aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Allow CodePipeline to deploy SERVICE_MANAGED StackSets in non-root accounts via Delegated Administrator
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
## Allow CodePipeline to deploy SERVICE_MANAGED StackSets in non-root accounts via Delegated Administrator
## Scope of request
CloudFormation recently added support do deploy StackSets via Delegated Administrator. However when deploying via CodePipeline, the following error is given (despite having already delegated access):
`An API call to CloudFormation.CreateStackSet returned a ValidationError error: You must be the master or delegated admin account of an organization before operating a SERVICE_MANAGED stack set`
This prevents us from managing our organization's StackSets from a non-root account.
## Expected behavior
CodePipeline is successfully able to deploy a SERVICE_MANAGED StackSet from a non-root account.
## Helpful Links
CodePipeline StackSet deployment documentation: https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-StackSets.html#action-reference-StackSet
CloudFormation Delegated Administrator announcement: https://aws.amazon.com/blogs/mt/cloudformation-stacksets-delegated-administration/
## Categories
Management - CloudFormation StackSets
Developer Tools - CodePipeline
Contributor guide
Assessment
This issue has not been assessed yet.