AWS CloudFormation - Guia do usuário · AWS CloudFormation Guia do usuário Table of Contents O que é o AWS CloudFormation

AWS CloudFormationGuia do usurio

Verso da API 2010-05-15

AWS CloudFormation Guia do usurio

AWS CloudFormation: Guia do usurioCopyright 2018 Amazon Web Services, Inc. and/or its affiliates. All rights reserved.

Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any mannerthat is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks notowned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored byAmazon.


Table of ContentsO que o AWS CloudFormation? ......................................................................................................... 1

Simplificar o gerenciamento de infraestrutura .................................................................................. 1Replicar rapidamente sua infraestrutura ......................................................................................... 1Controlar e rastrear alteraes em sua infraestrutura facilmente ........................................................ 1Informaes relacionadas ............................................................................................................ 2Conceitos do AWS CloudFormation ............................................................................................... 2

recurso .............................................................................................................................. 2Pilhas ............................................................................................................................... 4Conjuntos de alteraes ...................................................................................................... 5

Como o AWS CloudFormation funciona? ....................................................................................... 5Como atualizar uma pilha com conjuntos de alteraes ............................................................ 7Como excluir uma pilha ....................................................................................................... 8Recursos adicionais ............................................................................................................ 8

Configurao ...................................................................................................................................... 9Cadastro em uma conta da AWS e preos ..................................................................................... 9

Definio de preo .............................................................................................................. 9Como controlar o acesso com o IAM ............................................................................................. 9

Aes do AWS CloudFormation .......................................................................................... 10Recursos do AWS CloudFormation ...................................................................................... 12Condies do AWS CloudFormation .................................................................................... 12Confirmando recursos do IAM em modelos do AWS CloudFormation ........................................ 15Gerenciar credenciais para aplicativos que executam em instncias Amazon EC2 ....................... 16Conceder acesso temporrio (acesso federado) .................................................................... 16Funo de servio do AWS CloudFormation ......................................................................... 17

Como registrar em log chamadas API ....................................................................................... 18Informaes sobre o AWS CloudFormation no CloudTrail ........................................................ 18Noes bsicas das entradas dos arquivos de log do AWS CloudFormation ............................... 19

Limites .................................................................................................................................... 22Endpoints ................................................................................................................................ 24AWS CloudFormation e endpoints da VPC ................................................................................... 24

Conceitos bsicos ............................................................................................................................. 26Conceitos bsicos ..................................................................................................................... 26

Etapa 1: Selecionar um modelo .......................................................................................... 26Etapa 2: Verificar se voc preparou todos os itens necessrios para a pilha ............................... 31Etapa 3: Criar a pilha ........................................................................................................ 32Etapa 4: Monitorar o andamento da criao da pilha .............................................................. 33Etapa 5: Usar os recursos da pilha ..................................................................................... 33Etapa 6: Limpeza .............................................................................................................. 34

Saiba mais sobre noes bsicas de modelo ................................................................................ 34O que um modelo do AWS CloudFormation? ..................................................................... 35Resources: Hello Bucket! ................................................................................................... 35Propriedades de recurso e uso de recursos em conjunto ........................................................ 36Recebimento de entrada do usurio usando parmetros de entrada .......................................... 41Especificao dos valores condicionais usando mapeamentos ................................................. 43Valores construdos e valores de sada ................................................................................ 45Prximas etapas ............................................................................................................... 48

Demonstrao: atualizao de uma pilha ...................................................................................... 49Um aplicativo simples ........................................................................................................ 49Crie a pilha inicial ............................................................................................................. 55Atualize o aplicativo .......................................................................................................... 55Alterao de propriedades de recursos ................................................................................ 58Adicionar propriedades de recurso ...................................................................................... 61Alterar os recursos da pilha ................................................................................................ 62Consideraes sobre disponibilidade e impacto ..................................................................... 68

Verso da API 2010-05-15iii


Recursos relacionados ....................................................................................................... 69Melhores prticas .............................................................................................................................. 70

Organizar pilhas por ciclo de vida e propriedade ........................................................................... 70Usar referncias entre pilhas para exportar recursos compartilhados ................................................. 71Usar o IAM para controlar o acesso ............................................................................................ 71Verificar cotas para todos os tipos de recursos ............................................................................. 72Reutilizar modelos para replicar pilhas em vrios ambientes ............................................................ 72Usar pilhas aninhadas para reutilizar padres de modelos comuns ................................................... 72No incorporar credenciais em seus modelos ............................................................................... 72Usar tipos de parmetros especficos da AWS .............................................................................. 73Usar restries de parmetros .................................................................................................... 73Usar AWS::CloudFormation::Init para implantar aplicativos de software em instncias Amazon EC2 ........ 73Usar os scripts auxiliares mais recentes ....................................................................................... 73Validar modelos antes de us-los ................................................................................................ 74Gerenciar todos os recursos de pilha por meio do AWS CloudFormation ........................................... 74Criar conjuntos de alterao antes de atualizar as pilhas ................................................................ 74Usar polticas de pilha ............................................................................................................... 74Usar o AWS CloudTrail para registrar as chamadas do AWS CloudFormation em log ........................... 75Usar revises de cdigo e controles de reviso para gerenciar seus modelos ..................................... 75Atualizar as instncias Linux do Amazon EC2 regularmente ............................................................ 75

Entrega contnua .............................................................................................................................. 76Apresentao: Criao de um pipeline para pilhas de produo e teste ............................................. 76

Pr-requisitos ................................................................................................................... 76Viso geral da apresentao .............................................................................................. 77Etapa 1: Editar artefatos e carreg-lo para um bucket do S3 ................................................... 77Etapa 2: Criar a pilha do pipeline ........................................................................................ 78Etapa 3: Visualizar a pilha do WordPress ............................................................................. 82Etapa 4: limpar os recursos .............................................................................................. 83

Referncia de propriedades de configurao ................................................................................. 83Propriedades de configurao (Console) .............................................................................. 84Propriedades de configurao (Objeto JSON) ....................................................................... 85

Artefatos AWS CloudFormation ................................................................................................... 87Arquivo de modelo de pilha ................................................................................................ 88Arquivo de configurao de modelo ..................................................................................... 88

Uso de funes de substituio de parmetros com pipelines AWS CodePipeline ............................... 89Fn::GetArtifactAtt ............................................................................................................... 89Fn::GetParam ................................................................................................................... 90

Como trabalhar com pilhas ................................................................................................................ 93Uso do console ........................................................................................................................ 93

Nesta seo ..................................................................................................................... 93Login no console .............................................................................................................. 94Como criar uma pilha ........................................................................................................ 95Como criar um par de chaves do EC2 ............................................................................... 102Estimativa do custo da pilha ............................................................................................. 102Como visualizar dados e recursos da pilha ......................................................................... 103Monitorar e reverter operaes de pilha ............................................................................. 106Criar links de quick-create para pilhas ................................................................................ 107Como excluir uma pilha ................................................................................................... 109Proteo de uma pilha contra excluso .............................................................................. 110Como visualizar pilhas excludas ....................................................................................... 111Tpicos relacionados ....................................................................................................... 112

Como usar a AWS CLI ............................................................................................................ 112Como criar uma pilha ...................................................................................................... 113Descrio e listagem das pilhas ........................................................................................ 113Visualizao do histrico de eventos da pilha ...................................................................... 116Listagem de recursos ...................................................................................................... 119Como recuperar um modelo ............................................................................................. 119

Verso da API 2010-05-15iv


Validao de um modelo .................................................................................................. 120Upload de artefatos em um bucket do S3 ........................................................................... 121Como implantar modelos com transformaes rapidamente ................................................... 122Como excluir uma pilha ................................................................................................... 122

Atualizaes de pilhas ............................................................................................................. 122Atualizar comportamentos de recursos da pilha ................................................................... 123Como modificar um modelo de pilha .................................................................................. 124Como atualizar pilhas usando conjuntos de alteraes .......................................................... 127Atualizao de pilhas diretamente ...................................................................................... 142Monitoramento do progresso ............................................................................................. 144Como cancelar uma atualizao de pilha ............................................................................ 145Impedir atualizaes em para recursos de pilha ................................................................... 146Continuar revertendo uma atualizao ................................................................................ 157

Exportao dos valores de sada ............................................................................................... 159Exportao de valores de sada da pilha x uso de pilhas aninhadas ........................................ 160Listagem de valores de sada exportados ........................................................................... 160

Como listar pilhas que importam um valor de sada exportado ....................................................... 161Trabalho com pilhas aninhadas ................................................................................................. 161Como trabalhar com as pilhas do Windows ................................................................................. 163

Nesta seo ................................................................................................................... 163Modelos e AMIs do Windows ............................................................................................ 163Bootstrapping de pilhas do Windows .................................................................................. 164

Trabalhar com os modelos ............................................................................................................... 168Formatos de modelo ................................................................................................................ 168Anatomia do modelo ................................................................................................................ 169

JSON ............................................................................................................................ 169YAML ............................................................................................................................ 170Sees do modelo .......................................................................................................... 170Verso do formato .......................................................................................................... 171Descrio ....................................................................................................................... 172Metadados ..................................................................................................................... 172Parmetros ..................................................................................................................... 173Mapeamentos ................................................................................................................. 185Condies ...................................................................................................................... 190Transform ...................................................................................................................... 193Recursos ....................................................................................................................... 199Outputs .......................................................................................................................... 202

O que AWS CloudFormation Designer? ................................................................................... 205Por que usar Designer? ................................................................................................... 205Viso geral da interface ................................................................................................... 207Como comear ............................................................................................................... 216

Demonstraes ....................................................................................................................... 216Apresentao: Use AWS CloudFormation Designer para criar um servidor da Web bsico ........... 216Apresentao: use o AWS CloudFormation Designer para modificar o modelo de uma pilha ........ 234Emparelhar com uma VPC em outra conta ......................................................................... 244Apresentao: consultar sadas de recurso em outra pilha do AWS CloudFormation ................... 251Crie um servidor Web escalvel com balanceamento de carga ............................................... 254Como implantar aplicativos ............................................................................................... 264Criao de condies de espera ....................................................................................... 280

Trechos de modelos ................................................................................................................ 284Geral ............................................................................................................................. 285Auto Scaling ................................................................................................................... 292AWS CloudFormation ...................................................................................................... 297CloudFront ..................................................................................................................... 301CloudWatch .................................................................................................................... 307CloudWatch Logs ............................................................................................................ 312DynamoDB ..................................................................................................................... 338

Verso da API 2010-05-15v


Amazon EC2 .................................................................................................................. 342Amazon ECS .................................................................................................................. 358Amazon EFS .................................................................................................................. 374Elastic Beanstalk ............................................................................................................. 389Elastic Load Balancing ..................................................................................................... 391IAM ............................................................................................................................... 392AWS Lambda ................................................................................................................. 405AWS OpsWorks .............................................................................................................. 410Amazon Redshift ............................................................................................................. 415Amazon RDS ................................................................................................................. 421Route53 ........................................................................................................................ 427Amazon S3 .................................................................................................................... 431Amazon SNS .................................................................................................................. 437Amazon SQS ................................................................................................................. 437

Recursos personalizados .......................................................................................................... 438Como funcionam recursos personalizados .......................................................................... 438Recursos personalizados com suporte do Amazon Simple Notification Service .......................... 440Recursos personalizados com base no AWS Lambda ........................................................... 445Referncia de recursos personalizados .............................................................................. 452

Como usar expresses regulares .............................................................................................. 464Como usar o CloudFormer para criar modelos ............................................................................ 464

Etapa 1: Criar uma pilha do CloudFormer ........................................................................... 465Etapa 2: Executar a pilha do CloudFormer .......................................................................... 466Etapa 3: Usar o CloudFormer para criar um modelo ............................................................. 467Etapa 4: Exclua a pilha do CloudFormer ............................................................................. 471

Trabalhar com o AWS CloudFormation StackSets ................................................................................ 472Conceitos do StackSets ........................................................................................................... 472

Contas de administrador e de destino ................................................................................ 473Conjuntos de pilhas ......................................................................................................... 473Instncias da pilha .......................................................................................................... 473Operaes do conjunto de pilhas ...................................................................................... 474Opes de operao do conjunto de pilhas ......................................................................... 475Tags .............................................................................................................................. 476Cdigos de status do conjunto de pilhas e da instncia de pilha ............................................. 476

Pr-requisitos: concesso de permisses para operaes de conjunto de pilhas ................................ 477Definir permisses bsicas para operaes de conjuntos de pilhas ......................................... 478Definir opes de permisses avanadas para operaes de conjuntos de pilhas ...................... 480

Conceitos bsicos ................................................................................................................... 486Criar um novo conjunto de pilhas ...................................................................................... 486Atualizar seu conjunto de pilhas ........................................................................................ 491Adicionar pilhas a um conjunto de pilhas ............................................................................ 496Parmetros de substituio nas instncias de pilha .............................................................. 497Excluir instncia de pilha .................................................................................................. 498Excluir conjuntos de pilhas ............................................................................................... 500

Portes de conta de destino ..................................................................................................... 502Requisitos de configurao ............................................................................................... 502Exemplo de funes de porto de conta do Lambda ............................................................ 503

Melhores prticas .................................................................................................................... 503Definir o modelo ............................................................................................................. 503Criar ou adicionar pilhas ao conjunto de pilhas .................................................................... 503Atualizar pilhas em um conjunto de pilhas .......................................................................... 504

Limitaes de StackSets .......................................................................................................... 504Modelos de exemplo ............................................................................................................... 504Soluo de problemas ............................................................................................................. 505

Motivos comuns de falha na operao da pilha ................................................................... 505Realizar novamente operaes de criao ou atualizao de pilha com falha ............................ 506Falha de excluso de instncia de pilha ............................................................................. 506

Verso da API 2010-05-15vi


Referncia do modelo ...................................................................................................................... 507Tipos de recursos da AWS ....................................................................................................... 507

AWS::AmazonMQ::Broker ................................................................................................. 514AWS::AmazonMQ::Configuration ........................................................................................ 521AWS::ApiGateway::Account .............................................................................................. 524AWS::ApiGateway::ApiKey ................................................................................................ 526AWS::ApiGateway::Authorizer ............................................................................................ 530AWS::ApiGateway::BasePathMapping ................................................................................ 533AWS::ApiGateway::ClientCertificate .................................................................................... 535AWS::ApiGateway::Deployment ......................................................................................... 536AWS::ApiGateway::DocumentationPart ............................................................................... 539AWS::ApiGateway::DocumentationVersion .......................................................................... 542AWS::ApiGateway::DomainName ....................................................................................... 546AWS::ApiGateway::GatewayResponse ................................................................................ 551AWS::ApiGateway::Method ............................................................................................... 555AWS::ApiGateway::Model ................................................................................................. 562AWS::ApiGateway::RequestValidator .................................................................................. 565AWS::ApiGateway::Resource ............................................................................................ 567AWS::ApiGateway::RestApi ............................................................................................... 569AWS::ApiGateway::Stage ................................................................................................. 576AWS::ApiGateway::UsagePlan .......................................................................................... 580AWS::ApiGateway::UsagePlanKey ..................................................................................... 583AWS:: ApiGateway:: VpcLink ............................................................................................ 584AWS::ApplicationAutoScaling::ScalableTarget ...................................................................... 587AWS::ApplicationAutoScaling::ScalingPolicy ........................................................................ 600AWS::AppSync::ApiKey .................................................................................................... 607AWS::AppSync::DataSource .............................................................................................. 610AWS::AppSync::GraphQLApi ............................................................................................. 614AWS::AppSync::GraphQLSchema ...................................................................................... 617AWS::AppSync::Resolver .................................................................................................. 619AWS::Athena::NamedQuery .............................................................................................. 624AWS::AutoScaling::AutoScalingGroup ................................................................................. 626AWS::AutoScaling::LaunchConfiguration ............................................................................. 634AWS::AutoScaling::LifecycleHook ....................................................................................... 644AWS::AutoScaling::ScalingPolicy ....................................................................................... 647AWS::AutoScaling::ScheduledAction ................................................................................... 653AWS::AutoScalingPlans::ScalingPlan .................................................................................. 657AWS::Batch::ComputeEnvironment ..................................................................................... 658AWS::Batch::JobDefinition ................................................................................................ 662AWS::Batch::JobQueue .................................................................................................... 665AWS::Budgets::Budget ..................................................................................................... 667AWS::CertificateManager::Certificate .................................................................................. 670AWS::Cloud9::EnvironmentEC2 ......................................................................................... 673AWS::CloudFormation::Authentication ................................................................................. 675AWS::CloudFormation::CustomResource ............................................................................. 681AWS::CloudFormation::Init ................................................................................................ 684AWS::CloudFormation::Interface ........................................................................................ 698AWS::CloudFormation::Stack ............................................................................................. 701AWS::CloudFormation::WaitCondition ................................................................................. 704AWS::CloudFormation::WaitConditionHandle ....................................................................... 707AWS::CloudFront::Distribution ............................................................................................ 708AWS::CloudFront::CloudFrontOriginAccessIdentity ................................................................ 711AWS::CloudFront::StreamingDistribution .............................................................................. 713AWS::CloudTrail::Trail ...................................................................................................... 715AWS::CloudWatch::Alarm ................................................................................................. 722AWS::CloudWatch::Dashboard .......................................................................................... 727AWS::CodeBuild::Project .................................................................................................. 728

Verso da API 2010-05-15vii


AWS::CodeCommit::Repository ......................................................................................... 737AWS::CodeDeploy::Application .......................................................................................... 739AWS::CodeDeploy::DeploymentConfig ................................................................................ 741AWS::CodeDeploy::DeploymentGroup ................................................................................ 743AWS::CodePipeline::CustomActionType .............................................................................. 760AWS::CodePipeline::Pipeline ............................................................................................. 763AWS::CodePipeline::Webhook ........................................................................................... 768AWS::Cognito::IdentityPool ............................................................................................... 772AWS::Cognito::IdentityPoolRoleAttachment .......................................................................... 775AWS::Cognito::UserPool ................................................................................................... 776AWS::Cognito::UserPoolClient ........................................................................................... 781AWS::Cognito::UserPoolGroup .......................................................................................... 783AWS::Cognito::UserPoolUser ............................................................................................ 785AWS::Cognito::UserPoolUserToGroupAttachment ................................................................. 787AWS::Config::AggregationAuthorization ............................................................................... 789AWS::Config::ConfigRule .................................................................................................. 797AWS::Config::ConfigurationAggregator ................................................................................ 803AWS::Config::ConfigurationRecorder .................................................................................. 806AWS::Config::DeliveryChannel ........................................................................................... 808AWS::DataPipeline::Pipeline .............................................................................................. 810AWS::DAX::Cluster .......................................................................................................... 819AWS::DAX::ParameterGroup ............................................................................................. 825AWS::DAX::SubnetGroup ................................................................................................. 827AWS::DirectoryService::MicrosoftAD ................................................................................... 830AWS::DirectoryService::SimpleAD ...................................................................................... 834AWS::DMS::Certificate ..................................................................................................... 837AWS::DMS::Endpoint ....................................................................................................... 839AWS::DMS::EventSubscription .......................................................................................... 844AWS::DMS::ReplicationInstance ........................................................................................ 847AWS::DMS::ReplicationSubnetGroup .................................................................................. 851AWS::DMS::ReplicationTask ............................................................................................. 854AWS::DynamoDB::Table ................................................................................................... 857AWS::EC2::CustomerGateway ........................................................................................... 870AWS::EC2::DHCPOptions ................................................................................................. 872AWS::EC2::EgressOnlyInternetGateway .............................................................................. 876AWS::EC2::EIP ............................................................................................................... 878AWS::EC2::EIPAssociation ............................................................................................... 879AWS::EC2::FlowLog ........................................................................................................ 884AWS::EC2::Host .............................................................................................................. 886AWS::EC2::Instance ........................................................................................................ 888AWS::EC2::InternetGateway .............................................................................................. 900AWS::EC2::LaunchTemplate ............................................................................................. 901AWS::EC2::NatGateway ................................................................................................... 903AWS::EC2::NetworkAcl ..................................................................................................... 905AWS::EC2::NetworkAclEntry ............................................................................................. 907AWS::EC2::NetworkInterface ............................................................................................. 911AWS::EC2::NetworkInterfaceAttachment ............................................................................. 916AWS::EC2::NetworkInterfacePermission .............................................................................. 918AWS::EC2::PlacementGroup ............................................................................................. 920AWS::EC2::Route ............................................................................................................ 921AWS::EC2::RouteTable .................................................................................................... 925AWS::EC2::SecurityGroup ................................................................................................ 927AWS::EC2::SecurityGroupEgress ....................................................................................... 931AWS::EC2::SecurityGroupIngress ...................................................................................... 935AWS::EC2::SpotFleet ....................................................................................................... 942AWS::EC2::Subnet .......................................................................................................... 945AWS::EC2::SubnetCidrBlock ............................................................................................. 949

Verso da API 2010-05-15viii


AWS::EC2::SubnetNetworkAclAssociation ........................................................................... 950AWS::EC2::SubnetRouteTableAssociation ........................................................................... 952AWS::EC2::Volume .......................................................................................................... 954AWS::EC2::VolumeAttachment .......................................................................................... 959AWS::EC2::VPC .............................................................................................................. 961AWS::EC2::VPCCidrBlock ................................................................................................. 964AWS::EC2::VPCDHCPOptionsAssociation ........................................................................... 967AWS::EC2::VPCEndpoint .................................................................................................. 969AWS::EC2::VPCEndpointConnectionNotification ................................................................... 972AWS::EC2::VPCEndpointService ....................................................................................... 974AWS::EC2::VPCGatewayAttachment .................................................................................. 975AWS::EC2::VPCPeeringConnection .................................................................................... 977AWS::EC2::VPNConnection .............................................................................................. 987AWS::EC2::VPNConnectionRoute ...................................................................................... 990AWS::EC2::VPNGateway .................................................................................................. 991AWS::EC2::VPNGatewayRoutePropagation ......................................................................... 993AWS::ECR::Repository ..................................................................................................... 995AWS::ECS::Cluster .......................................................................................................... 999AWS::ECS::Service ........................................................................................................ 1001AWS::ECS::TaskDefinition ............................................................................................... 1012AWS::EFS::FileSystem ................................................................................................... 1019AWS::EFS::MountTarget ................................................................................................. 1022AWS::EKS::Cluster ........................................................................................................ 1025AWS::ElastiCache::CacheCluster ..................................................................................... 1028AWS::ElastiCache::ParameterGroup ................................................................................. 1036AWS::ElastiCache::ReplicationGroup ................................................................................ 1038AWS::ElastiCache::SecurityGroup .................................................................................... 1049AWS::ElastiCache::SecurityGroupIngress .......................................................................... 1050AWS::ElastiCache::SubnetGroup ...................................................................................... 1051AWS::ElasticBeanstalk::Application ................................................................................... 1053AWS::ElasticBeanstalk::ApplicationVersion ........................................................................ 1055AWS::ElasticBeanstalk::ConfigurationTemplate ................................................................... 1057AWS::ElasticBeanstalk::Environment ................................................................................. 1060AWS::ElasticLoadBalancing::LoadBalancer ........................................................................ 1073AWS::ElasticLoadBalancingV2::Listener ............................................................................ 1085AWS::ElasticLoadBalancingV2::ListenerCertificate ............................................................... 1087AWS::ElasticLoadBalancingV2::ListenerRule ...................................................................... 1090AWS::ElasticLoadBalancingV2::LoadBalancer .................................................................... 1092AWS::ElasticLoadBalancingV2::TargetGroup ...................................................................... 1099AWS::Elasticsearch::Domain ............................................................................................ 1106AWS::EMR::Cluster ........................................................................................................ 1115AWS::EMR::InstanceFleetConfig ...................................................................................... 1128AWS::EMR::InstanceGroupConfig ..................................................................................... 1130AWS::EMR::SecurityConfiguration .................................................................................... 1134AWS::EMR::Step ........................................................................................................... 1136AWS::Events::Rule ......................................................................................................... 1139AWS::GameLift::Alias ..................................................................................................... 1144AWS::GameLift::Build ..................................................................................................... 1146AWS::GameLift::Fleet ..................................................................................................... 1149AWS::Glue::Classifier ..................................................................................................... 1153AWS::Glue::Connection .................................................................................................. 1154AWS::Glue::Crawler ....................................................................................................... 1155AWS::Glue::Database ..................................................................................................... 1161AWS::Glue::DevEndpoint ................................................................................................ 1162AWS::Glue::Job ............................................................................................................. 1164AWS::Glue::Partition ....................................................................................................... 1169AWS::Glue::Table .......................................................................................................... 1171

Verso da API 2010-05-15ix


AWS::Glue::Trigger ........................................................................................................ 1172AWS::GuardDuty::Detector .............................................................................................. 1178AWS::GuardDuty::Filter ................................................................................................... 1180AWS::GuardDuty::Master ................................................................................................ 1182AWS::GuardDuty::Member .............................................................................................. 1184AWS::GuardDuty::IPSet .................................................................................................. 1187AWS::GuardDuty::ThreatIntelSet ...................................................................................... 1189AWS::IAM::AccessKey .................................................................................................... 1192AWS::IAM::Group .......................................................................................................... 1193AWS::IAM::InstanceProfile ............................................................................................... 1196AWS::IAM::ManagedPolicy .............................................................................................. 1197AWS::IAM::Policy ........................................................................................................... 1202AWS::IAM::Role ............................................................................................................. 1205AWS::IAM::ServiceLinkedRole ......................................................................................... 1211AWS::IAM::User ............................................................................................................ 1213AWS::IAM::UserToGroupAddition ..................................................................................... 1216AWS::Inspector::AssessmentTarget .................................................................................. 1217AWS::Inspector::AssessmentTemplate .............................................................................. 1219AWS::Inspector::ResourceGroup ...................................................................................... 1222AWS::IoT::Certificate ...................................................................................................... 1223AWS::IoT::Policy ............................................................................................................ 1225AWS::IoT::PolicyPrincipalAttachment ................................................................................ 1228AWS::IoT::Thing ............................................................................................................ 1229AWS::IoT::ThingPrincipalAttachment ................................................................................. 1232AWS::IoT::TopicRule ...................................................................................................... 1233AWS::Kinesis::Stream ..................................................................................................... 1236AWS::KinesisAnalytics::Application ................................................................................... 1239AWS::KinesisAnalytics::ApplicationOutput .......................................................................... 1242AWS::KinesisAnalytics::ApplicationReferenceDataSource ..................................................... 1243AWS::KinesisFirehose::DeliveryStream .............................................................................. 1245AWS::KMS::Alias ........................................................................................................... 1253AWS::KMS::Key ............................................................................................................ 1255AWS::Lambda::EventSourceMapping ................................................................................ 1260AWS::Lambda::Alias ....................................................................................................... 1262AWS::Lambda::Function ................................................................................................. 1265AWS::Lambda::Permission .............................................................................................. 1271AWS::Lambda::Version ................................................................................................... 1274AWS::Logs::Destination .................................................................................................. 1276AWS::Logs::LogGroup .................................................................................................... 1278AWS::Logs::LogStream ................................................................................................... 1280AWS::Logs::MetricFilter ................................................................................................... 1282AWS::Logs::SubscriptionFilter .......................................................................................... 1284AWS::Neptune::DBCluster ............................................................................................... 1286AWS::Neptune::DBClusterParameterGroup ........................................................................ 1290AWS::Neptune::DBInstance ............................................................................................. 1292AWS::Neptune::DBParameterGroup .................................................................................. 1297AWS::Neptune::DBSubnetGroup ...................................................................................... 1299AWS::OpsWorks::App ..................................................................................................... 1302AWS::OpsWorks::ElasticLoadBalancerAttachment ............................................................... 1306AWS::OpsWorks::Instance .............................................................................................. 1307AWS::OpsWorks::Layer .................................................................................................. 1314AWS::OpsWorks::Stack .................................................................................................. 1325AWS::OpsWorks::UserProfile ........................................................................................... 1336AWS::OpsWorks::Volume ................................................................................................ 1338AWS::RDS::DBCluster .................................................................................................... 1340AWS::RDS::DBClusterParameterGroup ............................................................................. 1348AWS::RDS::DBInstance .................................................................................................. 1350

Verso da API 2010-05-15x


AWS::RDS::DBParameterGroup ....................................................................................... 1367AWS::RDS::DBSecurityGroup .......................................................................................... 1370AWS::RDS::DBSecurityGroupIngress ................................................................................ 1373AWS::RDS::DBSubnetGroup ........................................................................................... 1375AWS::RDS::EventSubscription ......................................................................................... 1378AWS::RDS::OptionGroup ................................................................................................ 1380AWS::Redshift::Cluster ................................................................................................... 1384AWS::Redshift::ClusterParameterGroup ............................................................................. 1392AWS::Redshift::ClusterSecurityGroup ................................................................................ 1395AWS::Redshift::ClusterSecurityGroupIngress ...................................................................... 1396AWS::Redshift::ClusterSubnetGroup ................................................................................. 1398AWS::Route53::HealthCheck ........................................................................................... 1400AWS::Route53::HostedZone ............................................................................................ 1402AWS::Route53::RecordSet .............................................................................................. 1405AWS::Route53::RecordSetGroup ...................................................................................... 1411AWS::S3::Bucket ........................................................................................................... 1414AWS::S3::BucketPolicy ................................................................................................... 1430AWS::SageMaker::Endpoint ............................................................................................. 1432AWS::SageMaker::EndpointConfig .................................................................................... 1437AWS::SageMaker::Model ................................................................................................ 1442AWS::SageMaker::NotebookInstance ................................................................................ 1447AWS::SageMaker::NotebookInstanceLifecycleConfig ........................................................... 1451AWS::SDB::Domain ....................................................................................................... 1455AWS::ServiceCatalog::AcceptedPortfolioShare ................................................................... 1456AWS::ServiceCatalog::CloudFormationProduct ................................................................... 1457AWS::ServiceCatalog::CloudFormationProvisionedProduct ................................................... 1460AWS::ServiceCatalog::LaunchNotificationConstraint ............................................................ 1464AWS::ServiceCatalog::LaunchRoleConstraint ..................................................................... 1466AWS::ServiceCatalog::LaunchTemplateConstraint ............................................................... 1468AWS::ServiceCatalog::Portfolio ........................................................................................ 1469AWS::ServiceCatalog::PortfolioPrincipalAssociation ............................................................. 1471AWS::ServiceCatalog::PortfolioProductAssociation .............................................................. 1473AWS::ServiceCatalog::PortfolioShare ................................................................................ 1474AWS::ServiceCatalog::TagOption ..................................................................................... 1475AWS::ServiceCatalog::TagOptionAssociation ...................................................................... 1477AWS::ServiceDiscovery::Instance ..................................................................................... 1478AWS::ServiceDiscovery::PrivateDnsNamespace ................................................................. 1480AWS::ServiceDiscovery::PublicDnsNamespace .................................................................. 1481AWS::ServiceDiscovery::Service ...................................................................................... 1483AWS::SES::ConfigurationSet ........................................................................................... 1485AWS::SES::ConfigurationSetEventDestination .................................................................... 1487AWS::SES::ReceiptFilter ................................................................................................. 1491AWS::SES::ReceiptRule ................................................................................................. 1493AWS::SES::ReceiptRuleSet ............................................................................................. 1496AWS::SES::Template ..................................................................................................... 1497AWS::SNS::Subscription ................................................................................................. 1499AWS::SNS::Topic ........................................................................................................... 1501AWS::SNS::TopicPolicy .................................................................................................. 1503AWS::SQS::Queue ......................................................................................................... 1504AWS::SQS::QueuePolicy ................................................................................................ 1512AWS::SSM::Association .................................................................................................. 1513AWS::SSM::Document .................................................................................................... 1516AWS::SSM::MaintenanceWindow ..................................................................................... 1520AWS::SSM::MaintenanceWindowTarget ............................................................................ 1522AWS::SSM::MaintenanceWindowTask ............................................................................... 1524AWS::SSM::Parameter ................................................................................................... 1528AWS::SSM::PatchBaseline .............................................................................................. 1531

Verso da API 2010-05-15xi


AWS::SSM::ResourceDataSync ....................................................................................... 1533AWS::StepFunctions::Activity ........................................................................................... 1536AWS::StepFunctions::StateMachine .................................................................................. 1538AWS::WAF::ByteMatchSet .............................................................................................. 1541AWS::WAF::IPSet .......................................................................................................... 1544AWS::WAF::Rule ........................................................................................................... 1548AWS::WAF::SizeConstraintSet ......................................................................................... 1550AWS::WAF::SqlInjectionMatchSet ..................................................................................... 1553AWS::WAF::WebACL ..................................................................................................... 1556AWS::WAF::XssMatchSet ............................................................................................... 1560AWS::WAFRegional::ByteMatchSet .................................................................................. 1564AWS::WAFRegional::IPSet .............................................................................................. 1567AWS::WAFRegional::Rule ............................................................................................... 1570AWS::WAFRegional::SizeConstraintSet ............................................................................. 1572AWS::WAFRegional::SqlInjectionMatchSet ......................................................................... 1576AWS::WAFRegional::WebACL ......................................................................................... 1579AWS::WAFRegional::WebACLAssociation ......................................................................... 1583AWS::WAFRegional::XssMatchSet ................................................................................... 1584AWS::WorkSpaces::Workspace ........................................................................................ 1588

Tipos de propriedades de recursos .......................................................................................... 1590ConfigurationId de operador do Amazon MQ ..................................................................... 1604MaintenanceWindow de operador do Amazon MQ .............................................................. 1604Usurio de operador do Amazon MQ ............................................................................... 1605StageKey de ApiKey do API Gateway .............................................................................. 1607API Gateway Deployment StageDescription ....................................................................... 1607MethodSetting de implantao do API Gateway ................................................................. 1610Location de DocumentationPart do API Gateway ................................................................ 1612EndpointConfiguration de DomainName do API Gateway ..................................................... 1614API Gateway Method Integration ...................................................................................... 1614API Gateway Method Integration IntegrationResponse ......................................................... 1618MethodResponse de mtodo do API Gateway ................................................................... 1619RestApi de S3Location do API Gateway ........................................................................... 1620EndpointConfiguration de RestApi do API Gateway ............................................................. 1621MethodSetting da etapa do API Gateway .......................................................................... 1622API Gateway UsagePlan ApiStage ................................................................................... 1624API Gateway UsagePlan QuotaSettings ............................................................................ 1625API Gateway UsagePlan ThrottleSettings .......................................................................... 1626CustomizedMetricSpecification de ScalingPolicy do Aplicativo Auto Scaling ............................. 1627MetricDimension de ScalingPolicy do Aplicativo Auto Scaling ............................................... 1628PredefinedMetricSpecification de polticas de escalabilidade do Aplicativo Auto Scaling ............. 1629Aplicativo Auto Scaling ScalingPolicy StepScalingPolicyConfiguration .................................... 1630Aplicativo Auto Scaling ScalingPolicy StepScalingPolicyConfiguration StepAdjustment .............. 1631TargetTrackingScalingPolicyConfiguration da ScalingPolicy do Aplicativo Auto Scaling .............. 1632ScalableTargetAction de ScalableTarget do Aplicativo Auto Scaling ....................................... 1634ScheduledAction de ScalableTarget do Aplicativo Auto Scaling ............................................. 1635DataSource DynamoDBConfig do AWS AppSync ............................................................... 1637DataSource HttpConfig do AWS AppSync ......................................................................... 1638DataSource ElasticsearchConfig do AWS AppSync ............................................................. 1639DataSource LambdaConfig do AWS AppSync .................................................................... 1640GraphQLApi LogConfig do AWS AppSync ......................................................................... 1640GraphQLApi UserPoolConfig do AWS AppSync ................................................................. 1641AWS AppSync GraphQLApi OpenId Connect Config ........................................................... 1643Mapeamento de dispositivos de blocos de Amazon EC2 Auto Scaling .................................... 1644Dispositivo de blocos do Amazon EC2 Auto Scaling EBS .................................................... 1645Amazon EC2 Auto Scaling AutoScalingGroup LifecycleHookSpecification ............................... 1647Amazon EC2 Auto Scaling AutoScalingGroup LaunchTemplateSpecification ........................... 1650Amazon EC2 Auto Scaling AutoScalingGroup MetricsCollection ............................................ 1651

Verso da API 2010-05-15xii


Amazon EC2 Auto Scaling AutoScalingGroup NotificationConfiguration .................................. 1652Amazon EC2 Auto Scaling AutoScalingGroup TagProperty .................................................. 1653Amazon EC2 Auto Scaling ScalingPolicy CustomizedMetricSpecification ................................ 1655Amazon EC2 Auto Scaling ScalingPolicy MetricDimension ................................................... 1656Amazon EC2 Auto Scaling ScalingPolicy PredefinedMetricSpecification .................................. 1657Amazon EC2 Auto Scaling ScalingPolicy StepAdjustments ................................................... 1658Amazon EC2 Auto Scaling ScalingPolicy TargetTrackingConfiguration ................................... 1659AWS Auto Scaling ScalingPlan ApplicationSource .............................................................. 1660AWS Auto Scaling ScalingPlan CustomizedScalingMetricSpecification ................................... 1661AWS Auto Scaling ScalingPlan MetricDimension ................................................................ 1663AWS Auto Scaling ScalingPlan PredefinedScalingMetricSpecification ..................................... 1663AWS Auto Scaling ScalingPlan ScalingInstruction ............................................................... 1664AWS Auto Scaling ScalingPlan TagFilter ........................................................................... 1666AWS Auto Scaling ScalingPlan TargetTrackingConfiguration ................................................ 1667ComputeResources de ComputeEnvironment do AWS Batch ............................................... 1669ContainerProperties de JobDefinition do AWS Batch ........................................................... 1672Ambiente de JobDefinition do AWS Batch ......................................................................... 1675MountPoints de JobDefinition do AWS Batch ..................................................................... 1676RetryStrategy de JobDefinition do AWS Batch ................................................................... 1677Tempo limite de JobDefinition do AWS Batch .................................................................... 1677Ulimit de JobDefinition do AWS Batch .............................................................................. 1678Volumes de JobDefinition do AWS Batch .......................................................................... 1679VolumesHost de JobDefinition do AWS Batch .................................................................... 1680ComputeEnvironmentOrder de JobQueue do AWS Batch .................................................... 1680Billing and Cost Management Budget BudgetData .............................................................. 1681Billing and Cost Management Budget CostTypes ................................................................ 1683Billing and Cost Management Budget Notification ............................................................... 1686Billing and Cost Management Budget NotificationWithSubscribers ......................................... 1687Billing and Cost Management Budget Spend ..................................................................... 1688Billing and Cost Management Budget Subscriber ................................................................ 1689Billing and Cost Management Budget TimePeriod ............................................................... 1690Repositrio EnvironmentEC2 do AWS Cloud9 .................................................................... 1691DomainValidationOption do certificado do ACM .................................................................. 1692Parmetros de pilha do AWS CloudFormation ................................................................... 1693Rtulo de interface do AWS CloudFormation ..................................................................... 1694ParameterGroup de interface do AWS CloudFormation ....................................................... 1695Interface ParameterLabel do AWS CloudFormation ............................................................. 1696CloudFrontOriginAccessIdentityConfig da CloudFrontOriginAccessIdentity do CloudFront .......... 1696CacheBehavior de distribuio do CloudFront .................................................................... 1697Cookies de distribuio do CloudFront .............................................................................. 1700CustomErrorResponse de distribuio do CloudFront .......................................................... 1701CustomOriginConfig de distribuio do CloudFront ............................................................. 1702DefaultCacheBehavior de distribuio do CloudFront .......................................................... 1704DistributionConfig de distribuio do CloudFront ................................................................. 1707ForwardedValues de distribuio do CloudFront ................................................................. 1710GeoRestriction de distribuio do CloudFront ..................................................................... 1712LambdaFunctionAssociation de distribuio do CloudFront ................................................... 1713Registro em log de distribuio do CloudFront ................................................................... 1714Origem de distribuio do CloudFront ............................................................................... 1715OriginCustomHeader de distribuio do CloudFront ............................................................ 1716Restries de distribuio do CloudFront .......................................................................... 1717S3Origin de distribuio do CloudFront ............................................................................. 1717ViewerCertificate de distribuio do CloudFront .................................................................. 1718Registro de StreamingDistribution do CloudFront ................................................................ 1720S3Origin de StreamingDistribution do CloudFront ............................................................... 1721StreamingDistributionConfig de StreamingDistribution do CloudFront ..................................... 1722Tag de StreamingDistribution do CloudFront ...................................................................... 1724

Verso da API 2010-05-15xiii


TrustedSigners de StreamingDistribution do CloudFront ....................................................... 1725EventSelector de Trail do CloudTrail ................................................................................ 1726DataResource de Trail do CloudTrail ................................................................................ 1727Dimenso de mtrica do CloudWatch ............................................................................... 1728Regra do Eventos do CloudWatch EcsParameters .............................................................. 1730Regra do Eventos do CloudWatch InputTransformer ........................................................... 1731Regra do Eventos do CloudWatch KinesisParameters ......................................................... 1732Regra do Eventos do CloudWatch RunCommandParameters ............................................... 1732Regra do Eventos do CloudWatch RunCommandTarget ...................................................... 1733Destino da regra do Eventos do CloudWatch ..................................................................... 1734Propriedade MetricFilter MetricTransformation do CloudWatch Logs ...................................... 1739Artefatos do projeto AWS CodeBuild ................................................................................ 1740Ambiente de projeto do AWS CodeBuild ........................................................................... 1742EnvironmentVariable do projeto do AWS CodeBuild ............................................................ 1743ProjectCache de projeto do AWS CodeBuild ...................................................................... 1744Origem do projeto do AWS CodeBuild .............................................................................. 1745SourceAuth do projeto do AWS CodeBuild ........................................................................ 1747AWS CodeBuild Project ProjectTriggers ............................................................................ 1748VpcConfig do projeto do AWS CodeBuild .......................................................................... 1749Trigger do repositrio do AWS CodeCommit ...................................................................... 1750AWS CodeDeploy DeploymentConfig MinimumHealthyHosts ................................................ 1751Alarm de DeploymentGroup do AWS CodeDeploy .............................................................. 1752AlarmConfiguration de DeploymentGroup do AWS CodeDeploy ............................................ 1752AutoRollbackConfiguration de DeploymentGroup do AWS CodeDeploy .................................. 1753Implantao de DeploymentGroup do AWS CodeDeploy ..................................................... 1754DeploymentStyle de DeploymentGroup do AWS CodeDeploy ............................................... 1755ELBInfo de DeploymentGroup do AWS CodeDeploy ........................................................... 1757LoadBalancerInfo de DeploymentGroup do AWS CodeDeploy .............................................. 1758TargetGroupInfo do DeploymentGroup do AWS CodeDeploy ................................................ 1759Reviso da implantao de DeploymentGroup do AWS CodeDeploy ..................................... 1760AWS CodeDeploy DeploymentGroup Deployment Revision GitHubLocation ............................ 1761AWS CodeDeploy DeploymentGroup Deployment Revision S3Location .................................. 1762AWS CodeDeploy DeploymentGroup Ec2TagFilters ............................................................ 1763OnPremisesInstanceTagFilters de DeploymentGroup do AWS CodeDeploy ............................ 1764TriggerConfig de DeploymentGroup do AWS CodeDeploy ................................................... 1765AWS CodePipeline CustomActionType ArtifactDetails .......................................................... 1766CustomActionType ConfigurationProperties do AWS CodePipeline ........................................ 1767Settings de CustomActionType do AWS CodePipeline ......................................................... 1768ArtifactStore de Pipeline do AWS CodePipeline .................................................................. 1769AWS CodePipeline Pipeline ArtifactStore EncryptionKey ...................................................... 1770Pipeline DisableInboundStageTransitions do AWS CodePipeline ........................................... 1771Etapas do pipeline do AWS CodePipeline ......................................................................... 1772Aes de estgios de pipeline do AWS CodePipeline ......................................................... 1772ActionTypeId de aes de estgios de pipeline do AWS CodePipeline ................................... 1774InputArtifacts de aes de estgios de pipeline de AWS CodePipeline ................................... 1775OutputArtifacts de aes de estgios de pipeline do AWS CodePipeline ................................. 1776Bloqueadores de etapas do pipeline do AWS CodePipeline ................................................. 1776WebhookAuthConfiguration de webhook do AWS CodePipeline ............................................ 1777WebhookFilterRule de webhook do AWS CodePipeline ....................................................... 1778Amazon Cognito IdentityPool CognitoStreams .................................................................... 1779Amazon Cognito IdentityPool PushSync ............................................................................ 1779IdentityPoolRoleAttachment RoleMapping do Amazon Cognito .............................................. 1780Amazon Cognito IdentityPoolRoleAttachment MappingRule .................................................. 1781Amazon Cognito IdentityPool CognitoIdentityProvider .......................................................... 1782Amazon Cognito IdentityPoolRoleAttachment RoleMapping RulesConfiguration ....................... 1783AdminCreateUserConfig de UserPool do Amazon Cognito ................................................... 1784UserPool DeviceConfiguration do Amazon Cognito ............................................................. 1785

Verso da API 2010-05-15xiv


EmailConfiguration de UserPool do Amazon Cognito .......................................................... 1786UserPool InviteMessageTemplate do Amazon Cognito ........................................................ 1786UserPool LambdaConfig do Amazon Cognito ..................................................................... 1787NumberAttributeConstraints de UserPool do Amazon Cognito ............................................... 1789Amazon Cognito UserPool PasswordPolicy ....................................................................... 1789Polticas UserPool do Amazon Cognito ............................................................................. 1791SchemaAttribute de UserPool do Amazon Cognito .............................................................. 1791UserPool SmsConfiguration do Amazon Cognito ................................................................ 1793Amazon Cognito UserPool StringAttributeConstraints .......................................................... 1793Amazon Cognito UserPoolUser AttributeType .................................................................... 1794UserPool InviteMessageTemplate do Amazon Cognito ........................................................ 1795AWS Config ConfigRule Scope ........................................................................................ 1796Fonte de ConfigRule do AWS Config ............................................................................... 1797AWS Config ConfigRule SourceDetails ............................................................................. 1798ConfigurationAggregator AccountAggregationSource do AWS Config ..................................... 1799ConfigurationAggregator OrganizationAggregationSource do AWS Config ............................... 1800AWS Config ConfigurationRecorder RecordingGroup .......................................................... 1801AWS Config DeliveryChannel ConfigSnapshotDeliveryProperties ........................................... 1802AWS Data Pipeline Pipeline ParameterObjects .................................................................. 1803Atributos de objetos de parmetro do AWS Data Pipeline .................................................... 1803ParameterValues do AWS Data Pipeline Pipeline ............................................................... 1804AWS Data Pipeline PipelineObject ................................................................................... 1805Campo Pipeline do AWS Data Pipeline ............................................................................. 1807PipelineTags AWS Data Pipeline Pipeline ......................................................................... 1808DynamoDBSettings de Endpoint do AWS DMS .................................................................. 1809MongoDbSettings de Endpoint do AWS DMS .................................................................... 1809S3Settings de endpoint do AWS DMS .............................................................................. 1811AWS Directory Service MicrosoftAD VpcSettings ................................................................ 1813AWS Directory Service SimpleAD VpcSettings ................................................................... 1814AttributeDefinition de tabela do DynamoDB ....................................................................... 1814GlobalSecondaryIndex de tabela do DynamoDB ................................................................. 1815KeySchema de tabela do DynamoDB ............................................................................... 1816LocalSecondaryIndex de tabela do DynamoDB .................................................................. 1817DynamoDB Table PointInTimeRecoverySpecification ........................................................... 1818Projeo de tabela do DynamoDB ................................................................................... 1819ProvisionedThroughput de tabela do DynamoDB ................................................................ 1820SSESpecification do DynamoDB ...................................................................................... 1821StreamSpecification da tabela do DynamoDB .................................................................... 1822TimeToLiveSpecification da tabela do DynamoDB .............................................................. 1822Propriedade mapeamento de dispositivos de bloco do Amazon EC2 ...................................... 1823Propriedade de dispositivo de blocos do Amazon Elastic Block Store ..................................... 1825CreditSpecification da instncia do Amazon EC2 ................................................................ 1827ElasticGpuSpecification da instncia do Amazon EC2 ......................................................... 1827Amazon EC2 Instance LaunchTemplateSpecification ........................................................... 1828Amazon EC2 Instance SsmAssociations AssociationParameters ........................................... 1829SsmAssociations da instncia do Amazon EC2 .................................................................. 1830LaunchTemplate BlockDeviceMapping do Amazon EC2 ....................................................... 1831LaunchTemplate CreditSpecification do Amazon EC2 .......................................................... 1832LaunchTemplate Ebs do Amazon EC2 .............................................................................. 1833LaunchTemplate ElasticGpuSpecification do Amazon EC2 ................................................... 1835LaunchTemplate IamInstanceProfile do Amazon EC2 .......................................................... 1836LaunchTemplate InstanceMarketOptions do Amazon EC2 .................................................... 1837LaunchTemplate Ipv6A

Documents

AWS CloudFormation - Guia do usuário · AWS CloudFormation Guia do usuário Table of Contents O que é o AWS CloudFormation