AWS CloudFormation Flashcards
AWS CloudFormation
AWS CloudFormation is a service that allows you to manage, configure and provision your AWS infrastructure as code.
AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.
CloudFormation Benefits
- Infrastructure is provisioned consistently, with fewer mistakes (human error).
- Less time and effort than configuring resources manually.
- You can use version control and peer review for your CloudFormation templates.
- Free to use (you’re only charged for the resources provisioned).
- It can be used to manage updates and dependencies.
- It can be used to rollback and delete the entire stack as well.
Key Concepts
- Templates
- Stacks
- StackSets
- Change Sets
Template Principles
A template is a YAML or JSON template used to describe the end-state of the infrastructure you are either provisioning or changing.
After creating the template, you upload it to CloudFormation directly or using Amazon S3.
CloudFormation reads the template and makes the API calls on your behalf.
The resulting resources are called a “Stack”.
Logical IDs are used to reference resources within the template.
Physical IDs identify resources outside of AWS CloudFormation templates, but only after the resources have been created.
Mandatory Template elements
List of resources and associated configuration values.
Template components - Resources , What is it ?
The required Resources section declares the AWS resources that you want to include in the stack, such as an Amazon EC2 instance or an Amazon S3 bucket.
- Mandatory.
- Represent AWS components that will be created.
- Resources are declared and can reference each other.
Template components - Parameters, What is it ?
Use the optional Parameters section to customize your templates. Parameters enable you to input custom values to your template each time you create or update a stack.
- Provide inputs to your CloudFormation template.
- Useful for template reuse.
Pseudo Parameters, what is it ?
Pseudo parameters are parameters that are predefined by AWS CloudFormation. You do not declare them in your template. Use them the same way as you would a parameter, as the argument for the Ref function.
- AWS::AccountId – Returns the AWS account ID of the account in which the stack is being created.
- AWS::NotificationARNs – Returns the list of notification Amazon Resource Names (ARNs) for the current stack.
- AWS::Region – Returns a string representing the AWS Region in which the encompassing resource is being created.
- AWS::StackId – Returns the ID of the stack as specified with the aws cloudformation create-stack command.
Mappings, what is it ?
The optional Mappings section matches a key to a corresponding set of named values.
- Fixed variables.
- Good for differentiating between regions, environments, AMIs etc.
- Need to know the values in advance.
- For user-specific values use parameters instead.
Exam tip: with mappings you can, for example, set values based on a region. You can create a mapping that uses the region name as a key and contains the values you want to specify for each specific region.
Outputs, what is it ?
The optional Outputs section declares output values that you can import into other stacks (to create cross-stack references), return in response (to describe stack calls), or view on the AWS CloudFormation console.
- Outputs can be imported into other stacks.
- Can view the outputs in the console or using the AWS CLI.
- Cannot delete a Stack if its outputs are being referenced by another CloudFormation Stack.
Conditions, what is it ?
The optional Conditions section contains statements that define the circumstances under which entities are created or configured.
Transform, what is it ?
The optional Transform section specifies one or more macros that AWS CloudFormation uses to process your template.
The transform section can be used to reference additional code stored in S3, such as Lambda code or reusable snippets of CloudFormation code.
The AWS::Serverless transform, which is a macro hosted by AWS CloudFormation, takes an entire template written in the AWS Serverless Application Model (AWS SAM) syntax and transforms and expands it into a compliant AWS CloudFormation template.
Intrinsic Functions
AWS CloudFormation provides several built-in functions that help you manage your stacks.
Use intrinsic functions in your templates to assign values to properties that are not available until runtime.
Instrinsic Funtions
Ref
Fn::Ref (or !Ref in YAML),
The intrinsic function Ref returns the value of the specified parameter or resource.
Fn::GetAtt
The Fn::GetAtt intrinsic function returns the value of an attribute from a resource in the template.
Fn::FindInMap
The intrinsic function Fn::FindInMap returns the value corresponding to keys in a two-level map that is declared in the Mappings section.
Fn::ImportValue
The intrinsic function Fn::ImportValue returns the value of an output exported by another stack.
You typically use this function to create cross-stack references.
Fn::Sub
The intrinsic function Fn::Sub substitutes variables in an input string with values that you specify.
In your templates, you can use this function to construct commands or outputs that include values that aren’t available until you create or update a stack.
Stacks
- Deployed resources based on templates.
- Create, update, and delete stacks using templates.
- Deployed through the Management Console, CLI or APIs.
Stack creation errors:
- Automatic rollback on error is enabled by default.
- You will be charged for resources provisioned even if there is an error.
Updating stacks:
AWS CloudFormation provides two methods for updating stacks: direct update or creating and executing change sets.
When you directly update a stack, you submit changes and AWS CloudFormation immediately deploys them.
Use direct updates when you want to quickly deploy your updates.
With change sets, you can preview the changes AWS CloudFormation will make to your stack, and then decide whether to apply those changes.