cloudformation

Deploy AWS infrastructure with native CloudFormation templates.

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "cloudformation" with this command: npx skills add bagelhole/devops-security-agent-skills/bagelhole-devops-security-agent-skills-cloudformation

CloudFormation

Deploy AWS infrastructure with native CloudFormation templates.

Template Structure

AWSTemplateFormatVersion: '2010-09-09' Description: Web application stack

Parameters: Environment: Type: String AllowedValues: [dev, staging, prod]

Resources: WebServer: Type: AWS::EC2::Instance Properties: ImageId: !Ref AMI InstanceType: t3.micro Tags: - Key: Name Value: !Sub '${Environment}-web'

Outputs: InstanceId: Value: !Ref WebServer Export: Name: !Sub '${Environment}-WebServerId'

Stack Operations

Create stack

aws cloudformation create-stack
--stack-name myapp
--template-body file://template.yaml
--parameters ParameterKey=Environment,ParameterValue=prod

Update stack

aws cloudformation update-stack
--stack-name myapp
--template-body file://template.yaml

Delete stack

aws cloudformation delete-stack --stack-name myapp

Detect drift

aws cloudformation detect-stack-drift --stack-name myapp

Intrinsic Functions

Reference

!Ref MyResource

Get attribute

!GetAtt MyResource.Arn

Substitute

!Sub 'arn:aws:s3:::${BucketName}/*'

Conditional

!If [CreateProdResources, 't3.large', 't3.micro']

Join

!Join ['-', [!Ref Environment, 'app', 'bucket']]

Best Practices

  • Use change sets before updates

  • Implement stack policies

  • Use nested stacks for modularity

  • Enable termination protection

  • Use cfn-lint for validation

Related Skills

  • terraform-aws - Alternative IaC

  • aws-iam - IAM resources

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

sops-encryption

No summary provided by upstream source.

Repository SourceNeeds Review
Security

linux-administration

No summary provided by upstream source.

Repository SourceNeeds Review
Security

linux-hardening

No summary provided by upstream source.

Repository SourceNeeds Review