aws-control-tower-manifest-builder 0.5.2

Python package to automatically build the AWS Control Tower Manifest given Cloud Formation templates as input.

AWS Control Tower Manifest Builder

Python package to automatically build the AWS Control Tower Manifest given Cloud Formation templates and SCPs as input.

• Free software: MIT license

• Documentation: https://aws-control-tower-manifest-builder.readthedocs.io.

Features

• Reads Cloud Formation templates and Service Control Policies from specified directories and produces the AWS Control Tower manifest.yaml file.

• See https://s3.amazonaws.com/solutions-reference/customizations-for-aws-control-tower/latest/customizations-for-aws-control-tower-developer-guide.pdf

Quick start

1. Run pip install aws-control-tower-manifest-builder

2. Download sample template and SCPs from S3 “Add link”. Extract to directory

3. Run aws_control_tower_manifest_builder --input-cf sample_templates --input-scp sample_scp --output output_manifest

   Note: the sample template includes incorrecly formatted templates.

For Developers - before pushing a branch (to be replace by tox)

1. Clone the repo

2. make venv

3. make black

4. make lint

5. make test

6. make local-test

To bump version: 1. git fetch to fetch all tags 2. make bump-<patch-minor-major> 3. Update HISTORY.rst

• Cloud Formation templates require a metadata section with the following info:

Metadata:
  manifest_parameters:
  name: detailed_template # Optional. Defaults to the file name. a-z, A-Z, 0-9, and "-"
  deploy_method: stackset # Optional. All file in the template directory use "stackset" and in policy directory use "scp".
  accounts: ["123456789012", "987456123989"] # Requires "accounts" and/or "organizational_unit". [0-9]{12}
  organizational_units: ["dev", "prod"] # Requires "accounts" and/or "organizational_unit".
  regions: ["us-east-1" , "us-east-2"] # Optional. Defaults to us-east-1.
  parameters: # Optional. List of parameters [SSM, Alfred, Values]
  - parameter_key: parameter1
    parameter_value: value1
  - parameter_key: parameter2
    parameter_value: value2
  export_outputs: # Optional. list of ssm parameters to store output values
  - name: /org/member/test-ssm/app-id
    value: $[output_ApplicationId]

History

0.3.1 (2022-03-03)

• First release on PyPI.

0.4.0 (2022-03-27)

• Change to mantain order, comments and support exclamation marks in Cloudformation

0.4.1 (2022-03-27)

• Fix for the default region option

0.5.0 (2022-03-29)

• Add argument to set schema version

0.5.1 (2022-03-24)

• Fix issue when leaving region blank not picking default value

0.5.2 (2022-04-08)

• Fail if files name or name in metadata dont match regex