DeploymentTargets - AWS CloudFormation


[Service-managed permissions] The AWS Organizations accounts to which StackSets deploys. StackSets doesn't deploy stack instances to the organization management account, even if the organization management account is in your organization or in an OU in your organization.

For update operations, you can specify either Accounts or OrganizationalUnitIds. For create and delete operations, specify OrganizationalUnitIds.



Limit deployment targets to individual accounts or include additional accounts with provided OUs.

The following is a list of possible values for the AccountFilterType operation.

  • INTERSECTION: StackSets deploys to the accounts specified in Accounts parameter.

  • DIFFERENCE: StackSets excludes the accounts specified in Accounts parameter. This enables user to avoid certain accounts within an OU such as suspended accounts.

  • UNION: StackSets includes additional accounts deployment targets.

    This is the default value if AccountFilterType is not provided. This enables user to update an entire OU and individual accounts from a different OU in one request, which used to be two separate requests.

  • NONE: Deploys to all the accounts in specified organizational units (OU).

Type: String


Required: No


The names of one or more AWS accounts for which you want to deploy stack set updates.

Type: Array of strings

Pattern: ^[0-9]{12}$

Required: No


Returns the value of the AccountsUrl property.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 5120.

Pattern: (s3://|http(s?)://).+

Required: No


The organization root ID or organizational unit (OU) IDs to which StackSets deploys.

Type: Array of strings

Pattern: ^(ou-[a-z0-9]{4,32}-[a-z0-9]{8,32}|r-[a-z0-9]{4,32})$

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: