zined/stackset-testing.md

Created November 23, 2017 12:11

Star (1) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/zined/a2e5c446514ebca5d3b1d7c3d479fb83.js"></script>
Save zined/a2e5c446514ebca5d3b1d7c3d479fb83 to your computer and use it in GitHub Desktop.

Download ZIP

stackset-testing

Raw

stackset-testing.md

Enforce CloudTrail in Child Accounts via Cloudformation Cross-Account StackSets

Prepare StackSet IAM Roles

Following http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-prereqs.html

Login to Parent Account and (open in new Tab)
Write down Parent Account Id (we need it later)
For each Child Account, Login to Child Account and (open in new Tab)

Create StackSet to enforce CloudTrail in all Child-Accounts

Login to Parent Account and find the OU in Organizations that you want to enable CloudTrail for via: https://console.aws.amazon.com/organizations/home?region=eu-west-1#/browse/
Write down the OU-ID (ou-12xx-xxx12345)
Create a new StackSet via: https://eu-west-1.console.aws.amazon.com/cloudformation/stacksets/home?region=eu-west-1#/stacksets/new

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment