스택 배포 검증

배포 전 검증은 세 가지 일반적인 배포 장애 시나리오에 중점을 둡니다. 배포의 성공을 보장하지는 않지만 일반적인 장애의 가능성을 줄입니다.

다음과 같이 검증 모드는 서로 다르게 작동합니다.

변경 세트 작업의 경우 검증 결과는 특정 변경 세트와 연결됩니다. 템플릿을 수정하는 경우 업데이트된 검증 결과를 얻기 위해 새 변경 세트를 생성합니다. CreateStack 및 UpdateStack 작업의 경우 작업 ID와 함께 describe-events 명령을 사용하여 검증 결과에 액세스합니다.

S3 버킷 검증은 객체 존재만 확인하며 삭제를 방지할 수 있는 버킷 정책 또는 기타 제약 조건은 확인하지 않습니다.

배포 전 검증은 검증 실행 동안 스택 생성 및 스택 업데이트 작업에 약간의 지연 시간을 추가합니다. 보통 몇 초면 됩니다. 특정 작업에 대한 검증을 건너뛰어야 하는 경우 DisableValidation 파라미터를 사용합니다.

계정에서 스택을 생성하거나 스택을 업데이트하거나 변경 세트를 생성하고 리소스를 읽는 데 필요한 IAM 권한. 변경 세트 생성 중에 실행하는 검증 검사에는 다음과 같은 추가 권한이 필요합니다.

스택이 배포된 AWS 리전에 대한 액세스 권한.

배포 전에 검증하려는 CloudFormation 템플릿.

다른 방법(예: cfn-lint, cdk validate 또는 CI 검사)을 통해 템플릿을 이미 검증한 경우

시간에 민감한 배포에 대한 작업 지연 시간을 최소화해야 하는 경우

알려진 거짓 긍정이 배포를 차단하고 있지만 계속 진행해야 하는 경우

속성 구문 검증 - AWS 리소스 스키마를 기준으로 리소스 속성을 검증합니다. 필요한 속성과 유효한 속성 값을 확인하고 더 이상 사용되지 않거나 지원되지 않는 속성 조합을 식별합니다.

리소스 이름 충돌 감지 - 기존 AWS 리소스와의 이름 충돌이 있는지 확인합니다. 리소스 이름이 AWS 이름 지정 요구 사항을 충족하는지 검증하고 배포 시도 전에 잠재적 충돌을 식별합니다.

S3 버킷 비어 있음 검증 - 객체가 포함된 S3 버킷을 삭제하려고 할 때 경고합니다. 삭제 영향을 평가하고 일반적인 S3 삭제 실패를 방지하는 데 도움이 되도록 객체 수를 제공합니다.

서비스 할당량 검증 - 리소스 생성이 AWS 서비스 할당량을 초과하는지 확인합니다. 이 검증은 현재 변경 세트 생성 중에만 실행되며 WARN 모드로 작동합니다. 작업이 계속 진행되고 사용자는 잠재적 할당량 문제에 대한 알림을 받습니다.

레코더 충돌 감지 - 템플릿에서 레코딩이 활성화되지 않은 계정에 규칙을 추가하거나 이미 활성 항목이 있는 계정에서 레코더를 정의할 때 경고합니다. 이 검증은 현재 변경 세트 생성 중에만 실행되며 WARN 모드로 작동합니다.

ECR 리포지토리 삭제 준비 상태 - 삭제 대상으로 지정된 ECR 리포지토리가 비어 있거나 해당 리포지토리에 적절한 강제 삭제 설정이 있는지 확인합니다. 이 검증은 현재 변경 세트 생성 중에만 실행되며 WARN 모드로 작동합니다.

AWS::ApiGatewayV2::ApiGatewayManagedOverrides

AWS::ApiGatewayV2::Stage

AWS::AppMesh::GatewayRoute

AWS::AppMesh::Mesh

AWS::AppMesh::Route

AWS::AppMesh::VirtualGateway

AWS::AppMesh::VirtualNode

AWS::AppMesh::VirtualRouter

AWS::AppMesh::VirtualService

AWS::AppStream::Fleet

AWS::AppStream::Stack

AWS::AppStream::StackFleetAssociation

AWS::AppStream::StackUserAssociation

AWS::AppStream::User

AWS::AppSync::ApiCache

AWS::AppSync::ApiKey

AWS::AppSync::GraphQLSchema

AWS::AutoScalingPlans::ScalingPlan

AWS::Budgets::Budget

AWS::CertificateManager::Certificate

AWS::Cloud9::EnvironmentEC2

AWS::CloudFormation::CustomResource

AWS::CloudFormation::Macro

AWS::CloudFormation::WaitCondition

AWS::CloudFormation::WaitConditionHandle

AWS::CloudFront::StreamingDistribution

AWS::CloudWatch::AnomalyDetector

AWS::CloudWatch::InsightRule

AWS::CodeBuild::Project

AWS::CodeBuild::ReportGroup

AWS::CodeBuild::SourceCredential

AWS::CodeCommit::Repository

AWS::CodeDeploy::DeploymentGroup

AWS::CodeStar::GitHubRepository

AWS::Config::ConfigurationRecorder

AWS::Config::DeliveryChannel

AWS::Config::OrganizationConfigRule

AWS::Config::RemediationConfiguration

AWS::DAX::Cluster

AWS::DAX::ParameterGroup

AWS::DAX::SubnetGroup

AWS::DirectoryService::MicrosoftAD

AWS::DLM::LifecyclePolicy

AWS::DMS::Certificate

AWS::DMS::Endpoint

AWS::DMS::EventSubscription

AWS::DMS::ReplicationInstance

AWS::DMS::ReplicationSubnetGroup

AWS::DMS::ReplicationTask

AWS::DocDB::DBCluster

AWS::DocDB::DBClusterParameterGroup

AWS::DocDB::DBInstance

AWS::DocDB::DBSubnetGroup

AWS::DocDB::EventSubscription

AWS::EC2::ClientVpnAuthorizationRule

AWS::EC2::ClientVpnEndpoint

AWS::EC2::ClientVpnRoute

AWS::EC2::ClientVpnTargetNetworkAssociation

AWS::EC2::NetworkInterfacePermission

AWS::ElastiCache::CacheCluster

AWS::ElastiCache::ReplicationGroup

AWS::ElastiCache::SecurityGroup

AWS::ElastiCache::SecurityGroupIngress

AWS::ElasticLoadBalancing::LoadBalancer

AWS::ElasticLoadBalancingV2::ListenerCertificate

AWS::Elasticsearch::Domain

AWS::EMR::Cluster

AWS::EMR::InstanceFleetConfig

AWS::EMR::InstanceGroupConfig

AWS::FSx::FileSystem

AWS::FSx::Snapshot

AWS::FSx::StorageVirtualMachine

AWS::FSx::Volume

AWS::Glue::Classifier

AWS::Glue::Connection

AWS::Glue::CustomEntityType

AWS::Glue::DataCatalogEncryptionSettings

AWS::Glue::DataQualityRuleset

AWS::Glue::DevEndpoint

AWS::Glue::MLTransform

AWS::Glue::Partition

AWS::Glue::SecurityConfiguration

AWS::Glue::Table

AWS::Glue::TableOptimizer

AWS::Glue::Workflow

AWS::Greengrass::ConnectorDefinition

AWS::Greengrass::ConnectorDefinitionVersion

AWS::Greengrass::CoreDefinition

AWS::Greengrass::CoreDefinitionVersion

AWS::Greengrass::DeviceDefinition

AWS::Greengrass::DeviceDefinitionVersion

AWS::Greengrass::FunctionDefinition

AWS::Greengrass::FunctionDefinitionVersion

AWS::Greengrass::Group

AWS::Greengrass::GroupVersion

AWS::Greengrass::LoggerDefinition

AWS::Greengrass::LoggerDefinitionVersion

AWS::Greengrass::ResourceDefinition

AWS::Greengrass::ResourceDefinitionVersion

AWS::Greengrass::SubscriptionDefinition

AWS::Greengrass::SubscriptionDefinitionVersion

AWS::IAM::AccessKey

AWS::IAM::UserToGroupAddition

AWS::IoT::PolicyPrincipalAttachment

AWS::IoT::ThingPrincipalAttachment

AWS::IoTThingsGraph::FlowTemplate

AWS::KinesisAnalytics::Application

AWS::KinesisAnalytics::ApplicationOutput

AWS::KinesisAnalytics::ApplicationReferenceDataSource

AWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOption

AWS::KinesisAnalyticsV2::ApplicationOutput

AWS::KinesisAnalyticsV2::ApplicationReferenceDataSource

AWS::LakeFormation::DataLakeSettings

AWS::LakeFormation::Permissions

AWS::LakeFormation::Resource

AWS::ManagedBlockchain::Member

AWS::ManagedBlockchain::Node

AWS::MediaConvert::JobTemplate

AWS::MediaConvert::Preset

AWS::MediaConvert::Queue

AWS::MediaLive::Channel

AWS::MediaLive::Input

AWS::MediaLive::InputSecurityGroup

AWS::MediaStore::Container

AWS::OpsWorks::App

AWS::OpsWorks::ElasticLoadBalancerAttachment

AWS::OpsWorks::Instance

AWS::OpsWorks::Layer

AWS::OpsWorks::Stack

AWS::OpsWorks::UserProfile

AWS::OpsWorks::Volume

AWS::Pinpoint::ADMChannel

AWS::Pinpoint::APNSChannel

AWS::Pinpoint::APNSSandboxChannel

AWS::Pinpoint::APNSVoipChannel

AWS::Pinpoint::APNSVoipSandboxChannel

AWS::Pinpoint::App

AWS::Pinpoint::ApplicationSettings

AWS::Pinpoint::BaiduChannel

AWS::Pinpoint::Campaign

AWS::Pinpoint::EmailChannel

AWS::Pinpoint::EmailTemplate

AWS::Pinpoint::EventStream

AWS::Pinpoint::GCMChannel

AWS::Pinpoint::PushTemplate

AWS::Pinpoint::Segment

AWS::Pinpoint::SMSChannel

AWS::Pinpoint::SmsTemplate

AWS::Pinpoint::VoiceChannel

AWS::PinpointEmail::ConfigurationSet

AWS::PinpointEmail::ConfigurationSetEventDestination

AWS::PinpointEmail::DedicatedIpPool

AWS::PinpointEmail::Identity

AWS::QLDB::Ledger

AWS::RDS::DBSecurityGroup

AWS::RDS::DBSecurityGroupIngress

AWS::Redshift::ClusterSecurityGroup

AWS::Redshift::ClusterSecurityGroupIngress

AWS::Route53::RecordSet

AWS::Route53::RecordSetGroup

AWS::SageMaker::CodeRepository

AWS::SageMaker::EndpointConfig

AWS::SageMaker::Model

AWS::SageMaker::NotebookInstance

AWS::SageMaker::NotebookInstanceLifecycleConfig

AWS::SageMaker::Workteam

AWS::SDB::Domain

AWS::ServiceCatalog::AcceptedPortfolioShare

AWS::ServiceCatalog::LaunchRoleConstraint

AWS::ServiceCatalog::Portfolio

AWS::ServiceCatalog::StackSetConstraint

AWS::ServiceDiscovery::HttpNamespace

AWS::ServiceDiscovery::Instance

AWS::ServiceDiscovery::PrivateDnsNamespace

AWS::ServiceDiscovery::PublicDnsNamespace

AWS::ServiceDiscovery::Service

AWS::SES::ReceiptFilter

AWS::SES::ReceiptRule

AWS::SES::ReceiptRuleSet

AWS::SSM::MaintenanceWindow

AWS::SSM::MaintenanceWindowTarget

AWS::SSM::MaintenanceWindowTask

AWS::WAF::ByteMatchSet

AWS::WAF::IPSet

AWS::WAF::Rule

AWS::WAF::SizeConstraintSet

AWS::WAF::SqlInjectionMatchSet

AWS::WAF::WebACL

AWS::WAF::XssMatchSet

AWS::WAFRegional::ByteMatchSet

AWS::WAFRegional::GeoMatchSet

AWS::WAFRegional::IPSet

AWS::WAFRegional::RateBasedRule

AWS::WAFRegional::RegexPatternSet

AWS::WAFRegional::Rule

AWS::WAFRegional::SizeConstraintSet

AWS::WAFRegional::SqlInjectionMatchSet

AWS::WAFRegional::WebACL

AWS::WAFRegional::WebACLAssociation

AWS::WAFRegional::XssMatchSet

AWS::WorkSpaces::Workspace

AWS::AmazonMQ::ConfigurationAssociation

AWS::ApiGateway::DomainNameAccessAssociation

AWS::AppConfig::ExtensionAssociation

AWS::AppStream::ApplicationEntitlementAssociation

AWS::AppStream::ApplicationFleetAssociation

AWS::AppSync::DomainNameApiAssociation

AWS::AppSync::SourceApiAssociation

AWS::CleanRooms::ConfiguredTableAssociation

AWS::CleanRooms::IdNamespaceAssociation

AWS::CodeGuruReviewer::RepositoryAssociation

AWS::Cognito::IdentityPoolRoleAttachment

AWS::Cognito::UserPoolRiskConfigurationAttachment

AWS::Cognito::UserPoolUICustomizationAttachment

AWS::Cognito::UserPoolUserToGroupAttachment

AWS::Connect::IntegrationAssociation

AWS::Deadline::QueueFleetAssociation

AWS::Deadline::QueueLimitAssociation

AWS::EC2::EIPAssociation

AWS::EC2::EnclaveCertificateIamRoleAssociation

AWS::EC2::GatewayRouteTableAssociation

AWS::EC2::IPAMResourceDiscoveryAssociation

AWS::EC2::IpPoolRouteTableAssociation

AWS::EC2::LocalGatewayRouteTableVPCAssociation

AWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociation

AWS::EC2::NetworkInterfaceAttachment

AWS::EC2::RouteServerAssociation

AWS::EC2::SecurityGroupVpcAssociation

AWS::EC2::SubnetNetworkAclAssociation

AWS::EC2::SubnetRouteTableAssociation

AWS::EC2::TransitGatewayAttachment

AWS::EC2::TransitGatewayMulticastDomainAssociation

AWS::EC2::TransitGatewayPeeringAttachment

AWS::EC2::TransitGatewayRouteTableAssociation

AWS::EC2::TransitGatewayVpcAttachment

AWS::EC2::VPCDHCPOptionsAssociation

AWS::EC2::VPCGatewayAttachment

AWS::EC2::VolumeAttachment

AWS::ECS::ClusterCapacityProviderAssociations

AWS::EKS::PodIdentityAssociation

AWS::FSx::DataRepositoryAssociation

AWS::FSx::S3AccessPointAttachment

AWS::GlobalAccelerator::CrossAccountAttachment

AWS::LakeFormation::TagAssociation

AWS::NetworkFirewall::VpcEndpointAssociation

AWS::NetworkManager::ConnectAttachment

AWS::NetworkManager::CustomerGatewayAssociation

AWS::NetworkManager::DirectConnectGatewayAttachment

AWS::NetworkManager::LinkAssociation

AWS::NetworkManager::SiteToSiteVpnAttachment

AWS::NetworkManager::TransitGatewayRouteTableAttachment

AWS::NetworkManager::VpcAttachment

AWS::Notifications::ChannelAssociation

AWS::Notifications::ManagedNotificationAccountContactAssociation

AWS::Notifications::ManagedNotificationAdditionalChannelAssociation

AWS::Notifications::OrganizationalUnitAssociation

AWS::ResourceExplorer2::DefaultViewAssociation

AWS::Route53Profiles::ProfileAssociation

AWS::Route53Profiles::ProfileResourceAssociation

AWS::Route53Resolver::FirewallRuleGroupAssociation

AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation

AWS::Route53Resolver::ResolverRuleAssociation

AWS::SSM::Association

AWS::SecretsManager::SecretTargetAttachment

AWS::SecurityHub::PolicyAssociation

AWS::ServiceCatalog::PortfolioPrincipalAssociation

AWS::ServiceCatalog::PortfolioProductAssociation

AWS::ServiceCatalog::ServiceActionAssociation

AWS::ServiceCatalog::TagOptionAssociation

AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation

AWS::ServiceCatalogAppRegistry::ResourceAssociation

AWS::VpcLattice::ServiceNetworkResourceAssociation

AWS::VpcLattice::ServiceNetworkServiceAssociation

AWS::VpcLattice::ServiceNetworkVpcAssociation

AWS::WAFv2::WebACLAssociation

AWS::Wisdom::AssistantAssociation

AWS::WorkspacesInstances::VolumeAssociation

AWS::IAM::Policy

AWS::SNS::TopicPolicy

AWS::SQS::QueuePolicy

AWS::EC2::NetworkAclEntry

AWS::EC2::VPNGatewayRoutePropagation

AWS::CloudFormation::Stack

AWS::CloudWatch::MetricStream

AWS::WorkSpaces::ConnectionAlias

AWS::IoT::ProvisioningTemplate

AWS::MediaPackage::Channel

AWS::CloudFront::OriginRequestPolicy

AWS::Route53Resolver::ResolverQueryLoggingConfig

AWS::NetworkManager::TransitGatewayRegistration

AWS::ImageBuilder::Image

AWS::Config::ConformancePack

AWS::S3::AccessPoint

AWS::CodeStarConnections::Connection

AWS::CloudFront::CachePolicy

AWS::FMS::NotificationChannel

AWS::ImageBuilder::InfrastructureConfiguration

AWS::Detective::Graph

AWS::EC2::CarrierGateway

AWS::CloudWatch::CompositeAlarm

AWS::CodeArtifact::Repository

AWS::GroundStation::DataflowEndpointGroup

AWS::ElasticLoadBalancingV2::Listener

AWS::ImageBuilder::ImageRecipe

AWS::NetworkManager::Device

AWS::Kendra::DataSource

AWS::Timestream::Database

AWS::CodeGuruProfiler::ProfilingGroup

AWS::Lambda::EventSourceMapping

AWS::ECR::Repository

AWS::WAFv2::IPSet

AWS::GameLift::Alias

AWS::IoTSiteWise::Asset

AWS::OpsWorksCM::Server

AWS::IoT::Authorizer

AWS::WAFv2::RuleGroup

AWS::NetworkManager::Site

AWS::ResourceGroups::Group

AWS::MediaPackage::PackagingConfiguration

AWS::ImageBuilder::ImagePipeline

AWS::ECS::TaskDefinition

AWS::Macie::CustomDataIdentifier

AWS::MediaPackage::OriginEndpoint

AWS::Logs::LogGroup

AWS::CodeArtifact::Domain

AWS::Kendra::Faq

AWS::ECS::TaskSet

AWS::WAFv2::RegexPatternSet

AWS::ECS::Cluster

AWS::SSO::Assignment

AWS::GlobalAccelerator::Listener

AWS::ServiceCatalog::CloudFormationProvisionedProduct

AWS::RDS::DBProxy

AWS::EC2::FlowLog

AWS::ImageBuilder::Component

AWS::CloudFront::RealtimeLogConfig

AWS::NetworkManager::GlobalNetwork

AWS::RDS::DBProxyTargetGroup

AWS::WAFv2::WebACL

AWS::IVS::StreamKey

AWS::IVS::PlaybackKeyPair

AWS::Macie::Session

AWS::Route53::HealthCheck

AWS::Synthetics::Canary

AWS::Lambda::CodeSigningConfig

AWS::EFS::AccessPoint

AWS::Timestream::Table

AWS::MediaPackage::PackagingGroup

AWS::ECS::PrimaryTaskSet

AWS::Config::ConfigurationAggregator

AWS::GroundStation::Config

AWS::IoTSiteWise::AssetModel

AWS::SES::ConfigurationSet

AWS::ImageBuilder::DistributionConfiguration

AWS::Config::OrganizationConformancePack

AWS::EC2::LocalGatewayRoute

AWS::KMS::Key

AWS::Detective::MemberInvitation

AWS::EKS::FargateProfile

AWS::MediaPackage::Asset

AWS::GlobalAccelerator::EndpointGroup

AWS::Macie::FindingsFilter

AWS::IoT::Certificate

AWS::SageMaker::MonitoringSchedule

AWS::IVS::Channel

AWS::Kendra::Index

AWS::EventSchemas::RegistryPolicy

AWS::KinesisFirehose::DeliveryStream

AWS::GlobalAccelerator::Accelerator

AWS::EC2::PrefixList

AWS::GameLift::GameServerGroup

AWS::NetworkManager::Link

AWS::EFS::FileSystem

AWS::Route53::HostedZone

AWS::GroundStation::MissionProfile

AWS::KMS::Alias

AWS::FMS::Policy

AWS::SSO::PermissionSet

AWS::StepFunctions::StateMachine

AWS::QLDB::Stream

AWS::IoTSiteWise::Gateway

AWS::ECS::Service

AWS::ECS::CapacityProvider

AWS::EC2::SecurityGroup

AWS::EC2::SecurityGroupIngress

AWS::EC2::SecurityGroupEgress

AWS::EC2::EC2Fleet

AWS::IAM::Group

AWS::IAM::Role

AWS::IAM::User

AWS::ApiGateway::GatewayResponse

AWS::S3::BucketPolicy

AWS::SNS::Topic

AWS::SNS::Subscription

AWS::RDS::DBInstance

AWS::RDS::DBParameterGroup

AWS::RDS::DBCluster

AWS::RDS::DBClusterParameterGroup

AWS::RDS::DBSubnetGroup

AWS::RDS::EventSubscription

AWS::RDS::GlobalCluster

AWS::RDS::OptionGroup

AWS::Neptune::DBInstance

AWS::Neptune::DBParameterGroup

AWS::Neptune::DBCluster

AWS::Neptune::DBClusterParameterGroup

AWS::Neptune::DBSubnetGroup

AWS::Redshift::Cluster

AWS::Redshift::ClusterParameterGroup

AWS::Redshift::ClusterSubnetGroup

AWS::Redshift::EndpointAccess

AWS::Redshift::EndpointAuthorization

AWS::Redshift::EventSubscription

AWS::Redshift::ScheduledAction

AWS::ElastiCache::SubnetGroup

AWS::ApiGateway::BasePathMapping

AWS::ApiGatewayV2::DomainName

AWS::ApplicationAutoScaling::ScalableTarget

AWS::Connect::ApprovedOrigin

AWS::EKS::Cluster

AWS::IAM::InstanceProfile

AWS::Lambda::EventInvokeConfig