ACM.440 Deploy a 2SL task execution environment — Step 3 — Deploy multiple resources with a single task configuration
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ ~~~~~~
⚙️ Part of my series on Automation of cybersecurity measures. THE Coded.
🔒 Related Stories: AWS Security | Application security | Batch jobs
💻 Free content on Cybersecurity Jobs | ✉️ Register for Broadcast list
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ ~~~~~~
In the last article, I added a working configuration to deploy a single resource: the development OU.
In this article, I want to think about how I’m going to deploy all of the resources in our stack below. A resource stack is just a collection of resources that you want to deploy together as a bundle.
TLDR;How to deploy a stack of resources
* Add a stack configuration parameter to the config git repository
* use the standard naming convention but make the resource category stack
* use the script in the parameter repository to deploy the SSM parameter
* Run the job to deploy the stack
2nd Sight Lab Job Execution Framework Does The Rest
Stack Configuration constructs:
* :ssm: indicates to get the value from another SSM parameter
* :get_id: indicates call that get_id function for that resource type and name
* cfparam prefix for a value to pass to the CloudFormation template parameter.
* Sequential means deploy a list of resources that follow sequentially
* Parallel means deploy a list of resources that follow in parallel
Sample Stack Configuration:
Sequential:
/job/awsenvinit/dev/organizations-organizationalunit-dev
env=dev
region=us-east-2
cfparamParentid=:get_id:organizations:organizationalunit:root
Parallel:
/job/awsenvinit/dev/organizations-organizationalunit-governance
env=dev
region=us-east-2
cfparamParentid=:get_id:organizations:organizationalunit:dev
/job/awsenvinit/dev/organizations-organizationalunit-apps
env=dev
region=us-east-2
cfparamParentid=:get_id:organizations:organizationalunit:dev…