I'm using service managed permission to create_stack_instances for an OU, filtered by intersection of a list of accounts and when i run the command, it gives me an error, Can someone please tell me what's wrong with my code here?…
I am confused as to how do I know which permissions to grant to Lambda service if I want it to be able to perform HeadBucket action. Here's what I have in CloudFormation right now, and I just deducted these…
I have a CDK project which creates certain AWS resources including VPC Endpoints. The side-effect is that the corresponding Route53 hosted zone/records will be created by some other services for each VPC Endpoints, the problem is that the hosted zone/records…
I'm planning to deploy java 17 function to AWS lambda. But since as per the documentation AWS didn't provide a bas image for java 17. https://docs.aws.amazon.com/lambda/latest/dg/lambda-java.html So I have a problem with what value should I use in cloudformation template…
I do have my AWS Account Id only, and don't have any IAM user credentials. I want to provision some resources through CFN template. Is there any option to provision the resources by providing the AWS AccountId instead of user…
I have set up a lambda function using AWS Sam CLI that I am using for local development. After development, I have deployed this function to AWS console for production from my IDE (visual studio code). After deployment, when I…
Is it possible to force the "Replace" update behavior on changes to the Metadata property for AWS::EC2::Instance resources? I have an EC2 instance that does not have any important state (so I don't care about its disks and other state…
I am implementing a multiregion solution using Cloudformation. Each region will have a number of lambdas, alarms, CW logs, etc. There are some resources that are specific only to one region: cloudfront, global tables, etc. I decided to create own…
I was trying to import an existing Security Group in CDK by using SecurityGroup.fromSecurityGroupId method and it failed with the following error: Security Group Id: sg-12345 not found! (Service: AmazonEC2; Status Code: 400; Error Code: InvalidGroup.NotFound; Request ID: 8e2cd924-075d-4c64-b5ba-2e1d9c72fe95; Proxy:…
I'd like to forward CloudWatch logs from various SAM stacks/lambdas (probably to Kinesis and then) to Graylog EC2 instances. The point is that I'd also like to automatically add logs from stacks I deploy later. How do I automate the…