aws-samples/aws-iam-access-key-auto-rotation

Cloudformations template incorrect sequence

Opened this issue · 0 comments

I've found the incorrect order of cloudformation deployment which is leading to users to get deploy rolled back due to it.

The correct order of cloudformation templates is:

1- [ASA-iam-key-auto-rotation-and-notifier-solution.yaml]
2- [ASA-iam-key-auto-rotation-iam-assumed-roles.yaml]
3- [ASA-iam-key-auto-rotation-list-accounts-role.yaml]
4- [ASA-iam-key-auto-rotation-vpc-endpoints.yaml] - This is optional.

You can also find the correct sequence in the AWS page: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-rotate-iam-user-access-keys-at-scale-with-aws-organizations-and-aws-secrets-manager.html