StackSet
¶
Source code in docs_src/capo_cloudformation/types/stack_set.py
administration_role_arn
instance-attribute
¶
administration_role_arn: NotRequired[RoleARN]
The Amazon Resource Name (ARN) of the IAM role used to create or update the stack set.
Use customized administrator roles to control which users or groups can manage specific StackSets within the same administrator account. For more information, see Prerequisites for using CloudFormation StackSets in the CloudFormation User Guide.
auto_deployment
instance-attribute
¶
auto_deployment: NotRequired[AutoDeployment]
Describes whether StackSets automatically deploys to Organizations accounts that are added to a target organization or organizational unit (OU). Valid only if the StackSet uses service-managed permissions.
capabilities
instance-attribute
¶
capabilities: NotRequired[Capabilities]
The capabilities that are allowed in the StackSet. Some StackSet templates might include resources that can affect permissions in your Amazon Web Services account—for example, by creating new Identity and Access Management (IAM) users. For more information, see Acknowledging IAM resources in CloudFormation templates.
description
instance-attribute
¶
description: NotRequired[Description]
A description of the StackSet that you specify when the StackSet is created or updated.
execution_role_name
instance-attribute
¶
execution_role_name: NotRequired[ExecutionRoleName]
The name of the IAM execution role used to create or update the StackSet.
Use customized execution roles to control which stack resources users and groups can include in their StackSets.
managed_execution
instance-attribute
¶
managed_execution: NotRequired[ManagedExecution]
Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations.
organizational_unit_ids
instance-attribute
¶
organizational_unit_ids: NotRequired[OrganizationalUnitIdList]
[Service-managed permissions] The organization root ID or organizational unit (OU) IDs that you specified for DeploymentTargets.
parameters
instance-attribute
¶
parameters: NotRequired[Parameters]
A list of input parameters for a StackSet.
permission_model
instance-attribute
¶
permission_model: NotRequired[PermissionModels]
Describes how the IAM roles required for StackSet operations are created.
-
With
self-managedpermissions, you must create the administrator and execution roles required to deploy to target accounts. For more information, see Grant self-managed permissions. -
With
service-managedpermissions, StackSets automatically creates the IAM roles required to deploy to accounts managed by Organizations. For more information, see Activate trusted access for StackSets with Organizations.
regions
instance-attribute
¶
regions: NotRequired[RegionList]
Returns a list of all Amazon Web Services Regions the given StackSet has stack instances deployed in. The Amazon Web Services Regions list output is in no particular order.
stack_set_arn
instance-attribute
¶
stack_set_arn: NotRequired[StackSetARN]
The Amazon Resource Name (ARN) of the StackSet.
stack_set_drift_detection_details
instance-attribute
¶
stack_set_drift_detection_details: NotRequired[StackSetDriftDetectionDetails]
Detailed information about the drift status of the StackSet.
For StackSets, contains information about the last completed drift operation performed on the StackSet. Information about drift operations currently in progress isn't included.
stack_set_name
instance-attribute
¶
stack_set_name: NotRequired[StackSetName]
The name that's associated with the StackSet.
tags
instance-attribute
¶
tags: NotRequired[Tags]
A list of tags that specify information about the StackSet. A maximum number of 50 tags can be specified.
template_body
instance-attribute
¶
template_body: NotRequired[TemplateBody]
The structure that contains the body of the template that was used to create or update the StackSet.