CloudFormation Flashcards
IAM: What are the neccessary attributes for a policy?
Version and Statement (Effect, Action, Resource)
IAM What are the optional attributes in a policy?
SID (Statement Id to identify the statement)
Principal (account, user, role or federated user)
Condition (when should the statement be in effect)
CF: What is a Stack Policy?
It regulates the options to update resources.
Structured like IAM Policies e.g. (allow/deny on resources)
CF: What is the only mandatory section in the template?
Resources
CF: In which section can you define external reference to code e.g.?
Transforms
CF: What are the main sections and what are their purposes?
Parameters: Input values
Conditions: What will be created/used based on envrionment e.g.
Resources: What will be created
Mappings: Custom references, for AMIs in Regions e.g.
Transforms: Reference to code in S3, Lamda code or reusable snippets
CF: What happens if there’s a manual change after launch and the stack should be rolled back?
An error is thrown