aws-samples / aws-iam-access-key-auto-rotation

This set of CloudFormation templates and Python scripts will set up an auto-rotation function that will automatically rotate your AWS IAM User Access Keys every 90 days.
MIT No Attribution
140 stars 130 forks source link

Cloudformations template incorrect sequence #27

Open lucasrf1984 opened 1 year ago

lucasrf1984 commented 1 year ago

I've found the incorrect order of cloudformation deployment which is leading to users to get deploy rolled back due to it.

The correct order of cloudformation templates is:

1- [ASA-iam-key-auto-rotation-and-notifier-solution.yaml] 2- [ASA-iam-key-auto-rotation-iam-assumed-roles.yaml] 3- [ASA-iam-key-auto-rotation-list-accounts-role.yaml] 4- [ASA-iam-key-auto-rotation-vpc-endpoints.yaml] - This is optional.

You can also find the correct sequence in the AWS page: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-rotate-iam-user-access-keys-at-scale-with-aws-organizations-and-aws-secrets-manager.html