debug.py

debug.py

import boto3
import logging
import sys


SESSION = boto3.session.Session()
CFT = SESSION.client('cloudformation')

LOGGER = logging.getLogger()
LOGGER.setLevel(logging.INFO)
HANDLER = logging.StreamHandler(sys.stdout)
HANDLER.setLevel(logging.DEBUG)
LOGGER.addHandler(HANDLER)

# ou_id = get_parent_for_account(account_id)
ss_url = 'https://marketplace-sa-resources.s3.amazonaws.com/ct-blogs-content/AWSControlTowerExecution.yml'
ss_deploy = {'Enabled': True, 'RetainStacksOnAccountRemoval': True}
ss_name = 'MyCrossAccountRole-StackSet'
ss_param = [{'ParameterKey': 'AdministratorAccountId', 'ParameterValue': '896638299127'}]
capabilites = ['CAPABILITY_NAMED_IAM']
result = False
op_id = None
ss_status = 'RUNNING'

try:
    result = CFT.create_stack_set(StackSetName=ss_name,
                                        Description='Cross account role creation for stacksets',
                                        TemplateURL=ss_url,
                                        Capabilities=capabilites,
                                        Parameters=ss_param,
                                        PermissionModel='SERVICE_MANAGED',
                                        AutoDeployment=ss_deploy)

except Exception as exe:
    error_msg = str(exe.response['Error']['Message'])
    if 'StackSet already exists' in error_msg:
        LOGGER.info('StackSet already exists, Adding stack instance')
        result = True
    else:
        raise exe