Skip to main content

Python package to automatically build the AWS Control Tower Manifest given Cloud Formation templates as input.

Project description

AWS Control Tower Manifest Builder

https://img.shields.io/pypi/v/aws_control_tower_manifest_builder.svg https://github.com/gabrielbac/aws_control_tower_manifest_builder/actions/workflows/test.yaml/badge.svg https://github.com/gabrielbac/aws_control_tower_manifest_builder/actions/workflows/release.yaml/badge.svg Documentation Status

Python package to automatically build the AWS Control Tower Manifest given Cloud Formation templates and SCPs as input.

Features

Pipeline.drawio.png

Quick start

  1. Run pip install aws-control-tower-manifest-builder

  2. Download sample template and SCPs from S3 “Add link”. Extract to directory

  3. Run aws_control_tower_manifest_builder --input-cf sample_templates --input-scp sample_scp --output output_manifest

    Note: the sample template includes incorrecly formatted templates.

For Developers - before pushing a branch (to be replace by tox)

  1. Clone the repo

  2. make venv

  3. make black

  4. make lint

  5. make test

  6. make local-test

To bump version: 1. git fetch to fetch all tags 2. make bump-<patch-minor-major> 3. Update HISTORY.rst 4. Make a release in Github and add a tag.

  • Cloud Formation templates require a metadata section with the following info:

Metadata:
  manifest_parameters: # can be customized with --metadata-name
  name: detailed_template # Optional. Defaults to the file name. a-z, A-Z, 0-9, and "-"
  description: string # Required for SCPs
  deploy_method: stackset # Optional. All file in the template directory use "stackset" and in policy directory use "scp".
  accounts: ["123456789012", "987456123989"] # Requires "accounts" and/or "organizational_unit". If accounts is used, enforce only account
                                             # IDs with --enforce-account-number-only
  organizational_units: ["dev", "prod"] # Requires "accounts" and/or "organizational_unit".
  regions: ["us-east-1" , "us-east-2"] # Optional. Defaults to us-east-1.
  parameters: # Optional. List of parameters [SSM, Alfred, Values]
  - parameter_key: parameter1
    parameter_value: value1
  - parameter_key: parameter2
    parameter_value: value2
  export_outputs: # Optional. list of ssm parameters to store output values
  - name: /org/member/test-ssm/app-id
    value: $[output_ApplicationId]

History

0.3.1 (2022-03-03)

  • First release on PyPI.

0.4.0 (2022-03-27)

  • Change to mantain order, comments and support exclamation marks in Cloudformation

0.4.1 (2022-03-27)

  • Fix for the default region option

0.5.0 (2022-03-29)

  • Add argument to set schema version

0.5.1 (2022-03-24)

  • Fix issue when leaving region blank not picking default value

0.5.2 (2022-04-08)

  • Fail if files name or name in metadata dont match regex

0.5.3 (2022-04-09)

  • Fix in logging and update to Readme

0.5.4 (2022-04-18)

  • Exit with error when there is an issue in any manifest file

0.6.0 (2022-05-18)

  • Enforce description in SCP and correct extension

0.7.0 (2022-08-28)

  • Added 2 new options

    –metadata-name -> to customize the name in the metadata –enforce-account-number-only -> Allows to enforce use of 12 digit account numbers The input scps folder is not mandatory anymore

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

aws_control_tower_manifest_builder-0.7.0.tar.gz (20.9 kB view hashes)

Uploaded Source

Built Distributions

aws_control_tower_manifest_builder-0.7.0-py2.py3-none-any.whl (11.6 kB view hashes)

Uploaded Python 2 Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page