DeploymentTargets - AWS CloudFormation

DeploymentTargets

[Service-managed permissions] The AWS Organizations accounts to which StackSets deploys. StackSets doesn't deploy stack instances to the organization management account, even if the organization management account is in your organization or in an OU in your organization.

For update operations, you can specify either Accounts or OrganizationalUnitIds. For create and delete operations, specify OrganizationalUnitIds.

Contents

AccountFilterType

Limit deployment targets to individual accounts or include additional accounts with provided OUs.

The following is a list of possible values for the AccountFilterType operation.

  • INTERSECTION: StackSets deploys to the accounts specified in Accounts parameter.

  • DIFFERENCE: StackSets excludes the accounts specified in Accounts parameter. This enables user to avoid certain accounts within an OU such as suspended accounts.

  • UNION: StackSets includes additional accounts deployment targets.

    This is the default value if AccountFilterType is not provided. This enables user to update an entire OU and individual accounts from a different OU in one request, which used to be two separate requests.

  • NONE: Deploys to all the accounts in specified organizational units (OU).

Type: String

Valid Values: NONE | INTERSECTION | DIFFERENCE | UNION

Required: No

Accounts.member.N

The account IDs of the AWS accounts. If you have many account numbers, you can provide those accounts using the AccountsUrl property instead.

Type: Array of strings

Pattern: ^[0-9]{12}$

Required: No

AccountsUrl

The Amazon S3 URL path to a file that contains a list of AWS account IDs. The file format must be either .csv or .txt, and the data can be comma-separated or new-line-separated. There is currently a 10MB limit for the data (approximately 800,000 accounts).

Type: String

Length Constraints: Minimum length of 1. Maximum length of 5120.

Pattern: (s3://|http(s?)://).+

Required: No

OrganizationalUnitIds.member.N

The organization root ID or organizational unit (OU) IDs.

Type: Array of strings

Pattern: ^(ou-[a-z0-9]{4,32}-[a-z0-9]{8,32}|r-[a-z0-9]{4,32})$

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: