hi, you have a practical cross-account / cross region example here: https://github.com/aws-samples/multiple-account-cdk-cicd-pipeline

Additionally, CDK-based Stacksets are on the way:

They are based on CFN Stacksets, which would be the best solution to your question if you were in CFN environment without CDK. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/what-is-cfnstacksets.html

Hope it helps!

profile pictureAWS
answered a year ago
profile picture
reviewed a year ago
  • Thanks for the reply.

    Am I correct in understanding that a solution (CFN Stacksets) exists for a CFN environment without CDK, but no solution exists for CDK-based stacksets in preparation?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions