AFT Control Tower - rollback customization

0

Hi, Is there a way to rollback the customization applied through AFT? For example, how to rollback the "aws_s3_account_public_access_block" created resource deployed as a global customization. For removing a provisioned account, the documentation exists, but nothing on rolling back customizations only. Thank you.

RoxTeo
已提问 1 年前325 查看次数
1 回答
1

Hi There

AFT provides a way to re-invoke customizations in the AFT pipeline. This method is useful when you’ve added a new customization step, or when you are making changes to an existing customization. See https://docs.aws.amazon.com/controltower/latest/userguide/aft-account-customization-options.html#aft-re-invoke-customizations

profile pictureAWS
专家
Matt-B
已回答 1 年前
  • Hi Matt-B,

    Thank you for replying. I've tested the proposed solution by re-invoking the AFT pipeline as described in the guide. The re-invoke works as expected, however the resource that I was expecting to be removed from the targeted account did not get deleted. What I did is that I commented the terraform resource in the main.tf file and re-invoked the aft-account-customizations pipeline. Maybe I'm missing something or maybe it is not enough to just comment the resource in that file.

    UPDATE: I've just noticed that it worked by commenting the resource block and re-invoking the pipeline. It just takes a while 10-15 minutes to take effect and this is why I concluded it did not work. Thanks again for the help!

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则