How to deploy stack sets to specific accounts?

Question

Can stack sets be deployed to _specific_ accounts rather than OUs or the entire org?

Can a stack set deployment be _moved_ from a generic OU to a more specific account?

My use case is around AWS CDK bootstrap stacks. I want to deploy them to every account. But then, some accounts need customizations, e.g. around account trusts (deployment pipeline accounts).

So the idea is that every account in the org gets the stack set, but then sometimes, we need to add customizations.

How to achieve that?

Thanks.

Riku_Kobayashi · Answer

Hello.

Stacksets can be deployed to specific AWS accounts.  
You can deploy by specifying your AWS account ID as described in the document below.  
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-getting-started-create.html

As a preliminary preparation, you need to create an IAM role in the target AWS account and the AWS account that will run StackSets.  
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs-self-managed.html

How to deploy stack sets to specific accounts?

Relevant content