AWS CloudFormation 模板：如何隐藏参数？

Question

I want to add a Boolean parameter that defines if another parameter is shown or not.

For example:

{
   "Parameters":{
      "ShowParam":{
         "AllowedValues":[
            "true",
            "false"
         ],
         "Default":"false",
         "Type":"String"
      },
      "Param":{
         "Type":"String"
      }
   }
}

I want to show "Param" if "ShowParam" is set to true.

There is a way to achieve that ?

Answer 1

Unfortunately "conditions" is not working for parameters/parameter groups. You can set the visibility/usability for resources and outputs. You can just create some parameter groups and set a comment as "optional". And for resources, if "param" is blank, you can set the resource value to "AWS::NoValue" to say "Cloudformation please ignore it!"

Answer 2

There are two options to get this done:

1. put the information into a secret and reference directly in the template like this:

    {{resolve:secretsmanager:MySecret:SecretString:password:EXAMPLE1-90ab-cdef-fedc-ba987EXAMPLE}}

   ( https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html )

2. if the value can be hard coded into the template, you could use mappings

   Mappings: Variables: VpcId: Value: vpc-xxxxxxx

   and then reference it like this:

    !FindInMap [Variables, VpcId, Value]