Cloudformation Git sync with change sets?

0

All examples of Cloudformation Git sync show how stack update would be triggered from git commits. Instead of updating the stack, would it be possible to create a change set to be approved and executed later?

EDIT: Git sync being this feature https://aws.amazon.com/about-aws/whats-new/2023/11/aws-cloudformation-git-management-stacks/

profile picture
专家
Kallu
已提问 2 个月前199 查看次数
3 回答
1
已接受的回答

We have a fun feature in the works where we’ll comment on your pull request with the contents of the changeset. That way you can review it and when you merge the PR, know what’ll happen!!

❤️ with love from the CloudFormation team ❤️

David
已回答 2 个月前
profile picture
专家
已审核 17 天前
  • What could be better than changeset? Changeset in PR :-)

0

Yes, it is possible to create a change set from a Git commit instead of directly updating the stack. When a commit is made to the Git repo, a change set can be created to preview the proposed changes before executing them.

Configure the CodePipeline to trigger on Git commits and pass the source code to CodeBuild. In CodeBuild, run a script that syncs the source code and generates a CloudFormation template.

Use the aws cloudformation create-change-set command to create a change set based on the updated template without applying the changes.

View and approve the change set in the console.

Once approved, the change set can be executed using aws cloudformation execute-change-set to update the stack.

This allows reviewing the proposed infrastructure changes before executing them, reducing the risk of unintended updates to production resources from Git commits. The change set acts as a checkpoint between code changes and stack updates.

profile picture
专家
已回答 2 个月前
0

Hi,

Why don't you just use CLI command aws cloudformation create-change-set in the workflow described in the blog hyperlinked from the announcement that you point ? See documentation https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudformation/create-change-set.html

You can save the id of this change set and apply it as such at your convenience.

Best,

Didier

profile pictureAWS
专家
已回答 2 个月前
  • But that git workflow is to run locally on developer laptop. The beef of git sync is (IMHO) you don't need to manage own runners, configure custom CodeBuilds or provide direct access to AWS for devs. Which is nice, it just would have been even better with an option to create a change-set as part of the process.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则