awslabs / aws-iam-generator

Generate Multi-Account IAM users/groups/roles/policies from a simple YAML configuration file and Jinja2 templates.
Apache License 2.0
240 stars 57 forks source link

HOWTO -- Stack Layers #2

Open mithun opened 7 years ago

mithun commented 7 years ago

What is the recommended way to overcome the 200 resources limit in CloudFormation? Since the generator creates one template per account, I know I'm eventually going to hit the limit in CloudFormation.

apmclean commented 7 years ago

Happy to hear from the community on this one. I don't have a specific answer.

All I can suggest is using seperate config.yaml for various categories. Perhaps one for base roles, and another for workload roles etc.

Hopefully in the future either the resource limits will increase, or nesting will become easier.