想要从不同的 VPC 云格式模板访问 VPC 值

Question

I've created different cloudformation template of VPC at different account. I want to access VPC value (Nacl, security Group, natGateway, vpcPeering) from different VPC to my current VPC cloudformation template(output not work for me)

Answer 1

I don't think this is possible. Normally, one CloudFormation template can refer to another by name or using import/export.

However, this would not work if accessing a stack in another account or another region.

You will need to pass this information into the template via the Parameters.

An alternative is to create a Custom Resource , which is an AWS Lambda function. With the right permissions, the Custom Resource in Account-A could retrieve information from a CloudFormation stack in Account-B, then return the values to the stack. These values could then be referenced in other parts of the template.

The Lambda function would need to assume an IAM Role in Account-B, where that Role has permission to query CloudFormation to obtain the values.