AWS_CloudFormation_5

Ensure CloudFormation is in Use

Description

CloudFormation is used within the AWS account to automate the cloud infrastructure management and deployment. CloudFormation is the AWS service that promotes the concept of Infrastructure as Code (IaC), which means writing code using a descriptive language (JSON or YAML) to manage configurations and automate management of AWS infrastructures in addition to deployments

Remediation

1. Sign in to the AWS Management Console.

2. Go to CloudFormation dashboard.

3. Click the Create Stack button from the dashboard top menu.

4. On the Select Template page, inside the select a template section, select one the following options :

  1. Select a sample template option and select one of the templates (e.g. Wordpress blog) available in the dropdown list.
  2. Upload a template to Amazon S3.
  3. Specify an Amazon S3 template URL

and Click Next to continue the stack setup.

5. On the Specify Details page, enter a name for your stack in the Stack name box. Inside the Parameters section, provide the necessary parameters values required by the CloudFormation template chosen at the previous step. click the Next button to continue the process.

6. On the Options page, perform the following actions:

  1. (Optional) Define the resource tags (key-value pairs) for the stack using the fields available in the Tags section.
  2. In the Permissions section, choose an IAM role that Amazon CloudFormation uses to create, modify, or delete resources in the stack from the IAM Role dropdown list.
  3. In the Advanced section, perform the following:
    • Under Notification options, choose if you want to enable SNS notifications for the stack
    • In the Timeout box, enter the number of minutes before stack creation times out or leave the box empty if you want to disable the stack creation timeout.
    • Use Rollback on failure feature to specify whether the stack should be rolled back if the creation fails.
    • Under the Stack Policy, provide a custom policy to protect from unintentional updates during the stack update process. By default, all AWS resources can be updated during a stack update.

Click Next to access the stack review page.

7. On the Review page, review the entire configuration for your CloudFormation stack.

8. Click Create to launch your new CloudFormation stack. Once the stack has been successfully created, its status should change from CREATE_IN_PROGRESS to CREATE_COMPLETE.

Service

CloudFormation

Severity

Low

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!