Note: this repo has been migrated to https://github.com/iRobotCorporation/cfn-custom-resource
cfnlambda provides an abstract base class to make it easier to implement
AWS CloudFormation custom resources. It was developed from Gene Wood's
library of the same name, which provides lower-level functions and
decorators for the same purpose.
The CloudFormationCustomResource class requires a child class to implement
three methods: create, update, and delete, for each of the respective
CloudFormation actions. Failure can be indicated by raising an exception.
Logging to CloudWatch is provided by the logger field.
More details are available in the docs in the cfnlambda module.
from cfnlambda import CloudFormationCustomResource
class Adder(CloudFormationCustomResource):
def create(self):
sum = (float(self.resource_properties['key1']) +
float(self.resource_properties['key2']))
return {'sum': sum}
update = create
def delete(self):
pass
handler = Adder.get_handler()
from cfnlambda import CloudFormationCustomResource
class AWSServiceUnsupportedByCF(CloudFormationCustomResource):
def create(self):
client = self.get_boto3_client('service-name')
# use client
def update(self):
# create and use client
def delete(self):
# create and use client
handler = AWSServiceUnsupportedByCF.get_handler()
from cfnlambda import CloudFormationCustomResource
class ExternalServer(CloudFormationCustomResource):
DISABLE_PHYSICAL_RESOURCE_ID_GENERATION = True # get this from server
# create_server, update_server, terminate_server methods implemented here
def create(self):
properties:
response = self.create_server(properties=self.resource_properties)
if response.status != 200:
raise Exception('server creation failed')
self.physical_resource_id = response.hostname
return {'IP': response.ip}
def update(self):
response = self.update_server(hostname=self.physical_resource_id, properties=self.resource_properties)
if response.status != 200:
raise Exception('server update failed')
return {'IP': response.ip}
def delete(self):
response = self.terminate_server(hostname=self.physical_resource_id)
if response.status != 200:
raise Exception('server termination failed')
handler = ExternalServer.get_handler()
The handle method on CloudFormationCustomResource does a few things. It logs
the event and context, populates the class fields, generates a physical resource id
for the resource, and calls the validate and populate methods that the child class
can override. Then, it calls the create, update, or delete method as
appropriate, adds any returned dictionary to the resource_outputs dict, or, in
case of an exception, sets the status to FAILED. It then cleans up and returns the
result to CloudFormation.
The resource_outputs dict is then available in CloudFormation for use with the
Fn::GetAtt function.
{ "Fn::GetAtt": [ "MyCustomResource", "ip" ] }
If the return value from the create/update/delete method
is not a dict, it is placed into the resource_outputs dict with key 'result'.
If the DELETE_LOGS_ON_STACK_DELETION class field is set to True, all
CloudWatch logs generated while the stack was created, updated and deleted will
be deleted upon a successful stack deletion. If an exception is thrown during
stack deletion, the logs will always be retained to facilitate troubleshooting.
NOTE: this is not intended for use when multiple stacks access the same function.
Finally, the custom resource will not report a status of FAILED when a stack DELETE is attempted. This will prevent a CloudFormation stack from getting stuck in a DELETE_FAILED state. One side effect of this is that if your AWS Lambda function throws an exception while trying to process a stack deletion, though the stack will show a status of DELETE_COMPLETE, there could still be resources which your AWS Lambda function created which have not been deleted. This will be noted in the logs. To disable this feature, set HIDE_STACK_DELETE_FAILURE class field to False.
To deploy MyCustomResource.py, simply run
python cfnlambda.py path/to/MyCustomResource.py IAMRoleName
This will create a Lambda function named MyCustomResource and print the ARN. Note that the role is only required if the function doesn't yet exist, so subsequent deploys can omit it. The timeout is 5 minutes and the memory size is 128 MB. If these are changed manually, redeploying will not overwrite your changes.
Feel free to open issues or fork and submit PRs.
- Issue Tracker: https://github.com/iRobotCorporation/cfnlambda/issues
- Source Code: https://github.com/iRobotCorporation/cfnlambda