search

aws / aws-cli

Universal Command Line Interface for Amazon Web Services
Other
15.32k stars 4.07k forks source link

set stack policy on the stack #7866

Closed lesh3000 closed 2 months ago

lesh3000 commented 1 year ago

Describe the issue

I need to set stack policy on the already existent stack to avoid modifying existing resources. Normally it is possible with aws cli, the documentation is missing this part Is that possibe with AWS SAM build or deploy methods?

Links

https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/what-is-sam.html

aBurmeseDev commented 1 year ago

Hi @lesh3000 - thanks for reaching out. Could you elaborate more on your use case as to which part of CLI documentation needs to be updated? Are you referring to SetStackPolicy? I'm not sure if it's possible with AWS SAM build but I'd be happy to check with the service team if that's what you're looking to do.

lesh3000 commented 1 year ago

Hi @aBurmeseDev , I just supposed it is possible but probably I am wrong. StackPolicy sets allow or deny on specific resources to allow the stack to update/delete them, you have referred to the right resource. My SAM template has ec2 declared that contains some installed software that I like to keep. I manually updated the instance type, and now cannot deploy updated lambdas, since SAM will delete the instance first and will create a new one

aBurmeseDev commented 3 months ago

Hi @lesh3000 - I'm sorry this fell off my radar. It sounds like it's more of SAM related question rather than AWS CLI. This repo is dedicated to AWS CLI but I'd be happy to find answers to your question if you still need assistance on it?

github-actions[bot] commented 2 months ago

Greetings! It looks like this issue hasn’t been active in longer than five days. We encourage you to check if this is still an issue in the latest release. In the absence of more information, we will be closing this issue soon. If you find that this is still a problem, please feel free to provide a comment or upvote with a reaction on the initial post to prevent automatic closure. If the issue is already closed, please feel free to open a new one.