feat: hub-and-spoke multi-account support for StackSet deployments#161
Open
kuentzm wants to merge 1 commit intoaws-solutions-library-samples:mainfrom
Open
feat: hub-and-spoke multi-account support for StackSet deployments#161kuentzm wants to merge 1 commit intoaws-solutions-library-samples:mainfrom
kuentzm wants to merge 1 commit intoaws-solutions-library-samples:mainfrom
Conversation
Enable scaling from single-account to multi-account deployments via CloudFormation StackSets. Hub mode deploys monitoring/dashboards centrally while auth infrastructure is pushed to spoke accounts via StackSets. - Add deployment_mode, spoke_ou_id, spoke_account_ids, stackset_name to Profile - Add 'hub' deploy target (monitoring stacks only, skips auth) - Add 'spoke-stackset' deploy target (auth via StackSet to spoke accounts) - Add hub mode wizard flow in init (OU ID or explicit account targeting) - Add per-account config generation in package for spoke accounts - Add StackSet status display in status command Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
FederationType=directtemplates deploy as-is via StackSetChanges
deployment_mode,spoke_ou_id,spoke_account_ids,stackset_namefields to Profilehubtarget (monitoring stacks only) andspoke-stacksettarget (auth via StackSet with OU or explicit account targeting)spoke-configs/config-{account_id}.json) for hub deploymentsTest plan
ccwb init— verify hub mode wizard collects OU ID and saves to profile JSONccwb deploy hub— verify monitoring stacks deploy to hub (skip auth)ccwb deploy spoke-stackset— verify StackSet created, stack instances deployed to test accountsccwb status— verify StackSet status shows in outputccwb package— verify per-account config files generated indist/spoke-configs/🤖 Generated with Claude Code