AWS CloudFormation: Concepts, Templates, and Use Case

AWS CloudFormation provides users with a simple way to create and manage a collection of Amazon Web Services (AWS) resources by provisioning and updating them in a predictable way. AWS CloudFormation enables you to manage your complete infrastructure or AWS resources in a text file.

Now let’s dive into this tutorial to understand what CloudFormation actually is.

What is AWS CloudFormation?

Managing your infrastructure with many services can be hard. Creating and managing multiple AWS resources can be challenging and time-consuming. In fact, doing those things could result in spending a whole lot of time managing your AWS resources instead of developing your applications. How can we solve this problem?

AWS CloudFormation can help. As mentioned, it provides you with a simple way to create and manage a collection of AWS resources by provisioning and updating them in an orderly and predictable way. In simple terms, it allows you to create and model your infrastructure and applications without having to perform actions manually.

AWS CloudFormation enables you to manage your complete infrastructure or AWS resources in a text file, or template. A collection of AWS resources is called a stack. AWS resources can be created or updated by using a stack.

Read more: Highest Paying Cloud Certifications for 2023

Learn Essential Skills for Effective Leadership

Executive Leadership Principles ProgramExplore Program
Learn Essential Skills for Effective Leadership

All the resources you require in an application can be deployed easily using templates. Also, you can reuse your templates to replicate your infrastructure in multiple environments. To make templates reusable, use the parameters, mappings and conditions sections in the template so that you can customize your stacks when you create them.

  • Create a new template or use an existing CloudFormation template using the JSON or YAML format.
  • Save your code template locally or in an S3 bucket.
  • Use AWS CloudFormation to build a stack on your template.
  • AWS CloudFormation constructs and configures the stack resources that you have specified in your template.
Want to get certified in Cloud Computing Bootcamp? Check out the cloud computing Course and get certified today!

AWS CloudFormation Concepts

An AWS CloudFormation template is a formatted text file in JSON or YAML language that describes your AWS infrastructure. To create, view and modify templates, you can use AWS CloudFormation Designer or any text editor tool. An AWS CloudFormation template consists of nine main objects:

    1. Format version: Format version defines the capability of a template.
    2. Description: Any comments about your template can be specified in the description.
    3. Metadata: Metadata can be used in the template to provide further information using JSON or YAML objects. 

      CloudFormation Concepts - Meta Data

    4. Parameters: Templates can be customized using parameters. Each time you create or update your stack, parameters help you give your template custom values at runtime. 

      CloudFormation Concepts - Parameters
    5. Mappings: Mapping enables you to map keys to a corresponding named value that you specify in a conditional parameter. Also, you can retrieve values in a map by using the “Fn:: FindInMap” intrinsic function.

      CloudFormation - Mapping
    6. Conditions: In a template, conditions define whether certain resources are created or when resource properties are assigned to a value during stack creation or updating. Conditions can be used when you want to reuse the templates by creating resources in different contexts. You can use intrinsic functions to define conditions.

      CloudFormation Concepts - Conditions

      Want a Job at AWS? Find Out What It Takes

      Cloud Architect Master's ProgramExplore Program
      Want a Job at AWS? Find Out What It Takes
      In a template, during stack creation, all the conditions in your template are evaluated. Any resources that are associated with a true condition are created, and the invalid conditions are ignored automatically. 

      Cloudformation Concepts- Conditions
    7. Transform: Transform builds a simple declarative language for AWS CloudFormation and enables reuse of template components. Here, you can declare a single transform or multiple transforms within a template. 

      Cloudformation concepts - Transform
    8. Resources: Using this section, you can declare the AWS resource that you want to create and specify in the stack, such as an Amazon S3 bucket or AWS Lambda. 

      Cloudformation concepts - Resource
    9. Output: In a template, the output section describes the output values that you can import into other stacks or the values that are returned when you view your own stack properties. For example, for an S3 bucket name, you can declare an output and use the “Description-stacks” command from the AWS CloudFormation service to make the bucket name easier to find.

      Cloudformation concepts - output

AWS CloudFormation - Template Resource Attributes

Attributes allow you add to a resource, to control additional behavior and relationships between your templates.

CreationPolicy

Associate the CreationPolicy attribute with a resource when you want to delay resource configuration actions before proceeding with stack creation.

AWS CloudFormation Template Resource Attribute - Creation Policy

With this attribute, a stack creation is delayed until AWS CloudFormation receives a specified number of success signals. It can be used only for AWS AutoScaling, an AWS EC2 instance, and AWS CloudFormation.

AWS CloudFormation Template Resource Attribute - Creation Policy Example

When an associated resource is created in AWS CloudFormation, it configures the number of required success signals and the length of time that AWS CloudFormation waits for those signals.

Want to get certified as a Cloud Computing Professional? Check out the cloud computing training and get certified today!

DeletionPolicy

Using DeletionPolicy, preserving and backing up a resource is possible when its stack is deleted.

AWS CloudFormation Template Resource Attribute - DeletionPolicy

By default, AWS CloudFormation deletes the resource and all its content if a resource has no DeletionPolicy attribute in a template. Before deleting a resource, AWS CloudFormation creates a snapshot of that resource. For example, the code below contains a “Retain” deletion policy for a DynamoDB resource.

AWS CloudFormation Template Resource Attribute - DeletionPolicy -1

When this stack is deleted, AWS CloudFormation leaves the bucket without deleting it.

AWS CloudFormation Template Resource Attribute - DeletionPolicy example

The sample snippet contains syntax for Amazon DynamoDB.

Want a Job at AWS? Find Out What It Takes

Cloud Architect Master's ProgramExplore Program
Want a Job at AWS? Find Out What It Takes

DependsOn

AWS CloudFormation Template Resource Attribute - DependsOn

Using the DependsOn attribute in a template, you can define the creation of a specific resource followed by another resource.

AWS CloudFormation Template Resource Attribute - DependsOn -1

  • Example 1: Resource X and resource Y (where resource X is assigned to DependsOn). Result: Resource Y is created before resource X.
  • Example 2: AWS EC2 resource with a specified AWS S3 bucket resource (where S3 is assigned to DependsOn attribute). When a stack is created by AWS CloudFormation, it first creates an EC2 instance, then creates an S3 bucket.

AWS CloudFormation Template Resource Attribute - DependsOn example

Metadata

AWS CloudFormation Template Resource Attribute - Metadata

The Metadata attribute lets you associate a resource with structured data. By adding this attribute to a resource, you can specify the data in JSON or YAML language.

UpdatePolicy

With the UpdatePolicy attribute in AWS CloudFormation, you can manage and replace the updates of the instances in the Auto Scaling group. During an update, WillReplace specifies whether an Auto Scaling group and the instances it contains are replaced.

Want a Job at AWS? Find Out What It Takes

Cloud Architect Master's ProgramExplore Program
Want a Job at AWS? Find Out What It Takes

Stacks in AWS CloudFormation

A collection of AWS resources is called a stack, and it can be managed in a single unit. CloudFormation’s template defines a stack in which the resources can be created, deleted or updated in a predictable way. A stack can have all the resources (web server, database, etc.) required to run a web application.

A nested stack results in a hierarchy of stacks. Using the CloudFormation stack resource, you can create a nested stack within another stack.

A Windows stack gives you the ability to update and configure your own stack in Windows instances. With AWS CloudFormation, you can create Microsoft Windows stacks for Amazon EC2’s Windows AMI (Amazon Machine Images).

Using an AWS CloudFormation template, you can define a StackSet that lets you create stacks in AWS accounts around the globe using a single template. After a StackSet is defined by you, creating, updating or deleting stacks in the target accounts and regions can also be specified.

CloudFormation Access Control

With IAM, CloudFormation can give users access control and ensure that only IAM users can create, update and delete stacks. On the user’s behalf, a service role allows AWS CloudFormation to make calls to resources in a stack. It is applied to all AWS CloudFormation users who attempt to update the stack. Here, you cannot include different users with different stack policies.

Demonstration and Use Case: Lamp Stack on an Ec2 Instance

The final sections of the video demonstrate how to put AWS CloudFormation to work through two examples:

  1. LAMP stack on an EC2 instance
  2. Building a complicated environment that includes an elastic load balancer, auto-scaling, and an EC2 instance, which allows access to the website only through the load balancer and restricts access when accessed directly from the instance

AWS CloudFormation Use case - create redeployable

Want a Job at AWS? Find Out What It Takes

Cloud Architect Master's ProgramExplore Program
Want a Job at AWS? Find Out What It Takes

Conclusion

Now that you know everything about AWS CloudFormation, you can go ahead and explore your career options working as an AWS Solutions Architect. AWS CloudFormation is one of the commonly asked topics in the AWS interview questions.

The AWS Solution Architect Certification rigorously covers AWS CloudFormation, a service critical to effectively managing and provisioning AWS resources. This certification validates an architect's ability to use CloudFormation to automate the setup and deployment of AWS environments, a skill required for designing scalable and reliable cloud architecture.

Willing to know how to master AWS architectural principles and services? You can enroll in Simplilearn’s AWS cloud architect certification master program and demonstrate your skills.

About the Author

Shyamli JhaShyamli Jha

Shyamli is a Senior Research Analyst at Simplilearn. She is proficient in Blockchain and Cryptocurrency, Cloud Computing, Android Development and other coding languages like C, C++ and Java.

View More

Find AWS Solutions Architect in these cities

AWS Solutions Architect Associate Certification Training in AtlantaAWS Solution Architect Associate Certification Training in AustinAWS Solution Architect Certification Training in BostonAWS Solution Architect Associate Certification Training in CharlotteAWS Solutions Architect Associate Certification Training in ChicagoAWS Solutions Architect Associate Certification Training in DallasAWS Solution Architect Associate Certification Training in DenverAWS Solution Architect Associate Certification Training in HerndonAWS Solutions Architect Certification Training in HoustonAWS Solution Architect Associate Certification Training in IndianapolisAWS Solution Architect Associate Certification Training in Los AngelesAWS Solutions Architect Certification Training Course in NashvilleAWS Solution Architect Associate Certification Training in New YorkAWS Solutions Architect Certification Training Course in Orange CountyAWS Solution Architect Associate Certification Training in PhoenixAWS Solutions Architect Certification Training Course in PittsburghAWS Solution Architect Associate Certification Training in RaleighAWS Solution Architect Associate Certification Training in San AntonioAWS Solution Architect Associate Certification Training in San DiegoAWS Solution Architect Associate Certification Training in San FranciscoAWS Solutions Architect Certification Training Course in San JoseAWS Solution Architect Associate Certification Training in SeattleAWS Solution Architect Associate Certification Training in TampaAWS Solutions Architect Associate Certification Training in Washington
  • Disclaimer
  • PMP, PMI, PMBOK, CAPM, PgMP, PfMP, ACP, PBA, RMP, SP, and OPM3 are registered marks of the Project Management Institute, Inc.