stackset-build-template.yaml

Metadata:
  GhaStack:
    localTemplateFile: &gha_template_body ./stacksets/gha-build/stackset.yaml
  SamStack:
    localTemplateFile: &sam_template_body ./stacksets/gha-build/sam-deployment.yaml
  CfnCrStack:
    localTemplateFile: &cfn_cr_template_body ./stacksets/cfn-custom-resource-build/stackset.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform:
  - 'AWS::Serverless-2016-10-31'
Description: GitHib Actions integration stacks

Parameters:
  CiCdOuIds:
    Type: CommaDelimitedList
    Description: Comma separated list of OUs
  TargetRegions:
    Type: CommaDelimitedList
    Description: Comma separated list of regions
  AwsOrganizationId:
    Type: String
    Description: AWS Organization ID
  CustomResourceTopicName:
    Type: String
    Description: Custom resource ARN

Resources:
  OrgCiCdSamArtifacts:
    Type: AWS::CloudFormation::StackSet
    Properties:
      StackSetName: CiCdSamArtifacts
      Description: AWS SAM Deployment
      Parameters:
        - ParameterKey: AwsOrganizationId
          ParameterValue: !Ref AwsOrganizationId
        - ParameterKey: BuildAccount
          ParameterValue: 'true'
      StackInstancesGroup:
        - DeploymentTargets:
            OrganizationalUnitIds: !Ref CiCdOuIds
          Regions: !Ref TargetRegions
      AutoDeployment:
        Enabled: true
        RetainStacksOnAccountRemoval: false
      ManagedExecution:
        Active: true
      OperationPreferences:
        RegionConcurrencyType: PARALLEL
        FailureToleranceCount: 1
        MaxConcurrentCount: 5
      PermissionModel: SERVICE_MANAGED
      TemplateBody: *sam_template_body


  OrgCiCdGhaBuild:
    Type: AWS::CloudFormation::StackSet
    DependsOn: OrgCiCdSamArtifacts
    Properties:
      StackSetName: CiCdGhaBuild
      Description: GHA CI/CD Deployment Build
      Parameters:
        - ParameterKey: DeployBucketArn
          ParameterValue: '/org/cicd/SamDeployBucketArn'
        - ParameterKey: AwsOrganizationId
          ParameterValue: !Ref AwsOrganizationId
      StackInstancesGroup:
        - DeploymentTargets:
            OrganizationalUnitIds: !Ref CiCdOuIds
          Regions: !Ref TargetRegions
      Capabilities:
        - CAPABILITY_NAMED_IAM
      AutoDeployment:
        Enabled: true
        RetainStacksOnAccountRemoval: false
      ManagedExecution:
        Active: true
      OperationPreferences:
        RegionConcurrencyType: PARALLEL
        FailureToleranceCount: 1
        MaxConcurrentCount: 5
      PermissionModel: SERVICE_MANAGED
      TemplateBody: *gha_template_body


  DeployAccountCfnCustomResourcesSupport:
    Type: AWS::CloudFormation::StackSet
    Properties:
      StackSetName: OrgBuildAccountCfnCustomResources
      Description: Provides shared AWS CFN Custom Resources
      Parameters:
        - ParameterKey: AwsOrganizationId
          ParameterValue: !Ref AwsOrganizationId
        - ParameterKey: CustomResourceTopicName
          ParameterValue: !Ref CustomResourceTopicName
      StackInstancesGroup:
        - DeploymentTargets:
            OrganizationalUnitIds: !Ref CiCdOuIds
          Regions: !Ref TargetRegions
      AutoDeployment:
        Enabled: true
        RetainStacksOnAccountRemoval: false
      ManagedExecution:
        Active: true
      OperationPreferences:
        RegionConcurrencyType: PARALLEL
        FailureToleranceCount: 1
        MaxConcurrentCount: 5
      Capabilities:
        - CAPABILITY_NAMED_IAM
      PermissionModel: SERVICE_MANAGED
      TemplateBody: *cfn_cr_template_body