Cloudformation Git sync with change sets?

0

All examples of Cloudformation Git sync show how stack update would be triggered from git commits. Instead of updating the stack, would it be possible to create a change set to be approved and executed later?

EDIT: Git sync being this feature https://aws.amazon.com/about-aws/whats-new/2023/11/aws-cloudformation-git-management-stacks/

profile picture
專家
Kallu
已提問 2 個月前檢視次數 219 次
3 個答案
1
已接受的答案

We have a fun feature in the works where we’ll comment on your pull request with the contents of the changeset. That way you can review it and when you merge the PR, know what’ll happen!!

❤️ with love from the CloudFormation team ❤️

David
已回答 2 個月前
profile picture
專家
已審閱 1 個月前
  • What could be better than changeset? Changeset in PR :-)

0

Yes, it is possible to create a change set from a Git commit instead of directly updating the stack. When a commit is made to the Git repo, a change set can be created to preview the proposed changes before executing them.

Configure the CodePipeline to trigger on Git commits and pass the source code to CodeBuild. In CodeBuild, run a script that syncs the source code and generates a CloudFormation template.

Use the aws cloudformation create-change-set command to create a change set based on the updated template without applying the changes.

View and approve the change set in the console.

Once approved, the change set can be executed using aws cloudformation execute-change-set to update the stack.

This allows reviewing the proposed infrastructure changes before executing them, reducing the risk of unintended updates to production resources from Git commits. The change set acts as a checkpoint between code changes and stack updates.

profile picture
專家
已回答 2 個月前
0

Hi,

Why don't you just use CLI command aws cloudformation create-change-set in the workflow described in the blog hyperlinked from the announcement that you point ? See documentation https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudformation/create-change-set.html

You can save the id of this change set and apply it as such at your convenience.

Best,

Didier

profile pictureAWS
專家
已回答 2 個月前
  • But that git workflow is to run locally on developer laptop. The beef of git sync is (IMHO) you don't need to manage own runners, configure custom CodeBuilds or provide direct access to AWS for devs. Which is nice, it just would have been even better with an option to create a change-set as part of the process.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南