AWS Cloud formation script

Question

I ve used the following AWS CLI Cloud Formation commands for create and then execute and change set:

aws cloudformation create-change-set --change-set-name change-set-1

aws cloudformation execute-change-set --change-set-name change-set-1

The problem is the first command returns before the change set is created, also if try I execute the second command immediately it fails.

I could come to terms with following possible solutions

1. Adding a delay between the two commands.
2. Repeating the second command until it succeeds.

Both have their problems.

Ideally there would be an option on the create-change-set command to execute immediately, or to run synchronously and not return until the change set has been created.

Is there a way to get a better solution?

Answer 1

You may use the update-stack sub command. But this is possible you don't require the intermediate step creation of a change set and then execute it

aws cloudformation update-stack --stack-name myStack --template-url ...

Answer 2

An Origin Access Identity cannot be created with CloudFormation. The only CloudFront resource available through Cloudformation is the AWS::CloudFront::Distribution resource.

You can avoid hard coding a reference to an OAI in your template by using a parameter to pass in an existing OAI when your stack is created. You can then use this parameter as the value for OriginAccessIdentity in the S3Origin type associated with the S3OriginConfig key.

This isn't ideal, but it allows you to make your templates more generic.